@0xmaxma/claude-gateway 1.7.6 → 1.7.7

package/dist/api/slack-webhook-router.js

@@ -0,0 +1,280 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeSlackEvent = normalizeSlackEvent;
+exports.verifySlackSignature = verifySlackSignature;
+exports.createSlackWebhookHandler = createSlackWebhookHandler;
+const crypto_1 = require("crypto");
+const logger_1 = require("../logger");
+const slack_access_1 = require("./slack-access");
+const pending_senders_1 = require("./pending-senders");
+const slack_client_1 = require("./slack-client");
+// Requests older than this are rejected outright (Slack's own replay-protection
+// guidance: reject if the timestamp is more than 5 minutes from "now").
+const MAX_REQUEST_AGE_SECONDS = 60 * 5;
+/**
+ * One-time pairing-code message — same visual-match-code contract as LINE's
+ * `pairingMessage` (line-webhook-router.ts), reused verbatim ("ใช้ระบบ pair
+ * เดิม"): the sender reports the code to the admin, who matches it in the UI
+ * before adding them to the allowlist. The sender does NOT reply with it.
+ */
+function pairingMessage(code, kind) {
+    const inChannel = kind === 'group';
+    const thWhere = inChannel ? 'ในช่องนี้' : '';
+    const enWhere = inChannel ? ' in this channel' : '';
+    return (`รหัสจับคู่ (pairing code) ของคุณคือ: ${code}\n` +
+        `กรุณาแจ้งรหัสนี้ให้แอดมินเพื่อขอเปิดใช้งานบอท${thWhere} (ไม่ต้องพิมพ์รหัสตอบกลับ)\n\n` +
+        `Your pairing code: ${code}\n` +
+        `Share this code with the admin to get access${enWhere}. (No need to reply with it.)`);
+}
+/**
+ * Strip a leading/embedded bot self-mention (`<@U…>`) from `app_mention` text.
+ * Slack delivers the raw text with the mention markup inline (e.g.
+ * `<@U0BOT> hello`), which is noise to the agent. Only the bot's OWN id is
+ * removed — mentions of other users are left intact so the agent can still see
+ * who else was referenced. No-op when the bot id is unknown.
+ */
+function stripBotMention(text, botUserId) {
+    if (!text || !botUserId)
+        return text;
+    // Match `<@U123>` or `<@U123|label>` for exactly this bot id.
+    const re = new RegExp(`<@${botUserId}(?:\\|[^>]*)?>`, 'g');
+    return text.replace(re, '').replace(/\s{2,}/g, ' ').trim();
+}
+/**
+ * Normalize a Slack Events API `event` into the gateway's {content, meta}
+ * intake shape. Returns null for anything not handled in v1 (bot-authored
+ * events, missing channel/user, non message/app_mention types — see 2c for
+ * what's deliberately deferred: files, edits, reactions, etc.).
+ */
+function normalizeSlackEvent(event, resolved, botUserId) {
+    if (event.type !== 'message' && event.type !== 'app_mention')
+        return null;
+    // Bot-loop protection (2c #18) — never respond to our own or another bot's
+    // messages. Hard default, not a config toggle.
+    if (event.bot_id)
+        return null;
+    const r = resolved ?? (0, slack_access_1.resolveSlackSource)(event);
+    if (r.kind === 'other' || !r.conversationId)
+        return null;
+    const meta = {
+        source: 'slack',
+        chat_id: r.conversationId,
+        user_id: r.senderId || r.conversationId,
+        user: r.senderId || r.conversationId,
+        message_id: event.ts ?? '',
+        ts: event.event_ts ?? event.ts ?? '',
+        slack_chat_type: r.kind, // 'user' | 'group'
+    };
+    if (event.thread_ts)
+        meta.thread_ts = event.thread_ts;
+    return { content: stripBotMention(event.text ?? '', botUserId), meta };
+}
+/** Verify `X-Slack-Signature` (HMAC-SHA256 of "v0:{timestamp}:{rawBody}") and reject stale requests. */
+function verifySlackSignature(rawBody, signingSecret, timestampHeader, signatureHeader) {
+    if (!signingSecret || !timestampHeader || !signatureHeader)
+        return false;
+    const timestamp = Number(timestampHeader);
+    if (!Number.isFinite(timestamp))
+        return false;
+    if (Math.abs(Date.now() / 1000 - timestamp) > MAX_REQUEST_AGE_SECONDS)
+        return false;
+    const base = `v0:${timestampHeader}:${rawBody.toString('utf8')}`;
+    const expected = `v0=${(0, crypto_1.createHmac)('sha256', signingSecret).update(base).digest('hex')}`;
+    const expectedBuf = Buffer.from(expected, 'utf8');
+    const actualBuf = Buffer.from(signatureHeader, 'utf8');
+    if (expectedBuf.length !== actualBuf.length)
+        return false;
+    return (0, crypto_1.timingSafeEqual)(expectedBuf, actualBuf);
+}
+/** Find the agent that has Slack configured (mirrors resolveLineAgent — single-agent-per-secret POC, or by id). */
+function resolveSlackAgent(agents, agentId) {
+    if (agentId) {
+        const r = agents.get(agentId);
+        return r && r.getAgentConfig().slack?.signingSecret ? r : null;
+    }
+    for (const runner of agents.values()) {
+        if (runner.getAgentConfig().slack?.signingSecret)
+            return runner;
+    }
+    return null;
+}
+// Slack retries an event (at-least-once delivery) if our 200 ack is slow or
+// dropped — event_id is Slack's own dedup key for exactly this case. A bounded
+// map is enough here, not a full LRU: entries are pruned by age on each
+// insert, and Slack's retry window is short (seconds to a few minutes), so
+// this only needs to outlive that window, not forever.
+const SLACK_EVENT_ID_TTL_MS = 10 * 60000;
+function createSlackWebhookHandler(agents, logDir, opts = {}) {
+    const logger = (0, logger_1.createLogger)('slack-webhook', logDir);
+    const seenEventIds = new Map();
+    const isDuplicateSlackEvent = (eventId) => {
+        const now = Date.now();
+        for (const [id, ts] of seenEventIds) {
+            if (now - ts > SLACK_EVENT_ID_TTL_MS)
+                seenEventIds.delete(id);
+        }
+        if (seenEventIds.has(eventId))
+            return true;
+        seenEventIds.set(eventId, now);
+        return false;
+    };
+    // Slack's URL-verification handshake arrives as a signed POST, not a GET —
+    // unlike LINE's Console "Verify" (an empty GET/POST) — so this handler is
+    // effectively unused; kept only because WebhookAppHandler requires it.
+    const verify = (_req, res) => {
+        res.status(200).json({ ok: true });
+    };
+    const handlePost = async (req, res) => {
+        const agentId = req.params.agentId;
+        const runner = resolveSlackAgent(agents, agentId);
+        if (!runner) {
+            res.status(404).json({ error: 'no Slack-enabled agent' });
+            return;
+        }
+        const cfg = runner.getAgentConfig().slack;
+        const secret = cfg?.signingSecret ?? '';
+        const buf = Buffer.isBuffer(req.body) ? req.body : Buffer.from('');
+        if (!verifySlackSignature(buf, secret, req.header('x-slack-request-timestamp'), req.header('x-slack-signature'))) {
+            logger.warn('Slack webhook rejected: bad signature', { agentId: runner.getAgentConfig().id });
+            res.status(401).json({ error: 'invalid signature' });
+            return;
+        }
+        let payload;
+        try {
+            payload = JSON.parse(buf.toString('utf8'));
+        }
+        catch (err) {
+            logger.warn('Slack webhook: bad JSON', { error: err.message });
+            res.status(400).json({ error: 'bad JSON' });
+            return;
+        }
+        // URL verification handshake (signature already verified above — Slack
+        // signs this request type too). Must respond with the raw challenge, not JSON-wrapped.
+        if (payload.type === 'url_verification') {
+            res.status(200).json({ challenge: payload.challenge });
+            return;
+        }
+        // Ack immediately (Slack retries if we don't respond within ~3s) — process after.
+        res.status(200).json({ ok: true });
+        if (payload.type !== 'event_callback')
+            return;
+        const eventId = typeof payload.event_id === 'string' ? payload.event_id : '';
+        if (eventId && isDuplicateSlackEvent(eventId)) {
+            logger.debug('Slack webhook: duplicate event_id (Slack retry), skipping', { eventId });
+            return;
+        }
+        const event = payload.event;
+        if (!event)
+            return;
+        // The bot's own Slack user id — carried on every event_callback in
+        // `authorizations` — used to strip the bot's self-mention from
+        // app_mention text (see normalizeSlackEvent below).
+        const authorizations = payload.authorizations;
+        const botUserId = authorizations?.[0]?.user_id;
+        const deniedAgentId = runner.getAgentConfig().id;
+        const resolved = (0, slack_access_1.resolveSlackSource)(event);
+        // Bot-loop protection before the access gate too — a bot's own message
+        // should never mint a pairing knock either.
+        if (event.bot_id)
+            return;
+        if (!(0, slack_access_1.isResolvedSourceAllowed)(cfg, resolved)) {
+            logger.debug('Slack webhook: source not allowed', {
+                agentId: deniedAgentId,
+                kind: resolved.kind,
+                policy: (resolved.kind === 'user' ? cfg?.dmPolicy : cfg?.groupPolicy) ?? '(closed)',
+                conversationId: resolved.conversationId,
+            });
+            const knockId = resolved.kind === 'user' ? resolved.senderId : resolved.conversationId;
+            if (knockId) {
+                const sourcePolicy = resolved.kind === 'user' ? cfg?.dmPolicy : cfg?.groupPolicy;
+                const isPairing = cfg?.pairing !== false && sourcePolicy !== 'open' && sourcePolicy !== 'disabled';
+                const prev = (0, pending_senders_1.getPendingSender)('slack', deniedAgentId, knockId);
+                const code = prev?.code ?? (isPairing ? (0, pending_senders_1.generatePairingCode)() : undefined);
+                const client = cfg?.botToken
+                    ? new slack_client_1.SlackClient({ botToken: cfg.botToken, logDir, apiBase: opts.apiBase })
+                    : null;
+                let wasNew = false;
+                if (resolved.kind === 'user') {
+                    wasNew = (0, pending_senders_1.recordDeniedSender)('slack', deniedAgentId, knockId, undefined, Date.now(), code);
+                    // Best-effort display-name backfill — mirrors LINE's getProfile() call.
+                    if (client) {
+                        void client
+                            .getUserDisplayName(knockId)
+                            .then((name) => {
+                            const e = (0, pending_senders_1.getPendingSender)('slack', deniedAgentId, knockId);
+                            if (e && name && !e.displayName)
+                                e.displayName = name;
+                        })
+                            .catch(() => { });
+                    }
+                }
+                else if (resolved.kind === 'group') {
+                    wasNew = (0, pending_senders_1.recordDeniedConversation)('slack', deniedAgentId, knockId, 'group', undefined, Date.now(), code);
+                    // Best-effort channel-name backfill — mirrors LINE's getGroupSummary() call.
+                    if (client) {
+                        void client
+                            .getChannelName(knockId)
+                            .then((name) => {
+                            const e = (0, pending_senders_1.getPendingSender)('slack', deniedAgentId, knockId);
+                            if (e && name && !e.displayName)
+                                e.displayName = name;
+                        })
+                            .catch(() => { });
+                    }
+                }
+                // Send the pairing code exactly once — on first contact only.
+                if (isPairing && wasNew && code && client) {
+                    const target = resolved.conversationId;
+                    void client
+                        .postMessage(target, pairingMessage(code, resolved.kind === 'group' ? 'group' : 'user'))
+                        .catch((err) => logger.debug('Slack pairing code reply failed', { error: err.message }));
+                }
+            }
+            return;
+        }
+        const norm = normalizeSlackEvent(event, resolved, botUserId);
+        if (!norm)
+            return;
+        // Channel activation gate: unless requireMention is explicitly false,
+        // only respond to app_mention events in channels (DMs always pass).
+        // event.type === 'app_mention' already IS the "bot was mentioned" signal
+        // at the Slack API level — a plain 'message' event in a channel never
+        // reaches this handler unless the workspace also subscribes to broader
+        // message.* events, so this check is a defensive no-op today but keeps
+        // the same explicit posture LINE's requireMention gate has.
+        if (resolved.kind === 'group' &&
+            cfg?.requireMention !== false &&
+            event.type !== 'app_mention') {
+            logger.debug('Slack webhook: channel message without bot mention, ignoring', {
+                agentId: deniedAgentId,
+                conversationId: resolved.conversationId,
+            });
+            return;
+        }
+        // Ack-reaction (2c): added here on receipt; removed by the `slack_reply`
+        // MCP tool (mcp/tools/slack/module.ts) once the agent's reply actually
+        // posts, using the same `chat_id`/`message_id` passed through `norm.meta`
+        // below — this file only ever adds it, never removes it.
+        const token = cfg?.botToken;
+        if (token) {
+            const client = new slack_client_1.SlackClient({ botToken: token, logDir, apiBase: opts.apiBase });
+            if (event.ts) {
+                void client.addReaction(resolved.conversationId, event.ts).catch(() => { });
+            }
+        }
+        try {
+            await fetch(`http://127.0.0.1:${runner.getCallbackPort()}/channel`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(norm),
+            });
+        }
+        catch (err) {
+            logger.error('Slack webhook: failed to forward to callback', {
+                error: err.message,
+            });
+        }
+    };
+    return { verify, handlePost };
+}
+//# sourceMappingURL=slack-webhook-router.js.map

package/dist/api/slack-webhook-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-webhook-router.js","sourceRoot":"","sources":["../../src/api/slack-webhook-router.ts"],"names":[],"mappings":";;AA6FA,kDAyBC;AAGD,oDAiBC;AA6BD,8DA+LC;AAtVD,mCAAqD;AAErD,sCAAyC;AACzC,iDAKwB;AACxB,uDAK2B;AAC3B,iDAA6C;AAG7C,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,EAAE,GAAG,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,IAAsB;IAC1D,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,OAAO,CACL,wCAAwC,IAAI,IAAI;QAChD,gDAAgD,OAAO,gCAAgC;QACvF,sBAAsB,IAAI,IAAI;QAC9B,+CAA+C,OAAO,+BAA+B,CACtF,CAAC;AACJ,CAAC;AAmBD;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,SAA6B;IAClE,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,8DAA8D;IAC9D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,SAAS,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CACjC,KAAiB,EACjB,QAA8B,EAC9B,SAAkB;IAElB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC1E,2EAA2E;IAC3E,+CAA+C;IAC/C,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,CAAC,GAAG,QAAQ,IAAI,IAAA,iCAAkB,EAAC,KAAuB,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,IAAI,GAA2B;QACnC,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,CAAC,CAAC,cAAc;QACzB,OAAO,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc;QACvC,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE;QAC1B,EAAE,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE;QACpC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,mBAAmB;KAC7C,CAAC;IACF,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAEtD,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,wGAAwG;AACxG,SAAgB,oBAAoB,CAClC,OAAe,EACf,aAAqB,EACrB,eAAmC,EACnC,eAAmC;IAEnC,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAEpF,MAAM,IAAI,GAAG,MAAM,eAAe,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAU,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAA,wBAAe,EAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,mHAAmH;AACnH,SAAS,iBAAiB,CACxB,MAAgC,EAChC,OAAgB;IAEhB,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,aAAa;YAAE,OAAO,MAAM,CAAC;IAClE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,4EAA4E;AAC5E,+EAA+E;AAC/E,wEAAwE;AACxE,2EAA2E;AAC3E,uDAAuD;AACvD,MAAM,qBAAqB,GAAG,EAAE,GAAG,KAAM,CAAC;AAE1C,SAAgB,yBAAyB,CACvC,MAAgC,EAChC,MAAc,EACd,OAA4B,EAAE;IAE9B,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAW,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YACpC,IAAI,GAAG,GAAG,EAAE,GAAG,qBAAqB;gBAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,GAAa,EAAQ,EAAE;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;QACtE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAA6B,CAAC;QACzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC;QAC1C,MAAM,MAAM,GAAG,GAAG,EAAE,aAAa,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,GAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE3E,IACE,CAAC,oBAAoB,CACnB,GAAG,EACH,MAAM,EACN,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,EACvC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAChC,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,uFAAuF;QACvF,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,kFAAkF;QAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnC,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO;QAC9C,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAA+B,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,mEAAmE;QACnE,+DAA+D;QAC/D,oDAAoD;QACpD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAyD,CAAC;QACzF,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QAE/C,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAA,iCAAkB,EAAC,KAAuB,CAAC,CAAC;QAE7D,uEAAuE;QACvE,4CAA4C;QAC5C,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAEzB,IAAI,CAAC,IAAA,sCAAuB,EAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,OAAO,EAAE,aAAa;gBACtB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,UAAU;gBACnF,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;YACvF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC;gBACjF,MAAM,SAAS,GAAG,GAAG,EAAE,OAAO,KAAK,KAAK,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,UAAU,CAAC;gBACnG,MAAM,IAAI,GAAG,IAAA,kCAAgB,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,qCAAmB,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC3E,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ;oBAC1B,CAAC,CAAC,IAAI,0BAAW,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC5E,CAAC,CAAC,IAAI,CAAC;gBAET,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC7B,MAAM,GAAG,IAAA,oCAAkB,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;oBAC1F,wEAAwE;oBACxE,IAAI,MAAM,EAAE,CAAC;wBACX,KAAK,MAAM;6BACR,kBAAkB,CAAC,OAAO,CAAC;6BAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;4BACb,MAAM,CAAC,GAAG,IAAA,kCAAgB,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;4BAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW;gCAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;wBACxD,CAAC,CAAC;6BACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACrC,MAAM,GAAG,IAAA,0CAAwB,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;oBACzG,6EAA6E;oBAC7E,IAAI,MAAM,EAAE,CAAC;wBACX,KAAK,MAAM;6BACR,cAAc,CAAC,OAAO,CAAC;6BACvB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;4BACb,MAAM,CAAC,GAAG,IAAA,kCAAgB,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;4BAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW;gCAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC;wBACxD,CAAC,CAAC;6BACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAED,8DAA8D;gBAC9D,IAAI,SAAS,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;oBAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC;oBACvC,KAAK,MAAM;yBACR,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;yBACvF,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACxG,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,sEAAsE;QACtE,oEAAoE;QACpE,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,4DAA4D;QAC5D,IACE,QAAQ,CAAC,IAAI,KAAK,OAAO;YACzB,GAAG,EAAE,cAAc,KAAK,KAAK;YAC7B,KAAK,CAAC,IAAI,KAAK,aAAa,EAC5B,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBAC3E,OAAO,EAAE,aAAa;gBACtB,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,yDAAyD;QACzD,MAAM,KAAK,GAAG,GAAG,EAAE,QAAQ,CAAC;QAC5B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,IAAI,0BAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;gBACb,KAAK,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,oBAAoB,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBAC3D,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC"}

package/dist/api/webhooks-router.d.ts

@@ -1,23 +1,27 @@
 /**
  * Unified public webhook ingress.
  *
- * All external, unauthenticated webhooks (LINE today; more later) enter through a
- * single route `/webhooks/:app/:agentId?` and are dispatched to a per-app handler
- * by the `:app` path segment. Mounted BEFORE express.json() so each handler sees
- * the raw request bytes it needs for signature validation.
+ * All external, unauthenticated webhooks (LINE, Slack; more later) enter
+ * through a single route `/webhooks/:app/:agentId?` and are dispatched to a
+ * per-app handler by the `:app` path segment. Mounted BEFORE express.json()
+ * so each handler sees the raw request bytes it needs for signature
+ * validation.
  *
  * The whole `/webhooks/*` zone bypasses the gateway's API-key auth (it is mounted
  * outside the /api routers, exactly like the old LINE mount) AND Traefik's
  * ForwardAuth (a single `/gateway/webhooks` bypass router upstream). Therefore
  * EVERY app handler MUST authenticate its own requests (e.g. LINE's HMAC
- * signature) as its first step — there is no ambient auth on this path.
+ * signature, Slack's HMAC signature) as its first step — there is no ambient
+ * auth on this path.
  *
  * Adding a new webhook app = register one entry in `handlers` below; no Traefik or
- * getpod change is needed once the `/gateway/webhooks` ingress exists.
+ * getpod change is needed once the `/gateway/webhooks` ingress exists. Slack is
+ * the first proof this generalizes past LINE — see slack-webhook-router.ts.
  */
 import { Router, type Request, type Response } from 'express';
 import type { AgentRunner } from '../agent/runner';
 import { type LineWebhookOptions } from './line-webhook-router';
+import { type SlackWebhookOptions } from './slack-webhook-router';
 /**
  * A per-app webhook handler. `verify` answers provider URL-verification probes
  * (GET / empty POST); `handlePost` processes a signed inbound POST. Each handler
@@ -28,9 +32,14 @@ export interface WebhookAppHandler {
     handlePost(req: Request, res: Response): Promise<void>;
 }
 /**
- * Options forwarded to app handlers. Only LINE has options today (test-only base
- * URL overrides); generalize to a per-app map when a second app needs its own.
+ * Options forwarded to app handlers, keyed by app so each handler only sees
+ * its own test-only overrides (LINE's apiBase/dataApiBase are meaningless to
+ * Slack and vice versa — a flat merged type would let one app's option leak
+ * into another's constructor by accident).
  */
-export type WebhooksOptions = LineWebhookOptions;
+export interface WebhooksOptions {
+    line?: LineWebhookOptions;
+    slack?: SlackWebhookOptions;
+}
 export declare function createWebhooksRouter(agents: Map<string, AgentRunner>, logDir: string, opts?: WebhooksOptions): Router;
 //# sourceMappingURL=webhooks-router.d.ts.map

package/dist/api/webhooks-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks-router.d.ts","sourceRoot":"","sources":["../../src/api/webhooks-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAI1F;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAEjD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,eAAoB,GACzB,MAAM,CAqCR"}
+{"version":3,"file":"webhooks-router.d.ts","sourceRoot":"","sources":["../../src/api/webhooks-router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAI7F;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAC1B,KAAK,CAAC,EAAE,mBAAmB,CAAC;CAC7B;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,eAAoB,GACzB,MAAM,CAsCR"}

package/dist/api/webhooks-router.js

@@ -37,28 +37,33 @@ exports.createWebhooksRouter = createWebhooksRouter;
 /**
  * Unified public webhook ingress.
  *
- * All external, unauthenticated webhooks (LINE today; more later) enter through a
- * single route `/webhooks/:app/:agentId?` and are dispatched to a per-app handler
- * by the `:app` path segment. Mounted BEFORE express.json() so each handler sees
- * the raw request bytes it needs for signature validation.
+ * All external, unauthenticated webhooks (LINE, Slack; more later) enter
+ * through a single route `/webhooks/:app/:agentId?` and are dispatched to a
+ * per-app handler by the `:app` path segment. Mounted BEFORE express.json()
+ * so each handler sees the raw request bytes it needs for signature
+ * validation.
  *
  * The whole `/webhooks/*` zone bypasses the gateway's API-key auth (it is mounted
  * outside the /api routers, exactly like the old LINE mount) AND Traefik's
  * ForwardAuth (a single `/gateway/webhooks` bypass router upstream). Therefore
  * EVERY app handler MUST authenticate its own requests (e.g. LINE's HMAC
- * signature) as its first step — there is no ambient auth on this path.
+ * signature, Slack's HMAC signature) as its first step — there is no ambient
+ * auth on this path.
  *
  * Adding a new webhook app = register one entry in `handlers` below; no Traefik or
- * getpod change is needed once the `/gateway/webhooks` ingress exists.
+ * getpod change is needed once the `/gateway/webhooks` ingress exists. Slack is
+ * the first proof this generalizes past LINE — see slack-webhook-router.ts.
  */
 const express_1 = __importStar(require("express"));
 const line_webhook_router_1 = require("./line-webhook-router");
+const slack_webhook_router_1 = require("./slack-webhook-router");
 const MAX_BODY_BYTES = 256 * 1024; // pre-auth body cap
 function createWebhooksRouter(agents, logDir, opts = {}) {
     const router = (0, express_1.Router)();
     const rawBody = express_1.default.raw({ type: '*/*', limit: MAX_BODY_BYTES });
     const handlers = {
-        line: (0, line_webhook_router_1.createLineWebhookHandler)(agents, logDir, opts),
+        line: (0, line_webhook_router_1.createLineWebhookHandler)(agents, logDir, opts.line ?? {}),
+        slack: (0, slack_webhook_router_1.createSlackWebhookHandler)(agents, logDir, opts.slack ?? {}),
     };
     const resolve = (req, res) => {
         const app = req.params.app;

package/dist/api/webhooks-router.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks-router.js","sourceRoot":"","sources":["../../src/api/webhooks-router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,oDAyCC;AAhFD;;;;;;;;;;;;;;;;GAgBG;AACH,mDAAuE;AAEvE,+DAA0F;AAE1F,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,oBAAoB;AAkBvD,SAAgB,oBAAoB,CAClC,MAAgC,EAChC,MAAc,EACd,OAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,OAAO,GAAG,iBAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAsC;QAClD,IAAI,EAAE,IAAA,8CAAwB,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;KACrD,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,GAAa,EAA4B,EAAE;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3B,+EAA+E;QAC/E,oFAAoF;QACpF,kFAAkF;QAClF,yCAAyC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAErD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"webhooks-router.js","sourceRoot":"","sources":["../../src/api/webhooks-router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,oDA0CC;AA1FD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,mDAAuE;AAEvE,+DAA0F;AAC1F,iEAA6F;AAE7F,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,oBAAoB;AAuBvD,SAAgB,oBAAoB,CAClC,MAAgC,EAChC,MAAc,EACd,OAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,OAAO,GAAG,iBAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAsC;QAClD,IAAI,EAAE,IAAA,8CAAwB,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/D,KAAK,EAAE,IAAA,gDAAyB,EAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;KACnE,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,GAAa,EAA4B,EAAE;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;QAC3B,+EAA+E;QAC/E,oFAAoF;QACpF,kFAAkF;QAClF,yCAAyC;QACzC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,GAAY,EAAE,GAAa,EAAQ,EAAE;QACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,OAAO;YAAE,KAAK,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAErD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli-viewer/pairing-store.d.ts

@@ -1,11 +1,12 @@
+import { type ChatChannel, isChatChannel } from '../history/types';
 /**
  * Chat channel a `/cli` pairing originated from. The channel already
  * authenticated the requesting user (allowlist / pairing gate) before a pairing
  * is ever created, so the channel + user id recorded here is a trusted binding.
  */
-export type CliChannel = 'telegram' | 'discord' | 'line';
+export type CliChannel = ChatChannel;
 /** Runtime guard for the trusted channel set (payloads cross a process boundary). */
-export declare function isCliChannel(value: unknown): value is CliChannel;
+export declare const isCliChannel: typeof isChatChannel;
 /**
  * Pairing lifecycle:
  *   pending   — created by `/cli`, waiting for proof (chat-approve or initData).

package/dist/cli-viewer/pairing-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pairing-store.d.ts","sourceRoot":"","sources":["../../src/cli-viewer/pairing-store.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE9E,MAAM,WAAW,UAAU;IACzB;4EACwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB;sEACkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB;;iFAE6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;gFAC4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAOD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAE1D,+DAA+D;IAC/D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc;IAmB5E,4EAA4E;IAC5E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI9C,2EAA2E;IAC3E,OAAO,CAAC,MAAM;IAId;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM;IAclF;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM;IAQ3F,2DAA2D;IAC3D,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM;IAQxF;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAoBhF;;;;;;;OAOG;IACH,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAkBnG;;;OAGG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAcrD,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IASb,iCAAiC;IACjC,IAAI,IAAI,MAAM;CAGf;AAED,mFAAmF;AACnF,eAAO,MAAM,eAAe,iBAAwB,CAAC"}
+{"version":3,"file":"pairing-store.d.ts","sourceRoot":"","sources":["../../src/cli-viewer/pairing-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEnE;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC;AAErC,qFAAqF;AACrF,eAAO,MAAM,YAAY,sBAAgB,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE9E,MAAM,WAAW,UAAU;IACzB;4EACwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB;sEACkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;kFAC8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,gBAAgB,CAAC;IACzB;;iFAE6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;gFAC4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAOD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAE1D,+DAA+D;IAC/D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc;IAmB5E,4EAA4E;IAC5E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI9C,2EAA2E;IAC3E,OAAO,CAAC,MAAM;IAId;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM;IAclF;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM;IAQ3F,2DAA2D;IAC3D,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM;IAQxF;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAoBhF;;;;;;;OAOG;IACH,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAkBnG;;;OAGG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAcrD,+EAA+E;IAC/E,KAAK,IAAI,IAAI;IASb,iCAAiC;IACjC,IAAI,IAAI,MAAM;CAGf;AAED,mFAAmF;AACnF,eAAO,MAAM,eAAe,iBAAwB,CAAC"}

package/dist/cli-viewer/pairing-store.js

@@ -3,13 +3,11 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.cliPairingStore = exports.CliPairingStore = void 0;
-exports.isCliChannel = isCliChannel;
+exports.cliPairingStore = exports.CliPairingStore = exports.isCliChannel = void 0;
 const crypto_1 = __importDefault(require("crypto"));
+const types_1 = require("../history/types");
 /** Runtime guard for the trusted channel set (payloads cross a process boundary). */
-function isCliChannel(value) {
-    return value === 'telegram' || value === 'discord' || value === 'line';
-}
+exports.isCliChannel = types_1.isChatChannel;
 /** Approval window: how long the operator has to approve after `/cli`. */
 const PAIRING_TTL_MS = 3 * 60 * 1000;
 /** Viewer session lifetime once unlocked. Short — re-run `/cli` to renew. */

package/dist/cli-viewer/pairing-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"pairing-store.js","sourceRoot":"","sources":["../../src/cli-viewer/pairing-store.ts"],"names":[],"mappings":";;;;;;AAUA,oCAEC;AAZD,oDAA4B;AAS5B,qFAAqF;AACrF,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;AACzE,CAAC;AAsCD,0EAA0E;AAC1E,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,6EAA6E;AAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAOrC;;;;;;;;;;;;;;GAcG;AACH,MAAa,eAAe;IAA5B;QACmB,aAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IA8J5D,CAAC;IA5JC,+DAA+D;IAC/D,MAAM,CAAC,OAAe,EAAE,OAAmB,EAAE,MAAc;QACzD,MAAM,SAAS,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAM,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,SAAS;YACT,OAAO;YACP,OAAO;YACP,MAAM;YACN,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,cAAc;SAChC,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,2EAA2E;IACnE,MAAM,CAAC,CAAyB;QACtC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7F,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,YAAoB;QACjD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1F,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YACpB,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB,EAAE,OAAmB,EAAE,MAAc;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,SAAiB,EAAE,OAAmB,EAAE,MAAc;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC;QACpE,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAiB,EAAE,YAAoB;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,6EAA6E;QAC7E,sCAAsC;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9F,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,WAAW,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC/C,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,0BAA0B,CAAC,SAAiB,EAAE,YAAoB;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9F,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3C,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;QAC9B,MAAM,WAAW,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC/C,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB;QAC/B,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IACE,CAAC,CAAC,MAAM,KAAK,UAAU;gBACvB,CAAC,CAAC,WAAW,KAAK,WAAW;gBAC7B,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EACrC,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YAClE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YAC9E,IAAI,WAAW,IAAI,UAAU;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF;AA/JD,0CA+JC;AAED,mFAAmF;AACtE,QAAA,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC"}
+{"version":3,"file":"pairing-store.js","sourceRoot":"","sources":["../../src/cli-viewer/pairing-store.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAC5B,4CAAmE;AASnE,qFAAqF;AACxE,QAAA,YAAY,GAAG,qBAAa,CAAC;AAsC1C,0EAA0E;AAC1E,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,6EAA6E;AAC7E,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAOrC;;;;;;;;;;;;;;GAcG;AACH,MAAa,eAAe;IAA5B;QACmB,aAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IA8J5D,CAAC;IA5JC,+DAA+D;IAC/D,MAAM,CAAC,OAAe,EAAE,OAAmB,EAAE,MAAc;QACzD,MAAM,SAAS,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAM,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,SAAS;YACT,OAAO;YACP,OAAO;YACP,MAAM;YACN,IAAI;YACJ,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,cAAc;SAChC,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAC5E,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,2EAA2E;IACnE,MAAM,CAAC,CAAyB;QACtC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7F,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,SAAiB,EAAE,YAAoB;QACjD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1F,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YACpB,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB,EAAE,OAAmB,EAAE,MAAc;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2DAA2D;IAC3D,IAAI,CAAC,SAAiB,EAAE,OAAmB,EAAE,MAAc;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,UAAU,CAAC;QACpE,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAiB,EAAE,YAAoB;QAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,6EAA6E;QAC7E,sCAAsC;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9F,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,WAAW,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC/C,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,0BAA0B,CAAC,SAAiB,EAAE,YAAoB;QAChE,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC9F,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3C,CAAC,CAAC,YAAY,GAAG,YAAY,CAAC;QAC9B,MAAM,WAAW,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC;QAC5B,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;QAC/C,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,WAAmB;QAC/B,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IACE,CAAC,CAAC,MAAM,KAAK,UAAU;gBACvB,CAAC,CAAC,WAAW,KAAK,WAAW;gBAC7B,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EACrC,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+EAA+E;IAC/E,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC;YAClE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;YAC9E,IAAI,WAAW,IAAI,UAAU;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF;AA/JD,0CA+JC;AAED,mFAAmF;AACtE,QAAA,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC"}

package/dist/history/types.d.ts

@@ -1,4 +1,32 @@
-export type HistorySource = 'telegram' | 'discord' | 'line' | 'api' | 'ui';
+/**
+ * Canonical channel list — the SINGLE source of truth for the
+ * 'telegram' | 'discord' | 'line' | 'slack' union that used to be
+ * hand-copied into ~10 files (session/process.ts, agent/runner.ts,
+ * api/router.ts, session/compactor.ts, agent/builtin-commands.ts,
+ * cli-viewer/pairing-store.ts, ui/cli-viewer-ui.ts, ...).
+ *
+ * That duplication is exactly what caused three real bugs when Slack was
+ * added: a channelSource ternary with no 'slack' branch (every Slack
+ * session silently became 'telegram'), a replyToolName ternary with the
+ * same gap, and an isCliChannel() runtime guard whose type was widened to
+ * include 'slack' but whose implementation wasn't. Deriving both the type
+ * AND a runtime guard from one array makes that specific failure mode
+ * (type says X is valid, some hand-copied runtime check disagrees)
+ * impossible to reintroduce for this union — adding a channel here updates
+ * every consumer's type AND its guard in one place.
+ */
+export declare const CHAT_CHANNELS: readonly ["telegram", "discord", "line", "slack"];
+export type ChatChannel = (typeof CHAT_CHANNELS)[number];
+export declare function isChatChannel(value: unknown): value is ChatChannel;
+/** ChatChannel plus 'api' — a session spawned via direct API access, not a channel. */
+export type ChatChannelOrApi = ChatChannel | 'api';
+export type HistorySource = ChatChannelOrApi | 'ui';
+/**
+ * Normalize a ChatChannelOrApi down to a live ChatChannel — 'api' (not a real
+ * channel) falls back to 'telegram', matching this codebase's long-standing
+ * default for channel-scoped state paths (session/process.ts's stateSubDir).
+ */
+export declare function toChatChannel(source: ChatChannelOrApi): ChatChannel;
 export type MessageRole = 'user' | 'assistant' | 'system';
 export interface HistoryMessage {
     id?: number;

package/dist/history/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/history/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;AAC3E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;2EAGuE;IACvE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAI1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAKf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/history/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,aAAa,mDAAoD,CAAC;AAC/E,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED,uFAAuF;AACvF,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,KAAK,CAAC;AACnD,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAEnE;AACD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;2EAGuE;IACvE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAI1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IAKf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,WAAW,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B"}

package/dist/history/types.js

@@ -1,3 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.CHAT_CHANNELS = void 0;
+exports.isChatChannel = isChatChannel;
+exports.toChatChannel = toChatChannel;
+/**
+ * Canonical channel list — the SINGLE source of truth for the
+ * 'telegram' | 'discord' | 'line' | 'slack' union that used to be
+ * hand-copied into ~10 files (session/process.ts, agent/runner.ts,
+ * api/router.ts, session/compactor.ts, agent/builtin-commands.ts,
+ * cli-viewer/pairing-store.ts, ui/cli-viewer-ui.ts, ...).
+ *
+ * That duplication is exactly what caused three real bugs when Slack was
+ * added: a channelSource ternary with no 'slack' branch (every Slack
+ * session silently became 'telegram'), a replyToolName ternary with the
+ * same gap, and an isCliChannel() runtime guard whose type was widened to
+ * include 'slack' but whose implementation wasn't. Deriving both the type
+ * AND a runtime guard from one array makes that specific failure mode
+ * (type says X is valid, some hand-copied runtime check disagrees)
+ * impossible to reintroduce for this union — adding a channel here updates
+ * every consumer's type AND its guard in one place.
+ */
+exports.CHAT_CHANNELS = ['telegram', 'discord', 'line', 'slack'];
+function isChatChannel(value) {
+    return typeof value === 'string' && exports.CHAT_CHANNELS.includes(value);
+}
+/**
+ * Normalize a ChatChannelOrApi down to a live ChatChannel — 'api' (not a real
+ * channel) falls back to 'telegram', matching this codebase's long-standing
+ * default for channel-scoped state paths (session/process.ts's stateSubDir).
+ */
+function toChatChannel(source) {
+    return isChatChannel(source) ? source : 'telegram';
+}
 //# sourceMappingURL=types.js.map

package/dist/history/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/history/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/history/types.ts"],"names":[],"mappings":";;;AAmBA,sCAEC;AAWD,sCAEC;AAlCD;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,aAAa,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAE/E,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,qBAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAMD;;;;GAIG;AACH,SAAgB,aAAa,CAAC,MAAwB;IACpD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;AACrD,CAAC"}

package/dist/session/compactor.d.ts

@@ -1,3 +1,4 @@
+import type { ChatChannelOrApi } from '../history/types';
 import { SessionStore } from './store';
 export interface CompactionResult {
     beforeMessages: number;
@@ -14,7 +15,7 @@ export declare class NotEnoughMessagesError extends Error {
 export declare class SessionCompactor {
     private readonly sessionStore;
     constructor(sessionStore: SessionStore);
-    compact(agentId: string, chatId: string, sessionId: string, model: string, contextWindow: number, channel?: 'telegram' | 'discord' | 'line' | 'api'): Promise<CompactionResult>;
+    compact(agentId: string, chatId: string, sessionId: string, model: string, contextWindow: number, channel?: ChatChannelOrApi): Promise<CompactionResult>;
     private summarizeWithChunking;
     private splitIntoChunks;
     private callClaudeForSummary;

package/dist/session/compactor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compactor.d.ts","sourceRoot":"","sources":["../../src/session/compactor.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,KAAK,EAAE,MAAM;CAI1B;AAqBD,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,YAAY;IAEjD,OAAO,CACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,KAAkB,GAC5D,OAAO,CAAC,gBAAgB,CAAC;YA2Cd,qBAAqB;IA4BnC,OAAO,CAAC,eAAe;YAkBT,oBAAoB;CAiCnC"}
+{"version":3,"file":"compactor.d.ts","sourceRoot":"","sources":["../../src/session/compactor.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,KAAK,EAAE,MAAM;CAI1B;AAqBD,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAZ,YAAY,EAAE,YAAY;IAEjD,OAAO,CACX,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,gBAA6B,GACrC,OAAO,CAAC,gBAAgB,CAAC;YA2Cd,qBAAqB;IA4BnC,OAAO,CAAC,eAAe;YAkBT,oBAAoB;CAiCnC"}