@moxxy/plugin-channel-whatsapp 0.27.0

package/dist/message-gate.js

@@ -0,0 +1,150 @@
+import { z } from 'zod';
+import { normalizeJid } from './keys.js';
+/**
+ * The single inbound gate every session-reaching path goes through (AGENTS.md:
+ * gate EVERY session-reaching path behind pairing; A8: zod-validate inbound
+ * before it touches the session). Pure — the channel feeds it the message plus
+ * its identity/allow-list state and branches on the verdict.
+ *
+ * Order of checks (each is load-bearing):
+ *  1. only `notify` upserts — history syncs / appends are not fresh input.
+ *  2. shape-validate + size-cap the consumed fields (zod).
+ *  3. drop own echoes: Baileys receives this client's OWN outbound sends back
+ *     via `messages.upsert`; without the sent-id check the bot replies to
+ *     itself in a loop.
+ *  4. drop `fromMe` messages outside the owner's self-chat ("Note to Self"):
+ *     those are the owner talking to OTHER people from their phone — the bot
+ *     must never treat someone's private conversation as a prompt.
+ *  5. allow-list by normalized JID: the owner's self-chat is allowed by
+ *     default (seeded by the channel); everything else must be explicitly
+ *     allow-listed. Unauthorized senders are dropped SILENTLY — replying would
+ *     both leak the bot's existence and look like spam (ban risk).
+ */
+/** Cap on inbound prompt text (WhatsApp itself allows ~65k). */
+export const MAX_TEXT_CHARS = 16_000;
+/** Cap on a voice note / audio file we will download + buffer for transcription. */
+export const MAX_AUDIO_BYTES = 20 * 1024 * 1024;
+const keySchema = z.object({
+    remoteJid: z.string().min(1).max(256),
+    fromMe: z.boolean().nullish(),
+    id: z.string().min(1).max(256).nullish(),
+});
+const audioMessageSchema = z.object({
+    mimetype: z.string().max(256).nullish(),
+    fileLength: z.union([z.number(), z.string(), z.object({}).passthrough()]).nullish(),
+    seconds: z.number().nullish(),
+    ptt: z.boolean().nullish(),
+});
+export function gateInboundMessage(state, upsertType, raw) {
+    if (upsertType !== 'notify')
+        return drop('not a live notify upsert');
+    const key = keySchema.safeParse(raw?.key ?? {});
+    if (!key.success)
+        return drop('invalid message key shape');
+    const { remoteJid, fromMe, id } = key.data;
+    if (remoteJid === 'status@broadcast')
+        return drop('status broadcast');
+    const jid = normalizeJid(remoteJid);
+    if (!jid)
+        return drop('unparseable chat JID');
+    if (id && state.isOwnSend(id))
+        return drop('own outbound echo');
+    if (fromMe) {
+        // Same-account messages: only the owner's self-chat is a prompt surface.
+        if (state.ownJid == null || jid !== state.ownJid) {
+            return drop('own message in a foreign chat');
+        }
+    }
+    else if (!state.allowedJids.has(jid)) {
+        return drop('sender not allow-listed');
+    }
+    const content = unwrapMessageContent(raw?.message ?? null);
+    if (!content)
+        return drop('no message content');
+    const text = extractText(content);
+    if (text != null) {
+        const trimmed = text.trim();
+        if (trimmed.length === 0)
+            return drop('empty text');
+        if (trimmed.length > MAX_TEXT_CHARS)
+            return drop('text over size cap');
+        return { ok: true, kind: 'text', jid, text: trimmed };
+    }
+    const audioRaw = content['audioMessage'];
+    if (audioRaw != null && typeof audioRaw === 'object') {
+        const audio = audioMessageSchema.safeParse(audioRaw);
+        if (!audio.success)
+            return drop('invalid audio message shape');
+        const declaredBytes = toFiniteNumber(audio.data.fileLength);
+        if (declaredBytes != null && declaredBytes > MAX_AUDIO_BYTES) {
+            return drop('audio over size cap');
+        }
+        return {
+            ok: true,
+            kind: 'audio',
+            jid,
+            mimeType: normalizeMime(audio.data.mimetype),
+            declaredBytes,
+        };
+    }
+    return drop('unsupported message type');
+}
+function drop(reason) {
+    return { ok: false, reason };
+}
+/**
+ * Unwrap the containers WhatsApp nests real content in (disappearing-message
+ * chats wrap everything in `ephemeralMessage`, view-once in `viewOnceMessage*`).
+ * Bounded depth — malformed nesting must not recurse forever.
+ */
+function unwrapMessageContent(message) {
+    let current = message;
+    for (let depth = 0; current != null && depth < 4; depth++) {
+        const wrapper = pickInner(current, 'ephemeralMessage') ??
+            pickInner(current, 'viewOnceMessage') ??
+            pickInner(current, 'viewOnceMessageV2') ??
+            pickInner(current, 'documentWithCaptionMessage');
+        if (!wrapper)
+            return current;
+        current = wrapper;
+    }
+    return current;
+}
+function pickInner(container, field) {
+    const wrapper = container[field];
+    if (wrapper == null || typeof wrapper !== 'object')
+        return null;
+    const inner = wrapper.message;
+    return inner != null && typeof inner === 'object' ? inner : null;
+}
+function extractText(content) {
+    const conversation = content['conversation'];
+    if (typeof conversation === 'string')
+        return conversation;
+    const extended = content['extendedTextMessage'];
+    if (extended != null && typeof extended === 'object') {
+        const text = extended.text;
+        if (typeof text === 'string')
+            return text;
+    }
+    return null;
+}
+/** `fileLength` arrives as number, decimal string, or a Long-like object. */
+function toFiniteNumber(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string') {
+        const n = Number(value);
+        return Number.isFinite(n) ? n : null;
+    }
+    if (value != null && typeof value === 'object') {
+        const n = Number(value.toString());
+        return Number.isFinite(n) ? n : null;
+    }
+    return null;
+}
+function normalizeMime(mime) {
+    const trimmed = mime?.trim();
+    return trimmed && trimmed.length > 0 ? trimmed : 'audio/ogg; codecs=opus';
+}
+//# sourceMappingURL=message-gate.js.map

package/dist/message-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-gate.js","sourceRoot":"","sources":["../src/message-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,gEAAgE;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;CACzC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE;IACnF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE;CAC3B,CAAC,CAAC;AAsBH,MAAM,UAAU,kBAAkB,CAChC,KAAgB,EAChB,UAAkB,EAClB,GAAqB;IAErB,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3D,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3C,IAAI,SAAS,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAEtE,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAE9C,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAEhE,IAAI,MAAM,EAAE,CAAC;QACX,yEAAyE;QACzE,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,aAAa,IAAI,IAAI,IAAI,aAAa,GAAG,eAAe,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,OAAO;YACb,GAAG;YACH,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5C,aAAa;SACd,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,OAAuC;IAEvC,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,OAAO,GACX,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC;YACtC,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;YACrC,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC;YACvC,SAAS,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAChB,SAAkC,EAClC,KAAa;IAEb,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,KAAK,GAAI,OAAiC,CAAC,OAAO,CAAC;IACzD,OAAO,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChG,CAAC;AAED,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAChD,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,GAAI,QAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAE,KAAgC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,IAA+B;IACpD,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAC5E,CAAC"}

package/dist/pair-flow.d.ts

@@ -0,0 +1,12 @@
+import { type ChannelSubcommandContext } from '@moxxy/sdk';
+/**
+ * Drive the QR device-link pairing flow end-to-end in a terminal — the SAME
+ * mechanism the desktop Channels panel uses (it renders `channel.requestUrl`
+ * from the status file), just rendered inline here.
+ *
+ * Unlike Telegram's one-shot deep link, the Baileys QR payload ROTATES every
+ * ~20-60s while unlinked, so the flow re-renders on every connect-change until
+ * the scan lands.
+ */
+export declare function runWhatsAppPairFlow(ctx: ChannelSubcommandContext): Promise<number>;
+//# sourceMappingURL=pair-flow.d.ts.map

package/dist/pair-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.d.ts","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAUnF;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkGxF"}

package/dist/pair-flow.js

@@ -0,0 +1,120 @@
+import { log, outro, spinner } from '@clack/prompts';
+import QRCode from 'qrcode';
+import { exitAfterPairRequested } from '@moxxy/sdk';
+import { WhatsAppChannel } from './channel.js';
+import { CONSENT_REQUIRED_MESSAGE } from './consent.js';
+import { ensureConsentInteractive } from './consent-prompt.js';
+// Tiny zero-dep ANSI dim helper, so this flow stays inside the plugin.
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/**
+ * Drive the QR device-link pairing flow end-to-end in a terminal — the SAME
+ * mechanism the desktop Channels panel uses (it renders `channel.requestUrl`
+ * from the status file), just rendered inline here.
+ *
+ * Unlike Telegram's one-shot deep link, the Baileys QR payload ROTATES every
+ * ~20-60s while unlinked, so the flow re-renders on every connect-change until
+ * the scan lands.
+ */
+export async function runWhatsAppPairFlow(ctx) {
+    const vault = ctx.deps.vault;
+    // Consent gate FIRST — pairing is the moment the account actually links.
+    if (!(await ensureConsentInteractive(vault))) {
+        process.stderr.write(`${CONSENT_REQUIRED_MESSAGE}\n`);
+        return 1;
+    }
+    const session = ctx.session;
+    const channel = new WhatsAppChannel({
+        vault,
+        logger: ctx.deps.logger,
+    });
+    session.setPermissionResolver(channel.permissionResolver);
+    // Subscribe BEFORE start so a fast scan can't race us.
+    let pairedResolve = null;
+    const paired = new Promise((resolve) => {
+        pairedResolve = resolve;
+    });
+    const unsubscribePaired = channel.onPaired((ownerJid) => {
+        pairedResolve?.(ownerJid);
+        pairedResolve = null;
+    });
+    outro(dim('opening WhatsApp pairing window...'));
+    const handle = await channel.start({ session, pair: true });
+    const stopChannel = async () => {
+        unsubscribePaired();
+        try {
+            await handle.stop('pair flow');
+        }
+        catch {
+            /* ignore */
+        }
+    };
+    if (channel.connected) {
+        log.info('A WhatsApp account is already linked. Run `moxxy channels whatsapp unpair` first to link a different one.');
+        await stopChannel();
+        return 0;
+    }
+    // Render every FRESH QR payload (they rotate while unlinked).
+    let lastQr = null;
+    const renderQr = async () => {
+        const qr = channel.requestUrl;
+        if (!qr || qr === lastQr)
+            return;
+        lastQr = qr;
+        await printPairQr(qr);
+        log.info('On your phone: WhatsApp -> Settings -> Linked devices -> Link a device, then scan the QR.');
+    };
+    const unsubscribeConnect = handle.onConnectChange?.(() => void renderQr()) ?? (() => undefined);
+    await renderQr();
+    let stopping = false;
+    const shutdown = async () => {
+        if (stopping)
+            return;
+        stopping = true;
+        unsubscribeConnect();
+        await stopChannel();
+        await session.close('SIGINT').catch(() => undefined);
+        process.exit(0);
+    };
+    const onSignal = () => void shutdown();
+    process.once('SIGINT', onSignal);
+    process.once('SIGTERM', onSignal);
+    const spin = spinner();
+    spin.start('Waiting for the scan (the QR refreshes periodically)...');
+    const ownerJid = await paired;
+    spin.stop(`Linked as ${ownerJid}. Your Note-to-Self chat now talks to moxxy.`);
+    if (exitAfterPairRequested(ctx)) {
+        // Orchestrated pairing (`moxxy onboard`): hand control back — the caller
+        // starts the channel under its own service afterwards. Our SIGINT
+        // handlers would `process.exit` the orchestrator, so drop them first.
+        unsubscribeConnect();
+        process.removeListener('SIGINT', onSignal);
+        process.removeListener('SIGTERM', onSignal);
+        await stopChannel();
+        return 0;
+    }
+    log.info('Channel is running. Press Ctrl+C to stop.');
+    try {
+        await handle.running;
+        return 0;
+    }
+    finally {
+        unsubscribeConnect();
+        process.removeListener('SIGINT', onSignal);
+        process.removeListener('SIGTERM', onSignal);
+    }
+}
+/** Render the rotating pairing payload as a scannable terminal QR. */
+async function printPairQr(payload) {
+    let qr = '';
+    try {
+        qr = await QRCode.toString(payload, { type: 'terminal', small: true });
+    }
+    catch {
+        qr = '';
+    }
+    // CLI surface — intentional stdout. (The payload itself is an opaque pairing
+    // blob, not a URL, so there is no "open the link" fallback to print.)
+    console.log(['', qr].join('\n'));
+}
+//# sourceMappingURL=pair-flow.js.map

package/dist/pair-flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair-flow.js","sourceRoot":"","sources":["../src/pair-flow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAiC,MAAM,YAAY,CAAC;AAEnF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,uEAAuE;AACvE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA6B;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAmB,CAAC;IAE3C,yEAAyE;IACzE,IAAI,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,wBAAwB,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC;QAClC,KAAK;QACL,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAe;KACjC,CAAC,CAAC;IACH,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE1D,uDAAuD;IACvD,IAAI,aAAa,GAAwC,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QAC7C,aAAa,GAAG,OAAO,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC1B,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;QAC5C,iBAAiB,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,2GAA2G,CAC5G,CAAC;QACF,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,8DAA8D;IAC9D,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QAC9B,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,MAAM;YAAE,OAAO;QACjC,MAAM,GAAG,EAAE,CAAC;QACZ,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,GAAG,CAAC,IAAI,CACN,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChG,MAAM,QAAQ,EAAE,CAAC;IAEjB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAmB,EAAE;QACzC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,kBAAkB,EAAE,CAAC;QACrB,MAAM,WAAW,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAS,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAElC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,aAAa,QAAQ,8CAA8C,CAAC,CAAC;IAE/E,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,yEAAyE;QACzE,kEAAkE;QAClE,sEAAsE;QACtE,kBAAkB,EAAE,CAAC;QACrB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,WAAW,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,kBAAkB,EAAE,CAAC;QACrB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,WAAW,CAAC,OAAe;IACxC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,EAAE,CAAC;IACV,CAAC;IACD,6EAA6E;IAC7E,sEAAsE;IACtE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/permission.d.ts

@@ -0,0 +1,29 @@
+import { type DeferredPermissionResolver, type PendingToolCall, type PermissionDecision } from '@moxxy/sdk';
+/**
+ * Human-in-the-loop permissions over plain WhatsApp messages. Baileys has no
+ * reliable interactive buttons on multi-device, so the prompt is text: the
+ * channel sends a numbered question into the owner's chat and interprets the
+ * owner's NEXT short reply (`1`/`yes` allow once, `2`/`always` allow for the
+ * session, `3`/`no` deny) — the same capture-next-message mechanism Telegram
+ * uses for approval follow-up text.
+ *
+ * Built ON `createDeferredPermissionResolver` (never re-implement the pending
+ * tracking — the audit caught a TUI hang from exactly that): the sdk scaffold
+ * owns session-allows + abort-on-stop; this wrapper only owns the reply
+ * queue + parsing.
+ */
+export interface WhatsAppPermissionController {
+    readonly resolver: DeferredPermissionResolver;
+    /** Wire the outbound sender once the socket is up (null on teardown). */
+    setSender(send: ((text: string) => Promise<void>) | null): void;
+    /** True while a prompt is awaiting the owner's reply. */
+    hasPending(): boolean;
+    /** Offer an owner message as a reply; true when it resolved a prompt. */
+    offerReply(text: string): boolean;
+    /** Deny every in-flight prompt (channel stop / session reset). */
+    abortAll(reason?: string): void;
+}
+export declare function parsePermissionReply(text: string): PermissionDecision | null;
+export declare function formatPermissionPrompt(call: PendingToolCall): string;
+export declare function createWhatsAppPermissionController(): WhatsAppPermissionController;
+//# sourceMappingURL=permission.d.ts.map

package/dist/permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,yEAAyE;IACzE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAChE,yDAAyD;IACzD,UAAU,IAAI,OAAO,CAAC;IACtB,yEAAyE;IACzE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAMD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAY5E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAapE;AAED,wBAAgB,kCAAkC,IAAI,4BAA4B,CAgDjF"}

package/dist/permission.js

@@ -0,0 +1,78 @@
+import { createDeferredPermissionResolver, } from '@moxxy/sdk';
+export function parsePermissionReply(text) {
+    const v = text.trim().toLowerCase();
+    if (v === '1' || v === 'yes' || v === 'y' || v === 'allow') {
+        return { mode: 'allow', reason: 'owner approved via WhatsApp' };
+    }
+    if (v === '2' || v === 'always') {
+        return { mode: 'allow_session', reason: 'owner approved for session via WhatsApp' };
+    }
+    if (v === '3' || v === 'no' || v === 'n' || v === 'deny') {
+        return { mode: 'deny', reason: 'owner denied via WhatsApp' };
+    }
+    return null;
+}
+export function formatPermissionPrompt(call) {
+    let input = '';
+    try {
+        input = JSON.stringify(call.input ?? {});
+    }
+    catch {
+        input = '(unserializable input)';
+    }
+    if (input.length > 400)
+        input = `${input.slice(0, 400)}…`;
+    return (`Permission needed: tool *${call.name}*\n` +
+        `${input}\n\n` +
+        'Reply: 1 = allow once, 2 = allow for session, 3 = deny');
+}
+export function createWhatsAppPermissionController() {
+    // FIFO of prompts awaiting a reply. Tool calls within a turn are sequential,
+    // so this is ~1 deep; the queue is defensive against overlap.
+    const pending = [];
+    let sender = null;
+    const resolver = createDeferredPermissionResolver({
+        name: 'whatsapp',
+        prompt: (call) => new Promise((resolve, reject) => {
+            if (!sender) {
+                resolve({ mode: 'deny', reason: 'whatsapp channel not connected' });
+                return;
+            }
+            pending.push({ resolve });
+            sender(formatPermissionPrompt(call)).catch((err) => {
+                const idx = pending.findIndex((p) => p.resolve === resolve);
+                if (idx >= 0)
+                    pending.splice(idx, 1);
+                reject(err instanceof Error ? err : new Error(String(err)));
+            });
+        }),
+    });
+    return {
+        resolver,
+        setSender(send) {
+            sender = send;
+        },
+        hasPending() {
+            return pending.length > 0;
+        },
+        offerReply(text) {
+            if (pending.length === 0)
+                return false;
+            const decision = parsePermissionReply(text);
+            if (!decision)
+                return false;
+            const prompt = pending.shift();
+            prompt.resolve(decision);
+            return true;
+        },
+        abortAll(reason = 'channel closed') {
+            // Resolve OUR pending prompt promises (deny) so the sdk scaffold's outer
+            // promises settle, then clear the scaffold's own in-flight set too.
+            for (const prompt of pending.splice(0)) {
+                prompt.resolve({ mode: 'deny', reason });
+            }
+            resolver.abortAll(reason);
+        },
+    };
+}
+//# sourceMappingURL=permission.js.map

package/dist/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gCAAgC,GAIjC,MAAM,YAAY,CAAC;AA+BpB,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAqB;IAC1D,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,wBAAwB,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;IAC1D,OAAO,CACL,4BAA4B,IAAI,CAAC,IAAI,KAAK;QAC1C,GAAG,KAAK,MAAM;QACd,wDAAwD,CACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC;IAChD,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,IAAI,MAAM,GAA6C,IAAI,CAAC;IAE5D,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAChD,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1B,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;gBAC5D,IAAI,GAAG,IAAI,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBACrC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;KACL,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,SAAS,CAAC,IAAI;YACZ,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,UAAU;YACR,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,UAAU,CAAC,IAAI;YACb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAG,CAAC;YAChC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,CAAC,MAAM,GAAG,gBAAgB;YAChC,yEAAyE;YACzE,oEAAoE;YACpE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/setup-wizard.d.ts

@@ -0,0 +1,13 @@
+import type { ChannelSubcommandContext } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+/**
+ * Interactive WhatsApp setup menu (the channel's `interactiveCommand`).
+ *
+ * The FIRST step — before any menu — is the consent gate: this channel rides an
+ * UNOFFICIAL WhatsApp client; the wizard states the ToS/ban risk plainly and
+ * requires a typed "yes" before anything else. No acknowledgment, no menu.
+ */
+export declare function runWhatsAppWizard(ctx: ChannelSubcommandContext): Promise<number>;
+/** Clear the rotating auth-state dir + the persisted owner identity. */
+export declare function unpairLocal(vault: VaultStore): Promise<boolean>;
+//# sourceMappingURL=setup-wizard.d.ts.map

package/dist/setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAwBtD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyCtF;AAED,wEAAwE;AACxE,wBAAsB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAMrE"}

package/dist/setup-wizard.js

@@ -0,0 +1,127 @@
+import { cancel, intro, isCancel, log, note, outro, select, text } from '@clack/prompts';
+import { moxxyPath } from '@moxxy/sdk/server';
+import { createFileAuthStorage, hasStoredCreds } from './auth-state.js';
+import { ensureConsentInteractive } from './consent-prompt.js';
+import { WHATSAPP_ALLOWED_JIDS_KEY, WHATSAPP_AUTH_DIR, WHATSAPP_OWNER_JID_KEY, parseAllowedJids, } from './keys.js';
+import { runWhatsAppPairFlow } from './pair-flow.js';
+// Tiny zero-dep ANSI helpers so the wizard stays inside the plugin.
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const bold = (s) => (ANSI ? `\x1b[1m${s}\x1b[22m` : s);
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/**
+ * Interactive WhatsApp setup menu (the channel's `interactiveCommand`).
+ *
+ * The FIRST step — before any menu — is the consent gate: this channel rides an
+ * UNOFFICIAL WhatsApp client; the wizard states the ToS/ban risk plainly and
+ * requires a typed "yes" before anything else. No acknowledgment, no menu.
+ */
+export async function runWhatsAppWizard(ctx) {
+    const vault = ctx.deps.vault;
+    intro(bold('moxxy whatsapp setup'));
+    if (!(await ensureConsentInteractive(vault))) {
+        cancel('cancelled.');
+        return 1;
+    }
+    while (true) {
+        const state = await readState(vault);
+        printStatus(state);
+        const action = await pickAction(state);
+        if (action === null) {
+            cancel('cancelled.');
+            return 0;
+        }
+        if (action === 'quit') {
+            outro(dim('done.'));
+            return 0;
+        }
+        if (action === 'pair') {
+            return await runWhatsAppPairFlow(ctx);
+        }
+        if (action === 'unpair') {
+            await unpairLocal(vault);
+            log.success('Local credentials cleared. Also remove the device on your phone: WhatsApp -> Settings -> Linked devices.');
+            continue;
+        }
+        if (action === 'allow-list') {
+            await editAllowList(vault, state.allowedJids);
+            continue;
+        }
+        if (action === 'start') {
+            log.info('Starting the channel. Press Ctrl+C to stop.');
+            outro(dim('handing off to the channel...'));
+            return ctx.startChannel();
+        }
+    }
+}
+/** Clear the rotating auth-state dir + the persisted owner identity. */
+export async function unpairLocal(vault) {
+    const storage = createFileAuthStorage(moxxyPath(WHATSAPP_AUTH_DIR));
+    const had = await hasStoredCreds(storage);
+    await storage.clear();
+    await vault.delete(WHATSAPP_OWNER_JID_KEY).catch(() => undefined);
+    return had;
+}
+async function readState(vault) {
+    const storage = createFileAuthStorage(moxxyPath(WHATSAPP_AUTH_DIR));
+    return {
+        linked: await hasStoredCreds(storage),
+        ownerJid: await vault.get(WHATSAPP_OWNER_JID_KEY),
+        allowedJids: parseAllowedJids(await vault.get(WHATSAPP_ALLOWED_JIDS_KEY)),
+    };
+}
+function printStatus(state) {
+    const lines = [];
+    lines.push(`Linked       ${state.linked ? bold(state.ownerJid ?? 'yes') : dim('no')}`);
+    lines.push(`Allow-list   ${state.allowedJids.length > 0
+        ? bold(state.allowedJids.join(', '))
+        : dim('only your own Note-to-Self chat')}`);
+    note(lines.join('\n'), 'status');
+}
+async function pickAction(state) {
+    const options = [];
+    if (state.linked) {
+        options.push({
+            value: 'start',
+            label: 'Start the channel',
+            hint: 'runs forever - Ctrl+C to stop',
+        });
+        options.push({
+            value: 'unpair',
+            label: 'Unpair (forget local credentials)',
+            hint: 'also remove the device under Linked devices on the phone',
+        });
+    }
+    else {
+        options.push({
+            value: 'pair',
+            label: 'Link a WhatsApp account (scan QR)',
+            hint: 'WhatsApp -> Settings -> Linked devices -> Link a device',
+        });
+    }
+    options.push({
+        value: 'allow-list',
+        label: 'Edit the JID allow-list',
+        hint: 'who besides your own Note-to-Self chat may talk to the agent',
+    });
+    options.push({ value: 'quit', label: 'Quit' });
+    const choice = await select({ message: 'What do you want to do?', options });
+    if (isCancel(choice))
+        return null;
+    return choice;
+}
+async function editAllowList(vault, current) {
+    note('Comma-separated JIDs, e.g. 15551234567@s.whatsapp.net (a group JID ends in\n' +
+        '@g.us — allow-listing a group trusts EVERYONE in it). Empty input clears the\n' +
+        'list; your own Note-to-Self chat is always allowed.', 'allow-list');
+    const answer = await text({
+        message: 'Allowed JIDs',
+        initialValue: current.join(', '),
+        placeholder: '15551234567@s.whatsapp.net',
+    });
+    if (isCancel(answer))
+        return;
+    const parsed = parseAllowedJids(String(answer));
+    await vault.set(WHATSAPP_ALLOWED_JIDS_KEY, JSON.stringify(parsed), ['whatsapp']);
+    log.success(parsed.length > 0 ? `Allow-list saved (${parsed.length} JIDs).` : 'Allow-list cleared.');
+}
+//# sourceMappingURL=setup-wizard.js.map

package/dist/setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEzF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,oEAAoE;AACpE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAUtE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAA6B;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAmB,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAEpC,IAAI,CAAC,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,YAAY,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,CAAC,YAAY,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACpB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACzB,GAAG,CAAC,OAAO,CACT,0GAA0G,CAC3G,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YACxD,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAiB;IACjD,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,MAAM,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAiB;IACxC,MAAM,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACpE,OAAO;QACL,MAAM,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC;QACrC,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACjD,WAAW,EAAE,gBAAgB,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CACR,gBACE,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,iCAAiC,CAC3C,EAAE,CACH,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAY;IACpC,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,+BAA+B;SACtC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,mCAAmC;YAC1C,IAAI,EAAE,0DAA0D;SACjE,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,mCAAmC;YAC1C,IAAI,EAAE,yDAAyD;SAChE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,IAAI,CAAC;QACX,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,yBAAyB;QAChC,IAAI,EAAE,8DAA8D;KACrE,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,MAAgB,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,KAAiB,EACjB,OAA8B;IAE9B,IAAI,CACF,8EAA8E;QAC5E,gFAAgF;QAChF,qDAAqD,EACvD,YAAY,CACb,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;QACxB,OAAO,EAAE,cAAc;QACvB,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAChC,WAAW,EAAE,4BAA4B;KAC1C,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO;IAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACjF,GAAG,CAAC,OAAO,CACT,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,qBAAqB,CACxF,CAAC;AACJ,CAAC"}

package/dist/socket.d.ts

@@ -0,0 +1,72 @@
+import type { WhatsAppAuthStorage } from './auth-state.js';
+/**
+ * The narrow transport contract the channel is written against — the slice of a
+ * Baileys socket it actually touches, adapted in `baileys-socket.ts`. Tests
+ * inject a fake implementing THIS, so no test ever opens a WhatsApp connection
+ * (and the heavyweight Baileys import stays out of unit tests entirely).
+ */
+export interface WaMessageKey {
+    readonly remoteJid?: string | null;
+    readonly fromMe?: boolean | null;
+    readonly id?: string | null;
+    readonly participant?: string | null;
+}
+/** The consumed subset of a Baileys `WAMessage` (validated in message-gate). */
+export interface WaInboundMessage {
+    readonly key?: WaMessageKey | null;
+    readonly message?: Record<string, unknown> | null;
+}
+export interface WaMessagesUpsert {
+    /** 'notify' = fresh inbound; 'append'/'history' = sync artifacts (dropped). */
+    readonly type: string;
+    readonly messages: ReadonlyArray<WaInboundMessage>;
+}
+export interface WaConnectionUpdate {
+    readonly connection?: 'close' | 'connecting' | 'open' | undefined;
+    /** Fresh QR pairing payload — rotates every ~20-60s while unlinked. */
+    readonly qr?: string | undefined;
+    readonly lastDisconnect?: {
+        readonly error?: unknown;
+    } | undefined;
+}
+export interface WaSentMessage {
+    readonly key: WaMessageKey;
+}
+export interface WhatsAppSocket {
+    /** The linked account's raw JID once the connection is open; null before. */
+    userJid(): string | null;
+    onConnectionUpdate(cb: (update: WaConnectionUpdate) => void): void;
+    onMessages(cb: (upsert: WaMessagesUpsert) => void): void;
+    sendText(jid: string, text: string): Promise<WaSentMessage | null>;
+    /** Edit a previously sent message in place (WhatsApp MESSAGE_EDIT). */
+    editText(jid: string, key: WaMessageKey, text: string): Promise<void>;
+    /** Download a media message's bytes (voice notes). */
+    downloadMedia(message: WaInboundMessage): Promise<Uint8Array>;
+    /** Tear the connection down WITHOUT logging out (creds stay valid). */
+    end(): void;
+}
+export interface WhatsAppSocketLogger {
+    debug?(msg: string, meta?: Record<string, unknown>): void;
+    info?(msg: string, meta?: Record<string, unknown>): void;
+    warn?(msg: string, meta?: Record<string, unknown>): void;
+}
+export interface WhatsAppSocketFactoryOptions {
+    readonly storage: WhatsAppAuthStorage;
+    readonly logger?: WhatsAppSocketLogger;
+}
+/** Opens one connection attempt; the channel owns the reconnect loop. */
+export type WhatsAppSocketFactory = (opts: WhatsAppSocketFactoryOptions) => Promise<WhatsAppSocket>;
+/**
+ * Extract the WhatsApp disconnect status code from a close error (Baileys
+ * throws Boom errors: `err.output.statusCode`). Pure so the reconnect policy is
+ * unit-testable. Returns null when no code can be found (treated as retriable).
+ */
+export declare function disconnectStatusCode(err: unknown): number | null;
+/** WhatsApp disconnect reasons the channel branches on (Baileys' DisconnectReason). */
+export declare const WA_DISCONNECT: {
+    readonly loggedOut: 401;
+    readonly forbidden: 403;
+    readonly connectionReplaced: 440;
+    readonly restartRequired: 515;
+};
+//# sourceMappingURL=socket.d.ts.map