@aitne/daemon 0.1.0

package/dist/logging.js

@@ -0,0 +1,130 @@
+import pino from "pino";
+import { redactString, SENSITIVE_KEY_PATTERN } from "./secrets/redaction.js";
+import { pushToLogBuffer } from "./log-buffer.js";
+const REDACTED = "[REDACTED]";
+const CIRCULAR = "[Circular]";
+const VALID_LOG_LEVELS = new Set(["trace", "debug", "info", "warn", "error", "fatal", "silent"]);
+/** Resolve log level from PA_LOG_LEVEL env var. Falls back to "info". */
+function resolveLogLevel() {
+    const raw = process.env.PA_LOG_LEVEL?.trim().toLowerCase();
+    if (raw && VALID_LOG_LEVELS.has(raw)) {
+        return raw;
+    }
+    return "info";
+}
+/** Serialize an Error to a plain object, preserving custom properties (code, statusCode, etc.). */
+function serializeError(err, seen) {
+    seen.add(err);
+    const obj = {
+        type: err.name,
+        message: redactString(err.message, REDACTED),
+        stack: err.stack ? redactString(err.stack, REDACTED) : undefined,
+    };
+    for (const [key, val] of Object.entries(err)) {
+        if (key === "message" || key === "stack" || key === "name")
+            continue;
+        obj[key] = SENSITIVE_KEY_PATTERN.test(key) ? REDACTED : redactLogValue(val, seen);
+    }
+    // cause is non-enumerable on most engines
+    if (err.cause !== undefined && !("cause" in obj)) {
+        obj.cause = redactLogValue(err.cause, seen);
+    }
+    return obj;
+}
+/**
+ * Single-pass recursive redaction for log arguments.
+ *
+ * - Strings: regex-match known secret value patterns (Bearer tokens, API keys, etc.)
+ * - Errors:  serialize to plain object with type/message/stack + custom props
+ * - Dates:   convert to ISO string
+ * - Map/Set: convert to object/array then recurse
+ * - Objects: censor values whose key matches SENSITIVE_KEY_PATTERN, recurse into children
+ *
+ * A `WeakSet` tracks visited objects to prevent stack overflow on circular references.
+ */
+function redactLogValue(value, seen) {
+    if (typeof value === "string") {
+        return redactString(value, REDACTED);
+    }
+    if (value === null || value === undefined || typeof value !== "object") {
+        return value;
+    }
+    // --- object types below this point ---
+    if (value instanceof Error) {
+        return seen.has(value) ? CIRCULAR : serializeError(value, seen);
+    }
+    if (value instanceof Date) {
+        return value.toISOString();
+    }
+    if (value instanceof RegExp) {
+        return value.toString();
+    }
+    if (ArrayBuffer.isView(value)) {
+        return `<${value.constructor.name} length=${value.byteLength}>`;
+    }
+    // Circular reference guard
+    if (seen.has(value))
+        return CIRCULAR;
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.map((v) => redactLogValue(v, seen));
+    }
+    if (value instanceof Map) {
+        const next = {};
+        for (const [k, v] of value) {
+            const key = String(k);
+            next[key] = SENSITIVE_KEY_PATTERN.test(key) ? REDACTED : redactLogValue(v, seen);
+        }
+        return next;
+    }
+    if (value instanceof Set) {
+        return [...value].map((v) => redactLogValue(v, seen));
+    }
+    // Plain objects (and anything else that survives to here)
+    const next = {};
+    for (const [key, child] of Object.entries(value)) {
+        next[key] = SENSITIVE_KEY_PATTERN.test(key) ? REDACTED : redactLogValue(child, seen);
+    }
+    return next;
+}
+export function createLogger(name, options = {}, destination) {
+    const externalLogMethod = options.hooks?.logMethod;
+    return pino({
+        level: resolveLogLevel(),
+        ...options,
+        name,
+        // Errors are fully serialized + redacted in the logMethod hook, so
+        // bypass Pino's default errSerializer which would re-wrap our plain
+        // object and clobber the `type` field with "Object".
+        serializers: {
+            err: (val) => val,
+            ...options.serializers,
+        },
+        hooks: {
+            ...options.hooks,
+            logMethod(args, method, level) {
+                const sanitizedArgs = args.map(sanitizeLogArg);
+                // Push redacted log entry to the in-memory buffer for dashboard viewing
+                pushToLogBuffer(level, name, sanitizedArgs);
+                if (typeof externalLogMethod === "function") {
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- pino custom method signature
+                    return externalLogMethod.call(this, sanitizedArgs, method, level);
+                }
+                return method.apply(this, sanitizedArgs);
+            },
+        },
+    }, destination);
+}
+export function sanitizeLogArg(arg) {
+    return redactLogValue(arg, new WeakSet());
+}
+export function toSafeErrorMessage(error, fallback = "Internal error") {
+    if (error instanceof Error && error.message.trim()) {
+        return redactString(error.message, REDACTED);
+    }
+    if (typeof error === "string" && error.trim()) {
+        return redactString(error, REDACTED);
+    }
+    return fallback;
+}
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,OAAO,IAAoD,MAAM,MAAM,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjG,yEAAyE;AACzE,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,IAAI,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mGAAmG;AACnG,SAAS,cAAc,CAAC,GAAU,EAAE,IAAqB;IACvD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,MAAM,GAAG,GAA4B;QACnC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5C,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM;YAAE,SAAS;QACrE,GAAG,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,0CAA0C;IAC1C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,KAAc,EAAE,IAAqB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wCAAwC;IAExC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,WAAW,KAAK,CAAC,UAAU,GAAG,CAAC;IAClE,CAAC;IAED,2BAA2B;IAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,CAAC,GAAG,CAAC,KAAe,CAAC,CAAC;IAE1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,0DAA0D;IAC1D,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,UAAyB,EAAE,EAC3B,WAA+B;IAE/B,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;IAEnD,OAAO,IAAI,CACT;QACE,KAAK,EAAE,eAAe,EAAE;QACxB,GAAG,OAAO;QACV,IAAI;QACJ,mEAAmE;QACnE,oEAAoE;QACpE,qDAAqD;QACrD,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,GAAG;YAC1B,GAAG,OAAO,CAAC,WAAW;SACvB;QACD,KAAK,EAAE;YACL,GAAG,OAAO,CAAC,KAAK;YAChB,SAAS,CAEP,IAAe,EACf,MAAyC,EACzC,KAAa;gBAEb,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAC/C,wEAAwE;gBACxE,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;gBAC5C,IAAI,OAAO,iBAAiB,KAAK,UAAU,EAAE,CAAC;oBAC5C,8FAA8F;oBAC9F,OAAQ,iBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAa,EAAE,aAAa,CAAC,CAAC;YACpD,CAAC;SACF;KACF,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,QAAQ,GAAG,gBAAgB;IAE3B,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/management-rules.d.ts

@@ -0,0 +1,2 @@
+export declare function upsertManagementRulesAgentIdentity(content: string, name: string | null | undefined): string;
+//# sourceMappingURL=management-rules.d.ts.map

package/dist/management-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-rules.d.ts","sourceRoot":"","sources":["../src/management-rules.ts"],"names":[],"mappings":"AA4CA,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,MAAM,CAkCR"}

package/dist/management-rules.js

@@ -0,0 +1,62 @@
+import { formatAgentOutboundLabel, normalizeAgentDisplayName, } from "@aitne/shared";
+function buildAgentIdentitySection(name) {
+    const normalized = normalizeAgentDisplayName(name);
+    return [
+        "## Agent Identity",
+        `- AI name: ${normalized}`,
+        `- WhatsApp label: ${formatAgentOutboundLabel(normalized)}`,
+    ].join("\n");
+}
+// Locate the byte range of `## Agent Identity` in already-LF-normalised
+// content. Returns null when the section is absent. The range starts at the
+// header and ends at either the start of the next H2 heading or end of input.
+//
+// Uses line-anchored scanning instead of a single regex because JavaScript
+// has no end-of-string anchor that's compatible with the `m` flag (`\Z` is
+// treated as a literal `Z`, so a `(?=^##\s|\Z)` lookahead silently fails
+// when the section is the last one in the file). Mirrors
+// `findActivePoliciesSectionRange` in `core/context/policy-index-reconciler.ts`.
+function findAgentIdentitySectionRange(normalized) {
+    const headerPattern = /^## Agent Identity(?:\s|$)/m;
+    const headerMatch = headerPattern.exec(normalized);
+    if (!headerMatch || headerMatch.index === undefined)
+        return null;
+    const start = headerMatch.index;
+    const nextHeadingPattern = /^##\s/gm;
+    nextHeadingPattern.lastIndex = start + headerMatch[0].length;
+    const nextMatch = nextHeadingPattern.exec(normalized);
+    const end = nextMatch ? nextMatch.index : normalized.length;
+    return { start, end };
+}
+export function upsertManagementRulesAgentIdentity(content, name) {
+    const normalized = content.replace(/\r\n/g, "\n").trim();
+    const section = buildAgentIdentitySection(name);
+    if (!normalized) {
+        return section;
+    }
+    const range = findAgentIdentitySectionRange(normalized);
+    if (range) {
+        // Slice around the section and re-emit with canonical `\n\n` spacing so
+        // GFM doesn't treat a following table as lazy-continuation of the last
+        // bullet. The previous regex-based replace consumed the trailing blank
+        // line into the match without re-emitting it, which produced output
+        // like `- WhatsApp label: [name]## Source of Truth\n| ... |` — the
+        // table then folded into the bullet on render.
+        const before = normalized.slice(0, range.start).replace(/\s+$/u, "");
+        const after = normalized.slice(range.end).replace(/^\s+/u, "");
+        const beforePart = before ? `${before}\n\n` : "";
+        const afterPart = after ? `\n\n${after}` : "";
+        return `${beforePart}${section}${afterPart}`;
+    }
+    const titleMatch = normalized.match(/^# .+$/m);
+    if (!titleMatch || titleMatch.index === undefined) {
+        return `${section}\n\n${normalized}`;
+    }
+    const titleEnd = titleMatch.index + titleMatch[0].length;
+    const before = normalized.slice(0, titleEnd).trimEnd();
+    const after = normalized.slice(titleEnd).trimStart();
+    return after
+        ? `${before}\n\n${section}\n\n${after}`
+        : `${before}\n\n${section}`;
+}
+//# sourceMappingURL=management-rules.js.map

package/dist/management-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-rules.js","sourceRoot":"","sources":["../src/management-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AAEvB,SAAS,yBAAyB,CAAC,IAA+B;IAChE,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO;QACL,mBAAmB;QACnB,cAAc,UAAU,EAAE;QAC1B,qBAAqB,wBAAwB,CAAC,UAAU,CAAC,EAAE;KAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAOD,wEAAwE;AACxE,4EAA4E;AAC5E,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,yDAAyD;AACzD,iFAAiF;AACjF,SAAS,6BAA6B,CACpC,UAAkB;IAElB,MAAM,aAAa,GAAG,6BAA6B,CAAC;IACpD,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IAEhC,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACrC,kBAAkB,CAAC,SAAS,GAAG,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;IAE5D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAe,EACf,IAA+B;IAE/B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,KAAK,EAAE,CAAC;QACV,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,mEAAmE;QACnE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,GAAG,OAAO,OAAO,UAAU,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC;IACrD,OAAO,KAAK;QACV,CAAC,CAAC,GAAG,MAAM,OAAO,OAAO,OAAO,KAAK,EAAE;QACvC,CAAC,CAAC,GAAG,MAAM,OAAO,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/messaging/constants.d.ts

@@ -0,0 +1,33 @@
+export declare const OWNER_DM_SCOPE = "owner_dm";
+export declare const DASHBOARD_CHAT_SCOPE = "dashboard_chat";
+export declare const DOCS_QA_SCOPE = "docs_qa";
+export declare const THREAD_SCOPE = "thread";
+export declare const OWNER_SCOPE_KEY = "owner";
+export declare const DASHBOARD_SCOPE_KEY = "dashboard";
+export declare const DOCS_QA_SCOPE_KEY = "docs_qa";
+export declare const LOGICAL_OWNER_PLATFORM = "owner";
+export declare const LOGICAL_OWNER_CHANNEL = "owner";
+export declare const SUPPORTED_MESSAGING_PLATFORMS: readonly ["slack", "telegram", "discord", "whatsapp", "dashboard"];
+export declare const NOTIFICATION_DESTINATION_PLATFORMS: readonly ["slack", "telegram", "discord", "whatsapp"];
+export type SupportedMessagingPlatform = (typeof SUPPORTED_MESSAGING_PLATFORMS)[number];
+export type NotificationDestinationPlatform = (typeof NOTIFICATION_DESTINATION_PLATFORMS)[number];
+export declare function isNotificationDestinationPlatform(value: string): value is NotificationDestinationPlatform;
+export declare function getConversationScope(params: {
+    platform: string;
+    channel: string;
+    threadId: string | null;
+    isDm?: boolean;
+    /**
+     * `MessageEvent.intent` discriminator (see packages/shared/src/types.ts).
+     * Forks the dashboard DM tuple into a separate `docs_qa` scope so the
+     * QA panel and the chat panel get distinct rows in
+     * `conversation_sessions` and distinct execution gates in the
+     * dispatcher. Honored only when paired with `platform="dashboard"` +
+     * `isDm=true`; ignored otherwise as defense-in-depth.
+     */
+    intent?: "chat" | "docs_qa";
+}): {
+    scope: string;
+    scopeKey: string;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/messaging/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/messaging/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,aAAa,CAAC;AACzC,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AACrD,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,YAAY,WAAW,CAAC;AACrC,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAG/C,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAC9C,eAAO,MAAM,qBAAqB,UAAU,CAAC;AAE7C,eAAO,MAAM,6BAA6B,oEAMhC,CAAC;AAEX,eAAO,MAAM,kCAAkC,uDAKrC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,MAAM,+BAA+B,GACzC,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,+BAA+B,CAI1C;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAwBtC"}

package/dist/messaging/constants.js

@@ -0,0 +1,52 @@
+export const OWNER_DM_SCOPE = "owner_dm";
+export const DASHBOARD_CHAT_SCOPE = "dashboard_chat";
+export const DOCS_QA_SCOPE = "docs_qa";
+export const THREAD_SCOPE = "thread";
+export const OWNER_SCOPE_KEY = "owner";
+export const DASHBOARD_SCOPE_KEY = "dashboard";
+// QA never branches by sender like owner_dm does, so the scope value
+// doubles as the per-session lookup key.
+export const DOCS_QA_SCOPE_KEY = "docs_qa";
+export const LOGICAL_OWNER_PLATFORM = "owner";
+export const LOGICAL_OWNER_CHANNEL = "owner";
+export const SUPPORTED_MESSAGING_PLATFORMS = [
+    "slack",
+    "telegram",
+    "discord",
+    "whatsapp",
+    "dashboard",
+];
+export const NOTIFICATION_DESTINATION_PLATFORMS = [
+    "slack",
+    "telegram",
+    "discord",
+    "whatsapp",
+];
+export function isNotificationDestinationPlatform(value) {
+    return NOTIFICATION_DESTINATION_PLATFORMS.includes(value);
+}
+export function getConversationScope(params) {
+    if (params.isDm) {
+        if (params.platform === "dashboard") {
+            if (params.intent === "docs_qa") {
+                return {
+                    scope: DOCS_QA_SCOPE,
+                    scopeKey: DOCS_QA_SCOPE_KEY,
+                };
+            }
+            return {
+                scope: DASHBOARD_CHAT_SCOPE,
+                scopeKey: DASHBOARD_SCOPE_KEY,
+            };
+        }
+        return {
+            scope: OWNER_DM_SCOPE,
+            scopeKey: OWNER_SCOPE_KEY,
+        };
+    }
+    return {
+        scope: THREAD_SCOPE,
+        scopeKey: `${params.platform}:${params.channel}:${params.threadId ?? ""}`,
+    };
+}
+//# sourceMappingURL=constants.js.map

package/dist/messaging/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/messaging/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AACrD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC/C,qEAAqE;AACrE,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,WAAW;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;CACF,CAAC;AAOX,MAAM,UAAU,iCAAiC,CAC/C,KAAa;IAEb,OACE,kCACD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAcpC;IACC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO;oBACL,KAAK,EAAE,aAAa;oBACpB,QAAQ,EAAE,iBAAiB;iBAC5B,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,QAAQ,EAAE,mBAAmB;aAC9B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,eAAe;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;KAC1E,CAAC;AACJ,CAAC"}

package/dist/messaging/magic-phrase.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Generate a random `apple-banana-cherry-date`-style phrase. Uses
+ * `crypto.randomInt` (CSPRNG) so that an attacker can't predict the next
+ * phrase from a previously-issued one.
+ */
+export declare function generateMagicPhrase(): string;
+/**
+ * Build a matcher closure for use with `adapter.startPairing({ match, ... })`.
+ *
+ * Equality (not contains) is intentional. See the file-level comment.
+ * Wrapping the phrase in a longer message must NOT match: that would
+ * let an attacker pack thousands of distinct 4-word substrings into a
+ * single message and brute-force the 24-bit search space in seconds.
+ */
+export declare function buildPhraseMatcher(phrase: string): (text: string) => boolean;
+//# sourceMappingURL=magic-phrase.d.ts.map

package/dist/messaging/magic-phrase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-phrase.d.ts","sourceRoot":"","sources":["../../src/messaging/magic-phrase.ts"],"names":[],"mappings":"AAmEA;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAM5C;AAYD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAS5E"}

package/dist/messaging/magic-phrase.js

@@ -0,0 +1,103 @@
+import { randomInt, timingSafeEqual } from "node:crypto";
+/**
+ * Magic-phrase challenge for owner-pairing.
+ *
+ * The user reads a short, memorable phrase from the dashboard and types it
+ * (or some message containing it) into their bot DM. The adapter only
+ * promotes the sender to owner if the inbound message contains the exact
+ * phrase, defeating the previous "first DM wins" race where any unrelated
+ * message during a 5-minute window could hijack the owner role.
+ *
+ * Word list rationale:
+ *
+ * - 64 short, unambiguous, ASCII-only words. Keeps the phrase legible
+ *   across all keyboards (no diacritics, no homoglyphs).
+ * - 4 words per phrase → log2(64^4) = 24 bits of entropy. The matcher
+ *   uses normalized **equality** (not contains), so each inbound message
+ *   tests exactly one candidate phrase. With ~1 msg/sec rate limits and
+ *   a 5-minute window, attacker success probability is bounded by
+ *   300 / 16,777,216 ≈ 1.8 × 10⁻⁵ per session.
+ *
+ *   Why equality, not contains: a contains-based matcher lets the
+ *   attacker pack thousands of 4-word substrings into a single message
+ *   (~8000 candidates per Slack-sized message ⇒ ~14% per session over
+ *   a 5-minute window). Equality forces 1 candidate per message and
+ *   restores the 24-bit security budget.
+ *
+ * - Hyphen-separated for visual clarity, but the matcher normalises away
+ *   case, punctuation, and emoji so the user can type the phrase any
+ *   way ("apple banana cherry date" or "Apple-Banana-Cherry-Date!" both
+ *   match) — but only if the **only** content of their message is the
+ *   phrase. Wrapping it in a sentence ("my phrase is apple banana cherry
+ *   date") is rejected by design.
+ *
+ * The 64 words are chosen to be maximally distinct phonetically (no near-
+ * homophones) and to read naturally if the user mishears one and asks the
+ * dashboard for help.
+ */
+const WORDS = [
+    "apple", "banana", "cherry", "date",
+    "fig", "grape", "kiwi", "lemon",
+    "mango", "melon", "olive", "peach",
+    "pear", "plum", "lime", "berry",
+    "ant", "bee", "cat", "dog",
+    "elk", "fox", "goat", "hen",
+    "lion", "mole", "newt", "owl",
+    "pig", "ram", "seal", "wolf",
+    "red", "blue", "green", "gold",
+    "pink", "black", "white", "silver",
+    "coral", "teal", "jade", "ruby",
+    "pearl", "onyx", "amber", "rose",
+    "sun", "moon", "star", "sea",
+    "sky", "tree", "leaf", "cloud",
+    "rain", "snow", "wind", "fire",
+    "wave", "hill", "rock", "dust",
+];
+if (WORDS.length !== 64) {
+    // Compile-time-ish guard: if anyone edits the word list and breaks the
+    // entropy assumption above, we want to know immediately at startup.
+    throw new Error(`magic-phrase word list must contain exactly 64 entries (got ${WORDS.length})`);
+}
+const PHRASE_WORD_COUNT = 4;
+/**
+ * Generate a random `apple-banana-cherry-date`-style phrase. Uses
+ * `crypto.randomInt` (CSPRNG) so that an attacker can't predict the next
+ * phrase from a previously-issued one.
+ */
+export function generateMagicPhrase() {
+    const picked = [];
+    for (let i = 0; i < PHRASE_WORD_COUNT; i++) {
+        picked.push(WORDS[randomInt(0, WORDS.length)]);
+    }
+    return picked.join("-");
+}
+/**
+ * Lowercase + strip non-alphanumeric characters. Used by both sides of
+ * the equality check so casing/punctuation/emoji in the inbound text
+ * don't break a match — but the user must still send only the phrase,
+ * not a sentence containing it.
+ */
+function normalize(input) {
+    return input.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+/**
+ * Build a matcher closure for use with `adapter.startPairing({ match, ... })`.
+ *
+ * Equality (not contains) is intentional. See the file-level comment.
+ * Wrapping the phrase in a longer message must NOT match: that would
+ * let an attacker pack thousands of distinct 4-word substrings into a
+ * single message and brute-force the 24-bit search space in seconds.
+ */
+export function buildPhraseMatcher(phrase) {
+    const expected = normalize(phrase);
+    const expectedBuf = Buffer.from(expected, "utf8");
+    return (text) => {
+        if (!expected)
+            return false;
+        const candidate = Buffer.from(normalize(text), "utf8");
+        if (candidate.length !== expectedBuf.length)
+            return false;
+        return timingSafeEqual(candidate, expectedBuf);
+    };
+}
+//# sourceMappingURL=magic-phrase.js.map

package/dist/messaging/magic-phrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-phrase.js","sourceRoot":"","sources":["../../src/messaging/magic-phrase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,KAAK,GAAsB;IAC/B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM;IACnC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IAC/B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IAClC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAC/B,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;IAC1B,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;IAC3B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC7B,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM;IAC5B,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAC9B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;IAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAChC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC5B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAC9B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAC/B,CAAC;AAEF,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;IACxB,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,MAAM,GAAG,CAC/E,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,CAAC,IAAY,EAAW,EAAE;QAC/B,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1D,OAAO,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC;AACJ,CAAC"}

package/dist/messaging/owner-channels.d.ts

@@ -0,0 +1,20 @@
+import type Database from "better-sqlite3";
+interface OwnerChannelRecord {
+    platform: string;
+    sender_id: string | null;
+    channel_id: string;
+    last_inbound_at: string | null;
+    last_outbound_at: string | null;
+    metadata: string | null;
+}
+export declare function upsertOwnerChannel(db: Database.Database, params: {
+    platform: string;
+    senderId?: string | null;
+    channelId: string;
+    metadata?: Record<string, unknown>;
+    touchInbound?: boolean;
+    touchOutbound?: boolean;
+}): void;
+export declare function getOwnerChannel(db: Database.Database, platform: string): OwnerChannelRecord | null;
+export {};
+//# sourceMappingURL=owner-channels.d.ts.map

package/dist/messaging/owner-channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-channels.d.ts","sourceRoot":"","sources":["../../src/messaging/owner-channels.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,MAAM,EAAE;IACN,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GACA,IAAI,CAqDN;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,MAAM,GACf,kBAAkB,GAAG,IAAI,CAS3B"}

package/dist/messaging/owner-channels.js

@@ -0,0 +1,41 @@
+export function upsertOwnerChannel(db, params) {
+    const { platform, senderId, channelId, metadata, touchInbound = false, touchOutbound = false, } = params;
+    const metadataJson = metadata === undefined ? null : JSON.stringify(metadata);
+    db.prepare(`INSERT INTO owner_channels (
+       platform,
+       sender_id,
+       channel_id,
+       last_inbound_at,
+       last_outbound_at,
+       metadata
+     )
+     VALUES (
+       ?,
+       ?,
+       ?,
+       CASE WHEN ? THEN CURRENT_TIMESTAMP ELSE NULL END,
+       CASE WHEN ? THEN CURRENT_TIMESTAMP ELSE NULL END,
+       COALESCE(?, '{}')
+     )
+     ON CONFLICT(platform) DO UPDATE SET
+       sender_id = COALESCE(excluded.sender_id, owner_channels.sender_id),
+       channel_id = excluded.channel_id,
+       last_inbound_at = CASE
+         WHEN ? THEN CURRENT_TIMESTAMP
+         ELSE owner_channels.last_inbound_at
+       END,
+       last_outbound_at = CASE
+         WHEN ? THEN CURRENT_TIMESTAMP
+         ELSE owner_channels.last_outbound_at
+       END,
+       metadata = COALESCE(?, owner_channels.metadata)`).run(platform, senderId ?? null, channelId, touchInbound ? 1 : 0, touchOutbound ? 1 : 0, metadataJson, touchInbound ? 1 : 0, touchOutbound ? 1 : 0, metadataJson);
+}
+export function getOwnerChannel(db, platform) {
+    const row = db
+        .prepare(`SELECT platform, sender_id, channel_id, last_inbound_at, last_outbound_at, metadata
+       FROM owner_channels
+       WHERE platform = ?`)
+        .get(platform);
+    return row ?? null;
+}
+//# sourceMappingURL=owner-channels.js.map

package/dist/messaging/owner-channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-channels.js","sourceRoot":"","sources":["../../src/messaging/owner-channels.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,MAOC;IAED,MAAM,EACJ,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,GAAG,KAAK,EACpB,aAAa,GAAG,KAAK,GACtB,GAAG,MAAM,CAAC;IAEX,MAAM,YAAY,GAChB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE3D,EAAE,CAAC,OAAO,CACR;;;;;;;;;;;;;;;;;;;;;;;;;;;uDA2BmD,CACpD,CAAC,GAAG,CACH,QAAQ,EACR,QAAQ,IAAI,IAAI,EAChB,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACrB,YAAY,EACZ,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACpB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACrB,YAAY,CACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,EAAqB,EACrB,QAAgB;IAEhB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;0BAEoB,CACrB;SACA,GAAG,CAAC,QAAQ,CAAmC,CAAC;IACnD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC"}

package/dist/observers/calendar-poller.d.ts

@@ -0,0 +1,51 @@
+import type Database from "better-sqlite3";
+import type { Observer } from "./manager.js";
+import type { CalendarService } from "../services/calendar.js";
+import type { AgentWriteTracker } from "../safety/agent-write-tracker.js";
+import { type TriggerRoadmapRefresh } from "../core/roadmap-refresh-triggers.js";
+import type { TodayWriteLockManager } from "../core/today-write-lock.js";
+/**
+ * CalendarPoller — polls Google Calendar for upcoming events.
+ *
+ * One responsibility: fetch the direct-mode Google Calendar horizon and
+ * feed it into the integration drift reconcile chokepoint. Diffing,
+ * observation coalescing, roadmap refreshes, and today.md refresh scheduling
+ * live in `drift-effects.ts`; 15-minute `schedule.approaching` events are
+ * emitted by ImminentEventScheduler from the shared snapshot table.
+ *
+ * The poll window must span at least `CALENDAR_HORIZON_MS` so (3) is
+ * reachable; see the `timeMax` calculation in `poll()`.
+ *
+ * Delegates all Google Calendar API access to CalendarService (single client).
+ */
+export declare class CalendarPoller implements Observer {
+    private readonly calendarService;
+    private readonly db;
+    private readonly pollIntervalSeconds;
+    private readonly calendarId;
+    private readonly writeTracker?;
+    /**
+     * Optional roadmap-refresh trigger (ROADMAP-REDESIGN §3.4 RFC-C).
+     * Fired on `created` events whose `start` is more than 14 days out and
+     * whose actor is NOT `agent` (the AgentWriteTracker check above sets
+     * `agent` for events the agent itself inserted into Google Calendar).
+     */
+    private readonly triggerRoadmapRefresh?;
+    private readonly todayWriteLock?;
+    private readonly timezone?;
+    readonly name = "calendar";
+    private pollTimer;
+    constructor(calendarService: CalendarService, db: Database.Database, pollIntervalSeconds: number, calendarId: string, writeTracker?: AgentWriteTracker | undefined, 
+    /**
+     * Optional roadmap-refresh trigger (ROADMAP-REDESIGN §3.4 RFC-C).
+     * Fired on `created` events whose `start` is more than 14 days out and
+     * whose actor is NOT `agent` (the AgentWriteTracker check above sets
+     * `agent` for events the agent itself inserted into Google Calendar).
+     */
+    triggerRoadmapRefresh?: TriggerRoadmapRefresh | undefined, todayWriteLock?: TodayWriteLockManager | undefined, timezone?: string | undefined);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private poll;
+    private resolveActorHint;
+}
+//# sourceMappingURL=calendar-poller.d.ts.map

package/dist/observers/calendar-poller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar-poller.d.ts","sourceRoot":"","sources":["../../src/observers/calendar-poller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAM3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,qCAAqC,CAAC;AAI7C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAKzE;;;;;;;;;;;;;GAaG;AACH,qBAAa,cAAe,YAAW,QAAQ;IAM3C,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAlB5B,QAAQ,CAAC,IAAI,cAAc;IAE3B,OAAO,CAAC,SAAS,CAA+C;gBAG7C,eAAe,EAAE,eAAe,EAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE,iBAAiB,YAAA;IACjD;;;;;OAKG;IACc,qBAAqB,CAAC,EAAE,qBAAqB,YAAA,EAC7C,cAAc,CAAC,EAAE,qBAAqB,YAAA,EACtC,QAAQ,CAAC,EAAE,MAAM,YAAA;IAG9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAQb,IAAI;IAyElB,OAAO,CAAC,gBAAgB;CAKzB"}