@xopcai/xopc 0.0.109 → 0.0.111

package/dist/src/agent/tools/write.d.ts

@@ -1,7 +1,9 @@
 import type { AgentTool } from '@earendil-works/pi-agent-core';
+import type { GoalEvidenceRecordInput } from './goal-evidence-recorder.js';
 export interface CreateWriteFileToolOptions {
     /** When set and the path is a bare profile filename (e.g. SOUL.md), write to this root. */
     profileMarkdownRoot?: string;
+    recordGoalEvidence?: (input: GoalEvidenceRecordInput) => Promise<void> | void;
 }
 export declare function createWriteFileTool(workspace: string, options?: CreateWriteFileToolOptions): AgentTool;
 export declare const writeFileTool: AgentTool;

package/dist/src/agent/tools/write.js

@@ -52,6 +52,17 @@ function createWriteFileTool(workspace, options) {
 				const target = writesProfileFile ? resolveProfileMarkdownPathIfBareName(p.path, options.profileMarkdownRoot) : resolvePathUnderWorkspace(p.path, workspace);
 				await mkdir(dirname(target), { recursive: true });
 				await writeFile(target, p.content, "utf-8");
+				await options?.recordGoalEvidence?.({
+					kind: "file",
+					title: `File written: ${target}`,
+					summary: `${contentBytes} bytes written`,
+					uri: target,
+					data: {
+						path: target,
+						size: contentBytes,
+						operation: "write"
+					}
+				});
 				return {
 					content: [{
 						type: "text",

package/dist/src/agent/tools/write.js.map

@@ -1 +1 @@
-{"version":3,"file":"write.js","names":[],"sources":["../../../../src/agent/tools/write.ts"],"sourcesContent":["// Write file tool\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { writeFile, mkdir } from 'fs/promises';\nimport { dirname } from 'path';\nimport { checkFileSafety } from '../prompt/safety.js';\nimport {\n  isBareProfileMarkdownFileName,\n  resolveProfileMarkdownPathIfBareName,\n  resolvePathUnderWorkspace,\n} from './tool-paths.js';\nimport { evaluateFilePolicy } from '../sandbox/exec-policy.js';\n\nconst MAX_FILE_SIZE = 10 * 1024 * 1024;\n\nconst WriteFileSchema = Type.Object({\n  path: Type.String({ description: 'File path to write' }),\n  content: Type.String({ description: 'Content to write' }),\n});\n\ntype WriteFileParams = { path: string; content: string };\n\nexport interface CreateWriteFileToolOptions {\n  /** When set and the path is a bare profile filename (e.g. SOUL.md), write to this root. */\n  profileMarkdownRoot?: string;\n}\n\nexport function createWriteFileTool(\n  workspace: string,\n  options?: CreateWriteFileToolOptions,\n): AgentTool {\n  return {\n    name: 'write_file',\n    description:\n      'Create or overwrite a file. Relative paths are under the current agent workspace; profile Markdown (SOUL.md, etc.) is written automatically when given by filename.',\n    parameters: WriteFileSchema,\n    label: '📝 Write',\n\n    async execute(\n      _toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<{}>> {\n      try {\n        const p = params as WriteFileParams;\n        const safety = checkFileSafety('write', p.path);\n        if (!safety.allowed) {\n          return { content: [{ type: 'text', text: `🚫 ${safety.message}` }], details: {} };\n        }\n\n        const writesProfileFile = Boolean(\n          options?.profileMarkdownRoot && isBareProfileMarkdownFileName(p.path),\n        );\n        const workspaceRoot = writesProfileFile ? options!.profileMarkdownRoot! : workspace;\n\n        // Sandbox path-policy check (blocked dirs, symlink escape, config protection)\n        const pathPolicy = evaluateFilePolicy({\n          operation: 'write',\n          path: p.path,\n          workspaceRoot,\n        });\n        if (!pathPolicy.allowed) {\n          return { content: [{ type: 'text', text: `🚫 Sandbox: ${pathPolicy.reason}` }], details: {} };\n        }\n\n        const contentBytes = Buffer.byteLength(p.content, 'utf-8');\n        if (contentBytes > MAX_FILE_SIZE) {\n          return { content: [{ type: 'text', text: `🚫 File too large: ${contentBytes} bytes` }], details: {} };\n        }\n\n        const target = writesProfileFile\n          ? resolveProfileMarkdownPathIfBareName(p.path, options!.profileMarkdownRoot!)\n          : resolvePathUnderWorkspace(p.path, workspace);\n        await mkdir(dirname(target), { recursive: true });\n        await writeFile(target, p.content, 'utf-8');\n        return { content: [{ type: 'text', text: `File written: ${target}` }], details: { size: contentBytes } };\n      } catch (error) {\n        return { content: [{ type: 'text', text: `Error: ${error instanceof Error ? error.message : String(error)}` }], details: {} };\n      }\n    },\n  } as any;\n}\n\nexport const writeFileTool: AgentTool = createWriteFileTool(process.cwd());\n"],"mappings":";;;;;;;AAaA,MAAM,gBAAgB,KAAK,OAAO;AAElC,MAAM,kBAAkB,KAAK,OAAO;CAClC,MAAM,KAAK,OAAO,EAAE,aAAa,sBAAsB,CAAC;CACxD,SAAS,KAAK,OAAO,EAAE,aAAa,oBAAoB,CAAC;CAC1D,CAAC;AASF,SAAgB,oBACd,WACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aACE;EACF,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,aACA,QACA,SAC8B;AAC9B,OAAI;IACF,MAAM,IAAI;IACV,MAAM,SAAS,gBAAgB,SAAS,EAAE,KAAK;AAC/C,QAAI,CAAC,OAAO,QACV,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,MAAM,OAAO;MAAW,CAAC;KAAE,SAAS,EAAE;KAAE;IAGnF,MAAM,oBAAoB,QACxB,SAAS,uBAAuB,8BAA8B,EAAE,KAAK,CACtE;IACD,MAAM,gBAAgB,oBAAoB,QAAS,sBAAuB;IAG1E,MAAM,aAAa,mBAAmB;KACpC,WAAW;KACX,MAAM,EAAE;KACR;KACD,CAAC;AACF,QAAI,CAAC,WAAW,QACd,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,eAAe,WAAW;MAAU,CAAC;KAAE,SAAS,EAAE;KAAE;IAG/F,MAAM,eAAe,OAAO,WAAW,EAAE,SAAS,QAAQ;AAC1D,QAAI,eAAe,cACjB,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,sBAAsB,aAAa;MAAS,CAAC;KAAE,SAAS,EAAE;KAAE;IAGvG,MAAM,SAAS,oBACX,qCAAqC,EAAE,MAAM,QAAS,oBAAqB,GAC3E,0BAA0B,EAAE,MAAM,UAAU;AAChD,UAAM,MAAM,QAAQ,OAAO,EAAE,EAAE,WAAW,MAAM,CAAC;AACjD,UAAM,UAAU,QAAQ,EAAE,SAAS,QAAQ;AAC3C,WAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,iBAAiB;MAAU,CAAC;KAAE,SAAS,EAAE,MAAM,cAAc;KAAE;YACjG,OAAO;AACd,WAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;MAAI,CAAC;KAAE,SAAS,EAAE;KAAE;;;EAGlI;;AAGH,MAAa,gBAA2B,oBAAoB,QAAQ,KAAK,CAAC"}
+{"version":3,"file":"write.js","names":[],"sources":["../../../../src/agent/tools/write.ts"],"sourcesContent":["// Write file tool\nimport { Type } from '@sinclair/typebox';\nimport type { AgentTool, AgentToolResult } from '@earendil-works/pi-agent-core';\nimport { writeFile, mkdir } from 'fs/promises';\nimport { dirname } from 'path';\nimport { checkFileSafety } from '../prompt/safety.js';\nimport {\n  isBareProfileMarkdownFileName,\n  resolveProfileMarkdownPathIfBareName,\n  resolvePathUnderWorkspace,\n} from './tool-paths.js';\nimport { evaluateFilePolicy } from '../sandbox/exec-policy.js';\nimport type { GoalEvidenceRecordInput } from './goal-evidence-recorder.js';\n\nconst MAX_FILE_SIZE = 10 * 1024 * 1024;\n\nconst WriteFileSchema = Type.Object({\n  path: Type.String({ description: 'File path to write' }),\n  content: Type.String({ description: 'Content to write' }),\n});\n\ntype WriteFileParams = { path: string; content: string };\n\nexport interface CreateWriteFileToolOptions {\n  /** When set and the path is a bare profile filename (e.g. SOUL.md), write to this root. */\n  profileMarkdownRoot?: string;\n  recordGoalEvidence?: (input: GoalEvidenceRecordInput) => Promise<void> | void;\n}\n\nexport function createWriteFileTool(\n  workspace: string,\n  options?: CreateWriteFileToolOptions,\n): AgentTool {\n  return {\n    name: 'write_file',\n    description:\n      'Create or overwrite a file. Relative paths are under the current agent workspace; profile Markdown (SOUL.md, etc.) is written automatically when given by filename.',\n    parameters: WriteFileSchema,\n    label: '📝 Write',\n\n    async execute(\n      _toolCallId: string,\n      params: any,\n      _signal?: AbortSignal,\n    ): Promise<AgentToolResult<{}>> {\n      try {\n        const p = params as WriteFileParams;\n        const safety = checkFileSafety('write', p.path);\n        if (!safety.allowed) {\n          return { content: [{ type: 'text', text: `🚫 ${safety.message}` }], details: {} };\n        }\n\n        const writesProfileFile = Boolean(\n          options?.profileMarkdownRoot && isBareProfileMarkdownFileName(p.path),\n        );\n        const workspaceRoot = writesProfileFile ? options!.profileMarkdownRoot! : workspace;\n\n        // Sandbox path-policy check (blocked dirs, symlink escape, config protection)\n        const pathPolicy = evaluateFilePolicy({\n          operation: 'write',\n          path: p.path,\n          workspaceRoot,\n        });\n        if (!pathPolicy.allowed) {\n          return { content: [{ type: 'text', text: `🚫 Sandbox: ${pathPolicy.reason}` }], details: {} };\n        }\n\n        const contentBytes = Buffer.byteLength(p.content, 'utf-8');\n        if (contentBytes > MAX_FILE_SIZE) {\n          return { content: [{ type: 'text', text: `🚫 File too large: ${contentBytes} bytes` }], details: {} };\n        }\n\n        const target = writesProfileFile\n          ? resolveProfileMarkdownPathIfBareName(p.path, options!.profileMarkdownRoot!)\n          : resolvePathUnderWorkspace(p.path, workspace);\n        await mkdir(dirname(target), { recursive: true });\n        await writeFile(target, p.content, 'utf-8');\n        await options?.recordGoalEvidence?.({\n          kind: 'file',\n          title: `File written: ${target}`,\n          summary: `${contentBytes} bytes written`,\n          uri: target,\n          data: { path: target, size: contentBytes, operation: 'write' },\n        });\n        return { content: [{ type: 'text', text: `File written: ${target}` }], details: { size: contentBytes } };\n      } catch (error) {\n        return { content: [{ type: 'text', text: `Error: ${error instanceof Error ? error.message : String(error)}` }], details: {} };\n      }\n    },\n  } as any;\n}\n\nexport const writeFileTool: AgentTool = createWriteFileTool(process.cwd());\n"],"mappings":";;;;;;;AAcA,MAAM,gBAAgB,KAAK,OAAO;AAElC,MAAM,kBAAkB,KAAK,OAAO;CAClC,MAAM,KAAK,OAAO,EAAE,aAAa,sBAAsB,CAAC;CACxD,SAAS,KAAK,OAAO,EAAE,aAAa,oBAAoB,CAAC;CAC1D,CAAC;AAUF,SAAgB,oBACd,WACA,SACW;AACX,QAAO;EACL,MAAM;EACN,aACE;EACF,YAAY;EACZ,OAAO;EAEP,MAAM,QACJ,aACA,QACA,SAC8B;AAC9B,OAAI;IACF,MAAM,IAAI;IACV,MAAM,SAAS,gBAAgB,SAAS,EAAE,KAAK;AAC/C,QAAI,CAAC,OAAO,QACV,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,MAAM,OAAO;MAAW,CAAC;KAAE,SAAS,EAAE;KAAE;IAGnF,MAAM,oBAAoB,QACxB,SAAS,uBAAuB,8BAA8B,EAAE,KAAK,CACtE;IACD,MAAM,gBAAgB,oBAAoB,QAAS,sBAAuB;IAG1E,MAAM,aAAa,mBAAmB;KACpC,WAAW;KACX,MAAM,EAAE;KACR;KACD,CAAC;AACF,QAAI,CAAC,WAAW,QACd,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,eAAe,WAAW;MAAU,CAAC;KAAE,SAAS,EAAE;KAAE;IAG/F,MAAM,eAAe,OAAO,WAAW,EAAE,SAAS,QAAQ;AAC1D,QAAI,eAAe,cACjB,QAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,sBAAsB,aAAa;MAAS,CAAC;KAAE,SAAS,EAAE;KAAE;IAGvG,MAAM,SAAS,oBACX,qCAAqC,EAAE,MAAM,QAAS,oBAAqB,GAC3E,0BAA0B,EAAE,MAAM,UAAU;AAChD,UAAM,MAAM,QAAQ,OAAO,EAAE,EAAE,WAAW,MAAM,CAAC;AACjD,UAAM,UAAU,QAAQ,EAAE,SAAS,QAAQ;AAC3C,UAAM,SAAS,qBAAqB;KAClC,MAAM;KACN,OAAO,iBAAiB;KACxB,SAAS,GAAG,aAAa;KACzB,KAAK;KACL,MAAM;MAAE,MAAM;MAAQ,MAAM;MAAc,WAAW;MAAS;KAC/D,CAAC;AACF,WAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,iBAAiB;MAAU,CAAC;KAAE,SAAS,EAAE,MAAM,cAAc;KAAE;YACjG,OAAO;AACd,WAAO;KAAE,SAAS,CAAC;MAAE,MAAM;MAAQ,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;MAAI,CAAC;KAAE,SAAS,EAAE;KAAE;;;EAGlI;;AAGH,MAAa,gBAA2B,oBAAoB,QAAQ,KAAK,CAAC"}

package/dist/src/channels/attachments/inbound-persist.d.ts

@@ -12,6 +12,13 @@ export declare function decodeInboundAttachmentBase64(data: string): Buffer;
  */
 export declare function persistInboundAttachments(attachments: InboundAttachmentInput[] | undefined, opts?: {
     maxBytes?: number;
+    resolveUri?: (uri: string, attachment: InboundAttachmentInput) => Promise<{
+        buffer: Buffer;
+        path: string;
+        mimeType: string;
+        name: string;
+        size: number;
+    } | null>;
 }): Promise<MediaRef[] | undefined>;
 /** Read attachment bytes by media URI (voice STT, tools). */
 export declare function readInboundAttachmentBuffer(uri: string): Promise<Buffer>;

package/dist/src/channels/attachments/inbound-persist.js

@@ -23,8 +23,26 @@ async function persistInboundAttachments(attachments, opts) {
 	const out = [];
 	for (const att of attachments) {
 		if (att.uri?.trim()) {
-			const resolved = await resolveMediaReference(att.uri.trim());
-			out.push(mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id));
+			const uri = att.uri.trim();
+			if (uri.startsWith("media://")) {
+				const resolved = await resolveMediaReference(uri);
+				out.push(mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id));
+			} else {
+				const resolved = await opts?.resolveUri?.(uri, att);
+				if (!resolved) throw new Error(`Inbound attachment "${att.name ?? "file"}" has unsupported uri`);
+				const saved = await saveMediaBuffer(resolved.buffer, {
+					contentType: resolved.mimeType,
+					bucket: "inbound",
+					maxBytes,
+					originalFilename: resolved.name
+				});
+				out.push(toMediaRef({
+					...att,
+					mimeType: resolved.mimeType,
+					name: resolved.name,
+					size: resolved.size
+				}, saved));
+			}
 			continue;
 		}
 		if (!att.data || att.data.length === 0) throw new Error(`Inbound attachment "${att.name ?? "file"}" is missing data and uri`);

package/dist/src/channels/attachments/inbound-persist.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound-persist.js","names":[],"sources":["../../../../src/channels/attachments/inbound-persist.ts"],"sourcesContent":["/**\n * Persist inbound uploads to the global media store (`{stateDir}/media/inbound/`).\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport {\n  MEDIA_MAX_BYTES,\n  parseMediaUri,\n  readMediaReference,\n  resolveMediaReference,\n  saveMediaBuffer,\n} from '../../media/index.js';\nimport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport { mediaRefFromUri, toMediaRef } from './inbound-types.js';\n\nconst log = createLogger('InboundPersist');\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';\nexport { toMediaRef, mediaRefFromUri } from './inbound-types.js';\n\n/** Decode base64 or data-URL payload (composer wire + voice STT). */\nexport function decodeInboundAttachmentBase64(data: string): Buffer {\n  const trimmed = data.trim();\n  const b64 = trimmed.startsWith('data:') ? (trimmed.split(/base64,/)[1] ?? trimmed) : trimmed;\n  return Buffer.from(b64.replace(/\\s/g, ''), 'base64');\n}\n\n/**\n * Write attachments with binary `data` to the media store; returns metadata-only refs.\n */\nexport async function persistInboundAttachments(\n  attachments: InboundAttachmentInput[] | undefined,\n  opts?: { maxBytes?: number },\n): Promise<MediaRef[] | undefined> {\n  if (!attachments?.length) return undefined;\n\n  const maxBytes = opts?.maxBytes ?? MEDIA_MAX_BYTES;\n  const out: MediaRef[] = [];\n\n  for (const att of attachments) {\n    if (att.uri?.trim()) {\n      const resolved = await resolveMediaReference(att.uri.trim());\n      out.push(\n        mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id),\n      );\n      continue;\n    }\n\n    if (!att.data || att.data.length === 0) {\n      throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" is missing data and uri`);\n    }\n\n    const buf = decodeInboundAttachmentBase64(att.data);\n    const saved = await saveMediaBuffer(buf, {\n      contentType: att.mimeType,\n      bucket: 'inbound',\n      maxBytes,\n      originalFilename: att.name,\n    });\n\n    log.debug({ uri: saved.uri, bytes: saved.size, name: att.name }, 'Inbound attachment persisted');\n\n    out.push(toMediaRef(att, saved));\n  }\n\n  return out.length ? out : undefined;\n}\n\n/** Read attachment bytes by media URI (voice STT, tools). */\nexport async function readInboundAttachmentBuffer(uri: string): Promise<Buffer> {\n  const { buffer } = await readMediaReference(uri);\n  return buffer;\n}\n\nexport function assertMediaUri(uri: string): void {\n  parseMediaUri(uri);\n}\n"],"mappings":";;;;;;;;aAIqD;AAWrD,MAAM,MAAM,aAAa,iBAAiB;;AAO1C,SAAgB,8BAA8B,MAAsB;CAClE,MAAM,UAAU,KAAK,MAAM;CAC3B,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAI,QAAQ,MAAM,UAAU,CAAC,MAAM,UAAW;AACrF,QAAO,OAAO,KAAK,IAAI,QAAQ,OAAO,GAAG,EAAE,SAAS;;;;;AAMtD,eAAsB,0BACpB,aACA,MACiC;AACjC,KAAI,CAAC,aAAa,OAAQ,QAAO,KAAA;CAEjC,MAAM,WAAW,MAAM,YAAA;CACvB,MAAM,MAAkB,EAAE;AAE1B,MAAK,MAAM,OAAO,aAAa;AAC7B,MAAI,IAAI,KAAK,MAAM,EAAE;GACnB,MAAM,WAAW,MAAM,sBAAsB,IAAI,IAAI,MAAM,CAAC;AAC5D,OAAI,KACF,gBAAgB,KAAK,SAAS,KAAK,SAAS,MAAM,SAAS,QAAQ,SAAS,GAAG,CAChF;AACD;;AAGF,MAAI,CAAC,IAAI,QAAQ,IAAI,KAAK,WAAW,EACnC,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,2BAA2B;EAIvF,MAAM,QAAQ,MAAM,gBADR,8BAA8B,IAAI,KACP,EAAE;GACvC,aAAa,IAAI;GACjB,QAAQ;GACR;GACA,kBAAkB,IAAI;GACvB,CAAC;AAEF,MAAI,MAAM;GAAE,KAAK,MAAM;GAAK,OAAO,MAAM;GAAM,MAAM,IAAI;GAAM,EAAE,+BAA+B;AAEhG,MAAI,KAAK,WAAW,KAAK,MAAM,CAAC;;AAGlC,QAAO,IAAI,SAAS,MAAM,KAAA;;;AAI5B,eAAsB,4BAA4B,KAA8B;CAC9E,MAAM,EAAE,WAAW,MAAM,mBAAmB,IAAI;AAChD,QAAO;;AAGT,SAAgB,eAAe,KAAmB;AAChD,eAAc,IAAI"}
+{"version":3,"file":"inbound-persist.js","names":[],"sources":["../../../../src/channels/attachments/inbound-persist.ts"],"sourcesContent":["/**\n * Persist inbound uploads to the global media store (`{stateDir}/media/inbound/`).\n */\n\nimport { createLogger } from '../../utils/logger.js';\nimport {\n  MEDIA_MAX_BYTES,\n  parseMediaUri,\n  readMediaReference,\n  resolveMediaReference,\n  saveMediaBuffer,\n} from '../../media/index.js';\nimport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nimport { mediaRefFromUri, toMediaRef } from './inbound-types.js';\n\nconst log = createLogger('InboundPersist');\n\nexport type { InboundAttachmentInput, MediaRef } from '../../media/types.js';\nexport { isImageInboundAttachment, isVoiceInboundAttachment } from './attachment-classifiers.js';\nexport { toMediaRef, mediaRefFromUri } from './inbound-types.js';\n\n/** Decode base64 or data-URL payload (composer wire + voice STT). */\nexport function decodeInboundAttachmentBase64(data: string): Buffer {\n  const trimmed = data.trim();\n  const b64 = trimmed.startsWith('data:') ? (trimmed.split(/base64,/)[1] ?? trimmed) : trimmed;\n  return Buffer.from(b64.replace(/\\s/g, ''), 'base64');\n}\n\n/**\n * Write attachments with binary `data` to the media store; returns metadata-only refs.\n */\nexport async function persistInboundAttachments(\n  attachments: InboundAttachmentInput[] | undefined,\n  opts?: {\n    maxBytes?: number;\n    resolveUri?: (uri: string, attachment: InboundAttachmentInput) => Promise<{\n      buffer: Buffer;\n      path: string;\n      mimeType: string;\n      name: string;\n      size: number;\n    } | null>;\n  },\n): Promise<MediaRef[] | undefined> {\n  if (!attachments?.length) return undefined;\n\n  const maxBytes = opts?.maxBytes ?? MEDIA_MAX_BYTES;\n  const out: MediaRef[] = [];\n\n  for (const att of attachments) {\n    if (att.uri?.trim()) {\n      const uri = att.uri.trim();\n      if (uri.startsWith('media://')) {\n        const resolved = await resolveMediaReference(uri);\n        out.push(\n          mediaRefFromUri(att, resolved.uri, resolved.path, resolved.bucket, resolved.id),\n        );\n      } else {\n        const resolved = await opts?.resolveUri?.(uri, att);\n        if (!resolved) {\n          throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" has unsupported uri`);\n        }\n        const saved = await saveMediaBuffer(resolved.buffer, {\n          contentType: resolved.mimeType,\n          bucket: 'inbound',\n          maxBytes,\n          originalFilename: resolved.name,\n        });\n        out.push(toMediaRef({ ...att, mimeType: resolved.mimeType, name: resolved.name, size: resolved.size }, saved));\n      }\n      continue;\n    }\n\n    if (!att.data || att.data.length === 0) {\n      throw new Error(`Inbound attachment \"${att.name ?? 'file'}\" is missing data and uri`);\n    }\n\n    const buf = decodeInboundAttachmentBase64(att.data);\n    const saved = await saveMediaBuffer(buf, {\n      contentType: att.mimeType,\n      bucket: 'inbound',\n      maxBytes,\n      originalFilename: att.name,\n    });\n\n    log.debug({ uri: saved.uri, bytes: saved.size, name: att.name }, 'Inbound attachment persisted');\n\n    out.push(toMediaRef(att, saved));\n  }\n\n  return out.length ? out : undefined;\n}\n\n/** Read attachment bytes by media URI (voice STT, tools). */\nexport async function readInboundAttachmentBuffer(uri: string): Promise<Buffer> {\n  const { buffer } = await readMediaReference(uri);\n  return buffer;\n}\n\nexport function assertMediaUri(uri: string): void {\n  parseMediaUri(uri);\n}\n"],"mappings":";;;;;;;;aAIqD;AAWrD,MAAM,MAAM,aAAa,iBAAiB;;AAO1C,SAAgB,8BAA8B,MAAsB;CAClE,MAAM,UAAU,KAAK,MAAM;CAC3B,MAAM,MAAM,QAAQ,WAAW,QAAQ,GAAI,QAAQ,MAAM,UAAU,CAAC,MAAM,UAAW;AACrF,QAAO,OAAO,KAAK,IAAI,QAAQ,OAAO,GAAG,EAAE,SAAS;;;;;AAMtD,eAAsB,0BACpB,aACA,MAUiC;AACjC,KAAI,CAAC,aAAa,OAAQ,QAAO,KAAA;CAEjC,MAAM,WAAW,MAAM,YAAA;CACvB,MAAM,MAAkB,EAAE;AAE1B,MAAK,MAAM,OAAO,aAAa;AAC7B,MAAI,IAAI,KAAK,MAAM,EAAE;GACnB,MAAM,MAAM,IAAI,IAAI,MAAM;AAC1B,OAAI,IAAI,WAAW,WAAW,EAAE;IAC9B,MAAM,WAAW,MAAM,sBAAsB,IAAI;AACjD,QAAI,KACF,gBAAgB,KAAK,SAAS,KAAK,SAAS,MAAM,SAAS,QAAQ,SAAS,GAAG,CAChF;UACI;IACL,MAAM,WAAW,MAAM,MAAM,aAAa,KAAK,IAAI;AACnD,QAAI,CAAC,SACH,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,uBAAuB;IAEnF,MAAM,QAAQ,MAAM,gBAAgB,SAAS,QAAQ;KACnD,aAAa,SAAS;KACtB,QAAQ;KACR;KACA,kBAAkB,SAAS;KAC5B,CAAC;AACF,QAAI,KAAK,WAAW;KAAE,GAAG;KAAK,UAAU,SAAS;KAAU,MAAM,SAAS;KAAM,MAAM,SAAS;KAAM,EAAE,MAAM,CAAC;;AAEhH;;AAGF,MAAI,CAAC,IAAI,QAAQ,IAAI,KAAK,WAAW,EACnC,OAAM,IAAI,MAAM,uBAAuB,IAAI,QAAQ,OAAO,2BAA2B;EAIvF,MAAM,QAAQ,MAAM,gBADR,8BAA8B,IAAI,KACP,EAAE;GACvC,aAAa,IAAI;GACjB,QAAQ;GACR;GACA,kBAAkB,IAAI;GACvB,CAAC;AAEF,MAAI,MAAM;GAAE,KAAK,MAAM;GAAK,OAAO,MAAM;GAAM,MAAM,IAAI;GAAM,EAAE,+BAA+B;AAEhG,MAAI,KAAK,WAAW,KAAK,MAAM,CAAC;;AAGlC,QAAO,IAAI,SAAS,MAAM,KAAA;;;AAI5B,eAAsB,4BAA4B,KAA8B;CAC9E,MAAM,EAAE,WAAW,MAAM,mBAAmB,IAAI;AAChD,QAAO;;AAGT,SAAgB,eAAe,KAAmB;AAChD,eAAc,IAAI"}

package/dist/src/channels/channel-domain.d.ts

@@ -1,94 +1,14 @@
 /**
- * Channel domain types (Telegram config, message context, send options).
+ * Channel domain types shared by channel plugins.
  */
 import type { MessageBus } from '../infra/bus/index.js';
 import type { Config } from '../config/schema.js';
 import type { ProgressStage } from '../agent/lifecycle/progress.js';
 export type { ProgressStage } from '../agent/lifecycle/progress.js';
-export type ChannelType = 'telegram' | 'system';
 export type ChatType = 'direct' | 'group' | 'channel' | 'thread';
-export interface TelegramTopicConfig {
-    topicId: string;
-    requireMention?: boolean;
-    enabled?: boolean;
-    allowFrom?: Array<string | number>;
-    systemPrompt?: string;
-    agentId?: string;
-    groupPolicy?: GroupPolicy;
-}
 export type DmPolicy = 'pairing' | 'allowlist' | 'open' | 'disabled';
 export type GroupPolicy = 'open' | 'disabled' | 'allowlist';
 export type ReplyToMode = 'off' | 'first' | 'all';
-export interface TelegramGroupConfig {
-    groupId: string;
-    requireMention?: boolean;
-    groupPolicy?: GroupPolicy;
-    enabled?: boolean;
-    allowFrom?: Array<string | number>;
-    systemPrompt?: string;
-    agentId?: string;
-    topics?: Record<string, TelegramTopicConfig>;
-}
-export interface TelegramAccountConfig {
-    accountId: string;
-    name?: string;
-    enabled?: boolean;
-    botToken?: string;
-    tokenFile?: string;
-    dmPolicy?: DmPolicy;
-    groupPolicy?: GroupPolicy;
-    replyToMode?: ReplyToMode;
-    allowFrom?: Array<string | number>;
-    groupAllowFrom?: Array<string | number>;
-    groups?: Record<string, TelegramGroupConfig>;
-    historyLimit?: number;
-    textChunkLimit?: number;
-    streaming?: {
-        mode?: 'off' | 'partial' | 'block';
-        preview?: {
-            toolProgress?: boolean;
-        };
-        block?: {
-            coalesce?: {
-                minChars?: number;
-                idleMs?: number;
-            };
-        };
-    };
-    proxy?: string;
-    apiRoot?: string;
-    pollingStallThresholdMs?: number;
-    reactionLevel?: 'off' | 'ack' | 'minimal' | 'extensive';
-    reactionNotifications?: 'off' | 'own' | 'all';
-    ackReaction?: string;
-}
-export interface TelegramChannelConfig {
-    enabled?: boolean;
-    accounts?: Record<string, TelegramAccountConfig>;
-    botToken?: string;
-    allowFrom?: Array<string | number>;
-    groupAllowFrom?: Array<string | number>;
-    dmPolicy?: DmPolicy;
-    groupPolicy?: GroupPolicy;
-    replyToMode?: ReplyToMode;
-    streaming?: {
-        mode?: 'off' | 'partial' | 'block';
-        preview?: {
-            toolProgress?: boolean;
-        };
-        block?: {
-            coalesce?: {
-                minChars?: number;
-                idleMs?: number;
-            };
-        };
-    };
-    historyLimit?: number;
-    textChunkLimit?: number;
-    proxy?: string;
-    apiRoot?: string;
-    debug?: boolean;
-}
 export interface NormalizedAllowFrom {
     entries: string[];
     hasWildcard: boolean;

package/dist/src/channels/pairing/index.d.ts

@@ -9,8 +9,8 @@ export type { IssuePairingChallengeParams } from './pairing-challenge.js';
 export { approveChannelPairingFromCli } from './approve-cli.js';
 export { PAIRING_PENDING_MAX, PAIRING_STALE_PENDING_MS } from './pairing-constants.js';
 export { createStandardPairingAdapter } from './pairing-store-adapter.js';
-export { approveChannelPairing, approveChannelPairingBySender, listChannelPairingState, listChannelPairingSummary, collectPairingPendingIssues, revokeChannelPairingPaired, dismissChannelPairingPending, } from './pairing-service.js';
-export type { ChannelPairingState, ChannelPairingSummary, ChannelPairingSummaryEntry, PairingPendingIssue, PairingPendingView, } from './pairing-service.js';
+export { approveChannelPairing, approveChannelPairingBySender, listChannelPairingState, listChannelPairingSummary, collectPairingPendingIssues, revokeChannelPairingPaired, dismissChannelPairingPending, registerPairingChannelResolver, } from './pairing-service.js';
+export type { ChannelPairingState, ChannelPairingSummary, ChannelPairingSummaryEntry, PairingChannelConfigResolver, PairingPaths, PairingPendingIssue, PairingPendingView, } from './pairing-service.js';
 export { setPairingBroadcastSink, broadcastPairingEvent } from './pairing-events.js';
 export type { PairingBroadcastPayload } from './pairing-events.js';
 export { mergeDistinctSenderIds } from './preseed-allow-from.js';

package/dist/src/channels/pairing/index.js

@@ -5,8 +5,8 @@ import { PAIRING_PENDING_TTL_MS, approvePairingBySenderIdSync, approvePairingCod
 import { buildPairingInstructionText } from "./pairing-messages.js";
 import { broadcastPairingEvent, setPairingBroadcastSink } from "./pairing-events.js";
 import { issuePairingChallenge } from "./pairing-challenge.js";
-import { approveChannelPairing, approveChannelPairingBySender, collectPairingPendingIssues, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired } from "./pairing-service.js";
+import { approveChannelPairing, approveChannelPairingBySender, collectPairingPendingIssues, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, registerPairingChannelResolver, revokeChannelPairingPaired } from "./pairing-service.js";
 import { approveChannelPairingFromCli } from "./approve-cli.js";
 import { createStandardPairingAdapter } from "./pairing-store-adapter.js";
 import { mergeDistinctSenderIds } from "./preseed-allow-from.js";
-export { PAIRING_PENDING_MAX, PAIRING_PENDING_TTL_MS, PAIRING_STALE_PENDING_MS, appendAllowFromIdSync, approveChannelPairing, approveChannelPairingBySender, approveChannelPairingFromCli, approvePairingBySenderIdSync, approvePairingCodeSync, broadcastPairingEvent, buildPairingInstructionText, collectPairingPendingIssues, createStandardPairingAdapter, dismissChannelPairingPending, dismissPairingBySenderIdSync, issuePairingChallenge, listChannelPairingState, listChannelPairingSummary, listPendingPairingRequestsSync, mergeDistinctSenderIds, readAllowFromIdsSync, removeAllowFromIdSync, resolveDefaultCredentialsDir, resolveStandardAllowFromPath, resolveStandardPairingPath, resolveWeixinAllowFromPath, resolveWeixinPairingPath, revokeChannelPairingPaired, setPairingBroadcastSink, upsertPairingRequestSync };
+export { PAIRING_PENDING_MAX, PAIRING_PENDING_TTL_MS, PAIRING_STALE_PENDING_MS, appendAllowFromIdSync, approveChannelPairing, approveChannelPairingBySender, approveChannelPairingFromCli, approvePairingBySenderIdSync, approvePairingCodeSync, broadcastPairingEvent, buildPairingInstructionText, collectPairingPendingIssues, createStandardPairingAdapter, dismissChannelPairingPending, dismissPairingBySenderIdSync, issuePairingChallenge, listChannelPairingState, listChannelPairingSummary, listPendingPairingRequestsSync, mergeDistinctSenderIds, readAllowFromIdsSync, registerPairingChannelResolver, removeAllowFromIdSync, resolveDefaultCredentialsDir, resolveStandardAllowFromPath, resolveStandardPairingPath, resolveWeixinAllowFromPath, resolveWeixinPairingPath, revokeChannelPairingPaired, setPairingBroadcastSink, upsertPairingRequestSync };

package/dist/src/channels/pairing/pairing-service.d.ts

@@ -13,6 +13,19 @@ export type ChannelPairingState = {
         fromCredentials: string[];
     };
 };
+export type PairingPaths = {
+    pairingPath: string;
+    allowPath: string;
+};
+export type PairingChannelConfigResolver = {
+    resolvePaths?: (accountId: string) => PairingPaths;
+    resolveAllowFromConfig?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => string[];
+    resolveChannelEnabled?: (config: Config | undefined, channel: PairingCliChannel) => boolean;
+    resolveAccountEnabled?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => boolean;
+    resolveDmPolicy?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => DmPolicy;
+    resolveAccountIds?: (config: Config | undefined, channel: PairingCliChannel) => string[];
+};
+export declare function registerPairingChannelResolver(channel: PairingCliChannel, resolver: PairingChannelConfigResolver): void;
 export type ChannelPairingSummaryEntry = {
     pending: number;
     stale: number;

package/dist/src/channels/pairing/pairing-service.js

@@ -1,24 +1,90 @@
 import { resolveDmPolicy } from "../security.js";
-import { resolveStandardAllowFromPath, resolveStandardPairingPath, resolveWeixinAllowFromPath, resolveWeixinPairingPath } from "./paths.js";
+import { resolveStandardAllowFromPath, resolveStandardPairingPath } from "./paths.js";
 import { readAllowFromIdsSync, removeAllowFromIdSync } from "./allow-from-file.js";
 import "./pairing-constants.js";
 import { PAIRING_PENDING_TTL_MS, approvePairingBySenderIdSync, approvePairingCodeSync, dismissPairingBySenderIdSync, listPendingPairingRequestsSync } from "./pairing-store.js";
 import { broadcastPairingEvent } from "./pairing-events.js";
 //#region src/channels/pairing/pairing-service.ts
+const pairingResolvers = /* @__PURE__ */ new Map();
+function registerPairingChannelResolver(channel, resolver) {
+	const id = channel.trim().toLowerCase();
+	if (!id) return;
+	pairingResolvers.set(id, resolver);
+}
 function normalizeAccountId(accountId) {
 	return (accountId ?? "default").trim().toLowerCase() || "default";
 }
-function resolvePairingPaths(channel, accountId) {
+function channelBlock(config, channel) {
+	const ch = config?.channels?.[channel];
+	return ch && typeof ch === "object" && !Array.isArray(ch) ? ch : null;
+}
+function channelResolver(channel) {
+	return pairingResolvers.get(channel.trim().toLowerCase()) ?? defaultPairingResolver;
+}
+function defaultPairingPaths(channel, accountId) {
 	const normalized = normalizeAccountId(accountId);
-	if (channel === "weixin") return {
-		pairingPath: resolveWeixinPairingPath(normalized),
-		allowPath: resolveWeixinAllowFromPath(normalized)
-	};
 	return {
 		pairingPath: resolveStandardPairingPath(channel, normalized),
 		allowPath: resolveStandardAllowFromPath(channel, normalized)
 	};
 }
+function defaultAllowFromConfig(config, channel, accountId) {
+	const block = channelBlock(config, channel);
+	if (!block) return [];
+	const top = Array.isArray(block.allowFrom) ? block.allowFrom.map(String).filter(Boolean) : [];
+	const accounts = block.accounts;
+	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
+		const acc = accounts[accountId];
+		if (acc && typeof acc === "object" && !Array.isArray(acc)) {
+			const fromAcc = acc.allowFrom;
+			if (Array.isArray(fromAcc)) return [...new Set([...top, ...fromAcc.map(String).filter(Boolean)])];
+		}
+	}
+	return [...new Set(top)];
+}
+function defaultChannelEnabled(config, channel) {
+	return channelBlock(config, channel)?.enabled === true;
+}
+function defaultAccountEnabled(config, channel, accountId) {
+	if (!defaultChannelEnabled(config, channel)) return false;
+	const accounts = channelBlock(config, channel)?.accounts;
+	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
+		const acc = accounts[accountId];
+		if (acc && typeof acc === "object" && !Array.isArray(acc)) return acc.enabled !== false;
+	}
+	return true;
+}
+function defaultDmPolicy(config, channel, accountId) {
+	const block = channelBlock(config, channel);
+	if (!block) return resolveDmPolicy(void 0, "pairing");
+	const accounts = block.accounts;
+	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
+		const acc = accounts[accountId];
+		if (acc && typeof acc === "object" && !Array.isArray(acc)) {
+			const accPolicy = acc.dmPolicy;
+			if (accPolicy) return resolveDmPolicy(accPolicy, "pairing");
+		}
+	}
+	return resolveDmPolicy(block.dmPolicy, "pairing");
+}
+function defaultAccountIds(config, channel) {
+	const accounts = channelBlock(config, channel)?.accounts;
+	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
+		const keys = Object.keys(accounts).sort();
+		if (keys.length > 0) return keys;
+	}
+	return ["default"];
+}
+const defaultPairingResolver = {
+	resolveAllowFromConfig: defaultAllowFromConfig,
+	resolveChannelEnabled: defaultChannelEnabled,
+	resolveAccountEnabled: defaultAccountEnabled,
+	resolveDmPolicy: defaultDmPolicy,
+	resolveAccountIds: defaultAccountIds
+};
+function resolvePairingPaths(channel, accountId) {
+	return channelResolver(channel).resolvePaths?.(normalizeAccountId(accountId)) ?? defaultPairingPaths(channel, accountId);
+}
 function requestAccountId(entry) {
 	return entry.meta?.accountId?.trim().toLowerCase() || "default";
 }
@@ -51,68 +117,17 @@ function pendingEntryStats(pending) {
 		atCapacity: pending.length >= 3
 	};
 }
-function resolveChannelAllowFromConfig(config, channel, accountId) {
-	const ch = config?.channels?.[channel];
-	if (!ch || typeof ch !== "object" || Array.isArray(ch)) return [];
-	const block = ch;
-	const top = Array.isArray(block.allowFrom) ? block.allowFrom.map(String).filter(Boolean) : [];
-	const accounts = block.accounts;
-	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
-		const acc = accounts[accountId];
-		if (acc && typeof acc === "object" && !Array.isArray(acc)) {
-			const fromAcc = acc.allowFrom;
-			if (Array.isArray(fromAcc)) return [...new Set([...top, ...fromAcc.map(String).filter(Boolean)])];
-		}
-	}
-	return [...new Set(top)];
-}
 function resolveChannelEnabled(config, channel) {
-	const ch = config?.channels?.[channel];
-	if (!ch || typeof ch !== "object" || Array.isArray(ch)) return false;
-	return ch.enabled === true;
+	return channelResolver(channel).resolveChannelEnabled?.(config, channel) ?? defaultChannelEnabled(config, channel);
 }
 function resolveAccountEnabled(config, channel, accountId) {
-	if (!resolveChannelEnabled(config, channel)) return false;
-	const ch = config?.channels?.[channel];
-	if (!ch || typeof ch !== "object" || Array.isArray(ch)) return true;
-	const accounts = ch.accounts;
-	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
-		const acc = accounts[accountId];
-		if (acc && typeof acc === "object" && !Array.isArray(acc)) return acc.enabled !== false;
-	}
-	return true;
+	return channelResolver(channel).resolveAccountEnabled?.(config, channel, accountId) ?? defaultAccountEnabled(config, channel, accountId);
 }
 function resolveChannelDmPolicy(config, channel, accountId) {
-	const ch = config?.channels?.[channel];
-	if (!ch || typeof ch !== "object" || Array.isArray(ch)) return resolveDmPolicy(void 0, channel === "weixin" ? "open" : "pairing");
-	const block = ch;
-	const accounts = block.accounts;
-	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
-		const acc = accounts[accountId];
-		if (acc && typeof acc === "object" && !Array.isArray(acc)) {
-			const accPolicy = acc.dmPolicy;
-			if (accPolicy) return resolveDmPolicy(accPolicy, "pairing");
-		}
-	}
-	const topPolicy = block.dmPolicy;
-	return resolveDmPolicy(topPolicy, channel === "weixin" ? "open" : "pairing");
+	return channelResolver(channel).resolveDmPolicy?.(config, channel, accountId) ?? defaultDmPolicy(config, channel, accountId);
 }
 function resolvePairingAccountIds(config, channel) {
-	const ch = config?.channels?.[channel];
-	if (!ch || typeof ch !== "object" || Array.isArray(ch)) return channel === "telegram" ? ["default"] : [];
-	const block = ch;
-	const accounts = block.accounts;
-	if (accounts && typeof accounts === "object" && !Array.isArray(accounts)) {
-		const keys = Object.keys(accounts).sort();
-		if (keys.length > 0) return keys;
-	}
-	if (channel === "feishu") {
-		const appId = typeof block.appId === "string" ? block.appId.trim() : "";
-		const appSecret = typeof block.appSecret === "string" ? block.appSecret.trim() : "";
-		return appId && appSecret ? ["default"] : [];
-	}
-	if (channel === "telegram") return ["default"];
-	return ["default"];
+	return channelResolver(channel).resolveAccountIds?.(config, channel) ?? defaultAccountIds(config, channel);
 }
 function listChannelPairingSummary(config) {
 	const channels = Object.keys(config?.channels ?? {});
@@ -166,7 +181,7 @@ function listChannelPairingState(params) {
 		dmPolicy: resolveChannelDmPolicy(params.config, params.channel, accountId),
 		pending: pendingRaw.map(toPendingView),
 		paired: {
-			fromConfig: resolveChannelAllowFromConfig(params.config, params.channel, accountId),
+			fromConfig: channelResolver(params.channel).resolveAllowFromConfig?.(params.config, params.channel, accountId) ?? defaultAllowFromConfig(params.config, params.channel, accountId),
 			fromCredentials: readAllowFromIdsSync(allowPath)
 		}
 	};
@@ -278,6 +293,6 @@ function dismissChannelPairingPending(params) {
 	};
 }
 //#endregion
-export { approveChannelPairing, approveChannelPairingBySender, collectPairingPendingIssues, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired };
+export { approveChannelPairing, approveChannelPairingBySender, collectPairingPendingIssues, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, registerPairingChannelResolver, revokeChannelPairingPaired };
 
 //# sourceMappingURL=pairing-service.js.map

package/dist/src/channels/pairing/pairing-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"pairing-service.js","names":["block"],"sources":["../../../../src/channels/pairing/pairing-service.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { resolveDmPolicy } from '../security.js';\nimport type { DmPolicy } from '../channel-domain.js';\n\nimport { readAllowFromIdsSync, removeAllowFromIdSync } from './allow-from-file.js';\nimport type { PairingCliChannel } from './pairing-channel.js';\nimport { broadcastPairingEvent } from './pairing-events.js';\nimport { PAIRING_PENDING_MAX, PAIRING_STALE_PENDING_MS } from './pairing-constants.js';\nimport {\n  approvePairingBySenderIdSync,\n  approvePairingCodeSync,\n  dismissPairingBySenderIdSync,\n  listPendingPairingRequestsSync,\n  PAIRING_PENDING_TTL_MS,\n  type PairingRequest,\n} from './pairing-store.js';\nimport {\n  resolveStandardAllowFromPath,\n  resolveStandardPairingPath,\n  resolveWeixinAllowFromPath,\n  resolveWeixinPairingPath,\n} from './paths.js';\n\n// `PairingPendingView` moved to `./pairing-types.js` (leaf) so\n// `plugins/types.adapters.ts` and other lower-level callers can reference it\n// without forming a `types.adapters → pairing-service → security → plugin-types\n// → types.adapters` cycle. Re-exported here for backward-compat.\nexport { type PairingPendingView } from './pairing-types.js';\nimport type { PairingPendingView } from './pairing-types.js';\n\nexport type ChannelPairingState = {\n  channel: PairingCliChannel;\n  accountId: string;\n  dmPolicy: DmPolicy;\n  pending: PairingPendingView[];\n  paired: {\n    fromConfig: string[];\n    fromCredentials: string[];\n  };\n};\n\nfunction normalizeAccountId(accountId: string | undefined): string {\n  return (accountId ?? 'default').trim().toLowerCase() || 'default';\n}\n\nfunction resolvePairingPaths(channel: PairingCliChannel, accountId: string): {\n  pairingPath: string;\n  allowPath: string;\n} {\n  const normalized = normalizeAccountId(accountId);\n  if (channel === 'weixin') {\n    return {\n      pairingPath: resolveWeixinPairingPath(normalized),\n      allowPath: resolveWeixinAllowFromPath(normalized),\n    };\n  }\n  return {\n    pairingPath: resolveStandardPairingPath(channel, normalized),\n    allowPath: resolveStandardAllowFromPath(channel, normalized),\n  };\n}\n\nfunction requestAccountId(entry: PairingRequest): string {\n  const fromMeta = entry.meta?.accountId?.trim().toLowerCase();\n  return fromMeta || 'default';\n}\n\nfunction toPendingView(entry: PairingRequest): PairingPendingView {\n  const createdMs = Date.parse(entry.createdAt);\n  const expiresAt = Number.isFinite(createdMs)\n    ? new Date(createdMs + PAIRING_PENDING_TTL_MS).toISOString()\n    : new Date(Date.now() + PAIRING_PENDING_TTL_MS).toISOString();\n  const code = entry.code ?? '';\n  const codeLast4 = code.length >= 4 ? code.slice(-4) : code;\n  const meta =\n    entry.meta && typeof entry.meta === 'object'\n      ? Object.fromEntries(\n          Object.entries(entry.meta).filter(\n            ([k, v]) => k !== 'accountId' && typeof v === 'string' && v.trim() !== '',\n          ),\n        )\n      : undefined;\n  return {\n    senderId: entry.id,\n    codeLast4,\n    createdAt: entry.createdAt,\n    lastSeenAt: entry.lastSeenAt,\n    expiresAt,\n    isStale:\n      Number.isFinite(createdMs) && Date.now() - (createdMs as number) >= PAIRING_STALE_PENDING_MS,\n    meta: meta && Object.keys(meta).length > 0 ? meta : undefined,\n  };\n}\n\nfunction pendingEntryStats(pending: PairingRequest[]): {\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n} {\n  const now = Date.now();\n  let stale = 0;\n  for (const p of pending) {\n    const created = Date.parse(p.createdAt);\n    if (Number.isFinite(created) && now - created >= PAIRING_STALE_PENDING_MS) {\n      stale += 1;\n    }\n  }\n  return {\n    pending: pending.length,\n    stale,\n    atCapacity: pending.length >= PAIRING_PENDING_MAX,\n  };\n}\n\nfunction resolveChannelAllowFromConfig(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): string[] {\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  if (!ch || typeof ch !== 'object' || Array.isArray(ch)) return [];\n  const block = ch as Record<string, unknown>;\n  const top = Array.isArray(block.allowFrom)\n    ? block.allowFrom.map(String).filter(Boolean)\n    : [];\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      const fromAcc = (acc as { allowFrom?: unknown }).allowFrom;\n      if (Array.isArray(fromAcc)) {\n        return [...new Set([...top, ...fromAcc.map(String).filter(Boolean)])];\n      }\n    }\n  }\n  return [...new Set(top)];\n}\n\nfunction resolveChannelEnabled(config: Config | undefined, channel: PairingCliChannel): boolean {\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  if (!ch || typeof ch !== 'object' || Array.isArray(ch)) return false;\n  return (ch as { enabled?: boolean }).enabled === true;\n}\n\nfunction resolveAccountEnabled(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): boolean {\n  if (!resolveChannelEnabled(config, channel)) return false;\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  if (!ch || typeof ch !== 'object' || Array.isArray(ch)) return true;\n  const block = ch as Record<string, unknown>;\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      return (acc as { enabled?: boolean }).enabled !== false;\n    }\n  }\n  return true;\n}\n\nfunction resolveChannelDmPolicy(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): DmPolicy {\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  if (!ch || typeof ch !== 'object' || Array.isArray(ch)) {\n    return resolveDmPolicy(undefined, channel === 'weixin' ? 'open' : 'pairing');\n  }\n  const block = ch as Record<string, unknown>;\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      const accPolicy = (acc as { dmPolicy?: DmPolicy }).dmPolicy;\n      if (accPolicy) return resolveDmPolicy(accPolicy, 'pairing');\n    }\n  }\n  const topPolicy = block.dmPolicy as DmPolicy | undefined;\n  return resolveDmPolicy(topPolicy, channel === 'weixin' ? 'open' : 'pairing');\n}\n\nexport type ChannelPairingSummaryEntry = {\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n};\n\nexport type ChannelPairingSummary = Record<string, ChannelPairingSummaryEntry>;\n\nexport type PairingPendingIssue = {\n  channel: PairingCliChannel;\n  accountId: string;\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n};\n\nfunction resolvePairingAccountIds(config: Config | undefined, channel: PairingCliChannel): string[] {\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  if (!ch || typeof ch !== 'object' || Array.isArray(ch)) {\n    return channel === 'telegram' ? ['default'] : [];\n  }\n  const block = ch as Record<string, unknown>;\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const keys = Object.keys(accounts as Record<string, unknown>).sort();\n    if (keys.length > 0) return keys;\n  }\n  if (channel === 'feishu') {\n    const appId = typeof block.appId === 'string' ? block.appId.trim() : '';\n    const appSecret = typeof block.appSecret === 'string' ? block.appSecret.trim() : '';\n    return appId && appSecret ? ['default'] : [];\n  }\n  if (channel === 'telegram') return ['default'];\n  return ['default'];\n}\n\nexport function listChannelPairingSummary(config?: Config): ChannelPairingSummary {\n  const channels = Object.keys(config?.channels ?? {});\n  const summary: ChannelPairingSummary = {};\n  for (const channel of channels) {\n    if (!resolveChannelEnabled(config, channel)) continue;\n    summary[channel] = { pending: 0, stale: 0, atCapacity: false };\n    const accountIds = resolvePairingAccountIds(config, channel);\n    for (const accountId of accountIds) {\n      if (!resolveAccountEnabled(config, channel, accountId)) continue;\n      if (resolveChannelDmPolicy(config, channel, accountId) !== 'pairing') continue;\n      const { pairingPath } = resolvePairingPaths(channel, accountId);\n      const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n        (r) => requestAccountId(r) === accountId,\n      );\n      const stats = pendingEntryStats(pendingRaw);\n      summary[channel]!.pending += stats.pending;\n      summary[channel]!.stale += stats.stale;\n      summary[channel]!.atCapacity ||= stats.atCapacity;\n    }\n  }\n  return summary;\n}\n\nexport function collectPairingPendingIssues(config?: Config): PairingPendingIssue[] {\n  const issues: PairingPendingIssue[] = [];\n  for (const channel of Object.keys(config?.channels ?? {})) {\n    if (!resolveChannelEnabled(config, channel)) continue;\n    const accountIds = resolvePairingAccountIds(config, channel);\n    for (const accountId of accountIds) {\n      if (!resolveAccountEnabled(config, channel, accountId)) continue;\n      if (resolveChannelDmPolicy(config, channel, accountId) !== 'pairing') continue;\n      const { pairingPath } = resolvePairingPaths(channel, accountId);\n      const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n        (r) => requestAccountId(r) === accountId,\n      );\n      const stats = pendingEntryStats(pendingRaw);\n      if (stats.pending > 0) {\n        issues.push({ channel, accountId, ...stats });\n      }\n    }\n  }\n  return issues;\n}\n\nexport function listChannelPairingState(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  config?: Config;\n}): ChannelPairingState {\n  const accountId = normalizeAccountId(params.accountId);\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n    (r) => requestAccountId(r) === accountId,\n  );\n  return {\n    channel: params.channel,\n    accountId,\n    dmPolicy: resolveChannelDmPolicy(params.config, params.channel, accountId),\n    pending: pendingRaw.map(toPendingView),\n    paired: {\n      fromConfig: resolveChannelAllowFromConfig(params.config, params.channel, accountId),\n      fromCredentials: readAllowFromIdsSync(allowPath),\n    },\n  };\n}\n\nexport function approveChannelPairing(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  code: string;\n}): { ok: true; senderId: string; alreadyPaired: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const code = params.code.trim();\n  if (!code) return { ok: false, error: 'Missing pairing code.' };\n\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const alreadyPaired = readAllowFromIdsSync(allowPath);\n\n  const result = approvePairingCodeSync({\n    pairingFilePath: pairingPath,\n    allowFromFilePath: allowPath,\n    code,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'Invalid or expired pairing code (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.approved', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return {\n    ok: true,\n    senderId: result.senderId,\n    alreadyPaired: alreadyPaired.includes(result.senderId),\n  };\n}\n\nexport function approveChannelPairingBySender(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; senderId: string; alreadyPaired: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const alreadyPaired = readAllowFromIdsSync(allowPath);\n\n  const result = approvePairingBySenderIdSync({\n    pairingFilePath: pairingPath,\n    allowFromFilePath: allowPath,\n    senderId,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'No pending pairing request for this sender (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.approved', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return {\n    ok: true,\n    senderId: result.senderId,\n    alreadyPaired: alreadyPaired.includes(result.senderId),\n  };\n}\n\nexport function revokeChannelPairingPaired(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; changed: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { allowPath } = resolvePairingPaths(params.channel, accountId);\n  const { changed } = removeAllowFromIdSync(allowPath, senderId);\n  if (changed) {\n    broadcastPairingEvent('channels.pairing.revoked', {\n      channel: params.channel,\n      accountId,\n      senderId,\n    });\n  }\n  return { ok: true, changed };\n}\n\nexport function dismissChannelPairingPending(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; senderId: string } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { pairingPath } = resolvePairingPaths(params.channel, accountId);\n  const result = dismissPairingBySenderIdSync({\n    pairingFilePath: pairingPath,\n    senderId,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'No pending pairing request for this sender (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.dismissed', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return { ok: true, senderId: result.senderId };\n}\n"],"mappings":";;;;;;;AAyCA,SAAS,mBAAmB,WAAuC;AACjE,SAAQ,aAAa,WAAW,MAAM,CAAC,aAAa,IAAI;;AAG1D,SAAS,oBAAoB,SAA4B,WAGvD;CACA,MAAM,aAAa,mBAAmB,UAAU;AAChD,KAAI,YAAY,SACd,QAAO;EACL,aAAa,yBAAyB,WAAW;EACjD,WAAW,2BAA2B,WAAW;EAClD;AAEH,QAAO;EACL,aAAa,2BAA2B,SAAS,WAAW;EAC5D,WAAW,6BAA6B,SAAS,WAAW;EAC7D;;AAGH,SAAS,iBAAiB,OAA+B;AAEvD,QADiB,MAAM,MAAM,WAAW,MAAM,CAAC,aAAa,IACzC;;AAGrB,SAAS,cAAc,OAA2C;CAChE,MAAM,YAAY,KAAK,MAAM,MAAM,UAAU;CAC7C,MAAM,YAAY,OAAO,SAAS,UAAU,GACxC,IAAI,KAAK,YAAY,uBAAuB,CAAC,aAAa,GAC1D,IAAI,KAAK,KAAK,KAAK,GAAG,uBAAuB,CAAC,aAAa;CAC/D,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,YAAY,KAAK,UAAU,IAAI,KAAK,MAAM,GAAG,GAAG;CACtD,MAAM,OACJ,MAAM,QAAQ,OAAO,MAAM,SAAS,WAChC,OAAO,YACL,OAAO,QAAQ,MAAM,KAAK,CAAC,QACxB,CAAC,GAAG,OAAO,MAAM,eAAe,OAAO,MAAM,YAAY,EAAE,MAAM,KAAK,GACxE,CACF,GACD,KAAA;AACN,QAAO;EACL,UAAU,MAAM;EAChB;EACA,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB;EACA,SACE,OAAO,SAAS,UAAU,IAAI,KAAK,KAAK,GAAI,aAAA;EAC9C,MAAM,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,KAAA;EACrD;;AAGH,SAAS,kBAAkB,SAIzB;CACA,MAAM,MAAM,KAAK,KAAK;CACtB,IAAI,QAAQ;AACZ,MAAK,MAAM,KAAK,SAAS;EACvB,MAAM,UAAU,KAAK,MAAM,EAAE,UAAU;AACvC,MAAI,OAAO,SAAS,QAAQ,IAAI,MAAM,WAAA,KACpC,UAAS;;AAGb,QAAO;EACL,SAAS,QAAQ;EACjB;EACA,YAAY,QAAQ,UAAA;EACrB;;AAGH,SAAS,8BACP,QACA,SACA,WACU;CACV,MAAM,KAAK,QAAQ,WAAW;AAC9B,KAAI,CAAC,MAAM,OAAO,OAAO,YAAY,MAAM,QAAQ,GAAG,CAAE,QAAO,EAAE;CACjE,MAAM,QAAQ;CACd,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,GACtC,MAAM,UAAU,IAAI,OAAO,CAAC,OAAO,QAAQ,GAC3C,EAAE;CACN,MAAM,WAAW,MAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GACzD,MAAM,UAAW,IAAgC;AACjD,OAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC;;;AAI3E,QAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;;AAG1B,SAAS,sBAAsB,QAA4B,SAAqC;CAC9F,MAAM,KAAK,QAAQ,WAAW;AAC9B,KAAI,CAAC,MAAM,OAAO,OAAO,YAAY,MAAM,QAAQ,GAAG,CAAE,QAAO;AAC/D,QAAQ,GAA6B,YAAY;;AAGnD,SAAS,sBACP,QACA,SACA,WACS;AACT,KAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE,QAAO;CACpD,MAAM,KAAK,QAAQ,WAAW;AAC9B,KAAI,CAAC,MAAM,OAAO,OAAO,YAAY,MAAM,QAAQ,GAAG,CAAE,QAAO;CAE/D,MAAM,WAAWA,GAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,CACvD,QAAQ,IAA8B,YAAY;;AAGtD,QAAO;;AAGT,SAAS,uBACP,QACA,SACA,WACU;CACV,MAAM,KAAK,QAAQ,WAAW;AAC9B,KAAI,CAAC,MAAM,OAAO,OAAO,YAAY,MAAM,QAAQ,GAAG,CACpD,QAAO,gBAAgB,KAAA,GAAW,YAAY,WAAW,SAAS,UAAU;CAE9E,MAAM,QAAQ;CACd,MAAM,WAAW,MAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GACzD,MAAM,YAAa,IAAgC;AACnD,OAAI,UAAW,QAAO,gBAAgB,WAAW,UAAU;;;CAG/D,MAAM,YAAY,MAAM;AACxB,QAAO,gBAAgB,WAAW,YAAY,WAAW,SAAS,UAAU;;AAmB9E,SAAS,yBAAyB,QAA4B,SAAsC;CAClG,MAAM,KAAK,QAAQ,WAAW;AAC9B,KAAI,CAAC,MAAM,OAAO,OAAO,YAAY,MAAM,QAAQ,GAAG,CACpD,QAAO,YAAY,aAAa,CAAC,UAAU,GAAG,EAAE;CAElD,MAAM,QAAQ;CACd,MAAM,WAAW,MAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,OAAO,OAAO,KAAK,SAAoC,CAAC,MAAM;AACpE,MAAI,KAAK,SAAS,EAAG,QAAO;;AAE9B,KAAI,YAAY,UAAU;EACxB,MAAM,QAAQ,OAAO,MAAM,UAAU,WAAW,MAAM,MAAM,MAAM,GAAG;EACrE,MAAM,YAAY,OAAO,MAAM,cAAc,WAAW,MAAM,UAAU,MAAM,GAAG;AACjF,SAAO,SAAS,YAAY,CAAC,UAAU,GAAG,EAAE;;AAE9C,KAAI,YAAY,WAAY,QAAO,CAAC,UAAU;AAC9C,QAAO,CAAC,UAAU;;AAGpB,SAAgB,0BAA0B,QAAwC;CAChF,MAAM,WAAW,OAAO,KAAK,QAAQ,YAAY,EAAE,CAAC;CACpD,MAAM,UAAiC,EAAE;AACzC,MAAK,MAAM,WAAW,UAAU;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE;AAC7C,UAAQ,WAAW;GAAE,SAAS;GAAG,OAAO;GAAG,YAAY;GAAO;EAC9D,MAAM,aAAa,yBAAyB,QAAQ,QAAQ;AAC5D,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,CAAC,sBAAsB,QAAQ,SAAS,UAAU,CAAE;AACxD,OAAI,uBAAuB,QAAQ,SAAS,UAAU,KAAK,UAAW;GACtE,MAAM,EAAE,gBAAgB,oBAAoB,SAAS,UAAU;GAI/D,MAAM,QAAQ,kBAHK,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAES,CAAC;AAC3C,WAAQ,SAAU,WAAW,MAAM;AACnC,WAAQ,SAAU,SAAS,MAAM;AACjC,WAAQ,SAAU,eAAe,MAAM;;;AAG3C,QAAO;;AAGT,SAAgB,4BAA4B,QAAwC;CAClF,MAAM,SAAgC,EAAE;AACxC,MAAK,MAAM,WAAW,OAAO,KAAK,QAAQ,YAAY,EAAE,CAAC,EAAE;AACzD,MAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE;EAC7C,MAAM,aAAa,yBAAyB,QAAQ,QAAQ;AAC5D,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,CAAC,sBAAsB,QAAQ,SAAS,UAAU,CAAE;AACxD,OAAI,uBAAuB,QAAQ,SAAS,UAAU,KAAK,UAAW;GACtE,MAAM,EAAE,gBAAgB,oBAAoB,SAAS,UAAU;GAI/D,MAAM,QAAQ,kBAHK,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAES,CAAC;AAC3C,OAAI,MAAM,UAAU,EAClB,QAAO,KAAK;IAAE;IAAS;IAAW,GAAG;IAAO,CAAC;;;AAInD,QAAO;;AAGT,SAAgB,wBAAwB,QAIhB;CACtB,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,aAAa,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAChC;AACD,QAAO;EACL,SAAS,OAAO;EAChB;EACA,UAAU,uBAAuB,OAAO,QAAQ,OAAO,SAAS,UAAU;EAC1E,SAAS,WAAW,IAAI,cAAc;EACtC,QAAQ;GACN,YAAY,8BAA8B,OAAO,QAAQ,OAAO,SAAS,UAAU;GACnF,iBAAiB,qBAAqB,UAAU;GACjD;EACF;;AAGH,SAAgB,sBAAsB,QAIoD;CACxF,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,KAAI,CAAC,KAAM,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB;CAE/D,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,gBAAgB,qBAAqB,UAAU;CAErD,MAAM,SAAS,uBAAuB;EACpC,iBAAiB;EACjB,mBAAmB;EACnB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAuD;AAEpF,uBAAsB,6BAA6B;EACjD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EACL,IAAI;EACJ,UAAU,OAAO;EACjB,eAAe,cAAc,SAAS,OAAO,SAAS;EACvD;;AAGH,SAAgB,8BAA8B,QAI4C;CACxF,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,gBAAgB,qBAAqB,UAAU;CAErD,MAAM,SAAS,6BAA6B;EAC1C,iBAAiB;EACjB,mBAAmB;EACnB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkE;AAE/F,uBAAsB,6BAA6B;EACjD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EACL,IAAI;EACJ,UAAU,OAAO;EACjB,eAAe,cAAc,SAAS,OAAO,SAAS;EACvD;;AAGH,SAAgB,2BAA2B,QAIuB;CAChE,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACpE,MAAM,EAAE,YAAY,sBAAsB,WAAW,SAAS;AAC9D,KAAI,QACF,uBAAsB,4BAA4B;EAChD,SAAS,OAAO;EAChB;EACA;EACD,CAAC;AAEJ,QAAO;EAAE,IAAI;EAAM;EAAS;;AAG9B,SAAgB,6BAA6B,QAIqB;CAChE,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,gBAAgB,oBAAoB,OAAO,SAAS,UAAU;CACtE,MAAM,SAAS,6BAA6B;EAC1C,iBAAiB;EACjB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkE;AAE/F,uBAAsB,8BAA8B;EAClD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EAAE,IAAI;EAAM,UAAU,OAAO;EAAU"}
+{"version":3,"file":"pairing-service.js","names":[],"sources":["../../../../src/channels/pairing/pairing-service.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { resolveDmPolicy } from '../security.js';\nimport type { DmPolicy } from '../channel-domain.js';\n\nimport { readAllowFromIdsSync, removeAllowFromIdSync } from './allow-from-file.js';\nimport type { PairingCliChannel } from './pairing-channel.js';\nimport { broadcastPairingEvent } from './pairing-events.js';\nimport { PAIRING_PENDING_MAX, PAIRING_STALE_PENDING_MS } from './pairing-constants.js';\nimport {\n  approvePairingBySenderIdSync,\n  approvePairingCodeSync,\n  dismissPairingBySenderIdSync,\n  listPendingPairingRequestsSync,\n  PAIRING_PENDING_TTL_MS,\n  type PairingRequest,\n} from './pairing-store.js';\nimport {\n  resolveStandardAllowFromPath,\n  resolveStandardPairingPath,\n} from './paths.js';\n\n// `PairingPendingView` moved to `./pairing-types.js` (leaf) so\n// `plugins/types.adapters.ts` and other lower-level callers can reference it\n// without forming a `types.adapters → pairing-service → security → plugin-types\n// → types.adapters` cycle. Re-exported here for backward-compat.\nexport { type PairingPendingView } from './pairing-types.js';\nimport type { PairingPendingView } from './pairing-types.js';\n\nexport type ChannelPairingState = {\n  channel: PairingCliChannel;\n  accountId: string;\n  dmPolicy: DmPolicy;\n  pending: PairingPendingView[];\n  paired: {\n    fromConfig: string[];\n    fromCredentials: string[];\n  };\n};\n\nexport type PairingPaths = {\n  pairingPath: string;\n  allowPath: string;\n};\n\nexport type PairingChannelConfigResolver = {\n  resolvePaths?: (accountId: string) => PairingPaths;\n  resolveAllowFromConfig?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => string[];\n  resolveChannelEnabled?: (config: Config | undefined, channel: PairingCliChannel) => boolean;\n  resolveAccountEnabled?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => boolean;\n  resolveDmPolicy?: (config: Config | undefined, channel: PairingCliChannel, accountId: string) => DmPolicy;\n  resolveAccountIds?: (config: Config | undefined, channel: PairingCliChannel) => string[];\n};\n\nconst pairingResolvers = new Map<string, PairingChannelConfigResolver>();\n\nexport function registerPairingChannelResolver(\n  channel: PairingCliChannel,\n  resolver: PairingChannelConfigResolver,\n): void {\n  const id = channel.trim().toLowerCase();\n  if (!id) return;\n  pairingResolvers.set(id, resolver);\n}\n\nfunction normalizeAccountId(accountId: string | undefined): string {\n  return (accountId ?? 'default').trim().toLowerCase() || 'default';\n}\n\nfunction channelBlock(config: Config | undefined, channel: PairingCliChannel): Record<string, unknown> | null {\n  const ch = config?.channels?.[channel as keyof NonNullable<Config['channels']>];\n  return ch && typeof ch === 'object' && !Array.isArray(ch) ? (ch as Record<string, unknown>) : null;\n}\n\nfunction channelResolver(channel: PairingCliChannel): PairingChannelConfigResolver {\n  return pairingResolvers.get(channel.trim().toLowerCase()) ?? defaultPairingResolver;\n}\n\nfunction defaultPairingPaths(channel: PairingCliChannel, accountId: string): PairingPaths {\n  const normalized = normalizeAccountId(accountId);\n  return {\n    pairingPath: resolveStandardPairingPath(channel, normalized),\n    allowPath: resolveStandardAllowFromPath(channel, normalized),\n  };\n}\n\nfunction defaultAllowFromConfig(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): string[] {\n  const block = channelBlock(config, channel);\n  if (!block) return [];\n  const top = Array.isArray(block.allowFrom)\n    ? block.allowFrom.map(String).filter(Boolean)\n    : [];\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      const fromAcc = (acc as { allowFrom?: unknown }).allowFrom;\n      if (Array.isArray(fromAcc)) {\n        return [...new Set([...top, ...fromAcc.map(String).filter(Boolean)])];\n      }\n    }\n  }\n  return [...new Set(top)];\n}\n\nfunction defaultChannelEnabled(config: Config | undefined, channel: PairingCliChannel): boolean {\n  return channelBlock(config, channel)?.enabled === true;\n}\n\nfunction defaultAccountEnabled(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): boolean {\n  if (!defaultChannelEnabled(config, channel)) return false;\n  const accounts = channelBlock(config, channel)?.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      return (acc as { enabled?: boolean }).enabled !== false;\n    }\n  }\n  return true;\n}\n\nfunction defaultDmPolicy(config: Config | undefined, channel: PairingCliChannel, accountId: string): DmPolicy {\n  const block = channelBlock(config, channel);\n  if (!block) return resolveDmPolicy(undefined, 'pairing');\n  const accounts = block.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const acc = (accounts as Record<string, unknown>)[accountId];\n    if (acc && typeof acc === 'object' && !Array.isArray(acc)) {\n      const accPolicy = (acc as { dmPolicy?: DmPolicy }).dmPolicy;\n      if (accPolicy) return resolveDmPolicy(accPolicy, 'pairing');\n    }\n  }\n  return resolveDmPolicy(block.dmPolicy as DmPolicy | undefined, 'pairing');\n}\n\nfunction defaultAccountIds(config: Config | undefined, channel: PairingCliChannel): string[] {\n  const accounts = channelBlock(config, channel)?.accounts;\n  if (accounts && typeof accounts === 'object' && !Array.isArray(accounts)) {\n    const keys = Object.keys(accounts as Record<string, unknown>).sort();\n    if (keys.length > 0) return keys;\n  }\n  return ['default'];\n}\n\nconst defaultPairingResolver: PairingChannelConfigResolver = {\n  resolveAllowFromConfig: defaultAllowFromConfig,\n  resolveChannelEnabled: defaultChannelEnabled,\n  resolveAccountEnabled: defaultAccountEnabled,\n  resolveDmPolicy: defaultDmPolicy,\n  resolveAccountIds: defaultAccountIds,\n};\n\nfunction resolvePairingPaths(channel: PairingCliChannel, accountId: string): PairingPaths {\n  return channelResolver(channel).resolvePaths?.(normalizeAccountId(accountId)) ??\n    defaultPairingPaths(channel, accountId);\n}\n\nfunction requestAccountId(entry: PairingRequest): string {\n  const fromMeta = entry.meta?.accountId?.trim().toLowerCase();\n  return fromMeta || 'default';\n}\n\nfunction toPendingView(entry: PairingRequest): PairingPendingView {\n  const createdMs = Date.parse(entry.createdAt);\n  const expiresAt = Number.isFinite(createdMs)\n    ? new Date(createdMs + PAIRING_PENDING_TTL_MS).toISOString()\n    : new Date(Date.now() + PAIRING_PENDING_TTL_MS).toISOString();\n  const code = entry.code ?? '';\n  const codeLast4 = code.length >= 4 ? code.slice(-4) : code;\n  const meta =\n    entry.meta && typeof entry.meta === 'object'\n      ? Object.fromEntries(\n          Object.entries(entry.meta).filter(\n            ([k, v]) => k !== 'accountId' && typeof v === 'string' && v.trim() !== '',\n          ),\n        )\n      : undefined;\n  return {\n    senderId: entry.id,\n    codeLast4,\n    createdAt: entry.createdAt,\n    lastSeenAt: entry.lastSeenAt,\n    expiresAt,\n    isStale:\n      Number.isFinite(createdMs) && Date.now() - (createdMs as number) >= PAIRING_STALE_PENDING_MS,\n    meta: meta && Object.keys(meta).length > 0 ? meta : undefined,\n  };\n}\n\nfunction pendingEntryStats(pending: PairingRequest[]): {\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n} {\n  const now = Date.now();\n  let stale = 0;\n  for (const p of pending) {\n    const created = Date.parse(p.createdAt);\n    if (Number.isFinite(created) && now - created >= PAIRING_STALE_PENDING_MS) {\n      stale += 1;\n    }\n  }\n  return {\n    pending: pending.length,\n    stale,\n    atCapacity: pending.length >= PAIRING_PENDING_MAX,\n  };\n}\n\nfunction resolveChannelEnabled(config: Config | undefined, channel: PairingCliChannel): boolean {\n  return channelResolver(channel).resolveChannelEnabled?.(config, channel) ??\n    defaultChannelEnabled(config, channel);\n}\n\nfunction resolveAccountEnabled(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): boolean {\n  return channelResolver(channel).resolveAccountEnabled?.(config, channel, accountId) ??\n    defaultAccountEnabled(config, channel, accountId);\n}\n\nfunction resolveChannelDmPolicy(\n  config: Config | undefined,\n  channel: PairingCliChannel,\n  accountId: string,\n): DmPolicy {\n  return channelResolver(channel).resolveDmPolicy?.(config, channel, accountId) ??\n    defaultDmPolicy(config, channel, accountId);\n}\n\nexport type ChannelPairingSummaryEntry = {\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n};\n\nexport type ChannelPairingSummary = Record<string, ChannelPairingSummaryEntry>;\n\nexport type PairingPendingIssue = {\n  channel: PairingCliChannel;\n  accountId: string;\n  pending: number;\n  stale: number;\n  atCapacity: boolean;\n};\n\nfunction resolvePairingAccountIds(config: Config | undefined, channel: PairingCliChannel): string[] {\n  return channelResolver(channel).resolveAccountIds?.(config, channel) ??\n    defaultAccountIds(config, channel);\n}\n\nexport function listChannelPairingSummary(config?: Config): ChannelPairingSummary {\n  const channels = Object.keys(config?.channels ?? {});\n  const summary: ChannelPairingSummary = {};\n  for (const channel of channels) {\n    if (!resolveChannelEnabled(config, channel)) continue;\n    summary[channel] = { pending: 0, stale: 0, atCapacity: false };\n    const accountIds = resolvePairingAccountIds(config, channel);\n    for (const accountId of accountIds) {\n      if (!resolveAccountEnabled(config, channel, accountId)) continue;\n      if (resolveChannelDmPolicy(config, channel, accountId) !== 'pairing') continue;\n      const { pairingPath } = resolvePairingPaths(channel, accountId);\n      const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n        (r) => requestAccountId(r) === accountId,\n      );\n      const stats = pendingEntryStats(pendingRaw);\n      summary[channel]!.pending += stats.pending;\n      summary[channel]!.stale += stats.stale;\n      summary[channel]!.atCapacity ||= stats.atCapacity;\n    }\n  }\n  return summary;\n}\n\nexport function collectPairingPendingIssues(config?: Config): PairingPendingIssue[] {\n  const issues: PairingPendingIssue[] = [];\n  for (const channel of Object.keys(config?.channels ?? {})) {\n    if (!resolveChannelEnabled(config, channel)) continue;\n    const accountIds = resolvePairingAccountIds(config, channel);\n    for (const accountId of accountIds) {\n      if (!resolveAccountEnabled(config, channel, accountId)) continue;\n      if (resolveChannelDmPolicy(config, channel, accountId) !== 'pairing') continue;\n      const { pairingPath } = resolvePairingPaths(channel, accountId);\n      const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n        (r) => requestAccountId(r) === accountId,\n      );\n      const stats = pendingEntryStats(pendingRaw);\n      if (stats.pending > 0) {\n        issues.push({ channel, accountId, ...stats });\n      }\n    }\n  }\n  return issues;\n}\n\nexport function listChannelPairingState(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  config?: Config;\n}): ChannelPairingState {\n  const accountId = normalizeAccountId(params.accountId);\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const pendingRaw = listPendingPairingRequestsSync(pairingPath).filter(\n    (r) => requestAccountId(r) === accountId,\n  );\n  return {\n    channel: params.channel,\n    accountId,\n    dmPolicy: resolveChannelDmPolicy(params.config, params.channel, accountId),\n    pending: pendingRaw.map(toPendingView),\n    paired: {\n      fromConfig:\n        channelResolver(params.channel).resolveAllowFromConfig?.(params.config, params.channel, accountId) ??\n        defaultAllowFromConfig(params.config, params.channel, accountId),\n      fromCredentials: readAllowFromIdsSync(allowPath),\n    },\n  };\n}\n\nexport function approveChannelPairing(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  code: string;\n}): { ok: true; senderId: string; alreadyPaired: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const code = params.code.trim();\n  if (!code) return { ok: false, error: 'Missing pairing code.' };\n\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const alreadyPaired = readAllowFromIdsSync(allowPath);\n\n  const result = approvePairingCodeSync({\n    pairingFilePath: pairingPath,\n    allowFromFilePath: allowPath,\n    code,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'Invalid or expired pairing code (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.approved', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return {\n    ok: true,\n    senderId: result.senderId,\n    alreadyPaired: alreadyPaired.includes(result.senderId),\n  };\n}\n\nexport function approveChannelPairingBySender(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; senderId: string; alreadyPaired: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { pairingPath, allowPath } = resolvePairingPaths(params.channel, accountId);\n  const alreadyPaired = readAllowFromIdsSync(allowPath);\n\n  const result = approvePairingBySenderIdSync({\n    pairingFilePath: pairingPath,\n    allowFromFilePath: allowPath,\n    senderId,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'No pending pairing request for this sender (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.approved', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return {\n    ok: true,\n    senderId: result.senderId,\n    alreadyPaired: alreadyPaired.includes(result.senderId),\n  };\n}\n\nexport function revokeChannelPairingPaired(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; changed: boolean } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { allowPath } = resolvePairingPaths(params.channel, accountId);\n  const { changed } = removeAllowFromIdSync(allowPath, senderId);\n  if (changed) {\n    broadcastPairingEvent('channels.pairing.revoked', {\n      channel: params.channel,\n      accountId,\n      senderId,\n    });\n  }\n  return { ok: true, changed };\n}\n\nexport function dismissChannelPairingPending(params: {\n  channel: PairingCliChannel;\n  accountId?: string;\n  senderId: string;\n}): { ok: true; senderId: string } | { ok: false; error: string } {\n  const accountId = normalizeAccountId(params.accountId);\n  const senderId = params.senderId.trim();\n  if (!senderId) return { ok: false, error: 'Missing sender id.' };\n\n  const { pairingPath } = resolvePairingPaths(params.channel, accountId);\n  const result = dismissPairingBySenderIdSync({\n    pairingFilePath: pairingPath,\n    senderId,\n    accountId,\n  });\n  if (!result) {\n    return { ok: false, error: 'No pending pairing request for this sender (or wrong account).' };\n  }\n  broadcastPairingEvent('channels.pairing.dismissed', {\n    channel: params.channel,\n    accountId,\n    senderId: result.senderId,\n  });\n  return { ok: true, senderId: result.senderId };\n}\n"],"mappings":";;;;;;;AAqDA,MAAM,mCAAmB,IAAI,KAA2C;AAExE,SAAgB,+BACd,SACA,UACM;CACN,MAAM,KAAK,QAAQ,MAAM,CAAC,aAAa;AACvC,KAAI,CAAC,GAAI;AACT,kBAAiB,IAAI,IAAI,SAAS;;AAGpC,SAAS,mBAAmB,WAAuC;AACjE,SAAQ,aAAa,WAAW,MAAM,CAAC,aAAa,IAAI;;AAG1D,SAAS,aAAa,QAA4B,SAA4D;CAC5G,MAAM,KAAK,QAAQ,WAAW;AAC9B,QAAO,MAAM,OAAO,OAAO,YAAY,CAAC,MAAM,QAAQ,GAAG,GAAI,KAAiC;;AAGhG,SAAS,gBAAgB,SAA0D;AACjF,QAAO,iBAAiB,IAAI,QAAQ,MAAM,CAAC,aAAa,CAAC,IAAI;;AAG/D,SAAS,oBAAoB,SAA4B,WAAiC;CACxF,MAAM,aAAa,mBAAmB,UAAU;AAChD,QAAO;EACL,aAAa,2BAA2B,SAAS,WAAW;EAC5D,WAAW,6BAA6B,SAAS,WAAW;EAC7D;;AAGH,SAAS,uBACP,QACA,SACA,WACU;CACV,MAAM,QAAQ,aAAa,QAAQ,QAAQ;AAC3C,KAAI,CAAC,MAAO,QAAO,EAAE;CACrB,MAAM,MAAM,MAAM,QAAQ,MAAM,UAAU,GACtC,MAAM,UAAU,IAAI,OAAO,CAAC,OAAO,QAAQ,GAC3C,EAAE;CACN,MAAM,WAAW,MAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GACzD,MAAM,UAAW,IAAgC;AACjD,OAAI,MAAM,QAAQ,QAAQ,CACxB,QAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC;;;AAI3E,QAAO,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC;;AAG1B,SAAS,sBAAsB,QAA4B,SAAqC;AAC9F,QAAO,aAAa,QAAQ,QAAQ,EAAE,YAAY;;AAGpD,SAAS,sBACP,QACA,SACA,WACS;AACT,KAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE,QAAO;CACpD,MAAM,WAAW,aAAa,QAAQ,QAAQ,EAAE;AAChD,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,CACvD,QAAQ,IAA8B,YAAY;;AAGtD,QAAO;;AAGT,SAAS,gBAAgB,QAA4B,SAA4B,WAA6B;CAC5G,MAAM,QAAQ,aAAa,QAAQ,QAAQ;AAC3C,KAAI,CAAC,MAAO,QAAO,gBAAgB,KAAA,GAAW,UAAU;CACxD,MAAM,WAAW,MAAM;AACvB,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,MAAO,SAAqC;AAClD,MAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GACzD,MAAM,YAAa,IAAgC;AACnD,OAAI,UAAW,QAAO,gBAAgB,WAAW,UAAU;;;AAG/D,QAAO,gBAAgB,MAAM,UAAkC,UAAU;;AAG3E,SAAS,kBAAkB,QAA4B,SAAsC;CAC3F,MAAM,WAAW,aAAa,QAAQ,QAAQ,EAAE;AAChD,KAAI,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,SAAS,EAAE;EACxE,MAAM,OAAO,OAAO,KAAK,SAAoC,CAAC,MAAM;AACpE,MAAI,KAAK,SAAS,EAAG,QAAO;;AAE9B,QAAO,CAAC,UAAU;;AAGpB,MAAM,yBAAuD;CAC3D,wBAAwB;CACxB,uBAAuB;CACvB,uBAAuB;CACvB,iBAAiB;CACjB,mBAAmB;CACpB;AAED,SAAS,oBAAoB,SAA4B,WAAiC;AACxF,QAAO,gBAAgB,QAAQ,CAAC,eAAe,mBAAmB,UAAU,CAAC,IAC3E,oBAAoB,SAAS,UAAU;;AAG3C,SAAS,iBAAiB,OAA+B;AAEvD,QADiB,MAAM,MAAM,WAAW,MAAM,CAAC,aAAa,IACzC;;AAGrB,SAAS,cAAc,OAA2C;CAChE,MAAM,YAAY,KAAK,MAAM,MAAM,UAAU;CAC7C,MAAM,YAAY,OAAO,SAAS,UAAU,GACxC,IAAI,KAAK,YAAY,uBAAuB,CAAC,aAAa,GAC1D,IAAI,KAAK,KAAK,KAAK,GAAG,uBAAuB,CAAC,aAAa;CAC/D,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,YAAY,KAAK,UAAU,IAAI,KAAK,MAAM,GAAG,GAAG;CACtD,MAAM,OACJ,MAAM,QAAQ,OAAO,MAAM,SAAS,WAChC,OAAO,YACL,OAAO,QAAQ,MAAM,KAAK,CAAC,QACxB,CAAC,GAAG,OAAO,MAAM,eAAe,OAAO,MAAM,YAAY,EAAE,MAAM,KAAK,GACxE,CACF,GACD,KAAA;AACN,QAAO;EACL,UAAU,MAAM;EAChB;EACA,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB;EACA,SACE,OAAO,SAAS,UAAU,IAAI,KAAK,KAAK,GAAI,aAAA;EAC9C,MAAM,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,KAAA;EACrD;;AAGH,SAAS,kBAAkB,SAIzB;CACA,MAAM,MAAM,KAAK,KAAK;CACtB,IAAI,QAAQ;AACZ,MAAK,MAAM,KAAK,SAAS;EACvB,MAAM,UAAU,KAAK,MAAM,EAAE,UAAU;AACvC,MAAI,OAAO,SAAS,QAAQ,IAAI,MAAM,WAAA,KACpC,UAAS;;AAGb,QAAO;EACL,SAAS,QAAQ;EACjB;EACA,YAAY,QAAQ,UAAA;EACrB;;AAGH,SAAS,sBAAsB,QAA4B,SAAqC;AAC9F,QAAO,gBAAgB,QAAQ,CAAC,wBAAwB,QAAQ,QAAQ,IACtE,sBAAsB,QAAQ,QAAQ;;AAG1C,SAAS,sBACP,QACA,SACA,WACS;AACT,QAAO,gBAAgB,QAAQ,CAAC,wBAAwB,QAAQ,SAAS,UAAU,IACjF,sBAAsB,QAAQ,SAAS,UAAU;;AAGrD,SAAS,uBACP,QACA,SACA,WACU;AACV,QAAO,gBAAgB,QAAQ,CAAC,kBAAkB,QAAQ,SAAS,UAAU,IAC3E,gBAAgB,QAAQ,SAAS,UAAU;;AAmB/C,SAAS,yBAAyB,QAA4B,SAAsC;AAClG,QAAO,gBAAgB,QAAQ,CAAC,oBAAoB,QAAQ,QAAQ,IAClE,kBAAkB,QAAQ,QAAQ;;AAGtC,SAAgB,0BAA0B,QAAwC;CAChF,MAAM,WAAW,OAAO,KAAK,QAAQ,YAAY,EAAE,CAAC;CACpD,MAAM,UAAiC,EAAE;AACzC,MAAK,MAAM,WAAW,UAAU;AAC9B,MAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE;AAC7C,UAAQ,WAAW;GAAE,SAAS;GAAG,OAAO;GAAG,YAAY;GAAO;EAC9D,MAAM,aAAa,yBAAyB,QAAQ,QAAQ;AAC5D,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,CAAC,sBAAsB,QAAQ,SAAS,UAAU,CAAE;AACxD,OAAI,uBAAuB,QAAQ,SAAS,UAAU,KAAK,UAAW;GACtE,MAAM,EAAE,gBAAgB,oBAAoB,SAAS,UAAU;GAI/D,MAAM,QAAQ,kBAHK,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAES,CAAC;AAC3C,WAAQ,SAAU,WAAW,MAAM;AACnC,WAAQ,SAAU,SAAS,MAAM;AACjC,WAAQ,SAAU,eAAe,MAAM;;;AAG3C,QAAO;;AAGT,SAAgB,4BAA4B,QAAwC;CAClF,MAAM,SAAgC,EAAE;AACxC,MAAK,MAAM,WAAW,OAAO,KAAK,QAAQ,YAAY,EAAE,CAAC,EAAE;AACzD,MAAI,CAAC,sBAAsB,QAAQ,QAAQ,CAAE;EAC7C,MAAM,aAAa,yBAAyB,QAAQ,QAAQ;AAC5D,OAAK,MAAM,aAAa,YAAY;AAClC,OAAI,CAAC,sBAAsB,QAAQ,SAAS,UAAU,CAAE;AACxD,OAAI,uBAAuB,QAAQ,SAAS,UAAU,KAAK,UAAW;GACtE,MAAM,EAAE,gBAAgB,oBAAoB,SAAS,UAAU;GAI/D,MAAM,QAAQ,kBAHK,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAES,CAAC;AAC3C,OAAI,MAAM,UAAU,EAClB,QAAO,KAAK;IAAE;IAAS;IAAW,GAAG;IAAO,CAAC;;;AAInD,QAAO;;AAGT,SAAgB,wBAAwB,QAIhB;CACtB,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,aAAa,+BAA+B,YAAY,CAAC,QAC5D,MAAM,iBAAiB,EAAE,KAAK,UAChC;AACD,QAAO;EACL,SAAS,OAAO;EAChB;EACA,UAAU,uBAAuB,OAAO,QAAQ,OAAO,SAAS,UAAU;EAC1E,SAAS,WAAW,IAAI,cAAc;EACtC,QAAQ;GACN,YACE,gBAAgB,OAAO,QAAQ,CAAC,yBAAyB,OAAO,QAAQ,OAAO,SAAS,UAAU,IAClG,uBAAuB,OAAO,QAAQ,OAAO,SAAS,UAAU;GAClE,iBAAiB,qBAAqB,UAAU;GACjD;EACF;;AAGH,SAAgB,sBAAsB,QAIoD;CACxF,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,OAAO,OAAO,KAAK,MAAM;AAC/B,KAAI,CAAC,KAAM,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB;CAE/D,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,gBAAgB,qBAAqB,UAAU;CAErD,MAAM,SAAS,uBAAuB;EACpC,iBAAiB;EACjB,mBAAmB;EACnB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAuD;AAEpF,uBAAsB,6BAA6B;EACjD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EACL,IAAI;EACJ,UAAU,OAAO;EACjB,eAAe,cAAc,SAAS,OAAO,SAAS;EACvD;;AAGH,SAAgB,8BAA8B,QAI4C;CACxF,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,aAAa,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACjF,MAAM,gBAAgB,qBAAqB,UAAU;CAErD,MAAM,SAAS,6BAA6B;EAC1C,iBAAiB;EACjB,mBAAmB;EACnB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkE;AAE/F,uBAAsB,6BAA6B;EACjD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EACL,IAAI;EACJ,UAAU,OAAO;EACjB,eAAe,cAAc,SAAS,OAAO,SAAS;EACvD;;AAGH,SAAgB,2BAA2B,QAIuB;CAChE,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,cAAc,oBAAoB,OAAO,SAAS,UAAU;CACpE,MAAM,EAAE,YAAY,sBAAsB,WAAW,SAAS;AAC9D,KAAI,QACF,uBAAsB,4BAA4B;EAChD,SAAS,OAAO;EAChB;EACA;EACD,CAAC;AAEJ,QAAO;EAAE,IAAI;EAAM;EAAS;;AAG9B,SAAgB,6BAA6B,QAIqB;CAChE,MAAM,YAAY,mBAAmB,OAAO,UAAU;CACtD,MAAM,WAAW,OAAO,SAAS,MAAM;AACvC,KAAI,CAAC,SAAU,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsB;CAEhE,MAAM,EAAE,gBAAgB,oBAAoB,OAAO,SAAS,UAAU;CACtE,MAAM,SAAS,6BAA6B;EAC1C,iBAAiB;EACjB;EACA;EACD,CAAC;AACF,KAAI,CAAC,OACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkE;AAE/F,uBAAsB,8BAA8B;EAClD,SAAS,OAAO;EAChB;EACA,UAAU,OAAO;EAClB,CAAC;AACF,QAAO;EAAE,IAAI;EAAM,UAAU,OAAO;EAAU"}

package/dist/src/chat-commands/builtins/config.js

@@ -51,17 +51,10 @@ function senderMayWritePersistentConfig(ctx) {
 	const tg = cfg.channels?.telegram;
 	if (!tg?.enabled) return false;
 	const accountId = parseSessionKey(sessionKey)?.accountId ?? "default";
-	let allowFrom = [];
-	let groupAllowFrom = [];
-	if (tg.accounts && Object.keys(tg.accounts).length > 0) {
-		const acc = tg.accounts[accountId] ?? tg.accounts["default"];
-		if (!acc || acc.enabled === false) return false;
-		allowFrom = [...acc.allowFrom ?? []];
-		groupAllowFrom = [...acc.groupAllowFrom ?? []];
-	} else {
-		allowFrom = [...tg.allowFrom ?? []];
-		groupAllowFrom = [...tg.groupAllowFrom ?? []];
-	}
+	const acc = tg.accounts?.[accountId] ?? tg.accounts?.["default"];
+	if (!acc || acc.enabled === false) return false;
+	const allowFrom = [...acc.allowFrom ?? []];
+	const groupAllowFrom = [...acc.groupAllowFrom ?? []];
 	const list = isGroup && groupAllowFrom.length > 0 ? groupAllowFrom : allowFrom;
 	if (list.length === 0) return false;
 	return resolveAllowlistMatchSimple({