@moxxy/plugin-channel-whatsapp 0.27.0

package/dist/consent.d.ts

@@ -0,0 +1,22 @@
+/** The read/write vault slice the consent gate needs. */
+export interface ConsentVault {
+    get(name: string): Promise<string | null>;
+    set(name: string, value: string, tags?: ReadonlyArray<string>): Promise<void>;
+}
+/**
+ * The non-negotiable warning shown as the FIRST step of every setup path.
+ * Baileys speaks the WhatsApp Web protocol without WhatsApp's blessing;
+ * users must opt in to that risk explicitly before anything else happens.
+ */
+export declare const CONSENT_WARNING: string;
+/** One-line refusal used by every path that hits the gate un-acknowledged. */
+export declare const CONSENT_REQUIRED_MESSAGE: string;
+/**
+ * Whether the operator has acknowledged the ToS/ban risk. Env override first
+ * (headless/dedicated runners), then the vault receipt written by the wizard or
+ * the desktop config panel. Vault errors (locked/unavailable) count as "no".
+ */
+export declare function hasConsent(vault: ConsentVault | undefined): Promise<boolean>;
+/** Persist the wizard's typed acknowledgment as a dated receipt. */
+export declare function recordConsent(vault: ConsentVault): Promise<void>;
+//# sourceMappingURL=consent.d.ts.map

package/dist/consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.d.ts","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAEA,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/E;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAQkC,CAAC;AAE/D,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,QAGgD,CAAC;AAEtF;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED,oEAAoE;AACpE,wBAAsB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtE"}

package/dist/consent.js

@@ -0,0 +1,40 @@
+import { WHATSAPP_CONSENT_ENV, WHATSAPP_CONSENT_KEY, isConsentValue } from './keys.js';
+/**
+ * The non-negotiable warning shown as the FIRST step of every setup path.
+ * Baileys speaks the WhatsApp Web protocol without WhatsApp's blessing;
+ * users must opt in to that risk explicitly before anything else happens.
+ */
+export const CONSENT_WARNING = 'This channel uses Baileys, an UNOFFICIAL WhatsApp Web client.\n' +
+    '\n' +
+    '  - Automating an account this way violates WhatsApp\'s Terms of Service.\n' +
+    '  - WhatsApp actively detects unofficial clients and CAN PERMANENTLY BAN\n' +
+    '    the phone number — without warning and without appeal.\n' +
+    '  - Strongly consider linking a SECONDARY number, not your personal one.\n' +
+    '\n' +
+    'moxxy cannot make this safe; it can only make it explicit.';
+/** One-line refusal used by every path that hits the gate un-acknowledged. */
+export const CONSENT_REQUIRED_MESSAGE = 'WhatsApp channel not acknowledged: it relies on an unofficial API that violates ' +
+    "WhatsApp's ToS and can get the number banned. Run `moxxy whatsapp setup` and type " +
+    `'yes' to accept that risk (or set ${WHATSAPP_CONSENT_ENV}=yes for headless runs).`;
+/**
+ * Whether the operator has acknowledged the ToS/ban risk. Env override first
+ * (headless/dedicated runners), then the vault receipt written by the wizard or
+ * the desktop config panel. Vault errors (locked/unavailable) count as "no".
+ */
+export async function hasConsent(vault) {
+    if (isConsentValue(process.env[WHATSAPP_CONSENT_ENV]))
+        return true;
+    if (!vault)
+        return false;
+    try {
+        return isConsentValue(await vault.get(WHATSAPP_CONSENT_KEY));
+    }
+    catch {
+        return false;
+    }
+}
+/** Persist the wizard's typed acknowledgment as a dated receipt. */
+export async function recordConsent(vault) {
+    await vault.set(WHATSAPP_CONSENT_KEY, `acknowledged@${new Date().toISOString()}`, ['whatsapp']);
+}
+//# sourceMappingURL=consent.js.map

package/dist/consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent.js","sourceRoot":"","sources":["../src/consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQvF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,iEAAiE;IACjE,IAAI;IACJ,6EAA6E;IAC7E,4EAA4E;IAC5E,8DAA8D;IAC9D,4EAA4E;IAC5E,IAAI;IACJ,4DAA4D,CAAC;AAE/D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GACnC,kFAAkF;IAClF,oFAAoF;IACpF,qCAAqC,oBAAoB,0BAA0B,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAA+B;IAC9D,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAmB;IACrD,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,gBAAgB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;AAClG,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+import { type Plugin } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+export { WhatsAppChannel, type WhatsAppChannelOptions, type WhatsAppStartOpts } from './channel.js';
+export { createWhatsAppPermissionController, parsePermissionReply, formatPermissionPrompt, type WhatsAppPermissionController, } from './permission.js';
+export { createFileAuthStorage, createWhatsAppAuthState, hasStoredCreds, sanitizeAuthKey, type WhatsAppAuthStorage, type BaileysAuthBridge, } from './auth-state.js';
+export { gateInboundMessage, MAX_AUDIO_BYTES, MAX_TEXT_CHARS, type GateVerdict, } from './message-gate.js';
+export { runWhatsAppTurn, splitWhatsAppText, WHATSAPP_MAX_MESSAGE_CHARS, } from './channel/turn-runner.js';
+export { CONSENT_WARNING, CONSENT_REQUIRED_MESSAGE, hasConsent, recordConsent } from './consent.js';
+export { WHATSAPP_CONSENT_KEY, WHATSAPP_OWNER_JID_KEY, WHATSAPP_ALLOWED_JIDS_KEY, WHATSAPP_CONSENT_ENV, WHATSAPP_AUTH_DIR, normalizeJid, parseAllowedJids, isConsentValue, } from './keys.js';
+export { disconnectStatusCode, WA_DISCONNECT, type WhatsAppSocket, type WhatsAppSocketFactory, } from './socket.js';
+export interface BuildWhatsAppPluginOptions {
+    /** Host-injected encrypted secret store (available immediately). */
+    readonly vault: VaultStore;
+}
+/** Build the WhatsApp channel plugin with a host-injected vault (mirrors the
+ *  Telegram/Slack plugins' dual-export pattern). */
+export declare function buildWhatsAppPlugin(opts: BuildWhatsAppPluginOptions): Plugin;
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`).
+ */
+export declare const whatsappPlugin: Plugin;
+export default whatsappPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoD,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAE3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AActD,OAAO,EAAE,eAAe,EAAE,KAAK,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,4BAA4B,GAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,0BAA0B;IACzC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;oDACoD;AACpD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,CAE5E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,MAgBzB,CAAC;AAEL,eAAe,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,211 @@
+import { defineChannel, definePlugin } from '@moxxy/sdk';
+import { moxxyPath } from '@moxxy/sdk/server';
+import { createFileAuthStorage, hasStoredCreds } from './auth-state.js';
+import { WhatsAppChannel } from './channel.js';
+import { CONSENT_REQUIRED_MESSAGE, hasConsent } from './consent.js';
+import { WHATSAPP_ALLOWED_JIDS_KEY, WHATSAPP_AUTH_DIR, WHATSAPP_CONSENT_KEY, WHATSAPP_OWNER_JID_KEY, parseAllowedJids, } from './keys.js';
+import { runWhatsAppWizard, unpairLocal } from './setup-wizard.js';
+import { runWhatsAppPairFlow } from './pair-flow.js';
+export { WhatsAppChannel } from './channel.js';
+export { createWhatsAppPermissionController, parsePermissionReply, formatPermissionPrompt, } from './permission.js';
+export { createFileAuthStorage, createWhatsAppAuthState, hasStoredCreds, sanitizeAuthKey, } from './auth-state.js';
+export { gateInboundMessage, MAX_AUDIO_BYTES, MAX_TEXT_CHARS, } from './message-gate.js';
+export { runWhatsAppTurn, splitWhatsAppText, WHATSAPP_MAX_MESSAGE_CHARS, } from './channel/turn-runner.js';
+export { CONSENT_WARNING, CONSENT_REQUIRED_MESSAGE, hasConsent, recordConsent } from './consent.js';
+export { WHATSAPP_CONSENT_KEY, WHATSAPP_OWNER_JID_KEY, WHATSAPP_ALLOWED_JIDS_KEY, WHATSAPP_CONSENT_ENV, WHATSAPP_AUTH_DIR, normalizeJid, parseAllowedJids, isConsentValue, } from './keys.js';
+export { disconnectStatusCode, WA_DISCONNECT, } from './socket.js';
+/** Build the WhatsApp channel plugin with a host-injected vault (mirrors the
+ *  Telegram/Slack plugins' dual-export pattern). */
+export function buildWhatsAppPlugin(opts) {
+    return makeWhatsAppPlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`).
+ */
+export const whatsappPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-channel-whatsapp: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeWhatsAppPlugin(getVault, hooks);
+})();
+export default whatsappPlugin;
+function readAllowedJids(options) {
+    const raw = options?.['allowedJids'];
+    if (Array.isArray(raw))
+        return raw.map((x) => String(x));
+    if (typeof raw === 'string' && raw.trim().length > 0)
+        return parseAllowedJids(raw);
+    return undefined;
+}
+function makeWhatsAppPlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-channel-whatsapp',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        channels: [
+            defineChannel({
+                name: 'whatsapp',
+                description: 'WhatsApp channel via Baileys — UNOFFICIAL API (violates WhatsApp ToS; the number ' +
+                    'can be banned — use a secondary number). QR device-link pairing, JID allow-list.',
+                // Like Slack/Telegram: its own dedicated, isolated runner (separate
+                // socket + sticky session) so the bot keeps a persistent history apart
+                // from the user's desktop/TUI work. Baileys is an outbound WebSocket —
+                // no tunnel, no tunnelProvider registration.
+                dedicatedRunner: true,
+                sessionSource: 'whatsapp',
+                config: {
+                    fields: [
+                        {
+                            name: 'tosAcknowledged',
+                            label: "Risk acknowledgment — type 'yes'",
+                            vaultKey: WHATSAPP_CONSENT_KEY,
+                            required: true,
+                            help: 'Unofficial WhatsApp API: violates the ToS and can get the number banned. ' +
+                                "Typing anything other than 'yes' keeps the channel disarmed.",
+                        },
+                        {
+                            name: 'allowedJids',
+                            label: 'Extra allowed JIDs (comma-separated)',
+                            vaultKey: WHATSAPP_ALLOWED_JIDS_KEY,
+                            required: false,
+                            placeholder: '15551234567@s.whatsapp.net',
+                            help: 'Your own Note-to-Self chat is always allowed once linked.',
+                        },
+                    ],
+                    hasRequestUrl: false,
+                    runHint: 'On your phone: WhatsApp -> Settings -> Linked devices -> Link a device, then scan the QR.',
+                    connect: {
+                        kind: 'qr',
+                        title: 'Link WhatsApp',
+                        hint: 'Scan with the phone that owns the account: WhatsApp -> Settings -> Linked devices ' +
+                            '-> Link a device. The QR refreshes periodically until scanned.',
+                    },
+                },
+                create: (deps) => {
+                    const options = deps.options;
+                    const allowedJids = readAllowedJids(options);
+                    const editFrameMs = options?.['editFrameMs'];
+                    const channelOpts = {
+                        vault: getVault(),
+                        ...(allowedJids ? { allowedJids } : {}),
+                        ...(typeof editFrameMs === 'number' ? { editFrameMs } : {}),
+                        logger: deps.logger,
+                    };
+                    return new WhatsAppChannel(channelOpts);
+                },
+                isAvailable: async () => {
+                    // Cheap probes only: one vault read + one stat-shaped file read.
+                    let consent = false;
+                    try {
+                        consent = await hasConsent(getVault());
+                    }
+                    catch {
+                        // Vault unavailable in a probe/listing context; the env override
+                        // inside hasConsent(undefined) still counts.
+                        consent = await hasConsent(undefined);
+                    }
+                    if (!consent)
+                        return { ok: false, reason: CONSENT_REQUIRED_MESSAGE };
+                    const linked = await hasStoredCreds(createFileAuthStorage(moxxyPath(WHATSAPP_AUTH_DIR)));
+                    if (!linked) {
+                        return {
+                            ok: false,
+                            reason: 'No WhatsApp account linked (or the phone logged this device out). Run ' +
+                                '`moxxy channels whatsapp pair` to scan the QR.',
+                        };
+                    }
+                    return { ok: true };
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: acknowledge the unofficial-API risk (required first step), ' +
+                            'link via QR, manage the allow-list, then start. Shown by default for ' +
+                            '`moxxy whatsapp` on a TTY.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                // Headless: the consent gate still holds — start refuses without
+                                // an acknowledgment (vault receipt or MOXXY_WHATSAPP_TOS_ACK).
+                                const vault = ctx.deps.vault;
+                                if (!(await hasConsent(vault))) {
+                                    process.stderr.write(`${CONSENT_REQUIRED_MESSAGE}\n`);
+                                    return 1;
+                                }
+                                return ctx.startChannel();
+                            }
+                            return runWhatsAppWizard(ctx);
+                        },
+                    },
+                    pair: {
+                        description: 'Link a WhatsApp account: renders the rotating QR in the terminal; scan it from ' +
+                            'WhatsApp -> Settings -> Linked devices. Requires the typed risk acknowledgment.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                process.stderr.write('Pairing needs a TTY to show the QR. Run `moxxy channels whatsapp pair` on a ' +
+                                    'workstation, or pair from the desktop Channels panel.\n');
+                                return 1;
+                            }
+                            return runWhatsAppPairFlow(ctx);
+                        },
+                    },
+                    status: {
+                        description: 'Report consent/link/allow-list state as JSON (with re-pair guidance after a logout).',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const consentAcknowledged = await hasConsent(vault);
+                            const linked = await hasStoredCreds(createFileAuthStorage(moxxyPath(WHATSAPP_AUTH_DIR)));
+                            const ownerJid = await vault.get(WHATSAPP_OWNER_JID_KEY);
+                            const allowedJids = parseAllowedJids(await vault.get(WHATSAPP_ALLOWED_JIDS_KEY));
+                            const state = !consentAcknowledged
+                                ? 'needs-consent'
+                                : !linked
+                                    ? 'needs-pairing'
+                                    : 'ready';
+                            const guidance = !consentAcknowledged
+                                ? 'Run `moxxy whatsapp setup` and type yes to acknowledge the unofficial-API risk.'
+                                : !linked
+                                    ? ownerJid
+                                        ? 'The phone logged this device out (or credentials were cleared) — run `moxxy channels whatsapp pair` to re-link.'
+                                        : 'Run `moxxy channels whatsapp pair` to link an account.'
+                                    : null;
+                            process.stdout.write(JSON.stringify({ state, consentAcknowledged, linked, ownerJid, allowedJids, guidance }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                    unpair: {
+                        description: 'Forget the local WhatsApp credentials (also remove the device on the phone under Linked devices).',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removed = await unpairLocal(vault);
+                            process.stdout.write(removed
+                                ? 'unpaired — also remove the device on your phone: WhatsApp -> Settings -> Linked devices\n'
+                                : 'no linked account was stored\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAoC,MAAM,YAAY,CAAC;AAC3F,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,eAAe,EAA+B,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,eAAe,EAAuD,MAAM,cAAc,CAAC;AACpG,OAAO,EACL,kCAAkC,EAClC,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACpG,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,oBAAoB,EACpB,aAAa,GAGd,MAAM,aAAa,CAAC;AAOrB;oDACoD;AACpD,MAAM,UAAU,mBAAmB,CAAC,IAAgC;IAClE,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAW,CAAC,GAAG,EAAE;IAC1C,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC,CAAC,EAAE,CAAC;AAEL,eAAe,cAAc,CAAC;AAE9B,SAAS,eAAe,CAAC,OAA4C;IACnE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA0B,EAAE,KAAsB;IAC5E,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,WAAW,EACT,mFAAmF;oBACnF,kFAAkF;gBACpF,oEAAoE;gBACpE,uEAAuE;gBACvE,uEAAuE;gBACvE,6CAA6C;gBAC7C,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,UAAU;gBACzB,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,iBAAiB;4BACvB,KAAK,EAAE,kCAAkC;4BACzC,QAAQ,EAAE,oBAAoB;4BAC9B,QAAQ,EAAE,IAAI;4BACd,IAAI,EACF,2EAA2E;gCAC3E,8DAA8D;yBACjE;wBACD;4BACE,IAAI,EAAE,aAAa;4BACnB,KAAK,EAAE,sCAAsC;4BAC7C,QAAQ,EAAE,yBAAyB;4BACnC,QAAQ,EAAE,KAAK;4BACf,WAAW,EAAE,4BAA4B;4BACzC,IAAI,EAAE,2DAA2D;yBAClE;qBACF;oBACD,aAAa,EAAE,KAAK;oBACpB,OAAO,EACL,2FAA2F;oBAC7F,OAAO,EAAE;wBACP,IAAI,EAAE,IAAI;wBACV,KAAK,EAAE,eAAe;wBACtB,IAAI,EACF,oFAAoF;4BACpF,gEAAgE;qBACnE;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;oBAC7C,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;oBAC7C,MAAM,WAAW,GAA2B;wBAC1C,KAAK,EAAE,QAAQ,EAAE;wBACjB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvC,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,MAAM,EAAE,IAAI,CAAC,MAAe;qBAC7B,CAAC;oBACF,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;gBACD,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,iEAAiE;oBACjE,IAAI,OAAO,GAAG,KAAK,CAAC;oBACpB,IAAI,CAAC;wBACH,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACzC,CAAC;oBAAC,MAAM,CAAC;wBACP,iEAAiE;wBACjE,6CAA6C;wBAC7C,OAAO,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;oBACxC,CAAC;oBACD,IAAI,CAAC,OAAO;wBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;oBACrE,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,qBAAqB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CACpD,CAAC;oBACF,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,OAAO;4BACL,EAAE,EAAE,KAAK;4BACT,MAAM,EACJ,wEAAwE;gCACxE,gDAAgD;yBACnD,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACtB,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,gFAAgF;4BAChF,uEAAuE;4BACvE,4BAA4B;wBAC9B,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,iEAAiE;gCACjE,+DAA+D;gCAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;gCACvD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oCAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,wBAAwB,IAAI,CAAC,CAAC;oCACtD,OAAO,CAAC,CAAC;gCACX,CAAC;gCACD,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;wBAChC,CAAC;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,iFAAiF;4BACjF,iFAAiF;wBACnF,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8EAA8E;oCAC5E,yDAAyD,CAC5D,CAAC;gCACF,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;wBAClC,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,sFAAsF;wBACxF,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,mBAAmB,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;4BACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,qBAAqB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CACpD,CAAC;4BACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;4BACzD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;4BACjF,MAAM,KAAK,GAAG,CAAC,mBAAmB;gCAChC,CAAC,CAAC,eAAe;gCACjB,CAAC,CAAC,CAAC,MAAM;oCACP,CAAC,CAAC,eAAe;oCACjB,CAAC,CAAC,OAAO,CAAC;4BACd,MAAM,QAAQ,GAAG,CAAC,mBAAmB;gCACnC,CAAC,CAAC,iFAAiF;gCACnF,CAAC,CAAC,CAAC,MAAM;oCACP,CAAC,CAAC,QAAQ;wCACR,CAAC,CAAC,iHAAiH;wCACnH,CAAC,CAAC,wDAAwD;oCAC5D,CAAC,CAAC,IAAI,CAAC;4BACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EACvE,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EACT,mGAAmG;wBACrG,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;4BACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,OAAO;gCACL,CAAC,CAAC,2FAA2F;gCAC7F,CAAC,CAAC,gCAAgC,CACrC,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Vault keys + pure JID helpers shared by the channel, its subcommands, and the
+ * interactive setup wizard. Kept in their own module so the wizard / pair-flow
+ * helpers can import them without pulling in the plugin's full index (or, worse,
+ * Baileys — which stays behind a lazy import in `baileys-socket.ts`).
+ */
+/** Vault key holding the user's typed acknowledgment of the ToS/ban risk. */
+export declare const WHATSAPP_CONSENT_KEY = "whatsapp_tos_acknowledged";
+/** Vault key holding the linked account's own (normalized) JID. */
+export declare const WHATSAPP_OWNER_JID_KEY = "whatsapp_owner_jid";
+/** Vault key holding extra allow-listed JIDs (JSON array or comma-separated). */
+export declare const WHATSAPP_ALLOWED_JIDS_KEY = "whatsapp_allowed_jids";
+/** Env override for the consent gate (headless/dedicated runners). */
+export declare const WHATSAPP_CONSENT_ENV = "MOXXY_WHATSAPP_TOS_ACK";
+/** Directory (under the moxxy home) holding the rotating Baileys auth state. */
+export declare const WHATSAPP_AUTH_DIR = "whatsapp-auth";
+/**
+ * Normalize a WhatsApp JID for identity comparison: the user part of a
+ * multi-device JID carries `:device` (and historically `_agent`) suffixes that
+ * vary per login (`1234567890:12@s.whatsapp.net`), so equality checks must
+ * compare the bare `user@server` form. Returns null for values that don't look
+ * like a JID at all, so callers treat garbage as "no identity" instead of
+ * silently allow-listing it.
+ */
+export declare function normalizeJid(raw: string | null | undefined): string | null;
+/**
+ * Parse a stored/configured allow-list. Accepts a JSON string array or a
+ * comma/whitespace-separated string; every entry is normalized and non-JIDs are
+ * dropped (never silently allow-listed). Returns a de-duplicated array.
+ */
+export declare function parseAllowedJids(raw: string | null | undefined): string[];
+/**
+ * Whether a stored consent value counts as an actual acknowledgment. The setup
+ * wizard stores `acknowledged@<ISO date>`; the desktop panel / `moxxy init`
+ * declarative field stores whatever the user typed — only an affirmative "yes"
+ * counts, so typing "no" into the form does NOT arm the channel.
+ */
+export declare function isConsentValue(raw: string | null | undefined): boolean;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAChE,mEAAmE;AACnE,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAC3D,iFAAiF;AACjF,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,sEAAsE;AACtE,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAC7D,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AAEjD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAY1E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAoBzE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAItE"}

package/dist/keys.js

@@ -0,0 +1,86 @@
+/**
+ * Vault keys + pure JID helpers shared by the channel, its subcommands, and the
+ * interactive setup wizard. Kept in their own module so the wizard / pair-flow
+ * helpers can import them without pulling in the plugin's full index (or, worse,
+ * Baileys — which stays behind a lazy import in `baileys-socket.ts`).
+ */
+/** Vault key holding the user's typed acknowledgment of the ToS/ban risk. */
+export const WHATSAPP_CONSENT_KEY = 'whatsapp_tos_acknowledged';
+/** Vault key holding the linked account's own (normalized) JID. */
+export const WHATSAPP_OWNER_JID_KEY = 'whatsapp_owner_jid';
+/** Vault key holding extra allow-listed JIDs (JSON array or comma-separated). */
+export const WHATSAPP_ALLOWED_JIDS_KEY = 'whatsapp_allowed_jids';
+/** Env override for the consent gate (headless/dedicated runners). */
+export const WHATSAPP_CONSENT_ENV = 'MOXXY_WHATSAPP_TOS_ACK';
+/** Directory (under the moxxy home) holding the rotating Baileys auth state. */
+export const WHATSAPP_AUTH_DIR = 'whatsapp-auth';
+/**
+ * Normalize a WhatsApp JID for identity comparison: the user part of a
+ * multi-device JID carries `:device` (and historically `_agent`) suffixes that
+ * vary per login (`1234567890:12@s.whatsapp.net`), so equality checks must
+ * compare the bare `user@server` form. Returns null for values that don't look
+ * like a JID at all, so callers treat garbage as "no identity" instead of
+ * silently allow-listing it.
+ */
+export function normalizeJid(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0 || trimmed.length > 256)
+        return null;
+    const at = trimmed.indexOf('@');
+    if (at <= 0 || at !== trimmed.lastIndexOf('@'))
+        return null;
+    const server = trimmed.slice(at + 1).toLowerCase();
+    if (!/^[a-z0-9.-]+$/.test(server))
+        return null;
+    // Strip the device (`:NN`) and legacy agent (`_N`) suffixes off the user part.
+    const user = trimmed.slice(0, at).split(':')[0].split('_')[0];
+    if (user.length === 0)
+        return null;
+    return `${user}@${server}`;
+}
+/**
+ * Parse a stored/configured allow-list. Accepts a JSON string array or a
+ * comma/whitespace-separated string; every entry is normalized and non-JIDs are
+ * dropped (never silently allow-listed). Returns a de-duplicated array.
+ */
+export function parseAllowedJids(raw) {
+    if (raw == null)
+        return [];
+    let entries = [];
+    const trimmed = raw.trim();
+    if (trimmed.startsWith('[')) {
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (Array.isArray(parsed))
+                entries = parsed;
+        }
+        catch {
+            return [];
+        }
+    }
+    else {
+        entries = trimmed.split(/[,\s]+/);
+    }
+    const out = new Set();
+    for (const entry of entries) {
+        const jid = normalizeJid(typeof entry === 'string' ? entry : null);
+        if (jid)
+            out.add(jid);
+    }
+    return [...out];
+}
+/**
+ * Whether a stored consent value counts as an actual acknowledgment. The setup
+ * wizard stores `acknowledged@<ISO date>`; the desktop panel / `moxxy init`
+ * declarative field stores whatever the user typed — only an affirmative "yes"
+ * counts, so typing "no" into the form does NOT arm the channel.
+ */
+export function isConsentValue(raw) {
+    if (typeof raw !== 'string')
+        return false;
+    const v = raw.trim().toLowerCase();
+    return v === 'yes' || v.startsWith('acknowledged@');
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAChE,mEAAmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,sEAAsE;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAC7D,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,GAA8B;IACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,+EAA+E;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA8B;IAC7D,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAc,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,GAAG,MAAM,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAA8B;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AACtD,CAAC"}

package/dist/message-gate.d.ts

@@ -0,0 +1,50 @@
+import type { WaInboundMessage } from './socket.js';
+/**
+ * The single inbound gate every session-reaching path goes through (AGENTS.md:
+ * gate EVERY session-reaching path behind pairing; A8: zod-validate inbound
+ * before it touches the session). Pure — the channel feeds it the message plus
+ * its identity/allow-list state and branches on the verdict.
+ *
+ * Order of checks (each is load-bearing):
+ *  1. only `notify` upserts — history syncs / appends are not fresh input.
+ *  2. shape-validate + size-cap the consumed fields (zod).
+ *  3. drop own echoes: Baileys receives this client's OWN outbound sends back
+ *     via `messages.upsert`; without the sent-id check the bot replies to
+ *     itself in a loop.
+ *  4. drop `fromMe` messages outside the owner's self-chat ("Note to Self"):
+ *     those are the owner talking to OTHER people from their phone — the bot
+ *     must never treat someone's private conversation as a prompt.
+ *  5. allow-list by normalized JID: the owner's self-chat is allowed by
+ *     default (seeded by the channel); everything else must be explicitly
+ *     allow-listed. Unauthorized senders are dropped SILENTLY — replying would
+ *     both leak the bot's existence and look like spam (ban risk).
+ */
+/** Cap on inbound prompt text (WhatsApp itself allows ~65k). */
+export declare const MAX_TEXT_CHARS = 16000;
+/** Cap on a voice note / audio file we will download + buffer for transcription. */
+export declare const MAX_AUDIO_BYTES: number;
+export type GateVerdict = {
+    readonly ok: false;
+    readonly reason: string;
+} | {
+    readonly ok: true;
+    readonly kind: 'text';
+    readonly jid: string;
+    readonly text: string;
+} | {
+    readonly ok: true;
+    readonly kind: 'audio';
+    readonly jid: string;
+    readonly mimeType: string;
+    readonly declaredBytes: number | null;
+};
+export interface GateState {
+    /** The linked account's own normalized JID (null until the socket opens). */
+    readonly ownJid: string | null;
+    /** Normalized JIDs allowed to drive the session (includes ownJid). */
+    readonly allowedJids: ReadonlySet<string>;
+    /** Message ids of THIS client's own recent sends (echo/loop protection). */
+    readonly isOwnSend: (messageId: string) => boolean;
+}
+export declare function gateInboundMessage(state: GateState, upsertType: string, raw: WaInboundMessage): GateVerdict;
+//# sourceMappingURL=message-gate.d.ts.map

package/dist/message-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-gate.d.ts","sourceRoot":"","sources":["../src/message-gate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,gEAAgE;AAChE,eAAO,MAAM,cAAc,QAAS,CAAC;AACrC,oFAAoF;AACpF,eAAO,MAAM,eAAe,QAAmB,CAAC;AAehD,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzF;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC,CAAC;AAEN,MAAM,WAAW,SAAS;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CACpD;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,gBAAgB,GACpB,WAAW,CAmDb"}