Method onMessage

src/bot/gateway.ts:80–128

Single entry point for every inbound event from any adapter.

(t: Transport, m: Incoming)

  }

  private key(t: Transport, m: Incoming): string { return `${t.platform}:${m.chatId}`; }

  /** The small control surface a command may drive for this conversation. */
  private controlsFor(t: Transport, chatId: string, key: string): GatewayControls {
    return {
      isBusy: () => this.busy.has(key),
      queueDepth: () => this.queue.get(key)?.length ?? 0,
      abort: () => {
        const ac = this.busy.get(key);
        if (!ac) return false;
        ac.abort();
        getOperatorHub().cancelLane(botLane(key));
        return true;
      },
      reset: async () => {
        this.busy.get(key)?.abort();
        this.queue.delete(key);
        getOperatorHub().cancelLane(botLane(key));
        await this.opts.agent.reset?.(key);
      },
      runTask: (txt) => this.runAndDrain(t, chatId, key, txt),
    };
  }

  /** Run `text` as a turn, serialized per chat: if busy, queue it; else run + drain the queue. */
  private async runAndDrain(t: Transport, chatId: string, key: string, text: string): Promise<void> {
    if (this.busy.has(key)) {
      const q = this.queue.get(key) ?? [];
      q.push(text); this.queue.set(key, q);
      await t.send(chatId, `⏳ Busy — queued (#${q.length}). \`/stop\` to cancel the current task.`);
      return;
    }
    await this.runOne(t, chatId, key, text);
    let next: string | undefined;
    while ((next = this.queue.get(key)?.shift())) await this.runOne(t, chatId, key, next);
    this.queue.delete(key);
  }

  /** Single entry point for every inbound event from any adapter. */
  async onMessage(t: Transport, m: Incoming): Promise<void> {
    const key = this.key(t, m);

    // 1) Auth — closed by default. A coding agent must never run for an unlisted user.
    if (!isAuthorized(t.platform, m.userId, this.opts.allow)) {
      await t.send(m.chatId, '⛔ You are not on this QodeX bot’s allowlist.');
      return;
    }

    // 2) Living-artifact card actions (Approve / Edit / Reject) — handled before permission asks.
    if (m.callbackData?.startsWith('art:')) {
      if (m.callbackId && t.ackCallback) await t.ackCallback(m.callbackId);
      await this.handleCardAction(t, m.chatId, key, m.callbackData);