@yoda.digital/iris-gateway 1.13.3

package/dist/cli/commands/gateway.d.ts

@@ -0,0 +1,8 @@
+import { Command } from "clipanion";
+export declare class GatewayRunCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    config: string | undefined;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=gateway.d.ts.map

package/dist/cli/commands/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAO5C,qBAAa,iBAAkB,SAAQ,OAAO;IAC5C,OAAgB,KAAK,aAAyC;IAE9D,OAAgB,KAAK,4BAMlB;IAEH,MAAM,qBAGH;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAY/B"}

package/dist/cli/commands/gateway.js

@@ -0,0 +1,33 @@
+import { Command, Option } from "clipanion";
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const pkg = require("../../../package.json");
+import { startGateway } from "../../gateway/lifecycle.js";
+import { printBanner } from "../banner.js";
+export class GatewayRunCommand extends Command {
+    static paths = [["gateway", "run"], Command.Default];
+    static usage = Command.Usage({
+        description: "Start the Iris messaging gateway",
+        examples: [
+            ["Start with default config", "iris gateway run"],
+            ["Start with custom config", "iris gateway run --config ./my-config.json"],
+        ],
+    });
+    config = Option.String("--config,-c", {
+        description: "Path to config file",
+        required: false,
+    });
+    async execute() {
+        printBanner(pkg.version);
+        try {
+            const _ctx = await startGateway(this.config);
+            // Gateway is running, wait for shutdown signal
+            await new Promise(() => { }); // Block forever until signal
+        }
+        catch (err) {
+            console.error("Failed to start gateway:", err);
+            process.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/cli/commands/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../../src/cli/commands/gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,uBAAuB,CAAwB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,OAAO,iBAAkB,SAAQ,OAAO;IAC5C,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9D,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE;YACR,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;YACjD,CAAC,0BAA0B,EAAE,4CAA4C,CAAC;SAC3E;KACF,CAAC,CAAC;IAEH,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE;QACpC,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO;QACX,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,+CAA+C;YAC/C,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,6BAA6B;QAC5D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC"}

package/dist/cli/commands/init.d.ts

@@ -0,0 +1,7 @@
+import { Command } from "clipanion";
+export declare class InitCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    execute(): Promise<number>;
+}
+//# sourceMappingURL=init.d.ts.map

package/dist/cli/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4DpC,qBAAa,WAAY,SAAQ,OAAO;IACtC,OAAgB,KAAK,aAAc;IAEnC,OAAgB,KAAK,4BAGlB;IAEG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CA0PjC"}

package/dist/cli/commands/init.js

@@ -0,0 +1,308 @@
+import { Command } from "clipanion";
+import * as p from "@clack/prompts";
+import { writeFile, readFile, access } from "node:fs/promises";
+import { execSync, spawnSync } from "node:child_process";
+import { resolve } from "node:path";
+import * as os from "node:os";
+// ─── helpers ─────────────────────────────────────────────────────────────────
+function detectOpenCode() {
+    for (const bin of ["opencode", "opencode-ai"]) {
+        try {
+            const result = spawnSync("which", [bin], { encoding: "utf-8" });
+            if (result.status === 0 && result.stdout.trim())
+                return result.stdout.trim();
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    return null;
+}
+async function validateTelegramToken(token) {
+    try {
+        const res = await fetch(`https://api.telegram.org/bot${token}/getMe`);
+        const json = (await res.json());
+        return json.ok === true;
+    }
+    catch {
+        return false;
+    }
+}
+async function validateDiscordToken(token) {
+    try {
+        const res = await fetch("https://discord.com/api/v10/users/@me", {
+            headers: { Authorization: `Bot ${token}` },
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function validateSlackAppToken(token) {
+    try {
+        const res = await fetch("https://slack.com/api/apps.connections.open", {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "Content-Type": "application/json",
+            },
+        });
+        const json = (await res.json());
+        return json.ok === true;
+    }
+    catch {
+        return false;
+    }
+}
+// ─── command ─────────────────────────────────────────────────────────────────
+export class InitCommand extends Command {
+    static paths = [["init"]];
+    static usage = Command.Usage({
+        description: "Interactive setup wizard — get from zero to running in under 10 minutes",
+        examples: [["Run the setup wizard", "iris init"]],
+    });
+    async execute() {
+        p.intro("🌸  Iris Setup Wizard");
+        // ── 1. channels ──────────────────────────────────────────────────────────
+        const channelsResult = await p.multiselect({
+            message: "Which channels do you want to enable?",
+            options: [
+                { value: "telegram", label: "Telegram", hint: "requires bot token from @BotFather" },
+                { value: "whatsapp", label: "WhatsApp", hint: "QR-code pairing, no token needed" },
+                { value: "discord", label: "Discord", hint: "requires bot token from Discord Dev Portal" },
+                { value: "slack", label: "Slack", hint: "requires App-Level & Bot tokens" },
+            ],
+            required: true,
+        });
+        if (p.isCancel(channelsResult)) {
+            p.cancel("Setup cancelled.");
+            return 1;
+        }
+        const channels = channelsResult;
+        // ── 2. per-channel tokens ─────────────────────────────────────────────────
+        const env = {};
+        const channelConfig = {};
+        if (channels.includes("telegram")) {
+            const token = await p.text({
+                message: "Enter your Telegram bot token:",
+                placeholder: "123456:ABC-DEF…  (get one from @BotFather)",
+                validate: (v) => (v.trim() === "" ? "Token cannot be empty" : undefined),
+            });
+            if (p.isCancel(token)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            const spin = p.spinner();
+            spin.start("Validating Telegram token…");
+            const ok = await validateTelegramToken(token);
+            spin.stop(ok ? "✓ Token valid" : "⚠ Could not validate — saved anyway");
+            env["TELEGRAM_BOT_TOKEN"] = token;
+            channelConfig["telegram"] = {
+                type: "telegram",
+                enabled: true,
+                token: "${env:TELEGRAM_BOT_TOKEN}",
+            };
+        }
+        if (channels.includes("whatsapp")) {
+            channelConfig["whatsapp"] = { type: "whatsapp", enabled: true };
+            p.note("WhatsApp uses QR-code pairing on first run — no token needed.", "WhatsApp");
+        }
+        if (channels.includes("discord")) {
+            const token = await p.text({
+                message: "Enter your Discord bot token:",
+                placeholder: "MTI3… (Discord Developer Portal → Bot → Token)",
+                validate: (v) => (v.trim() === "" ? "Token cannot be empty" : undefined),
+            });
+            if (p.isCancel(token)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            const spin = p.spinner();
+            spin.start("Validating Discord token…");
+            const ok = await validateDiscordToken(token);
+            spin.stop(ok ? "✓ Token valid" : "⚠ Could not validate — saved anyway");
+            env["DISCORD_BOT_TOKEN"] = token;
+            channelConfig["discord"] = {
+                type: "discord",
+                enabled: true,
+                token: "${env:DISCORD_BOT_TOKEN}",
+            };
+        }
+        if (channels.includes("slack")) {
+            const appToken = await p.text({
+                message: "Enter your Slack App-Level token (xapp-…):",
+                validate: (v) => (v.trim() === "" ? "Token cannot be empty" : undefined),
+            });
+            if (p.isCancel(appToken)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            const botToken = await p.text({
+                message: "Enter your Slack Bot token (xoxb-…):",
+                validate: (v) => (v.trim() === "" ? "Token cannot be empty" : undefined),
+            });
+            if (p.isCancel(botToken)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            const spin = p.spinner();
+            spin.start("Validating Slack App token…");
+            const ok = await validateSlackAppToken(appToken);
+            spin.stop(ok ? "✓ App token valid" : "⚠ Could not validate — saved anyway");
+            env["SLACK_APP_TOKEN"] = appToken;
+            env["SLACK_BOT_TOKEN"] = botToken;
+            channelConfig["slack"] = {
+                type: "slack",
+                enabled: true,
+                appToken: "${env:SLACK_APP_TOKEN}",
+                botToken: "${env:SLACK_BOT_TOKEN}",
+            };
+        }
+        // ── 3. AI model ───────────────────────────────────────────────────────────
+        const modelResult = await p.select({
+            message: "Which AI model do you want to use?",
+            options: [
+                {
+                    value: "openrouter/arcee-ai/arcee-spotlight:free",
+                    label: "Arcee Spotlight (free)",
+                    hint: "OpenRouter — no API key required",
+                },
+                {
+                    value: "openrouter/arcee-ai/trinity-large-preview:free",
+                    label: "Arcee Trinity Large (free)",
+                    hint: "OpenRouter — no API key required",
+                },
+                {
+                    value: "openrouter/meta-llama/llama-3.3-70b-instruct:free",
+                    label: "Llama 3.3 70B Instruct (free)",
+                    hint: "OpenRouter — no API key required",
+                },
+                {
+                    value: "openrouter/mistralai/mistral-7b-instruct:free",
+                    label: "Mistral 7B Instruct (free)",
+                    hint: "OpenRouter — no API key required",
+                },
+                { value: "__custom__", label: "Custom", hint: "enter model identifier manually" },
+            ],
+        });
+        if (p.isCancel(modelResult)) {
+            p.cancel("Setup cancelled.");
+            return 1;
+        }
+        let finalModel = modelResult;
+        if (finalModel === "__custom__") {
+            const customModel = await p.text({
+                message: "Enter model identifier:",
+                placeholder: "e.g. openrouter/meta-llama/llama-3-8b-instruct:free",
+                validate: (v) => (v.trim() === "" ? "Cannot be empty" : undefined),
+            });
+            if (p.isCancel(customModel)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            finalModel = customModel;
+        }
+        if (finalModel.startsWith("openai/")) {
+            const apiKey = await p.text({
+                message: "Enter your OpenAI API key:",
+                validate: (v) => (v.trim() === "" ? "Key cannot be empty" : undefined),
+            });
+            if (p.isCancel(apiKey)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            env["OPENAI_API_KEY"] = apiKey;
+        }
+        else if (finalModel.startsWith("anthropic/")) {
+            const apiKey = await p.text({
+                message: "Enter your Anthropic API key:",
+                validate: (v) => (v.trim() === "" ? "Key cannot be empty" : undefined),
+            });
+            if (p.isCancel(apiKey)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            env["ANTHROPIC_API_KEY"] = apiKey;
+        }
+        // ── 4. OpenCode CLI ───────────────────────────────────────────────────────
+        const ocPath = detectOpenCode();
+        if (ocPath) {
+            p.note(`Detected at ${ocPath}`, "OpenCode CLI ✓");
+        }
+        else {
+            const installOc = await p.confirm({
+                message: "OpenCode CLI not found. Install it now? (npm i -g opencode-ai)",
+                initialValue: true,
+            });
+            if (p.isCancel(installOc)) {
+                p.cancel("Setup cancelled.");
+                return 1;
+            }
+            if (installOc) {
+                const spin = p.spinner();
+                spin.start("Installing OpenCode CLI…");
+                try {
+                    execSync("npm install -g opencode-ai", { stdio: "pipe" });
+                    spin.stop("✓ OpenCode CLI installed");
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    const hint = msg.includes("EACCES") || msg.includes("permission")
+                        ? "Permission denied. Try: sudo npm i -g opencode-ai"
+                        : "Run manually: npm i -g opencode-ai";
+                    spin.stop(`⚠ Install failed — ${hint}`);
+                }
+            }
+            else {
+                p.note("Install later with: npm i -g opencode-ai", "Skipped");
+            }
+        }
+        // ── 5. generate config ────────────────────────────────────────────────────
+        const configPath = resolve(process.cwd(), "iris.config.json");
+        const envPath = resolve(process.cwd(), ".env");
+        let baseConfig = {};
+        try {
+            const examplePath = resolve(process.cwd(), "iris.config.example.json");
+            await access(examplePath);
+            baseConfig = JSON.parse(await readFile(examplePath, "utf-8"));
+        }
+        catch {
+            /* start fresh if no example file */
+        }
+        const config = {
+            ...baseConfig,
+            channels: channelConfig,
+            models: {
+                ...(typeof baseConfig.models === "object" && baseConfig.models !== null
+                    ? baseConfig.models
+                    : {}),
+                primary: finalModel,
+                small: finalModel,
+            },
+        };
+        const spin2 = p.spinner();
+        spin2.start("Writing config files…");
+        await writeFile(configPath, JSON.stringify(config, null, 2) + os.EOL, "utf-8");
+        const envLines = Object.entries(env)
+            .map(([k, v]) => `${k}=${v}`)
+            .join(os.EOL);
+        if (envLines) {
+            await writeFile(envPath, envLines + os.EOL, "utf-8");
+        }
+        spin2.stop("Done");
+        // ── 6. summary ────────────────────────────────────────────────────────────
+        p.note([
+            `✓ iris.config.json  →  ${configPath}`,
+            envLines ? `✓ .env              →  ${envPath}` : "",
+            "",
+            "Next step:",
+            "  iris gateway run",
+        ]
+            .filter(Boolean)
+            .join("\n"), "Setup complete 🎉");
+        p.outro("You're ready. Run: iris gateway run");
+        return 0;
+    }
+}
+//# sourceMappingURL=init.js.map

package/dist/cli/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/cli/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,gFAAgF;AAEhF,SAAS,cAAc;IACrB,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAAa;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,+BAA+B,KAAK,QAAQ,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;QACnD,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAa;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,uCAAuC,EAAE;YAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,KAAK,EAAE,EAAE;SAC3C,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,KAAa;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,6CAA6C,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;QACnD,OAAO,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,WAAY,SAAQ,OAAO;IACtC,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnC,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,yEAAyE;QACtF,QAAQ,EAAE,CAAC,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;KAClD,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO;QACX,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAEjC,4EAA4E;QAE5E,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,WAAW,CAAS;YACjD,OAAO,EAAE,uCAAuC;YAChD,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,oCAAoC,EAAE;gBACpF,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,kCAAkC,EAAE;gBAClF,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,4CAA4C,EAAE;gBAC1F,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE;aAC5E;YACD,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,cAA0B,CAAC;QAE5C,6EAA6E;QAE7E,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,MAAM,aAAa,GAA4B,EAAE,CAAC;QAElD,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBACzB,OAAO,EAAE,gCAAgC;gBACzC,WAAW,EAAE,4CAA4C;gBACzD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;aACzE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAElE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAe,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;YAExE,GAAG,CAAC,oBAAoB,CAAC,GAAG,KAAe,CAAC;YAC5C,aAAa,CAAC,UAAU,CAAC,GAAG;gBAC1B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,2BAA2B;aACnC,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAChE,CAAC,CAAC,IAAI,CAAC,+DAA+D,EAAE,UAAU,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBACzB,OAAO,EAAE,+BAA+B;gBACxC,WAAW,EAAE,gDAAgD;gBAC7D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;aACzE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAElE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,KAAe,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;YAExE,GAAG,CAAC,mBAAmB,CAAC,GAAG,KAAe,CAAC;YAC3C,aAAa,CAAC,SAAS,CAAC,GAAG;gBACzB,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,0BAA0B;aAClC,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC5B,OAAO,EAAE,4CAA4C;gBACrD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;aACzE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAErE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC5B,OAAO,EAAE,sCAAsC;gBAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;aACzE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAErE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1C,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,QAAkB,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;YAE5E,GAAG,CAAC,iBAAiB,CAAC,GAAG,QAAkB,CAAC;YAC5C,GAAG,CAAC,iBAAiB,CAAC,GAAG,QAAkB,CAAC;YAC5C,aAAa,CAAC,OAAO,CAAC,GAAG;gBACvB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,wBAAwB;gBAClC,QAAQ,EAAE,wBAAwB;aACnC,CAAC;QACJ,CAAC;QAED,6EAA6E;QAE7E,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,MAAM,CAAS;YACzC,OAAO,EAAE,oCAAoC;YAC7C,OAAO,EAAE;gBACP;oBACE,KAAK,EAAE,0CAA0C;oBACjD,KAAK,EAAE,wBAAwB;oBAC/B,IAAI,EAAE,kCAAkC;iBACzC;gBACD;oBACE,KAAK,EAAE,gDAAgD;oBACvD,KAAK,EAAE,4BAA4B;oBACnC,IAAI,EAAE,kCAAkC;iBACzC;gBACD;oBACE,KAAK,EAAE,mDAAmD;oBAC1D,KAAK,EAAE,+BAA+B;oBACtC,IAAI,EAAE,kCAAkC;iBACzC;gBACD;oBACE,KAAK,EAAE,+CAA+C;oBACtD,KAAK,EAAE,4BAA4B;oBACnC,IAAI,EAAE,kCAAkC;iBACzC;gBACD,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,EAAE;aAClF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAExE,IAAI,UAAU,GAAG,WAAqB,CAAC;QACvC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC/B,OAAO,EAAE,yBAAyB;gBAClC,WAAW,EAAE,qDAAqD;gBAClE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;aACnE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACxE,UAAU,GAAG,WAAqB,CAAC;QACrC,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,4BAA4B;gBACrC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;aACvE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACnE,GAAG,CAAC,gBAAgB,CAAC,GAAG,MAAgB,CAAC;QAC3C,CAAC;aAAM,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,+BAA+B;gBACxC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;aACvE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACnE,GAAG,CAAC,mBAAmB,CAAC,GAAG,MAAgB,CAAC;QAC9C,CAAC;QAED,6EAA6E;QAE7E,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,CAAC,CAAC,IAAI,CAAC,eAAe,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC;gBAChC,OAAO,EAAE,gEAAgE;gBACzE,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAEtE,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACvC,IAAI,CAAC;oBACH,QAAQ,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC1D,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACxC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,MAAM,IAAI,GACR,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;wBAClD,CAAC,CAAC,mDAAmD;wBACrD,CAAC,CAAC,oCAAoC,CAAC;oBAC3C,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,IAAI,CAAC,0CAA0C,EAAE,SAAS,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,6EAA6E;QAE7E,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAE/C,IAAI,UAAU,GAA4B,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,0BAA0B,CAAC,CAAC;YACvE,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1B,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC3F,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG;YACb,GAAG,UAAU;YACb,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE;gBACN,GAAG,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;oBACrE,CAAC,CAAE,UAAU,CAAC,MAAkC;oBAChD,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,UAAU;aAClB;SACF,CAAC;QAEF,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAErC,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE/E,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnB,6EAA6E;QAE7E,CAAC,CAAC,IAAI,CACJ;YACE,0BAA0B,UAAU,EAAE;YACtC,QAAQ,CAAC,CAAC,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;YACnD,EAAE;YACF,YAAY;YACZ,oBAAoB;SACrB;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,EACb,mBAAmB,CACpB,CAAC;QAEF,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC"}

package/dist/cli/commands/pairing.d.ts

@@ -0,0 +1,19 @@
+import { Command } from "clipanion";
+export declare class PairingApproveCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    code: string;
+    execute(): Promise<void>;
+}
+export declare class PairingListCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    execute(): Promise<void>;
+}
+export declare class PairingRevokeCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    code: string;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=pairing.d.ts.map

package/dist/cli/commands/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAK5C,qBAAa,qBAAsB,SAAQ,OAAO;IAChD,OAAgB,KAAK,aAA4B;IAEjD,OAAgB,KAAK,4BAGlB;IAEH,IAAI,SAAmD;IAEjD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAwB/B;AAED,qBAAa,kBAAmB,SAAQ,OAAO;IAC7C,OAAgB,KAAK,aAAyB;IAE9C,OAAgB,KAAK,4BAGlB;IAEG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB/B;AAED,qBAAa,oBAAqB,SAAQ,OAAO;IAC/C,OAAgB,KAAK,aAA2B;IAEhD,OAAgB,KAAK,4BAGlB;IAEH,IAAI,SAAmD;IAEjD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAe/B"}

package/dist/cli/commands/pairing.js

@@ -0,0 +1,70 @@
+import { Command, Option } from "clipanion";
+import { getStateDir } from "../../config/paths.js";
+import { PairingStore } from "../../security/pairing-store.js";
+import { AllowlistStore } from "../../security/allowlist-store.js";
+export class PairingApproveCommand extends Command {
+    static paths = [["pairing", "approve"]];
+    static usage = Command.Usage({
+        description: "Approve a pairing code and add the sender to the allowlist",
+        examples: [["Approve a pairing code", "iris pairing approve ABCD1234"]],
+    });
+    code = Option.String({ name: "code", required: true });
+    async execute() {
+        const stateDir = getStateDir();
+        const pairingStore = new PairingStore(stateDir);
+        const allowlistStore = new AllowlistStore(stateDir);
+        const result = await pairingStore.approveCode(this.code);
+        if (!result) {
+            this.context.stdout.write(`No pending pairing request found for code: ${this.code}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        await allowlistStore.add(result.channelId, result.senderId, "cli");
+        this.context.stdout.write(`Approved pairing code ${this.code}\n` +
+            `  Channel: ${result.channelId}\n` +
+            `  Sender:  ${result.senderId}\n` +
+            `Added to allowlist.\n`);
+    }
+}
+export class PairingListCommand extends Command {
+    static paths = [["pairing", "list"]];
+    static usage = Command.Usage({
+        description: "List pending pairing requests",
+        examples: [["List all pending requests", "iris pairing list"]],
+    });
+    async execute() {
+        const stateDir = getStateDir();
+        const pairingStore = new PairingStore(stateDir);
+        const pending = await pairingStore.listPending();
+        if (pending.length === 0) {
+            this.context.stdout.write("No pending pairing requests.\n");
+            return;
+        }
+        this.context.stdout.write(`Pending pairing requests (${pending.length}):\n`);
+        for (const req of pending) {
+            const expiresIn = Math.max(0, Math.round((req.expiresAt - Date.now()) / 1000));
+            this.context.stdout.write(`  ${req.code}  channel=${req.channelId}  sender=${req.senderId}  expires in ${expiresIn}s\n`);
+        }
+    }
+}
+export class PairingRevokeCommand extends Command {
+    static paths = [["pairing", "revoke"]];
+    static usage = Command.Usage({
+        description: "Revoke a pending pairing code",
+        examples: [["Revoke a code", "iris pairing revoke ABCD1234"]],
+    });
+    code = Option.String({ name: "code", required: true });
+    async execute() {
+        const stateDir = getStateDir();
+        const pairingStore = new PairingStore(stateDir);
+        const revoked = await pairingStore.revokeCode(this.code);
+        if (revoked) {
+            this.context.stdout.write(`Revoked pairing code: ${this.code}\n`);
+        }
+        else {
+            this.context.stdout.write(`No pending pairing request found for code: ${this.code}\n`);
+            process.exitCode = 1;
+        }
+    }
+}
+//# sourceMappingURL=pairing.js.map

package/dist/cli/commands/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../../src/cli/commands/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,MAAM,OAAO,qBAAsB,SAAQ,OAAO;IAChD,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEjD,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,4DAA4D;QACzE,QAAQ,EAAE,CAAC,CAAC,wBAAwB,EAAE,+BAA+B,CAAC,CAAC;KACxE,CAAC,CAAC;IAEH,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,8CAA8C,IAAI,CAAC,IAAI,IAAI,CAC5D,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEnE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,yBAAyB,IAAI,CAAC,IAAI,IAAI;YACpC,cAAc,MAAM,CAAC,SAAS,IAAI;YAClC,cAAc,MAAM,CAAC,QAAQ,IAAI;YACjC,uBAAuB,CAC1B,CAAC;IACJ,CAAC;;AAGH,MAAM,OAAO,kBAAmB,SAAQ,OAAO;IAC7C,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAE9C,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,CAAC,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;KAC/D,CAAC,CAAC;IAEH,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;QAEjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,MAAM,MAAM,CAAC,CAAC;QAC7E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAChD,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,GAAG,CAAC,IAAI,aAAa,GAAG,CAAC,SAAS,YAAY,GAAG,CAAC,QAAQ,gBAAgB,SAAS,KAAK,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC;;AAGH,MAAM,OAAO,oBAAqB,SAAQ,OAAO;IAC/C,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEhD,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,CAAC,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;KAC9D,CAAC,CAAC;IAEH,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEvD,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEhD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEzD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,8CAA8C,IAAI,CAAC,IAAI,IAAI,CAC5D,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC"}

package/dist/cli/commands/scan.d.ts

@@ -0,0 +1,8 @@
+import { Command } from "clipanion";
+export declare class ScanCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    targetDir: string | undefined;
+    execute(): Promise<number>;
+}
+//# sourceMappingURL=scan.d.ts.map

package/dist/cli/commands/scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAI5C,qBAAa,WAAY,SAAQ,OAAO;IACtC,OAAgB,KAAK,aAAc;IAEnC,OAAgB,KAAK,4BAMlB;IAEH,SAAS,qBAAsC;IAEzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CAiCjC"}

package/dist/cli/commands/scan.js

@@ -0,0 +1,39 @@
+import { Command, Option } from "clipanion";
+import { resolve } from "node:path";
+import { SecurityScanner } from "../../security/scanner.js";
+export class ScanCommand extends Command {
+    static paths = [["scan"]];
+    static usage = Command.Usage({
+        description: "Scan a directory for security issues",
+        examples: [
+            ["Scan current directory", "iris scan"],
+            ["Scan a plugin directory", "iris scan ./plugins/my-plugin"],
+        ],
+    });
+    targetDir = Option.String({ required: false });
+    async execute() {
+        const targetPath = resolve(this.targetDir ?? ".");
+        const scanner = new SecurityScanner();
+        this.context.stdout.write(`Scanning ${targetPath}...\n`);
+        const result = await scanner.scanDirectory(targetPath);
+        this.context.stdout.write(`\nScanned ${result.scannedFiles} files\n`);
+        if (result.findings.length === 0) {
+            this.context.stdout.write("No issues found.\n");
+            return 0;
+        }
+        this.context.stdout.write(`\nFindings: ${result.critical} critical, ${result.warn} warnings, ${result.info} info\n\n`);
+        for (const finding of result.findings) {
+            const severity = finding.severity === "critical"
+                ? "\x1b[31mCRITICAL\x1b[0m"
+                : finding.severity === "warn"
+                    ? "\x1b[33mWARN\x1b[0m"
+                    : "\x1b[34mINFO\x1b[0m";
+            this.context.stdout.write(`  ${severity}  ${finding.ruleId}\n` +
+                `    ${finding.file}:${finding.line}\n` +
+                `    ${finding.message}\n` +
+                `    > ${finding.evidence}\n\n`);
+        }
+        return result.safe ? 0 : 1;
+    }
+}
+//# sourceMappingURL=scan.js.map

package/dist/cli/commands/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/cli/commands/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE5D,MAAM,OAAO,WAAY,SAAQ,OAAO;IACtC,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnC,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE;YACR,CAAC,wBAAwB,EAAE,WAAW,CAAC;YACvC,CAAC,yBAAyB,EAAE,+BAA+B,CAAC;SAC7D;KACF,CAAC,CAAC;IAEH,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/C,KAAK,CAAC,OAAO;QACX,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAEtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,UAAU,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,YAAY,UAAU,CAAC,CAAC;QAEtE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC;QAEvH,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAC9C,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAC3B,CAAC,CAAC,qBAAqB;oBACvB,CAAC,CAAC,qBAAqB,CAAC;YAE5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,QAAQ,KAAK,OAAO,CAAC,MAAM,IAAI;gBACpC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI;gBACvC,OAAO,OAAO,CAAC,OAAO,IAAI;gBAC1B,SAAS,OAAO,CAAC,QAAQ,MAAM,CAChC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC"}

package/dist/cli/commands/security.d.ts

@@ -0,0 +1,15 @@
+import { Command } from "clipanion";
+export declare class SecurityAllowlistListCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    channel: string;
+    execute(): Promise<void>;
+}
+export declare class SecurityAllowlistAddCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    channel: string;
+    senderId: string;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/cli/commands/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAI5C,qBAAa,4BAA6B,SAAQ,OAAO;IACvD,OAAgB,KAAK,aAAuC;IAE5D,OAAgB,KAAK,4BAKlB;IAEH,OAAO,SAAsD;IAEvD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAwB/B;AAED,qBAAa,2BAA4B,SAAQ,OAAO;IACtD,OAAgB,KAAK,aAAsC;IAE3D,OAAgB,KAAK,4BAQlB;IAEH,OAAO,SAAsD;IAC7D,QAAQ,SAAuD;IAEzD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAU/B"}

package/dist/cli/commands/security.js

@@ -0,0 +1,49 @@
+import { Command, Option } from "clipanion";
+import { getStateDir } from "../../config/paths.js";
+import { AllowlistStore } from "../../security/allowlist-store.js";
+export class SecurityAllowlistListCommand extends Command {
+    static paths = [["security", "allowlist", "list"]];
+    static usage = Command.Usage({
+        description: "Show the allowlist for a specific channel",
+        examples: [
+            ["List telegram allowlist", "iris security allowlist list telegram"],
+        ],
+    });
+    channel = Option.String({ name: "channel", required: true });
+    async execute() {
+        const stateDir = getStateDir();
+        const store = new AllowlistStore(stateDir);
+        const entries = await store.list(this.channel);
+        if (entries.length === 0) {
+            this.context.stdout.write(`No allowlist entries for channel: ${this.channel}\n`);
+            return;
+        }
+        this.context.stdout.write(`Allowlist for ${this.channel} (${entries.length}):\n`);
+        for (const entry of entries) {
+            const approvedAt = new Date(entry.approvedAt).toISOString();
+            const approvedBy = entry.approvedBy ?? "unknown";
+            this.context.stdout.write(`  ${entry.senderId}  approved-by=${approvedBy}  at=${approvedAt}\n`);
+        }
+    }
+}
+export class SecurityAllowlistAddCommand extends Command {
+    static paths = [["security", "allowlist", "add"]];
+    static usage = Command.Usage({
+        description: "Add a sender to the allowlist for a channel",
+        examples: [
+            [
+                "Allow a telegram user",
+                "iris security allowlist add telegram 123456789",
+            ],
+        ],
+    });
+    channel = Option.String({ name: "channel", required: true });
+    senderId = Option.String({ name: "senderId", required: true });
+    async execute() {
+        const stateDir = getStateDir();
+        const store = new AllowlistStore(stateDir);
+        await store.add(this.channel, this.senderId, "cli");
+        this.context.stdout.write(`Added ${this.senderId} to allowlist for channel ${this.channel}\n`);
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/cli/commands/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/cli/commands/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAEnE,MAAM,OAAO,4BAA6B,SAAQ,OAAO;IACvD,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE;YACR,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;SACrE;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7D,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,qCAAqC,IAAI,CAAC,OAAO,IAAI,CACtD,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,iBAAiB,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,MAAM,CACvD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,KAAK,KAAK,CAAC,QAAQ,iBAAiB,UAAU,QAAQ,UAAU,IAAI,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;;AAGH,MAAM,OAAO,2BAA4B,SAAQ,OAAO;IACtD,MAAM,CAAU,KAAK,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAU,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACpC,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE;YACR;gBACE,uBAAuB;gBACvB,gDAAgD;aACjD;SACF;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/D,KAAK,CAAC,OAAO;QACX,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAE3C,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,SAAS,IAAI,CAAC,QAAQ,6BAA6B,IAAI,CAAC,OAAO,IAAI,CACpE,CAAC;IACJ,CAAC"}

package/dist/cli/commands/send.d.ts

@@ -0,0 +1,10 @@
+import { Command } from "clipanion";
+export declare class SendCommand extends Command {
+    static paths: string[][];
+    static usage: import("clipanion").Usage;
+    channel: string;
+    target: string;
+    message: string;
+    execute(): Promise<void>;
+}
+//# sourceMappingURL=send.d.ts.map