@moxxy/plugin-channel-whatsapp 0.27.0

package/dist/channel.d.ts

@@ -0,0 +1,105 @@
+import type { ClientSession as Session } from '@moxxy/sdk';
+import type { Channel, ChannelHandle, ChannelStartOptsBase } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+import { type WhatsAppAuthStorage } from './auth-state.js';
+import { type WhatsAppPermissionController } from './permission.js';
+import { type WhatsAppSocketFactory } from './socket.js';
+export interface WhatsAppChannelLogger {
+    debug?(msg: string, meta?: Record<string, unknown>): void;
+    info?(msg: string, meta?: Record<string, unknown>): void;
+    warn?(msg: string, meta?: Record<string, unknown>): void;
+}
+export interface WhatsAppChannelOptions {
+    readonly vault: VaultStore;
+    readonly logger?: WhatsAppChannelLogger;
+    /** Debounce window for streaming edits (ms). Default 3000 — deliberately
+     *  slower than Telegram/Slack; see the turn-runner rationale. */
+    readonly editFrameMs?: number;
+    /** Injectable transport (tests). Defaults to the real Baileys socket. */
+    readonly socketFactory?: WhatsAppSocketFactory;
+    /** Injectable auth-state backend. Defaults to `~/.moxxy/whatsapp-auth`. */
+    readonly authStorage?: WhatsAppAuthStorage;
+    /** Extra allow-listed JIDs from channel config/flags. */
+    readonly allowedJids?: ReadonlyArray<string>;
+    /** Consecutive reconnect attempts before giving up. Default 5. */
+    readonly maxReconnectAttempts?: number;
+    /** Reconnect backoff base (ms). Default 2000; tests shrink it. */
+    readonly reconnectBaseMs?: number;
+}
+export interface WhatsAppStartOpts extends ChannelStartOptsBase {
+    readonly session: Session;
+    /** Open in pairing mode: an unlinked start publishes QR payloads instead of
+     *  refusing. Set by `moxxy channels whatsapp pair` / the setup wizard. */
+    readonly pair?: boolean;
+    /** Running GUI-supervised on a dedicated runner (desktop Channels panel) —
+     *  equivalent to `pair` for the unlinked case, so the desktop can render the
+     *  QR from the status file instead of a terminal. */
+    readonly dedicated?: boolean;
+}
+export declare class WhatsAppChannel implements Channel<WhatsAppStartOpts> {
+    readonly name = "whatsapp";
+    private readonly permission;
+    private readonly opts;
+    private readonly turns;
+    private session;
+    private model;
+    private socket;
+    private storage;
+    private handle;
+    private logUnsub;
+    private stopping;
+    private resolveRunning;
+    private rejectRunning;
+    private reconnectAttempts;
+    private reconnectTimer;
+    private pairMode;
+    private pairedAnnounced;
+    private qrPayload;
+    private socketOpen;
+    private ownerJid;
+    private readonly allowSet;
+    private currentJid;
+    private lastJid;
+    /** Recent OWN outbound message ids — Baileys echoes our sends back via
+     *  `messages.upsert`; without this the bot would converse with itself. */
+    private readonly sentIds;
+    private readonly connectListeners;
+    private readonly pairedListeners;
+    constructor(opts: WhatsAppChannelOptions);
+    get permissionResolver(): WhatsAppPermissionController['resolver'];
+    /** Connect value published to control surfaces (`connect.kind: 'qr'`): the
+     *  CURRENT Baileys QR pairing payload while unlinked (it rotates; each
+     *  rotation re-publishes via onConnectChange), null once linked. */
+    get requestUrl(): string | null;
+    /** Linked + socket open — control surfaces swap the QR for "Connected". */
+    get connected(): boolean;
+    /** Fires once when a fresh QR link completes (the pair flow waits on this). */
+    onPaired(listener: (ownerJid: string) => void): () => void;
+    start(startOpts: WhatsAppStartOpts): Promise<ChannelHandle>;
+    private connect;
+    private handleConnectionUpdate;
+    private handleClose;
+    private scheduleReconnect;
+    private fail;
+    private teardown;
+    private handleInbound;
+    private handleText;
+    private handleAudio;
+    private resetSession;
+    private runUserTurn;
+    /** Every outbound send goes through here so its id lands in the echo set. */
+    private send;
+    private sendPermissionPrompt;
+    private recordSentId;
+    private mirrorForeignTurn;
+    private notifyConnectChange;
+    private emitPaired;
+    private rebuildAllowList;
+    /**
+     * Run a handler detached from the socket's event dispatch (a whole user turn
+     * must not block Baileys' event loop). Errors are logged here — nothing above
+     * awaits the promise.
+     */
+    private dispatchInBackground;
+}
+//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAc,MAAM,YAAY,CAAC;AAE3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAOrB,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC;qEACiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;IAC/C,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAC3C,yDAAyD;IACzD,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,kEAAkE;IAClE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iBAAkB,SAAQ,oBAAoB;IAC7D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;8EAC0E;IAC1E,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;yDAEqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,qBAAa,eAAgB,YAAW,OAAO,CAAC,iBAAiB,CAAC;IAChE,QAAQ,CAAC,IAAI,cAAc;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAyB;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAE/C,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,MAAM,CAA+B;IAC7C,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,QAAQ,CAA6B;IAE7C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,aAAa,CAAuC;IAC5D,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,cAAc,CAA8C;IAEpE,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,OAAO,CAAuB;IAEtC;8EAC0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyB;IAC1D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyC;gBAE7D,IAAI,EAAE,sBAAsB;IAKxC,IAAI,kBAAkB,IAAI,4BAA4B,CAAC,UAAU,CAAC,CAEjE;IAED;;wEAEoE;IACpE,IAAI,UAAU,IAAI,MAAM,GAAG,IAAI,CAE9B;IAED,2EAA2E;IAC3E,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI;IAKpD,KAAK,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;YAyEnD,OAAO;IAgBrB,OAAO,CAAC,sBAAsB;IAyC9B,OAAO,CAAC,WAAW;IAmDnB,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,QAAQ;YAsBF,aAAa;YAwBb,UAAU;YA0BV,WAAW;YAsBX,YAAY;YAmBZ,WAAW;IAsCzB,6EAA6E;YAC/D,IAAI;IAUlB,OAAO,CAAC,oBAAoB;IAM5B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,gBAAgB;IAUxB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;CAK7B"}

package/dist/channel.js

@@ -0,0 +1,459 @@
+import { newTurnId } from '@moxxy/core';
+import { TurnCoordinator } from '@moxxy/channel-kit';
+import { moxxyPath } from '@moxxy/sdk/server';
+import { createFileAuthStorage, hasStoredCreds, } from './auth-state.js';
+import { CONSENT_REQUIRED_MESSAGE, hasConsent } from './consent.js';
+import { WHATSAPP_ALLOWED_JIDS_KEY, WHATSAPP_AUTH_DIR, WHATSAPP_OWNER_JID_KEY, normalizeJid, parseAllowedJids, } from './keys.js';
+import { gateInboundMessage } from './message-gate.js';
+import { createWhatsAppPermissionController, } from './permission.js';
+import { openBaileysSocket } from './baileys-socket.js';
+import { WA_DISCONNECT, disconnectStatusCode, } from './socket.js';
+import { DEFAULT_EDIT_FRAME_MS, runWhatsAppTurn } from './channel/turn-runner.js';
+import { transcribeVoiceMessage } from './channel/voice-handler.js';
+/** Bound on remembered own-send message ids (echo/loop protection). */
+const MAX_SENT_IDS = 512;
+export class WhatsAppChannel {
+    name = 'whatsapp';
+    permission;
+    opts;
+    turns = new TurnCoordinator();
+    session = null;
+    model;
+    socket = null;
+    storage = null;
+    handle = null;
+    logUnsub = null;
+    stopping = false;
+    resolveRunning = null;
+    rejectRunning = null;
+    reconnectAttempts = 0;
+    reconnectTimer = null;
+    pairMode = false;
+    pairedAnnounced = false;
+    qrPayload = null;
+    socketOpen = false;
+    ownerJid = null;
+    allowSet = new Set();
+    currentJid = null;
+    lastJid = null;
+    /** Recent OWN outbound message ids — Baileys echoes our sends back via
+     *  `messages.upsert`; without this the bot would converse with itself. */
+    sentIds = new Set();
+    connectListeners = new Set();
+    pairedListeners = new Set();
+    constructor(opts) {
+        this.opts = opts;
+        this.permission = createWhatsAppPermissionController();
+    }
+    get permissionResolver() {
+        return this.permission.resolver;
+    }
+    /** Connect value published to control surfaces (`connect.kind: 'qr'`): the
+     *  CURRENT Baileys QR pairing payload while unlinked (it rotates; each
+     *  rotation re-publishes via onConnectChange), null once linked. */
+    get requestUrl() {
+        return this.qrPayload;
+    }
+    /** Linked + socket open — control surfaces swap the QR for "Connected". */
+    get connected() {
+        return this.socketOpen && this.ownerJid != null;
+    }
+    /** Fires once when a fresh QR link completes (the pair flow waits on this). */
+    onPaired(listener) {
+        this.pairedListeners.add(listener);
+        return () => this.pairedListeners.delete(listener);
+    }
+    async start(startOpts) {
+        if (this.handle)
+            return this.handle;
+        // CONSENT GATE — defense in depth: the wizard/pair/subcommand paths check
+        // too, but start() is reachable headlessly (`moxxy whatsapp` with vault
+        // state, desktop supervisor), so the channel itself refuses un-acknowledged.
+        if (!(await hasConsent(this.opts.vault))) {
+            throw new Error(CONSENT_REQUIRED_MESSAGE);
+        }
+        this.session = startOpts.session;
+        this.model = startOpts.model;
+        this.storage =
+            this.opts.authStorage ?? createFileAuthStorage(moxxyPath(WHATSAPP_AUTH_DIR));
+        const dedicated = startOpts.dedicated === true || process.env.MOXXY_DEDICATED_RUNNER === '1';
+        this.pairMode = startOpts.pair === true || dedicated;
+        const hadCreds = await hasStoredCreds(this.storage);
+        if (!hadCreds && !this.pairMode) {
+            throw new Error('No WhatsApp account is linked yet. Run `moxxy channels whatsapp pair` to scan ' +
+                'the QR, or start it from the desktop Channels panel.');
+        }
+        this.pairedAnnounced = hadCreds;
+        // Allow-list: the owner's own JID (Note to Self) is seeded on link; extra
+        // JIDs come from the vault and channel options. Persisted owner JID lets
+        // the gate work from the first inbound even before `open` resolves it.
+        this.ownerJid = normalizeJid(await this.opts.vault.get(WHATSAPP_OWNER_JID_KEY));
+        this.rebuildAllowList(parseAllowedJids(await this.opts.vault.get(WHATSAPP_ALLOWED_JIDS_KEY)));
+        this.permission.setSender((text) => this.sendPermissionPrompt(text));
+        // Mirror-to-chat: post assistant prose for turns this channel did NOT
+        // initiate (co-attached surface) into the last chat served (invariant #8:
+        // own turns are filtered by turnId inside TurnCoordinator.mirrorText).
+        this.logUnsub = this.session.log.subscribe((event) => this.mirrorForeignTurn(event));
+        const running = new Promise((resolve, reject) => {
+            this.resolveRunning = resolve;
+            this.rejectRunning = reject;
+        });
+        await this.connect();
+        this.opts.logger?.info?.('whatsapp channel starting', {
+            linked: hadCreds,
+            pairMode: this.pairMode,
+        });
+        this.handle = {
+            running,
+            onConnectChange: (listener) => {
+                this.connectListeners.add(listener);
+                return () => this.connectListeners.delete(listener);
+            },
+            stop: async (reason = 'shutdown') => {
+                this.teardown(reason);
+                this.resolveRunning?.();
+                this.resolveRunning = null;
+                this.rejectRunning = null;
+            },
+        };
+        return this.handle;
+    }
+    // ---- connection lifecycle -------------------------------------------------
+    async connect() {
+        if (this.stopping || !this.storage)
+            return;
+        const factory = this.opts.socketFactory ?? openBaileysSocket;
+        const socket = await factory({
+            storage: this.storage,
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+        });
+        this.socket = socket;
+        socket.onConnectionUpdate((update) => this.handleConnectionUpdate(update));
+        socket.onMessages((upsert) => {
+            for (const message of upsert.messages) {
+                this.dispatchInBackground(this.handleInbound(upsert.type, message), 'message');
+            }
+        });
+    }
+    handleConnectionUpdate(update) {
+        if (update.qr) {
+            this.qrPayload = update.qr;
+            this.notifyConnectChange();
+        }
+        if (update.connection === 'open') {
+            this.reconnectAttempts = 0;
+            this.socketOpen = true;
+            this.qrPayload = null;
+            const owner = normalizeJid(this.socket?.userJid() ?? null);
+            if (owner) {
+                this.ownerJid = owner;
+                this.allowSet.add(owner);
+                void this.opts.vault
+                    .set(WHATSAPP_OWNER_JID_KEY, owner, ['whatsapp'])
+                    .catch((err) => {
+                    this.opts.logger?.warn?.('whatsapp: could not persist owner jid', {
+                        err: String(err),
+                    });
+                });
+                if (!this.pairedAnnounced) {
+                    this.pairedAnnounced = true;
+                    this.emitPaired(owner);
+                    void this.send(owner, 'Linked with moxxy. Message yourself in this chat (Note to Self) to talk to ' +
+                        'the agent. Commands: /cancel aborts the current turn, /new resets the session.');
+                }
+            }
+            this.notifyConnectChange();
+            return;
+        }
+        if (update.connection === 'close') {
+            this.socketOpen = false;
+            this.notifyConnectChange();
+            if (this.stopping)
+                return;
+            this.handleClose(disconnectStatusCode(update.lastDisconnect?.error));
+        }
+    }
+    handleClose(code) {
+        if (code === WA_DISCONNECT.loggedOut) {
+            // The phone unlinked this device — the stored creds are dead. Clear them
+            // (standard Baileys practice) and either re-open a QR pairing window
+            // (pair/dedicated mode) or stop with re-pair guidance.
+            this.opts.logger?.warn?.('whatsapp: logged out by the phone — clearing local credentials');
+            this.pairedAnnounced = false;
+            void this.storage
+                ?.clear()
+                .catch(() => undefined)
+                .then(() => this.opts.vault.delete(WHATSAPP_OWNER_JID_KEY).catch(() => undefined))
+                .then(() => {
+                if (this.pairMode)
+                    this.scheduleReconnect(0);
+                else {
+                    this.fail('WhatsApp logged this device out. Run `moxxy channels whatsapp pair` to re-link ' +
+                        '(check `moxxy channels whatsapp status`).');
+                }
+            });
+            return;
+        }
+        if (code === WA_DISCONNECT.connectionReplaced) {
+            this.fail('Another WhatsApp Web session replaced this one (440). Stop the other client, then restart the channel.');
+            return;
+        }
+        if (code === WA_DISCONNECT.forbidden) {
+            this.fail('WhatsApp refused the connection (403). The number may have been blocked or banned — ' +
+                'this is the documented risk of the unofficial API.');
+            return;
+        }
+        // restartRequired (515) is the NORMAL post-QR-scan handoff: reconnect
+        // immediately. Everything else retries with exponential backoff.
+        if (code === WA_DISCONNECT.restartRequired) {
+            this.scheduleReconnect(0);
+            return;
+        }
+        this.reconnectAttempts += 1;
+        const max = this.opts.maxReconnectAttempts ?? 5;
+        if (this.reconnectAttempts > max) {
+            this.fail(`whatsapp: giving up after ${max} consecutive reconnect attempts (last code: ${code ?? 'unknown'})`);
+            return;
+        }
+        const base = this.opts.reconnectBaseMs ?? 2000;
+        this.scheduleReconnect(base * 2 ** (this.reconnectAttempts - 1));
+    }
+    scheduleReconnect(delayMs) {
+        if (this.stopping)
+            return;
+        this.socket = null;
+        this.reconnectTimer = setTimeout(() => {
+            this.reconnectTimer = null;
+            void this.connect().catch((err) => {
+                this.fail(`whatsapp: reconnect failed: ${err instanceof Error ? err.message : String(err)}`);
+            });
+        }, delayMs);
+        this.reconnectTimer.unref?.();
+    }
+    fail(message) {
+        if (this.stopping)
+            return;
+        this.opts.logger?.warn?.(message);
+        this.teardown(message);
+        this.rejectRunning?.(new Error(message));
+        this.resolveRunning = null;
+        this.rejectRunning = null;
+    }
+    teardown(reason) {
+        this.stopping = true;
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = null;
+        }
+        // Abort the in-flight turn FIRST so the model loop stops spending the
+        // moment the operator asks to shut down; then deny pending permission
+        // prompts so no caller hangs (the audit's TuiChannel.stop lesson).
+        this.turns.abort(reason);
+        this.permission.abortAll(reason);
+        this.permission.setSender(null);
+        this.logUnsub?.();
+        this.logUnsub = null;
+        this.qrPayload = null;
+        this.socketOpen = false;
+        this.socket?.end();
+        this.socket = null;
+    }
+    // ---- inbound --------------------------------------------------------------
+    async handleInbound(upsertType, raw) {
+        const verdict = gateInboundMessage({
+            ownJid: this.ownerJid,
+            allowedJids: this.allowSet,
+            isOwnSend: (id) => this.sentIds.has(id),
+        }, upsertType, raw);
+        if (!verdict.ok) {
+            // Silent drop (no reply): replying to unauthorized senders would leak
+            // the bot's existence and look like spam — both ban vectors.
+            this.opts.logger?.debug?.('whatsapp: dropped inbound', { reason: verdict.reason });
+            return;
+        }
+        if (verdict.kind === 'text') {
+            await this.handleText(verdict.jid, verdict.text);
+            return;
+        }
+        await this.handleAudio(verdict.jid, verdict.mimeType, raw);
+    }
+    async handleText(jid, text) {
+        // A pending permission prompt captures the next short reply — BEFORE the
+        // busy guard, because prompts happen mid-turn by construction.
+        if (this.permission.hasPending() && this.permission.offerReply(text))
+            return;
+        if (text === '/cancel') {
+            const controller = this.turns.controller;
+            if (controller && !controller.signal.aborted) {
+                controller.abort('user cancel');
+                await this.send(jid, 'cancelling current turn…');
+            }
+            else {
+                await this.send(jid, 'nothing to cancel.');
+            }
+            return;
+        }
+        if (text === '/new') {
+            await this.resetSession(jid);
+            return;
+        }
+        if (this.turns.busy) {
+            await this.send(jid, 'I am still working on the previous prompt. Send /cancel to abort it.');
+            return;
+        }
+        await this.runUserTurn(jid, text);
+    }
+    async handleAudio(jid, mimeType, raw) {
+        if (!this.session || !this.socket)
+            return;
+        if (this.turns.busy) {
+            await this.send(jid, 'I am still working on the previous prompt. Send /cancel to abort it.');
+            return;
+        }
+        const transcript = await transcribeVoiceMessage({
+            session: this.session,
+            socket: this.socket,
+            reply: (j, t) => this.send(j, t),
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+        }, { jid, mimeType, raw });
+        if (transcript)
+            await this.runUserTurn(jid, transcript);
+    }
+    async resetSession(jid) {
+        if (!this.session)
+            return;
+        const controller = this.turns.controller;
+        if (controller && !controller.signal.aborted)
+            controller.abort('user reset');
+        this.permission.abortAll('session reset');
+        // Wipe history at its source; a mirror-only clear would desync (A10).
+        try {
+            if (typeof this.session.reset === 'function')
+                await this.session.reset();
+            else
+                this.session.log.clear();
+        }
+        catch (err) {
+            await this.send(jid, `/new failed: ${err instanceof Error ? err.message : String(err)} — history NOT cleared`);
+            return;
+        }
+        await this.send(jid, 'new session — conversation history cleared');
+    }
+    async runUserTurn(jid, text) {
+        if (!this.session || !this.socket)
+            return;
+        // Atomic single-flight: `begin` claims the slot synchronously so two
+        // concurrently dispatched messages can't interleave per-turn state. The
+        // turnId is minted here so the coordinator records it as an own-turn id
+        // (mirrorForeignTurn filters on those, invariant #8).
+        const lease = this.turns.begin(newTurnId());
+        if (!lease) {
+            await this.send(jid, 'I am still working on the previous prompt. Send /cancel to abort it.');
+            return;
+        }
+        this.currentJid = jid;
+        this.lastJid = jid;
+        try {
+            await runWhatsAppTurn({
+                session: this.session,
+                socket: this.socket,
+                editFrameMs: this.opts.editFrameMs ?? DEFAULT_EDIT_FRAME_MS,
+                recordSentId: (key) => this.recordSentId(key),
+                ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+            }, {
+                jid,
+                text,
+                model: this.model,
+                controller: lease.controller,
+                turnId: lease.turnId,
+            });
+        }
+        finally {
+            lease.end();
+            this.currentJid = null;
+        }
+    }
+    // ---- outbound -------------------------------------------------------------
+    /** Every outbound send goes through here so its id lands in the echo set. */
+    async send(jid, text) {
+        if (!this.socket)
+            return;
+        try {
+            const sent = await this.socket.sendText(jid, text);
+            this.recordSentId(sent?.key);
+        }
+        catch (err) {
+            this.opts.logger?.warn?.('whatsapp send failed', { err: String(err) });
+        }
+    }
+    sendPermissionPrompt(text) {
+        const target = this.currentJid ?? this.lastJid ?? this.ownerJid;
+        if (!target)
+            return Promise.reject(new Error('no chat to prompt in'));
+        return this.send(target, text);
+    }
+    recordSentId(key) {
+        const id = key?.id;
+        if (!id)
+            return;
+        this.sentIds.add(id);
+        if (this.sentIds.size > MAX_SENT_IDS) {
+            const oldest = this.sentIds.values().next().value;
+            if (oldest !== undefined)
+                this.sentIds.delete(oldest);
+        }
+    }
+    mirrorForeignTurn(event) {
+        const text = this.turns.mirrorText(event);
+        if (text == null)
+            return;
+        const target = this.lastJid ?? this.ownerJid;
+        if (!target)
+            return;
+        void this.send(target, text);
+    }
+    // ---- listeners ------------------------------------------------------------
+    notifyConnectChange() {
+        for (const listener of this.connectListeners) {
+            try {
+                listener();
+            }
+            catch (err) {
+                this.opts.logger?.warn?.('whatsapp connect-change listener threw', { err: String(err) });
+            }
+        }
+    }
+    emitPaired(ownerJid) {
+        for (const listener of this.pairedListeners) {
+            try {
+                listener(ownerJid);
+            }
+            catch (err) {
+                this.opts.logger?.warn?.('whatsapp paired listener threw', { err: String(err) });
+            }
+        }
+    }
+    rebuildAllowList(extra) {
+        this.allowSet.clear();
+        if (this.ownerJid)
+            this.allowSet.add(this.ownerJid);
+        for (const jid of this.opts.allowedJids ?? []) {
+            const normalized = normalizeJid(jid);
+            if (normalized)
+                this.allowSet.add(normalized);
+        }
+        for (const jid of extra)
+            this.allowSet.add(jid);
+    }
+    /**
+     * Run a handler detached from the socket's event dispatch (a whole user turn
+     * must not block Baileys' event loop). Errors are logged here — nothing above
+     * awaits the promise.
+     */
+    dispatchInBackground(work, kind) {
+        void work.catch((err) => {
+            this.opts.logger?.warn?.('whatsapp handler failed', { kind, err: String(err) });
+        });
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EACL,qBAAqB,EACrB,cAAc,GAEf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,YAAY,EACZ,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAoB,MAAM,mBAAmB,CAAC;AACzE,OAAO,EACL,kCAAkC,GAEnC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,aAAa,EACb,oBAAoB,GAMrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,uEAAuE;AACvE,MAAM,YAAY,GAAG,GAAG,CAAC;AAqCzB,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,UAAU,CAAC;IACV,UAAU,CAA+B;IACzC,IAAI,CAAyB;IAC7B,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAEvC,OAAO,GAAmB,IAAI,CAAC;IAC/B,KAAK,CAAqB;IAC1B,MAAM,GAA0B,IAAI,CAAC;IACrC,OAAO,GAA+B,IAAI,CAAC;IAC3C,MAAM,GAAyB,IAAI,CAAC;IACpC,QAAQ,GAAwB,IAAI,CAAC;IAErC,QAAQ,GAAG,KAAK,CAAC;IACjB,cAAc,GAAwB,IAAI,CAAC;IAC3C,aAAa,GAAkC,IAAI,CAAC;IACpD,iBAAiB,GAAG,CAAC,CAAC;IACtB,cAAc,GAAyC,IAAI,CAAC;IAE5D,QAAQ,GAAG,KAAK,CAAC;IACjB,eAAe,GAAG,KAAK,CAAC;IACxB,SAAS,GAAkB,IAAI,CAAC;IAChC,UAAU,GAAG,KAAK,CAAC;IACnB,QAAQ,GAAkB,IAAI,CAAC;IACtB,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,UAAU,GAAkB,IAAI,CAAC;IACjC,OAAO,GAAkB,IAAI,CAAC;IAEtC;8EAC0E;IACzD,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5B,gBAAgB,GAAG,IAAI,GAAG,EAAc,CAAC;IACzC,eAAe,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEzE,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,kCAAkC,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED;;wEAEoE;IACpE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,2EAA2E;IAC3E,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,+EAA+E;IAC/E,QAAQ,CAAC,QAAoC;QAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAA4B;QACtC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,0EAA0E;QAC1E,wEAAwE;QACxE,6EAA6E;QAC7E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC,OAAO;YACV,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAE/E,MAAM,SAAS,GACb,SAAS,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;QAC7E,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC;QAErD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,gFAAgF;gBAC9E,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAEhC,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,gBAAgB,CACnB,gBAAgB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CACvE,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAErE,sEAAsE;QACtE,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAErF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;YAC9B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,2BAA2B,EAAE;YACpD,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO;YACP,eAAe,EAAE,CAAC,QAAQ,EAAE,EAAE;gBAC5B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,EAAE;gBAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,MAA0B;QACvD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC;YAC3D,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK;qBACjB,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,CAAC;qBAChD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,uCAAuC,EAAE;wBAChE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;qBACjB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACL,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;oBAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBACvB,KAAK,IAAI,CAAC,IAAI,CACZ,KAAK,EACL,6EAA6E;wBAC3E,gFAAgF,CACnF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO;YAC1B,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,IAAmB;QACrC,IAAI,IAAI,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;YACrC,yEAAyE;YACzE,qEAAqE;YACrE,uDAAuD;YACvD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,gEAAgE,CAAC,CAAC;YAC3F,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;YAC7B,KAAK,IAAI,CAAC,OAAO;gBACf,EAAE,KAAK,EAAE;iBACR,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;iBACtB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;iBACjF,IAAI,CAAC,GAAG,EAAE;gBACT,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;qBACxC,CAAC;oBACJ,IAAI,CAAC,IAAI,CACP,iFAAiF;wBAC/E,2CAA2C,CAC9C,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YACL,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,aAAa,CAAC,kBAAkB,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CACP,wGAAwG,CACzG,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,aAAa,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CACP,sFAAsF;gBACpF,oDAAoD,CACvD,CAAC;YACF,OAAO;QACT,CAAC;QACD,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,IAAI,KAAK,aAAa,CAAC,eAAe,EAAE,CAAC;YAC3C,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,iBAAiB,GAAG,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,6BAA6B,GAAG,+CAA+C,IAAI,IAAI,SAAS,GAAG,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,iBAAiB,CAAC,OAAe;QACvC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC3B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACzC,IAAI,CAAC,IAAI,CACP,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;IAChC,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAqB;QACnE,MAAM,OAAO,GAAgB,kBAAkB,CAC7C;YACE,MAAM,EAAE,IAAI,CAAC,QAAQ;YACrB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;SACxC,EACD,UAAU,EACV,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,sEAAsE;YACtE,6DAA6D;YAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAY;QAChD,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAE7E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACzC,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7C,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBAChC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,GAAW,EACX,QAAgB,EAChB,GAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAC7C;YACE,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,EACD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CACvB,CAAC;QACF,IAAI,UAAU;YAAE,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAW;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QACzC,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,sEAAsE;QACtE,IAAI,CAAC;YACH,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;;gBACpE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,IAAI,CACb,GAAG,EACH,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CACzF,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IACrE,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,IAAY;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAC1C,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,sDAAsD;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sEAAsE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,eAAe,CACnB;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,qBAAqB;gBAC3D,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,EACD;gBACE,GAAG;gBACH,IAAI;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,8EAA8E;IAE9E,6EAA6E;IACrE,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAAY;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,IAAY;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC;QAChE,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,GAAoC;QACvD,MAAM,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,KAAiB;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAEtE,mBAAmB;QACzB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,wCAAwC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAA4B;QACnD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,UAAU;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,IAAmB,EAAE,IAAY;QAC5D,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/consent-prompt.d.ts

@@ -0,0 +1,9 @@
+import { type ConsentVault } from './consent.js';
+/**
+ * The interactive consent gate — the FIRST step of every setup surface. Shows
+ * the unofficial-API warning and requires a literally typed "yes" before
+ * anything else may happen; anything less refuses. Returns true only when the
+ * risk is (or already was) acknowledged.
+ */
+export declare function ensureConsentInteractive(vault: ConsentVault): Promise<boolean>;
+//# sourceMappingURL=consent-prompt.d.ts.map

package/dist/consent-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-prompt.d.ts","sourceRoot":"","sources":["../src/consent-prompt.ts"],"names":[],"mappings":"AACA,OAAO,EAA8C,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE7F;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBpF"}

package/dist/consent-prompt.js

@@ -0,0 +1,28 @@
+import { isCancel, log, note, text } from '@clack/prompts';
+import { CONSENT_WARNING, hasConsent, recordConsent } from './consent.js';
+/**
+ * The interactive consent gate — the FIRST step of every setup surface. Shows
+ * the unofficial-API warning and requires a literally typed "yes" before
+ * anything else may happen; anything less refuses. Returns true only when the
+ * risk is (or already was) acknowledged.
+ */
+export async function ensureConsentInteractive(vault) {
+    if (await hasConsent(vault)) {
+        // Already acknowledged — keep the reminder visible but don't re-demand typing.
+        log.warn('Reminder: unofficial WhatsApp API — the linked number can be banned.');
+        return true;
+    }
+    note(CONSENT_WARNING, 'READ THIS FIRST');
+    const answer = await text({
+        message: "Type 'yes' to acknowledge the risk and continue (anything else aborts)",
+        placeholder: 'yes',
+    });
+    if (isCancel(answer) || String(answer).trim().toLowerCase() !== 'yes') {
+        log.error('Not acknowledged — leaving the WhatsApp channel disarmed.');
+        return false;
+    }
+    await recordConsent(vault);
+    log.success('Acknowledgment recorded.');
+    return true;
+}
+//# sourceMappingURL=consent-prompt.js.map

package/dist/consent-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-prompt.js","sourceRoot":"","sources":["../src/consent-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAqB,MAAM,cAAc,CAAC;AAE7F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAmB;IAChE,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,+EAA+E;QAC/E,GAAG,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,OAAO,EAAE,wEAAwE;QACjF,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC"}