nduka 1.0.0

package/dist/owner/help.js

@@ -0,0 +1,96 @@
+import { getOcrHelpSection } from './ocr-help.js';
+export function getDetailedOwnerHelp() {
+    return [
+        '👑 *Owner Help*',
+        '',
+        '*Targets*',
+        'Use an alias like `joe`, a shortcut like `#1` or `1`, a display name like `JP`, or a raw WhatsApp JID.',
+        'Best flow: `/inbox` or `/chats` → `/alias set #1 joe` → use `joe` in commands.',
+        '',
+        '*Inbox and profiles*',
+        '`/inbox` — Shows support inbox with status, priority, labels, and last message.',
+        '`/inbox urgent` — Shows urgent chats only.',
+        '`/inbox human` — Shows chats in human handoff or pending human review.',
+        '`/inbox unresolved` — Shows active chats that are not resolved.',
+        '`/profile joe` — Shows profile, status, priority, labels, notes, and recent messages.',
+        '`/note joe likes short replies` — Saves a private owner note.',
+        '`/notes joe` — Shows saved notes.',
+        '`/language joe English` — Saves preferred language.',
+        '',
+        '*Status and handoff*',
+        '`/status joe` — View support status.',
+        '`/status JP` — You can also target by display name when it is unique.',
+        '`/status 1` — You can use the current inbox number without the # sign.',
+        '`/status joe waiting_owner` — Set status manually.',
+        'Statuses: `ai`, `pending`, `human`, `waiting_customer`, `waiting_owner`, `resolved`, `blocked`.',
+        '`/pause joe 60` — Pauses AI for one customer for 60 minutes.',
+        '`/continue joe` — Resumes AI for one customer.',
+        '`/resolve joe` — Marks a chat resolved. New messages are stored without AI replying.',
+        '`/reopen joe` — Reopens a resolved or blocked chat.',
+        '`/pending joe` — Marks as pending human review.',
+        '`/waiting joe customer` — Marks as waiting on the customer.',
+        '`/waiting joe owner` — Marks as waiting on the owner.',
+        '`/block joe` — Stops AI replies for one chat until reopened.',
+        '',
+        '*Labels and priority*',
+        '`/label joe urgent` — Adds a label.',
+        '`/labels joe` — Lists labels.',
+        '`/unlabel joe urgent` — Removes a label.',
+        '`/priority joe high` — Sets priority. Options: `low`, `normal`, `high`, `urgent`.',
+        '',
+        '*Scheduling*',
+        '`/schedule joe 08:00 Good morning` — Schedule for the next 08:00 in the bot timezone.',
+        '`/schedule joe in 3 hours Good morning` — Schedule using a relative delay.',
+        '`/schedule joe 2 weeks from now Follow up` — Schedule up to 30 days ahead.',
+        '`/schedule joe Friday at 4 pm Follow up` — Schedule by weekday and wall-clock time.',
+        '`/schedule JP 2026-07-10 08:00 Good morning` — Schedule for a specific date and time.',
+        '`/scheduled` — List pending scheduled messages.',
+        '`/cancel_schedule 1` — Cancel a pending scheduled message by ID.',
+        '',
+        '*Knowledge Base*',
+        '`/kb add Booking Policy | Customers book by sending their name and preferred time.` — Add owner-curated knowledge.',
+        '`/kb list` — List knowledge documents.',
+        '`/kb search refund policy` — Search knowledge documents.',
+        '`/kb test "How do I book?"` — Test retrieval.',
+        '`/kb delete 1` — Delete one knowledge document.',
+        '`/kb clear confirm` — Clear all knowledge documents.',
+        '',
+        getOcrHelpSection(),
+        '',
+        '*Aliases and context*',
+        '`/chats` — Shows recent customer chats with # shortcuts.',
+        '`/alias set #1 joe` — Saves #1 as @joe.',
+        '`/alias list` — Shows aliases.',
+        '`/context` — Shows owner context status. It does not reset anything.',
+        '`/context tokens` — Shows highest stored context by estimated tokens.',
+        '`/context history joe 10` — Shows last 10 stored messages for one customer.',
+        '`/context search joe refund` — Searches stored context for one customer only.',
+        '`/context compact joe 20` — Compacts one chat and keeps 20 recent messages.',
+        '`/context reset joe confirm` — Clears memory for one targeted chat only.',
+        '`/context reset all confirm` — Clears stored memory for every chat.',
+        '',
+        '*Custom connectors*',
+        '`/connectors status` — Shows custom connector manifest status.',
+        '`/connectors list` — Lists configured custom connectors.',
+        '`/connectors validate` — Validates the connector manifest.',
+        '`/connectors plan` — Previews a connector URL without network access.',
+        '`/connectors audit` — Shows connector audit events.',
+        '',
+        '*Model, usage, and system*',
+        '`/model` — Shows current model.',
+        '`/models` — Lists models.',
+        '`/model` — Shows the settings-backed chat model route.',
+        '`/usage today` — Shows usage today.',
+        '`/usage top` — Shows highest-usage chats.',
+        '`/usage users` — Shows highest token usage by user JID.',
+        '`/usage joe` — Shows usage for one customer.',
+        '`/config` — Shows config.',
+        '`/config thinking off` — Disables thinking-output cleanup mode.',
+        '`/stats` — Shows system stats.',
+        '`/audit` — Shows recent owner audit log.',
+        '',
+        '*Safety rule*',
+        'These controls only work in owner self-chat. Customer chats receive customer-safe help only.',
+    ].join('\n');
+}
+//# sourceMappingURL=help.js.map

package/dist/owner/help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../src/owner/help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,iBAAiB;QACjB,EAAE;QACF,WAAW;QACX,wGAAwG;QACxG,gFAAgF;QAChF,EAAE;QACF,sBAAsB;QACtB,iFAAiF;QACjF,4CAA4C;QAC5C,wEAAwE;QACxE,iEAAiE;QACjE,uFAAuF;QACvF,+DAA+D;QAC/D,mCAAmC;QACnC,qDAAqD;QACrD,EAAE;QACF,sBAAsB;QACtB,sCAAsC;QACtC,uEAAuE;QACvE,wEAAwE;QACxE,oDAAoD;QACpD,iGAAiG;QACjG,8DAA8D;QAC9D,gDAAgD;QAChD,sFAAsF;QACtF,qDAAqD;QACrD,iDAAiD;QACjD,6DAA6D;QAC7D,uDAAuD;QACvD,8DAA8D;QAC9D,EAAE;QACF,uBAAuB;QACvB,qCAAqC;QACrC,+BAA+B;QAC/B,0CAA0C;QAC1C,mFAAmF;QACnF,EAAE;QACF,cAAc;QACd,uFAAuF;QACvF,4EAA4E;QAC5E,4EAA4E;QAC5E,qFAAqF;QACrF,uFAAuF;QACvF,iDAAiD;QACjD,kEAAkE;QAClE,EAAE;QACF,kBAAkB;QAClB,oHAAoH;QACpH,wCAAwC;QACxC,0DAA0D;QAC1D,+CAA+C;QAC/C,iDAAiD;QACjD,sDAAsD;QACtD,EAAE;QACF,iBAAiB,EAAE;QACnB,EAAE;QACF,uBAAuB;QACvB,0DAA0D;QAC1D,yCAAyC;QACzC,gCAAgC;QAChC,sEAAsE;QACtE,uEAAuE;QACvE,6EAA6E;QAC7E,+EAA+E;QAC/E,6EAA6E;QAC7E,0EAA0E;QAC1E,qEAAqE;QACrE,EAAE;QACF,qBAAqB;QACrB,gEAAgE;QAChE,0DAA0D;QAC1D,4DAA4D;QAC5D,uEAAuE;QACvE,qDAAqD;QACrD,EAAE;QACF,4BAA4B;QAC5B,iCAAiC;QACjC,2BAA2B;QAC3B,wDAAwD;QACxD,qCAAqC;QACrC,2CAA2C;QAC3C,yDAAyD;QACzD,8CAA8C;QAC9C,2BAA2B;QAC3B,iEAAiE;QACjE,gCAAgC;QAChC,0CAA0C;QAC1C,EAAE;QACF,eAAe;QACf,8FAA8F;KAC/F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/owner/identity.d.ts

@@ -0,0 +1,45 @@
+import type { WASocket } from '@whiskeysockets/baileys';
+export interface OwnerRecord {
+    ownerJid: string;
+    ownerPhone: string;
+    /** Known LIDs (linked device identifiers) for this owner. Used for owner detection from linked devices. */
+    ownerLids: string[];
+    deviceFingerprint: string;
+    firstPairTimestamp: number;
+    lastSeenTimestamp: number;
+    pairCount: number;
+}
+export declare class OwnerIdentityService {
+    private owner;
+    private ownerFile;
+    constructor(ownerFile?: string);
+    /**
+     * Manually set the owner JID. This should only be called from a trusted
+     * self-chat flow when no owner has been claimed yet.
+     */
+    setOwnerJid(jid: string): void;
+    /**
+     * Detect and persist the owner JID from a connected socket.
+     * This is intentionally conservative: once an owner exists, reconnects may
+     * update last-seen and merge LIDs, but must not silently replace the owner.
+     */
+    detectOwner(sock: WASocket): OwnerRecord | null;
+    /** Update last seen timestamp on successful login. */
+    updateLastSeen(): void;
+    /** Check if a JID belongs to the owner. */
+    isOwner(jid: string, _chatJid?: string): boolean;
+    /** Get the owner record. */
+    getOwner(): OwnerRecord | null;
+    /** Check if owner has been set. */
+    hasOwner(): boolean;
+    /**
+     * Normalize a JID to base form (strip device suffix and preserve domain).
+     * Handles: @s.whatsapp.net, @lid, @g.us
+     */
+    normalizeJid(jid: string): string;
+    private extractPhone;
+    private fingerprintJid;
+    private save;
+    private load;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/owner/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/owner/identity.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,2GAA2G;IAC3G,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,SAAS,CAAS;gBAEd,SAAS,CAAC,EAAE,MAAM;IAK9B;;;OAGG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAoB9B;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,IAAI;IA2C/C,sDAAsD;IACtD,cAAc,IAAI,IAAI;IAOtB,2CAA2C;IAC3C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO;IAWhD,4BAA4B;IAC5B,QAAQ,IAAI,WAAW,GAAG,IAAI;IAI9B,mCAAmC;IACnC,QAAQ,IAAI,OAAO;IAInB;;;OAGG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAYjC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,cAAc;IAItB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,IAAI;CAUb"}

package/dist/owner/identity.js

@@ -0,0 +1,155 @@
+/**
+ * Owner Identity Service
+ *
+ * At first successful login, extracts the linked WhatsApp JID
+ * and persists it as the permanent owner. Only this JID can
+ * execute admin commands. Survives restarts and re-pairings.
+ *
+ * Based on OpenClaw's owner-gated WhatsApp control plane pattern.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+function getDefaultOwnerFile() {
+    return process.env.OWNER_FILE || './data/owner.json';
+}
+export class OwnerIdentityService {
+    owner = null;
+    ownerFile;
+    constructor(ownerFile) {
+        this.ownerFile = ownerFile || getDefaultOwnerFile();
+        this.load();
+    }
+    /**
+     * Manually set the owner JID. This should only be called from a trusted
+     * self-chat flow when no owner has been claimed yet.
+     */
+    setOwnerJid(jid) {
+        const normalized = this.normalizeJid(jid);
+        const isLid = normalized.endsWith('@lid');
+        const existingLids = this.owner?.ownerLids || [];
+        const ownerLids = isLid ? [...new Set([...existingLids, normalized])] : existingLids;
+        const ownerJid = isLid ? (this.owner?.ownerJid || normalized) : normalized;
+        this.owner = {
+            ownerJid,
+            ownerPhone: ownerJid.endsWith('@s.whatsapp.net') ? this.extractPhone(ownerJid) : (this.owner?.ownerPhone || ''),
+            ownerLids,
+            deviceFingerprint: this.fingerprintJid(ownerJid),
+            firstPairTimestamp: this.owner?.firstPairTimestamp || Date.now(),
+            lastSeenTimestamp: Date.now(),
+            pairCount: (this.owner?.pairCount || 0) + 1,
+        };
+        this.save();
+        console.log(`[OwnerIdentity] Owner claimed: ${normalized}${isLid ? ' (LID)' : ''}`);
+    }
+    /**
+     * Detect and persist the owner JID from a connected socket.
+     * This is intentionally conservative: once an owner exists, reconnects may
+     * update last-seen and merge LIDs, but must not silently replace the owner.
+     */
+    detectOwner(sock) {
+        const user = sock.user;
+        if (!user?.id)
+            return null;
+        const baseJid = this.normalizeJid(user.id);
+        const lid = user.lid;
+        const normalizedLid = lid ? this.normalizeJid(lid) : null;
+        if (this.owner) {
+            const currentOwner = this.normalizeJid(this.owner.ownerJid);
+            const lids = normalizedLid
+                ? [...new Set([...(this.owner.ownerLids || []), normalizedLid])]
+                : (this.owner.ownerLids || []);
+            this.owner = {
+                ...this.owner,
+                ownerJid: currentOwner,
+                ownerLids: lids,
+                lastSeenTimestamp: Date.now(),
+                pairCount: (this.owner.pairCount || 0) + 1,
+            };
+            this.save();
+            console.log(`[OwnerIdentity] Owner refreshed: ${this.owner.ownerJid}${normalizedLid ? ` (LID: ${normalizedLid})` : ''}`);
+            return this.getOwner();
+        }
+        const record = {
+            ownerJid: baseJid,
+            ownerPhone: this.extractPhone(baseJid),
+            ownerLids: normalizedLid ? [normalizedLid] : [],
+            deviceFingerprint: this.fingerprintJid(baseJid),
+            firstPairTimestamp: Date.now(),
+            lastSeenTimestamp: Date.now(),
+            pairCount: 1,
+        };
+        this.owner = record;
+        this.save();
+        console.log(`[OwnerIdentity] Owner set: ${record.ownerJid}${normalizedLid ? ` (LID: ${normalizedLid})` : ''}`);
+        return record;
+    }
+    /** Update last seen timestamp on successful login. */
+    updateLastSeen() {
+        if (this.owner) {
+            this.owner.lastSeenTimestamp = Date.now();
+            this.save();
+        }
+    }
+    /** Check if a JID belongs to the owner. */
+    isOwner(jid, _chatJid) {
+        if (!this.owner || !jid)
+            return false;
+        const normalized = this.normalizeJid(jid);
+        const ownerNormalized = this.normalizeJid(this.owner.ownerJid);
+        if (normalized === ownerNormalized)
+            return true;
+        if ((this.owner.ownerLids || []).some(lid => this.normalizeJid(lid) === normalized))
+            return true;
+        return false;
+    }
+    /** Get the owner record. */
+    getOwner() {
+        return this.owner ? { ...this.owner, ownerLids: [...(this.owner.ownerLids || [])] } : null;
+    }
+    /** Check if owner has been set. */
+    hasOwner() {
+        return this.owner !== null;
+    }
+    /**
+     * Normalize a JID to base form (strip device suffix and preserve domain).
+     * Handles: @s.whatsapp.net, @lid, @g.us
+     */
+    normalizeJid(jid) {
+        if (!jid)
+            return '';
+        const stripped = jid.replace(/:(\d+)@/, '@');
+        const local = stripped.split('@')[0];
+        const domain = stripped.includes('@g.us')
+            ? 'g.us'
+            : stripped.includes('@lid')
+                ? 'lid'
+                : 's.whatsapp.net';
+        return `${local}@${domain}`;
+    }
+    extractPhone(jid) {
+        return jid.split('@')[0].replace(/:\d+$/, '');
+    }
+    fingerprintJid(jid) {
+        return jid.slice(0, 20);
+    }
+    save() {
+        const dir = dirname(this.ownerFile);
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        writeFileSync(this.ownerFile, JSON.stringify(this.owner, null, 2), 'utf-8');
+    }
+    load() {
+        if (!existsSync(this.ownerFile))
+            return;
+        try {
+            const raw = JSON.parse(readFileSync(this.ownerFile, 'utf-8'));
+            if (!Array.isArray(raw.ownerLids))
+                raw.ownerLids = [];
+            this.owner = raw;
+        }
+        catch {
+            this.owner = null;
+        }
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/owner/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/owner/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,SAAS,mBAAmB;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,oBAAoB;IACvB,KAAK,GAAuB,IAAI,CAAC;IACjC,SAAS,CAAS;IAE1B,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,mBAAmB,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,GAAW;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QACrF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAE3E,IAAI,CAAC,KAAK,GAAG;YACX,QAAQ;YACR,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;YAC/G,SAAS;YACT,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;YAChD,kBAAkB,EAAE,IAAI,CAAC,KAAK,EAAE,kBAAkB,IAAI,IAAI,CAAC,GAAG,EAAE;YAChE,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;YAC7B,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;SAC5C,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,kCAAkC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,IAAc;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,EAAE;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAI,IAAyB,CAAC,GAAG,CAAC;QAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,aAAa;gBACxB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;gBAChE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAEjC,IAAI,CAAC,KAAK,GAAG;gBACX,GAAG,IAAI,CAAC,KAAK;gBACb,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,IAAI;gBACf,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;gBAC7B,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;aAC3C,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzH,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,GAAgB;YAC1B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACtC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAC/C,kBAAkB,EAAE,IAAI,CAAC,GAAG,EAAE;YAC9B,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE;YAC7B,SAAS,EAAE,CAAC;SACb,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;QAEZ,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sDAAsD;IACtD,cAAc;QACZ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,OAAO,CAAC,GAAW,EAAE,QAAiB;QACpC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAE/D,IAAI,UAAU,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,CAAC;IAED,mCAAmC;IACnC,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,GAAW;QACtB,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YACvC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,gBAAgB,CAAC;QACvB,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC;IAC9B,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChD,CAAC;IAEO,cAAc,CAAC,GAAW;QAChC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC;IAEO,IAAI;QACV,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9E,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAyB,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC;YACtD,IAAI,CAAC,KAAK,GAAG,GAAkB,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/dist/owner/index.d.ts

@@ -0,0 +1,7 @@
+export { OwnerIdentityService } from './identity.js';
+export type { OwnerRecord } from './identity.js';
+export { GlobalConfigService } from './config.js';
+export type { GlobalConfig, AuditEntry } from './config.js';
+export { OwnerRouter } from './router.js';
+export type { RouteResult, RouteTarget } from './router.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/owner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/owner/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/owner/index.js

@@ -0,0 +1,4 @@
+export { OwnerIdentityService } from './identity.js';
+export { GlobalConfigService } from './config.js';
+export { OwnerRouter } from './router.js';
+//# sourceMappingURL=index.js.map

package/dist/owner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/owner/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/owner/ocr-help.d.ts

@@ -0,0 +1,2 @@
+export declare function getOcrHelpSection(): string;
+//# sourceMappingURL=ocr-help.d.ts.map

package/dist/owner/ocr-help.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocr-help.d.ts","sourceRoot":"","sources":["../../src/owner/ocr-help.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,IAAI,MAAM,CAW1C"}

package/dist/owner/ocr-help.js

@@ -0,0 +1,13 @@
+export function getOcrHelpSection() {
+    return [
+        '*Task and OCR model routing*',
+        '`/tasks` — Show all task routes plus OCR-capable providers.',
+        '`/ocrmodels` — Show configured OCR, vision, audio, and text-capable providers.',
+        '`/taskmodel vision_ocr` — Show the selected image/OCR route.',
+        '`/taskmodel pdf_summary` — Show the selected PDF route.',
+        '`/taskmodel audio_transcription` — Show the selected audio route.',
+        'OCR providers can be OpenAI, Claude, Gemini, OpenRouter, Ollama/local, custom HTTP, or local HTTP.',
+        'Generic OCR env: `OCR_PROVIDER`, `OCR_MODEL`, `OCR_ENDPOINT`, and capability flags such as `OCR_SUPPORTS_IMAGES`.',
+    ].join('\n');
+}
+//# sourceMappingURL=ocr-help.js.map

package/dist/owner/ocr-help.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocr-help.js","sourceRoot":"","sources":["../../src/owner/ocr-help.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,iBAAiB;IAC/B,OAAO;QACL,8BAA8B;QAC9B,6DAA6D;QAC7D,gFAAgF;QAChF,8DAA8D;QAC9D,yDAAyD;QACzD,mEAAmE;QACnE,oGAAoG;QACpG,mHAAmH;KACpH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/owner/router.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Owner Router
+ *
+ * Splits WhatsApp message routing BEFORE any command parsing:
+ *
+ *   owner JID → OwnerRouter (admin commands, config, debug)
+ *   all others → UserRouter (conversation only, no command discovery)
+ *
+ * Commands never even execute for non-owner messages.
+ * This eliminates injection, fuzzing, and command discovery.
+ */
+import { OwnerIdentityService } from './identity.js';
+import { GlobalConfigService } from './config.js';
+import type { ModelManager } from '../tools/model-manager.js';
+export type RouteTarget = 'owner_admin' | 'user_conversation';
+export interface RouteResult {
+    target: RouteTarget;
+    isOwner: boolean;
+    isCommand: boolean;
+    reply?: string;
+    command?: string;
+    data?: unknown;
+}
+export declare class OwnerRouter {
+    private ownerIdentity;
+    private globalConfig;
+    private modelManager;
+    constructor(ownerIdentity: OwnerIdentityService, globalConfig: GlobalConfigService, modelManager: ModelManager);
+    /**
+     * Route a message BEFORE any command parsing.
+     * Owner messages get admin routing. Others get user routing.
+     */
+    route(senderJid: string, text: string, isGroup: boolean, chatJid?: string): RouteResult;
+    /**
+     * Check if a text starts with a known user command (exposed to all).
+     */
+    isUserCommand(text: string): boolean;
+    /**
+     * Check if a text starts with an admin command (owner only).
+     */
+    isAdminCommand(text: string): boolean;
+    private handleUserCommand;
+    private handleAdminCommand;
+    /** Get user-safe help (no admin commands exposed). */
+    getUserHelp(): string;
+}
+//# sourceMappingURL=router.d.ts.map

package/dist/owner/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/owner/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAK9D,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,mBAAmB,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA8CD,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,YAAY,CAAe;gBAGjC,aAAa,EAAE,oBAAoB,EACnC,YAAY,EAAE,mBAAmB,EACjC,YAAY,EAAE,YAAY;IAO5B;;;OAGG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW;IAkDvF;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAcpC;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAkBrC,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,kBAAkB;IAgG1B,sDAAsD;IACtD,WAAW,IAAI,MAAM;CAGtB"}

package/dist/owner/router.js

@@ -0,0 +1,229 @@
+// ─── Help ────────────────────────────────────────────────────────────────────
+const OWNER_HELP = [
+    '👑 *Owner Commands*',
+    '',
+    '*Model:*',
+    '`/model` — Show settings-backed chat model route',
+    '`/models` — List settings-backed provider models and task routes',
+    '`/model <name>` — Not supported in memory-only mode; edit LLM settings instead',
+    '',
+    '*Config:*',
+    '`/config` — Show global config',
+    '`/config toggle_group` — Toggle group response',
+    '`/config toggle_tools` — Toggle tools',
+    '`/config memory <N>` — Set max messages per chat (e.g., /config memory 10)',
+    '`/config temp <0-1>` — Set AI temperature',
+    '',
+    '*Memory:*',
+    '`/memory` — Show memory stats per chat',
+    '`/memory clear <jid>` — Clear memory for a chat',
+    '',
+    '*Search:*',
+    '`/search <query>` — Web search',
+    '`/news <query>` — News search',
+    '`/fetch <url>` — Fetch URL',
+    '',
+    '*Other:*',
+    '`/audit` — View audit log (last 10)',
+    '`/help` — This help',
+];
+const USER_HELP = [
+    '🤖 *Available Commands*',
+    '',
+    '`/search <query>` — Search the web',
+    '`/news <query>` — Search news',
+    '`/fetch <url>` — Fetch a webpage',
+    '`/help` — Show this help',
+    '',
+    '_Just send a message for AI conversation!_',
+];
+// ─── Owner Router ────────────────────────────────────────────────────────────
+export class OwnerRouter {
+    ownerIdentity;
+    globalConfig;
+    modelManager;
+    constructor(ownerIdentity, globalConfig, modelManager) {
+        this.ownerIdentity = ownerIdentity;
+        this.globalConfig = globalConfig;
+        this.modelManager = modelManager;
+    }
+    /**
+     * Route a message BEFORE any command parsing.
+     * Owner messages get admin routing. Others get user routing.
+     */
+    route(senderJid, text, isGroup, chatJid) {
+        const isOwner = this.ownerIdentity.isOwner(senderJid, chatJid);
+        // ── NON-OWNER: Never expose admin commands ──
+        if (!isOwner) {
+            const isUserCmd = this.isUserCommand(text);
+            if (isUserCmd) {
+                return {
+                    target: 'user_conversation',
+                    isOwner: false,
+                    isCommand: true,
+                    reply: this.handleUserCommand(text),
+                    command: text.split(' ')[0],
+                };
+            }
+            return { target: 'user_conversation', isOwner: false, isCommand: false };
+        }
+        // ── OWNER: Full admin access ──
+        // Groups: admin commands work in self-chat only
+        if (isGroup) {
+            // Owner in group — treat as normal conversation
+            const isUserCmd = this.isUserCommand(text);
+            if (isUserCmd) {
+                return {
+                    target: 'owner_admin',
+                    isOwner: true,
+                    isCommand: true,
+                    reply: this.handleUserCommand(text),
+                    command: text.split(' ')[0],
+                };
+            }
+            return { target: 'user_conversation', isOwner: true, isCommand: false };
+        }
+        // Owner in DM — full admin
+        const isAdminCmd = this.isAdminCommand(text);
+        if (isAdminCmd) {
+            return {
+                target: 'owner_admin',
+                isOwner: true,
+                isCommand: true,
+                reply: this.handleAdminCommand(text),
+                command: text.split(' ')[0],
+            };
+        }
+        return { target: 'user_conversation', isOwner: true, isCommand: false };
+    }
+    /**
+     * Check if a text starts with a known user command (exposed to all).
+     */
+    isUserCommand(text) {
+        const t = text.trim().toLowerCase();
+        return (t.startsWith('/search') ||
+            t.startsWith('/news') ||
+            t.startsWith('/fetch') ||
+            t.startsWith('/s ') ||
+            t.startsWith('/n ') ||
+            t.startsWith('/f ') ||
+            t === '/help' ||
+            t === '/h');
+    }
+    /**
+     * Check if a text starts with an admin command (owner only).
+     */
+    isAdminCommand(text) {
+        const t = text.trim().toLowerCase();
+        return (t.startsWith('/model') ||
+            t.startsWith('/models') ||
+            t.startsWith('/config') ||
+            t.startsWith('/stats') ||
+            t.startsWith('/context') ||
+            t.startsWith('/memory') ||
+            t.startsWith('/audit') ||
+            t.startsWith('/debug') ||
+            t.startsWith('/status') ||
+            t === '/list');
+    }
+    // ─── Command Handlers ──────────────────────────────────────────────────
+    handleUserCommand(text) {
+        // Delegates to ToolRegistry — user commands only
+        return ''; // Will be handled by ToolRegistry in gateway
+    }
+    handleAdminCommand(text) {
+        const parts = text.trim().split(/\s+/);
+        const cmd = parts[0].toLowerCase();
+        switch (cmd) {
+            case '/models':
+            case '/list':
+                return this.modelManager.listModelsFormatted();
+            case '/model': {
+                if (parts.length < 2)
+                    return this.modelManager.statusFormatted();
+                const result = this.modelManager.switchModel(parts.slice(1).join(' '));
+                if (result.success) {
+                    this.globalConfig.set('model', result.model.id, 'owner');
+                    return `✅ Switched to *${result.model.name}*\n\`${result.model.id}\``;
+                }
+                return `❌ ${result.error}`;
+            }
+            case '/config': {
+                if (parts.length < 2)
+                    return this.globalConfig.statusFormatted();
+                const sub = parts[1].toLowerCase();
+                switch (sub) {
+                    case 'toggle_group': {
+                        const enabled = this.globalConfig.toggleGroupResponse('owner');
+                        return `🔊 Group response: ${enabled ? '✅ ON' : '❌ OFF'}`;
+                    }
+                    case 'toggle_tools': {
+                        const enabled = this.globalConfig.toggleTools('owner');
+                        return `🔧 Tools: ${enabled ? '✅ ON' : '❌ OFF'}`;
+                    }
+                    case 'toggle_thinking':
+                    case 'thinking': {
+                        if (parts.length >= 3) {
+                            const val = parts[2].toLowerCase();
+                            const enable = val === 'on' || val === 'true' || val === '1';
+                            this.globalConfig.set('thinkingEnabled', enable, 'owner');
+                            return `🧠 Thinking: ${enable ? '✅ ON' : '❌ OFF (suppressed)'}`;
+                        }
+                        const toggled = this.globalConfig.toggleThinking('owner');
+                        return `🧠 Thinking: ${toggled ? '✅ ON' : '❌ OFF (suppressed)'}`;
+                    }
+                    case 'memory': {
+                        const limit = parseInt(parts[2], 10);
+                        if (isNaN(limit) || limit < 1)
+                            return 'Usage: /config memory <number>';
+                        this.globalConfig.set('maxMessagesPerChat', limit, 'owner');
+                        return `🧠 Memory limit set to *${limit}* messages per chat`;
+                    }
+                    case 'temp': {
+                        const temp = parseFloat(parts[2]);
+                        if (isNaN(temp) || temp < 0 || temp > 1)
+                            return 'Usage: /config temp <0.0-1.0>';
+                        this.globalConfig.set('temperature', temp, 'owner');
+                        return `🌡️ Temperature set to *${temp}*`;
+                    }
+                    default:
+                        return `Unknown config key: "${sub}". Available: toggle_group, toggle_tools, toggle_thinking, thinking on|off, memory, temp`;
+                }
+            }
+            case '/memory': {
+                const parts2 = text.trim().split(/\s+/);
+                if (parts2.length >= 3 && parts2[1] === 'clear') {
+                    return `__OPS_MEMORY_CLEAR__${parts2.slice(2).join(' ')}`;
+                }
+                if (parts2.length >= 2 && !parts2[1].startsWith('-')) {
+                    return `__OPS_MEMORY__${parts2[1]}`;
+                }
+                return '__OPS_MEMORY__';
+            }
+            case '/stats':
+                return '__OPS_STATS__';
+            case '/context': {
+                const ctxParts = text.trim().split(/\s+/);
+                if (ctxParts.length >= 2)
+                    return `__OPS_CONTEXT__${ctxParts.slice(1).join(' ')}`;
+                return 'Usage: /context <customer name or ID>';
+            }
+            case '/audit': {
+                const log = this.globalConfig.getAuditLog(10);
+                if (log.length === 0)
+                    return '📋 No audit entries yet.';
+                return '📋 *Audit Log (last 10)*\n\n' + log.map((e) => `\`${new Date(e.timestamp).toISOString().slice(0, 19)}\` — ${e.command}: ${e.oldValue} → ${e.newValue}`).join('\n');
+            }
+            case '/help':
+            case '/h':
+                return OWNER_HELP.join('\n');
+            default:
+                return '';
+        }
+    }
+    /** Get user-safe help (no admin commands exposed). */
+    getUserHelp() {
+        return USER_HELP.join('\n');
+    }
+}
+//# sourceMappingURL=router.js.map