@spacebar_ai/moldclaw-core 2026.3.14 → 2026.3.16

package/dist/irc-DpR6FXjN.js

@@ -0,0 +1,672 @@
+import { t as formatDocsLink } from "./links-C5I443Xb.js";
+import { Ag as setTopLevelChannelDmPolicyWithAllowFrom, Cg as resolveSetupAccountId, HC as createAccountListHelpers, Og as setSetupChannelEnabled, Tw as applyAccountNameToChannelSection, jT as parseOptionalDelimitedEntries, jw as patchScopedAccountConfig, kg as setTopLevelChannelAllowFrom } from "./auth-profiles-9zZdaXJK.js";
+import { n as normalizeAccountId, t as DEFAULT_ACCOUNT_ID } from "./account-id-O4Og6DrK.js";
+import { c as normalizeResolvedSecretInputString } from "./types.secrets-Bojc4omL.js";
+import { i as tryReadSecretFileSync } from "./secret-file-Bjh19aoH.js";
+//#region extensions/irc/src/accounts.ts
+const TRUTHY_ENV = new Set([
+	"true",
+	"1",
+	"yes",
+	"on"
+]);
+function parseTruthy(value) {
+	if (!value) return false;
+	return TRUTHY_ENV.has(value.trim().toLowerCase());
+}
+function parseIntEnv(value) {
+	if (!value?.trim()) return;
+	const parsed = Number.parseInt(value.trim(), 10);
+	if (!Number.isFinite(parsed) || parsed <= 0 || parsed > 65535) return;
+	return parsed;
+}
+const { listAccountIds: listIrcAccountIds, resolveDefaultAccountId: resolveDefaultIrcAccountId } = createAccountListHelpers("irc", { normalizeAccountId });
+function resolveAccountConfig(cfg, accountId) {
+	const accounts = cfg.channels?.irc?.accounts;
+	if (!accounts || typeof accounts !== "object") return;
+	const direct = accounts[accountId];
+	if (direct) return direct;
+	const normalized = normalizeAccountId(accountId);
+	const matchKey = Object.keys(accounts).find((key) => normalizeAccountId(key) === normalized);
+	return matchKey ? accounts[matchKey] : void 0;
+}
+function mergeIrcAccountConfig(cfg, accountId) {
+	const { accounts: _ignored, defaultAccount: _ignoredDefaultAccount, ...base } = cfg.channels?.irc ?? {};
+	const account = resolveAccountConfig(cfg, accountId) ?? {};
+	const merged = {
+		...base,
+		...account
+	};
+	if (base.nickserv || account.nickserv) merged.nickserv = {
+		...base.nickserv,
+		...account.nickserv
+	};
+	return merged;
+}
+function resolvePassword(accountId, merged) {
+	if (accountId === "default") {
+		const envPassword = process.env.IRC_PASSWORD?.trim();
+		if (envPassword) return {
+			password: envPassword,
+			source: "env"
+		};
+	}
+	if (merged.passwordFile?.trim()) {
+		const filePassword = tryReadSecretFileSync(merged.passwordFile, "IRC password file", { rejectSymlink: true });
+		if (filePassword) return {
+			password: filePassword,
+			source: "passwordFile"
+		};
+	}
+	const configPassword = normalizeResolvedSecretInputString({
+		value: merged.password,
+		path: `channels.irc.accounts.${accountId}.password`
+	});
+	if (configPassword) return {
+		password: configPassword,
+		source: "config"
+	};
+	return {
+		password: "",
+		source: "none"
+	};
+}
+function resolveNickServConfig(accountId, nickserv) {
+	const base = nickserv ?? {};
+	const envPassword = accountId === "default" ? process.env.IRC_NICKSERV_PASSWORD?.trim() : void 0;
+	const envRegisterEmail = accountId === "default" ? process.env.IRC_NICKSERV_REGISTER_EMAIL?.trim() : void 0;
+	const passwordFile = base.passwordFile?.trim();
+	let resolvedPassword = normalizeResolvedSecretInputString({
+		value: base.password,
+		path: `channels.irc.accounts.${accountId}.nickserv.password`
+	}) || envPassword || "";
+	if (!resolvedPassword && passwordFile) resolvedPassword = tryReadSecretFileSync(passwordFile, "IRC NickServ password file", { rejectSymlink: true }) ?? "";
+	return {
+		...base,
+		service: base.service?.trim() || void 0,
+		passwordFile: passwordFile || void 0,
+		password: resolvedPassword || void 0,
+		registerEmail: base.registerEmail?.trim() || envRegisterEmail || void 0
+	};
+}
+function resolveIrcAccount(params) {
+	const hasExplicitAccountId = Boolean(params.accountId?.trim());
+	const baseEnabled = params.cfg.channels?.irc?.enabled !== false;
+	const resolve = (accountId) => {
+		const merged = mergeIrcAccountConfig(params.cfg, accountId);
+		const accountEnabled = merged.enabled !== false;
+		const enabled = baseEnabled && accountEnabled;
+		const tls = typeof merged.tls === "boolean" ? merged.tls : accountId === "default" && process.env.IRC_TLS ? parseTruthy(process.env.IRC_TLS) : true;
+		const envPort = accountId === "default" ? parseIntEnv(process.env.IRC_PORT) : void 0;
+		const port = merged.port ?? envPort ?? (tls ? 6697 : 6667);
+		const envChannels = accountId === "default" ? parseOptionalDelimitedEntries(process.env.IRC_CHANNELS) : void 0;
+		const host = (merged.host?.trim() || (accountId === "default" ? process.env.IRC_HOST?.trim() : "") || "").trim();
+		const nick = (merged.nick?.trim() || (accountId === "default" ? process.env.IRC_NICK?.trim() : "") || "").trim();
+		const username = (merged.username?.trim() || (accountId === "default" ? process.env.IRC_USERNAME?.trim() : "") || nick || "moldclaw").trim();
+		const realname = (merged.realname?.trim() || (accountId === "default" ? process.env.IRC_REALNAME?.trim() : "") || "MoldClaw").trim();
+		const passwordResolution = resolvePassword(accountId, merged);
+		const nickserv = resolveNickServConfig(accountId, merged.nickserv);
+		const config = {
+			...merged,
+			channels: merged.channels ?? envChannels,
+			tls,
+			port,
+			host,
+			nick,
+			username,
+			realname,
+			nickserv
+		};
+		return {
+			accountId,
+			enabled,
+			name: merged.name?.trim() || void 0,
+			configured: Boolean(host && nick),
+			host,
+			port,
+			tls,
+			nick,
+			username,
+			realname,
+			password: passwordResolution.password,
+			passwordSource: passwordResolution.source,
+			config
+		};
+	};
+	const primary = resolve(normalizeAccountId(params.accountId));
+	if (hasExplicitAccountId) return primary;
+	if (primary.configured) return primary;
+	const fallbackId = resolveDefaultIrcAccountId(params.cfg);
+	if (fallbackId === primary.accountId) return primary;
+	const fallback = resolve(fallbackId);
+	if (!fallback.configured) return primary;
+	return fallback;
+}
+//#endregion
+//#region extensions/irc/src/control-chars.ts
+function isIrcControlChar(charCode) {
+	return charCode <= 31 || charCode === 127;
+}
+function hasIrcControlChars(value) {
+	for (const char of value) if (isIrcControlChar(char.charCodeAt(0))) return true;
+	return false;
+}
+function stripIrcControlChars(value) {
+	let out = "";
+	for (const char of value) if (!isIrcControlChar(char.charCodeAt(0))) out += char;
+	return out;
+}
+//#endregion
+//#region extensions/irc/src/normalize.ts
+const IRC_TARGET_PATTERN = /^[^\s:]+$/u;
+function isChannelTarget(target) {
+	return target.startsWith("#") || target.startsWith("&");
+}
+function normalizeIrcMessagingTarget(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return;
+	let target = trimmed;
+	if (target.toLowerCase().startsWith("irc:")) target = target.slice(4).trim();
+	if (target.toLowerCase().startsWith("channel:")) {
+		target = target.slice(8).trim();
+		if (!target.startsWith("#") && !target.startsWith("&")) target = `#${target}`;
+	}
+	if (target.toLowerCase().startsWith("user:")) target = target.slice(5).trim();
+	if (!target || !looksLikeIrcTargetId(target)) return;
+	return target;
+}
+function looksLikeIrcTargetId(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return false;
+	if (hasIrcControlChars(trimmed)) return false;
+	return IRC_TARGET_PATTERN.test(trimmed);
+}
+function normalizeIrcAllowEntry(raw) {
+	let value = raw.trim().toLowerCase();
+	if (!value) return "";
+	if (value.startsWith("irc:")) value = value.slice(4);
+	if (value.startsWith("user:")) value = value.slice(5);
+	return value.trim();
+}
+function normalizeIrcAllowlist(entries) {
+	return (entries ?? []).map((entry) => normalizeIrcAllowEntry(String(entry))).filter(Boolean);
+}
+function buildIrcAllowlistCandidates(message, params) {
+	const nick = message.senderNick.trim().toLowerCase();
+	const user = message.senderUser?.trim().toLowerCase();
+	const host = message.senderHost?.trim().toLowerCase();
+	const candidates = /* @__PURE__ */ new Set();
+	if (nick && params?.allowNameMatching === true) candidates.add(nick);
+	if (nick && user) candidates.add(`${nick}!${user}`);
+	if (nick && host) candidates.add(`${nick}@${host}`);
+	if (nick && user && host) candidates.add(`${nick}!${user}@${host}`);
+	return [...candidates];
+}
+function resolveIrcAllowlistMatch(params) {
+	const allowFrom = new Set(params.allowFrom.map((entry) => entry.trim().toLowerCase()).filter(Boolean));
+	if (allowFrom.has("*")) return {
+		allowed: true,
+		source: "wildcard"
+	};
+	const candidates = buildIrcAllowlistCandidates(params.message, { allowNameMatching: params.allowNameMatching });
+	for (const candidate of candidates) if (allowFrom.has(candidate)) return {
+		allowed: true,
+		source: candidate
+	};
+	return { allowed: false };
+}
+//#endregion
+//#region extensions/irc/src/setup-core.ts
+const channel$1 = "irc";
+function parsePort(raw, fallback) {
+	const trimmed = raw.trim();
+	if (!trimmed) return fallback;
+	const parsed = Number.parseInt(trimmed, 10);
+	if (!Number.isFinite(parsed) || parsed < 1 || parsed > 65535) return fallback;
+	return parsed;
+}
+function updateIrcAccountConfig(cfg, accountId, patch) {
+	return patchScopedAccountConfig({
+		cfg,
+		channelKey: channel$1,
+		accountId,
+		patch,
+		ensureChannelEnabled: false,
+		ensureAccountEnabled: false
+	});
+}
+function setIrcDmPolicy(cfg, dmPolicy) {
+	return setTopLevelChannelDmPolicyWithAllowFrom({
+		cfg,
+		channel: channel$1,
+		dmPolicy
+	});
+}
+function setIrcAllowFrom(cfg, allowFrom) {
+	return setTopLevelChannelAllowFrom({
+		cfg,
+		channel: channel$1,
+		allowFrom
+	});
+}
+function setIrcNickServ(cfg, accountId, nickserv) {
+	return updateIrcAccountConfig(cfg, accountId, { nickserv });
+}
+function setIrcGroupAccess(cfg, accountId, policy, entries, normalizeGroupEntry) {
+	if (policy !== "allowlist") return updateIrcAccountConfig(cfg, accountId, {
+		enabled: true,
+		groupPolicy: policy
+	});
+	const normalizedEntries = [...new Set(entries.map((entry) => normalizeGroupEntry(entry)).filter(Boolean))];
+	return updateIrcAccountConfig(cfg, accountId, {
+		enabled: true,
+		groupPolicy: "allowlist",
+		groups: Object.fromEntries(normalizedEntries.map((entry) => [entry, {}]))
+	});
+}
+const ircSetupAdapter = {
+	resolveAccountId: ({ accountId }) => normalizeAccountId(accountId),
+	applyAccountName: ({ cfg, accountId, name }) => applyAccountNameToChannelSection({
+		cfg,
+		channelKey: channel$1,
+		accountId,
+		name
+	}),
+	validateInput: ({ input }) => {
+		const setupInput = input;
+		if (!setupInput.host?.trim()) return "IRC requires host.";
+		if (!setupInput.nick?.trim()) return "IRC requires nick.";
+		return null;
+	},
+	applyAccountConfig: ({ cfg, accountId, input }) => {
+		const setupInput = input;
+		const namedConfig = applyAccountNameToChannelSection({
+			cfg,
+			channelKey: channel$1,
+			accountId,
+			name: setupInput.name
+		});
+		const portInput = typeof setupInput.port === "number" ? String(setupInput.port) : String(setupInput.port ?? "");
+		return patchScopedAccountConfig({
+			cfg: namedConfig,
+			channelKey: channel$1,
+			accountId,
+			patch: {
+				enabled: true,
+				host: setupInput.host?.trim(),
+				port: portInput ? parsePort(portInput, setupInput.tls === false ? 6667 : 6697) : void 0,
+				tls: setupInput.tls,
+				nick: setupInput.nick?.trim(),
+				username: setupInput.username?.trim(),
+				realname: setupInput.realname?.trim(),
+				password: setupInput.password?.trim(),
+				channels: setupInput.channels
+			}
+		});
+	}
+};
+//#endregion
+//#region extensions/irc/src/setup-surface.ts
+const channel = "irc";
+const USE_ENV_FLAG = "__ircUseEnv";
+const TLS_FLAG = "__ircTls";
+function parseListInput(raw) {
+	return raw.split(/[\n,;]+/g).map((entry) => entry.trim()).filter(Boolean);
+}
+function normalizeGroupEntry(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) return null;
+	if (trimmed === "*") return "*";
+	const normalized = normalizeIrcMessagingTarget(trimmed) ?? trimmed;
+	if (isChannelTarget(normalized)) return normalized;
+	return `#${normalized.replace(/^#+/, "")}`;
+}
+async function promptIrcAllowFrom(params) {
+	const existing = params.cfg.channels?.irc?.allowFrom ?? [];
+	await params.prompter.note([
+		"Allowlist IRC DMs by sender.",
+		"Examples:",
+		"- alice",
+		"- alice!ident@example.org",
+		"Multiple entries: comma-separated."
+	].join("\n"), "IRC allowlist");
+	const raw = await params.prompter.text({
+		message: "IRC allowFrom (nick or nick!user@host)",
+		placeholder: "alice, bob!ident@example.org",
+		initialValue: existing[0] ? String(existing[0]) : void 0,
+		validate: (value) => String(value ?? "").trim() ? void 0 : "Required"
+	});
+	const parsed = parseListInput(String(raw));
+	const normalized = [...new Set(parsed.map((entry) => normalizeIrcAllowEntry(entry)).map((entry) => entry.trim()).filter(Boolean))];
+	return setIrcAllowFrom(params.cfg, normalized);
+}
+async function promptIrcNickServConfig(params) {
+	const existing = resolveIrcAccount({
+		cfg: params.cfg,
+		accountId: params.accountId
+	}).config.nickserv;
+	const hasExisting = Boolean(existing?.password || existing?.passwordFile);
+	if (!await params.prompter.confirm({
+		message: hasExisting ? "Update NickServ settings?" : "Configure NickServ identify/register?",
+		initialValue: hasExisting
+	})) return params.cfg;
+	const service = String(await params.prompter.text({
+		message: "NickServ service nick",
+		initialValue: existing?.service || "NickServ",
+		validate: (value) => String(value ?? "").trim() ? void 0 : "Required"
+	})).trim();
+	const useEnvPassword = params.accountId === "default" && Boolean(process.env.IRC_NICKSERV_PASSWORD?.trim()) && !(existing?.password || existing?.passwordFile) ? await params.prompter.confirm({
+		message: "IRC_NICKSERV_PASSWORD detected. Use env var?",
+		initialValue: true
+	}) : false;
+	const password = useEnvPassword ? void 0 : String(await params.prompter.text({
+		message: "NickServ password (blank to disable NickServ auth)",
+		validate: () => void 0
+	})).trim();
+	if (!password && !useEnvPassword) return setIrcNickServ(params.cfg, params.accountId, {
+		enabled: false,
+		service
+	});
+	const register = await params.prompter.confirm({
+		message: "Send NickServ REGISTER on connect?",
+		initialValue: existing?.register ?? false
+	});
+	const registerEmail = register ? String(await params.prompter.text({
+		message: "NickServ register email",
+		initialValue: existing?.registerEmail || (params.accountId === "default" ? process.env.IRC_NICKSERV_REGISTER_EMAIL : void 0),
+		validate: (value) => String(value ?? "").trim() ? void 0 : "Required"
+	})).trim() : void 0;
+	return setIrcNickServ(params.cfg, params.accountId, {
+		enabled: true,
+		service,
+		...password ? { password } : {},
+		register,
+		...registerEmail ? { registerEmail } : {}
+	});
+}
+const ircDmPolicy = {
+	label: "IRC",
+	channel,
+	policyKey: "channels.irc.dmPolicy",
+	allowFromKey: "channels.irc.allowFrom",
+	getCurrent: (cfg) => cfg.channels?.irc?.dmPolicy ?? "pairing",
+	setPolicy: (cfg, policy) => setIrcDmPolicy(cfg, policy),
+	promptAllowFrom: async ({ cfg, prompter, accountId }) => await promptIrcAllowFrom({
+		cfg,
+		prompter,
+		accountId: resolveSetupAccountId({
+			accountId,
+			defaultAccountId: resolveDefaultIrcAccountId(cfg)
+		})
+	})
+};
+const ircSetupWizard = {
+	channel,
+	status: {
+		configuredLabel: "configured",
+		unconfiguredLabel: "needs host + nick",
+		configuredHint: "configured",
+		unconfiguredHint: "needs host + nick",
+		configuredScore: 1,
+		unconfiguredScore: 0,
+		resolveConfigured: ({ cfg }) => listIrcAccountIds(cfg).some((accountId) => resolveIrcAccount({
+			cfg,
+			accountId
+		}).configured),
+		resolveStatusLines: ({ configured }) => [`IRC: ${configured ? "configured" : "needs host + nick"}`]
+	},
+	introNote: {
+		title: "IRC setup",
+		lines: [
+			"IRC needs server host + bot nick.",
+			"Recommended: TLS on port 6697.",
+			"Optional: NickServ identify/register can be configured after the basic account fields.",
+			"Set channels.irc.groupPolicy=\"allowlist\" and channels.irc.groups for tighter channel control.",
+			"Note: IRC channels are mention-gated by default. To allow unmentioned replies, set channels.irc.groups[\"#channel\"].requireMention=false (or \"*\" for all).",
+			"Env vars supported: IRC_HOST, IRC_PORT, IRC_TLS, IRC_NICK, IRC_USERNAME, IRC_REALNAME, IRC_PASSWORD, IRC_CHANNELS, IRC_NICKSERV_PASSWORD, IRC_NICKSERV_REGISTER_EMAIL.",
+			`Docs: ${formatDocsLink("/channels/irc", "channels/irc")}`
+		],
+		shouldShow: ({ cfg, accountId }) => !resolveIrcAccount({
+			cfg,
+			accountId
+		}).configured
+	},
+	prepare: async ({ cfg, accountId, credentialValues, prompter }) => {
+		const resolved = resolveIrcAccount({
+			cfg,
+			accountId
+		});
+		const isDefaultAccount = accountId === DEFAULT_ACCOUNT_ID;
+		const envHost = isDefaultAccount ? process.env.IRC_HOST?.trim() : "";
+		const envNick = isDefaultAccount ? process.env.IRC_NICK?.trim() : "";
+		if (Boolean(envHost && envNick && !resolved.config.host && !resolved.config.nick)) {
+			if (await prompter.confirm({
+				message: "IRC_HOST and IRC_NICK detected. Use env vars?",
+				initialValue: true
+			})) return {
+				cfg: updateIrcAccountConfig(cfg, accountId, { enabled: true }),
+				credentialValues: {
+					...credentialValues,
+					[USE_ENV_FLAG]: "1"
+				}
+			};
+		}
+		const tls = await prompter.confirm({
+			message: "Use TLS for IRC?",
+			initialValue: resolved.config.tls ?? true
+		});
+		return {
+			cfg: updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				tls
+			}),
+			credentialValues: {
+				...credentialValues,
+				[USE_ENV_FLAG]: "0",
+				[TLS_FLAG]: tls ? "1" : "0"
+			}
+		};
+	},
+	credentials: [],
+	textInputs: [
+		{
+			inputKey: "httpHost",
+			message: "IRC server host",
+			currentValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.host || void 0,
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			validate: ({ value }) => String(value ?? "").trim() ? void 0 : "Required",
+			normalizeValue: ({ value }) => String(value).trim(),
+			applySet: async ({ cfg, accountId, value }) => updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				host: value
+			})
+		},
+		{
+			inputKey: "httpPort",
+			message: "IRC server port",
+			currentValue: ({ cfg, accountId }) => String(resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.port ?? ""),
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			initialValue: ({ cfg, accountId, credentialValues }) => {
+				const resolved = resolveIrcAccount({
+					cfg,
+					accountId
+				});
+				const tls = credentialValues[TLS_FLAG] === "0" ? false : true;
+				const defaultPort = resolved.config.port ?? (tls ? 6697 : 6667);
+				return String(defaultPort);
+			},
+			validate: ({ value }) => {
+				const parsed = Number.parseInt(String(value ?? "").trim(), 10);
+				return Number.isFinite(parsed) && parsed >= 1 && parsed <= 65535 ? void 0 : "Use a port between 1 and 65535";
+			},
+			normalizeValue: ({ value }) => String(parsePort(String(value), 6697)),
+			applySet: async ({ cfg, accountId, value }) => updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				port: parsePort(String(value), 6697)
+			})
+		},
+		{
+			inputKey: "token",
+			message: "IRC nick",
+			currentValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.nick || void 0,
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			validate: ({ value }) => String(value ?? "").trim() ? void 0 : "Required",
+			normalizeValue: ({ value }) => String(value).trim(),
+			applySet: async ({ cfg, accountId, value }) => updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				nick: value
+			})
+		},
+		{
+			inputKey: "userId",
+			message: "IRC username",
+			currentValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.username || void 0,
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			initialValue: ({ cfg, accountId, credentialValues }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.username || credentialValues.token || "moldclaw",
+			validate: ({ value }) => String(value ?? "").trim() ? void 0 : "Required",
+			normalizeValue: ({ value }) => String(value).trim(),
+			applySet: async ({ cfg, accountId, value }) => updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				username: value
+			})
+		},
+		{
+			inputKey: "deviceName",
+			message: "IRC real name",
+			currentValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.realname || void 0,
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			initialValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.realname || "MoldClaw",
+			validate: ({ value }) => String(value ?? "").trim() ? void 0 : "Required",
+			normalizeValue: ({ value }) => String(value).trim(),
+			applySet: async ({ cfg, accountId, value }) => updateIrcAccountConfig(cfg, accountId, {
+				enabled: true,
+				realname: value
+			})
+		},
+		{
+			inputKey: "groupChannels",
+			message: "Auto-join IRC channels (optional, comma-separated)",
+			placeholder: "#moldclaw, #ops",
+			required: false,
+			applyEmptyValue: true,
+			currentValue: ({ cfg, accountId }) => resolveIrcAccount({
+				cfg,
+				accountId
+			}).config.channels?.join(", "),
+			shouldPrompt: ({ credentialValues }) => credentialValues[USE_ENV_FLAG] !== "1",
+			normalizeValue: ({ value }) => parseListInput(String(value)).map((entry) => normalizeGroupEntry(entry)).filter((entry) => Boolean(entry && entry !== "*")).filter((entry) => isChannelTarget(entry)).join(", "),
+			applySet: async ({ cfg, accountId, value }) => {
+				const channels = parseListInput(String(value)).map((entry) => normalizeGroupEntry(entry)).filter((entry) => Boolean(entry && entry !== "*")).filter((entry) => isChannelTarget(entry));
+				return updateIrcAccountConfig(cfg, accountId, {
+					enabled: true,
+					channels: channels.length > 0 ? channels : void 0
+				});
+			}
+		}
+	],
+	groupAccess: {
+		label: "IRC channels",
+		placeholder: "#moldclaw, #ops, *",
+		currentPolicy: ({ cfg, accountId }) => resolveIrcAccount({
+			cfg,
+			accountId
+		}).config.groupPolicy ?? "allowlist",
+		currentEntries: ({ cfg, accountId }) => Object.keys(resolveIrcAccount({
+			cfg,
+			accountId
+		}).config.groups ?? {}),
+		updatePrompt: ({ cfg, accountId }) => Boolean(resolveIrcAccount({
+			cfg,
+			accountId
+		}).config.groups),
+		setPolicy: ({ cfg, accountId, policy }) => setIrcGroupAccess(cfg, accountId, policy, [], normalizeGroupEntry),
+		resolveAllowlist: async ({ entries }) => [...new Set(entries.map((entry) => normalizeGroupEntry(entry)).filter(Boolean))],
+		applyAllowlist: ({ cfg, accountId, resolved }) => setIrcGroupAccess(cfg, accountId, "allowlist", resolved, normalizeGroupEntry)
+	},
+	allowFrom: {
+		helpTitle: "IRC allowlist",
+		helpLines: [
+			"Allowlist IRC DMs by sender.",
+			"Examples:",
+			"- alice",
+			"- alice!ident@example.org",
+			"Multiple entries: comma-separated."
+		],
+		message: "IRC allowFrom (nick or nick!user@host)",
+		placeholder: "alice, bob!ident@example.org",
+		invalidWithoutCredentialNote: "Use an IRC nick or nick!user@host entry.",
+		parseId: (raw) => {
+			return normalizeIrcAllowEntry(raw) || null;
+		},
+		resolveEntries: async ({ entries }) => entries.map((entry) => {
+			const normalized = normalizeIrcAllowEntry(entry);
+			return {
+				input: entry,
+				resolved: Boolean(normalized),
+				id: normalized || null
+			};
+		}),
+		apply: async ({ cfg, allowFrom }) => setIrcAllowFrom(cfg, allowFrom)
+	},
+	finalize: async ({ cfg, accountId, prompter }) => {
+		let next = cfg;
+		const resolvedAfterGroups = resolveIrcAccount({
+			cfg: next,
+			accountId
+		});
+		if (resolvedAfterGroups.config.groupPolicy === "allowlist") {
+			if (Object.keys(resolvedAfterGroups.config.groups ?? {}).length > 0) {
+				if (!await prompter.confirm({
+					message: "Require @mention to reply in IRC channels?",
+					initialValue: true
+				})) {
+					const groups = resolvedAfterGroups.config.groups ?? {};
+					const patched = Object.fromEntries(Object.entries(groups).map(([key, value]) => [key, {
+						...value,
+						requireMention: false
+					}]));
+					next = updateIrcAccountConfig(next, accountId, { groups: patched });
+				}
+			}
+		}
+		next = await promptIrcNickServConfig({
+			cfg: next,
+			prompter,
+			accountId
+		});
+		return { cfg: next };
+	},
+	completionNote: {
+		title: "IRC next steps",
+		lines: [
+			"Next: restart gateway and verify status.",
+			"Command: moldclaw channels status --probe",
+			`Docs: ${formatDocsLink("/channels/irc", "channels/irc")}`
+		]
+	},
+	dmPolicy: ircDmPolicy,
+	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
+};
+//#endregion
+export { normalizeIrcAllowEntry as a, resolveIrcAllowlistMatch as c, listIrcAccountIds as d, resolveDefaultIrcAccountId as f, looksLikeIrcTargetId as i, hasIrcControlChars as l, ircSetupAdapter as n, normalizeIrcAllowlist as o, resolveIrcAccount as p, isChannelTarget as r, normalizeIrcMessagingTarget as s, ircSetupWizard as t, stripIrcControlChars as u };

package/dist/json-store-Sr_kk-II.d.ts

@@ -0,0 +1,14 @@
+//#region src/infra/json-file.d.ts
+declare function loadJsonFile(pathname: string): unknown;
+declare function saveJsonFile(pathname: string, data: unknown): void;
+//#endregion
+//#region src/plugin-sdk/json-store.d.ts
+/** Read JSON from disk and fall back cleanly when the file is missing or invalid. */
+declare function readJsonFileWithFallback<T>(filePath: string, fallback: T): Promise<{
+  value: T;
+  exists: boolean;
+}>;
+/** Write JSON with secure file permissions and atomic replacement semantics. */
+declare function writeJsonFileAtomically(filePath: string, value: unknown): Promise<void>;
+//#endregion
+export { saveJsonFile as i, writeJsonFileAtomically as n, loadJsonFile as r, readJsonFileWithFallback as t };