@cogenta/channels 0.1.0

package/dist/formats/alert.js

@@ -0,0 +1,49 @@
+import { CogentaError } from '@cogenta/core';
+function requireNonEmpty(field, value) {
+    if (value.trim().length > 0)
+        return;
+    throw new CogentaError({
+        code: 'CHANNEL_MESSAGE_INVALID',
+        message: `An alert message's "${field}" cannot be empty.`,
+        hint: '"Titre, gravité, une phrase de contexte, l\'action attendue, un lien vers l\'admin" are all required — fill in every field before dispatching.',
+        details: { field },
+    });
+}
+function requireUrl(field, value) {
+    try {
+        const parsed = new URL(value);
+        void parsed;
+    }
+    catch (cause) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: `An alert message's "${field}" is not a valid URL: "${value}".`,
+            hint: "Pass an absolute URL, e.g. the entry's real admin edit link.",
+            details: { field, value },
+            cause,
+        });
+    }
+}
+/**
+ * "Alerte — quelque chose demande une action. Titre, gravité, une phrase de
+ * contexte, l'action attendue, un lien vers l'admin." The one required
+ * constructor for every alert this package (or an agent) dispatches — never
+ * hand-assemble the discriminated union literal, so this validation cannot
+ * be skipped by a new call site.
+ */
+export function buildAlert(input) {
+    requireNonEmpty('title', input.title);
+    requireNonEmpty('context', input.context);
+    requireNonEmpty('expectedAction', input.expectedAction);
+    requireUrl('adminUrl', input.adminUrl);
+    return {
+        level: 'alert',
+        title: input.title,
+        severity: input.severity,
+        context: input.context,
+        expectedAction: input.expectedAction,
+        adminUrl: input.adminUrl,
+        ...(input.actions === undefined ? {} : { actions: input.actions }),
+    };
+}
+//# sourceMappingURL=alert.js.map

package/dist/formats/alert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alert.js","sourceRoot":"","sources":["../../src/formats/alert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAY5C,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAM;IACnC,MAAM,IAAI,YAAY,CAAC;QACrB,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,uBAAuB,KAAK,oBAAoB;QACzD,IAAI,EAAE,gJAAgJ;QACtJ,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,KAAK,MAAM,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,uBAAuB,KAAK,0BAA0B,KAAK,IAAI;YACxE,IAAI,EAAE,8DAA8D;YACpE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;YACzB,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IACrC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACzC,eAAe,CAAC,gBAAgB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;IACvD,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;IAEtC,OAAO;QACL,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/formats/budget.d.ts

@@ -0,0 +1,14 @@
+/**
+ * "Un message qui ne rentre pas dans un écran de téléphone est un message
+ * qui ne sera pas lu." An abstract, channel-agnostic screen budget — not
+ * Telegram's real 4096-character API limit (that's a *harder*, later,
+ * channel-specific ceiling enforced in `providers/telegram/render.ts`; this
+ * one is the point past which `## Formats de message`'s own rule says the
+ * detail belongs in the admin, not in the message).
+ */
+export declare const REPORT_SCREEN_BUDGET_CHARS = 480;
+export declare function reportBodyLength(sections: readonly {
+    readonly heading?: string;
+    readonly body: string;
+}[]): number;
+//# sourceMappingURL=budget.d.ts.map

package/dist/formats/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../../src/formats/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,SAAS;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,GACxE,MAAM,CAKR"}

package/dist/formats/budget.js

@@ -0,0 +1,13 @@
+/**
+ * "Un message qui ne rentre pas dans un écran de téléphone est un message
+ * qui ne sera pas lu." An abstract, channel-agnostic screen budget — not
+ * Telegram's real 4096-character API limit (that's a *harder*, later,
+ * channel-specific ceiling enforced in `providers/telegram/render.ts`; this
+ * one is the point past which `## Formats de message`'s own rule says the
+ * detail belongs in the admin, not in the message).
+ */
+export const REPORT_SCREEN_BUDGET_CHARS = 480;
+export function reportBodyLength(sections) {
+    return sections.reduce((total, section) => total + (section.heading?.length ?? 0) + section.body.length, 0);
+}
+//# sourceMappingURL=budget.js.map

package/dist/formats/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/formats/budget.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAE7C,MAAM,UAAU,gBAAgB,CAC9B,QAAyE;IAEzE,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAChF,CAAC,CACF,CAAA;AACH,CAAC"}

package/dist/formats/notification.d.ts

@@ -0,0 +1,8 @@
+import type { NotificationChannelMessage } from '../adapter.js';
+/**
+ * "Notification — information sans action. Une ligne." The type already
+ * has nowhere to put a title or an action; this constructor is what refuses
+ * text that isn't actually one line, which the type alone cannot enforce.
+ */
+export declare function buildNotification(text: string): NotificationChannelMessage;
+//# sourceMappingURL=notification.d.ts.map

package/dist/formats/notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../../src/formats/notification.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAE/D;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,0BAA0B,CAmB1E"}

package/dist/formats/notification.js

@@ -0,0 +1,26 @@
+import { CogentaError } from '@cogenta/core';
+/**
+ * "Notification — information sans action. Une ligne." The type already
+ * has nowhere to put a title or an action; this constructor is what refuses
+ * text that isn't actually one line, which the type alone cannot enforce.
+ */
+export function buildNotification(text) {
+    const trimmed = text.trim();
+    if (trimmed.length === 0) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: 'A notification message cannot be empty.',
+            hint: 'Pass a single line of real information, or send nothing at all.',
+        });
+    }
+    if (trimmed.includes('\n')) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: 'A notification message must be a single line.',
+            hint: '"Une ligne" is the whole point of this level — split multi-line detail into a Report instead, or trim it to one sentence.',
+            details: { lineCount: trimmed.split('\n').length },
+        });
+    }
+    return { level: 'notification', text: trimmed };
+}
+//# sourceMappingURL=notification.js.map

package/dist/formats/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../../src/formats/notification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAG5C;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,yCAAyC;YAClD,IAAI,EAAE,iEAAiE;SACxE,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,2HAA2H;YACjI,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;SACnD,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AACjD,CAAC"}

package/dist/formats/report.d.ts

@@ -0,0 +1,18 @@
+import type { ChannelKeyFigure, ChannelMessageSection, ReportChannelMessage } from '../adapter.js';
+export interface BuildReportInput {
+    readonly title: string;
+    readonly keyFigures: readonly ChannelKeyFigure[];
+    readonly sections: readonly ChannelMessageSection[];
+    readonly moreUrl?: string;
+}
+/**
+ * "Rapport — synthèse périodique. Structure fixe, chiffres clés en tête,
+ * détail ensuite, jamais plus d'un écran sans repli." A report with no key
+ * figure isn't a synthesis, it's a dump; a report over the screen budget
+ * with nowhere to send the reader for detail is exactly the failure mode
+ * the lot's own words warn against ("un message qui ne rentre pas dans un
+ * écran de téléphone est un message qui ne sera pas lu") — both are refused
+ * here rather than left to whichever channel adapter happens to render it.
+ */
+export declare function buildReport(input: BuildReportInput): ReportChannelMessage;
+//# sourceMappingURL=report.d.ts.map

package/dist/formats/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/formats/report.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAGlG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,EAAE,SAAS,gBAAgB,EAAE,CAAA;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAA;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,oBAAoB,CAgCzE"}

package/dist/formats/report.js

@@ -0,0 +1,44 @@
+import { CogentaError } from '@cogenta/core';
+import { REPORT_SCREEN_BUDGET_CHARS, reportBodyLength } from './budget.js';
+/**
+ * "Rapport — synthèse périodique. Structure fixe, chiffres clés en tête,
+ * détail ensuite, jamais plus d'un écran sans repli." A report with no key
+ * figure isn't a synthesis, it's a dump; a report over the screen budget
+ * with nowhere to send the reader for detail is exactly the failure mode
+ * the lot's own words warn against ("un message qui ne rentre pas dans un
+ * écran de téléphone est un message qui ne sera pas lu") — both are refused
+ * here rather than left to whichever channel adapter happens to render it.
+ */
+export function buildReport(input) {
+    if (input.title.trim().length === 0) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: 'A report message must have a non-empty title.',
+            hint: 'Give the report a real title before dispatching it.',
+        });
+    }
+    if (input.keyFigures.length === 0) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: 'A report message must carry at least one key figure.',
+            hint: '"Chiffres clés en tête" is not optional — summarise the period with at least one number before the detail sections.',
+        });
+    }
+    const bodyLength = reportBodyLength(input.sections);
+    if (bodyLength > REPORT_SCREEN_BUDGET_CHARS && input.moreUrl === undefined) {
+        throw new CogentaError({
+            code: 'CHANNEL_MESSAGE_INVALID',
+            message: `This report's detail is ${bodyLength} characters, over the ${REPORT_SCREEN_BUDGET_CHARS}-character screen budget, with no "moreUrl" fallback.`,
+            hint: 'Either shorten the sections, or pass moreUrl pointing at the full detail in the admin — "jamais plus d\'un écran sans repli".',
+            details: { bodyLength, budget: REPORT_SCREEN_BUDGET_CHARS },
+        });
+    }
+    return {
+        level: 'report',
+        title: input.title,
+        keyFigures: input.keyFigures,
+        sections: input.sections,
+        ...(input.moreUrl === undefined ? {} : { moreUrl: input.moreUrl }),
+    };
+}
+//# sourceMappingURL=report.js.map

package/dist/formats/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/formats/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAS1E;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,qHAAqH;SAC5H,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACnD,IAAI,UAAU,GAAG,0BAA0B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3E,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,2BAA2B,UAAU,yBAAyB,0BAA0B,uDAAuD;YACxJ,IAAI,EAAE,+HAA+H;YACrI,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,0BAA0B,EAAE;SAC5D,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/inbound/authorize.d.ts

@@ -0,0 +1,57 @@
+import type { ChannelIdentity } from '../adapter.js';
+/**
+ * "Une identité de canal non liée à un compte est ignorée, sans réponse —
+ * répondre confirmerait l'existence du bot à un inconnu." An unlinked
+ * identity is a fundamentally different posture than a linked-but-forbidden
+ * one: the caller must be able to do nothing at all without effort, so
+ * `shouldReply` is `false` here and `true` below — a channel adapter that
+ * simply checks this flag before sending anything gets the security
+ * property for free, instead of having to remember "unlinked = silent" as
+ * a rule to not forget.
+ */
+export interface UnlinkedResult {
+    readonly ok: false;
+    readonly reason: 'unlinked';
+    readonly shouldReply: false;
+}
+/**
+ * "Un utilisateur sans `content.publish` ne peut pas approuver une
+ * publication depuis Telegram, même s'il voit le message." A linked user
+ * who lacks the required role(s) is refused the action but is a known
+ * person — they may be told so.
+ */
+export interface ForbiddenResult {
+    readonly ok: false;
+    readonly reason: 'forbidden';
+    readonly shouldReply: true;
+    readonly userId: string;
+}
+/**
+ * The only shape that carries a `userId` a command may act as. It is
+ * always the identified human's real id — never the agent's, never
+ * anything read off the inbound payload itself, which an attacker fully
+ * controls.
+ */
+export interface AuthorizedResult {
+    readonly ok: true;
+    readonly userId: string;
+}
+export type AuthorizationResult = UnlinkedResult | ForbiddenResult | AuthorizedResult;
+/**
+ * "Une commande entrante s'exécute avec les permissions de l'humain
+ * identifié, jamais avec celles de l'agent." — the one function every
+ * inbound command handler must pass through before doing anything. It
+ * derives the acting user exclusively from `identity.linkedUserId` (set
+ * only by the real, verified linking flow, L6 task 2) and from real roles
+ * fetched for that id — never from `identity.channelUserId` or any other
+ * field an inbound message controls. Bypassing this check requires a
+ * caller to deliberately not call it; there is no path through it that
+ * hands out a permission the identified user does not really hold.
+ *
+ * `requiredRoles` mirrors contract A's own open role-name-array convention
+ * (`CollectionDefinition.permissions`, `@cogenta/api`'s `PermissionLayer`)
+ * rather than inventing a parallel "permission string" system for
+ * channels — an empty list means "any linked user may run this command".
+ */
+export declare function authorizeInboundCommand(identity: ChannelIdentity, requiredRoles: readonly string[], getUserRoles: (userId: string) => Promise<readonly string[]>): Promise<AuthorizationResult>;
+//# sourceMappingURL=authorize.d.ts.map

package/dist/inbound/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/inbound/authorize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,eAAe,GAAG,gBAAgB,CAAA;AAErF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,eAAe,EACzB,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,GAC3D,OAAO,CAAC,mBAAmB,CAAC,CAgB9B"}

package/dist/inbound/authorize.js

@@ -0,0 +1,32 @@
+/**
+ * "Une commande entrante s'exécute avec les permissions de l'humain
+ * identifié, jamais avec celles de l'agent." — the one function every
+ * inbound command handler must pass through before doing anything. It
+ * derives the acting user exclusively from `identity.linkedUserId` (set
+ * only by the real, verified linking flow, L6 task 2) and from real roles
+ * fetched for that id — never from `identity.channelUserId` or any other
+ * field an inbound message controls. Bypassing this check requires a
+ * caller to deliberately not call it; there is no path through it that
+ * hands out a permission the identified user does not really hold.
+ *
+ * `requiredRoles` mirrors contract A's own open role-name-array convention
+ * (`CollectionDefinition.permissions`, `@cogenta/api`'s `PermissionLayer`)
+ * rather than inventing a parallel "permission string" system for
+ * channels — an empty list means "any linked user may run this command".
+ */
+export async function authorizeInboundCommand(identity, requiredRoles, getUserRoles) {
+    const userId = identity.linkedUserId;
+    if (userId === null) {
+        return { ok: false, reason: 'unlinked', shouldReply: false };
+    }
+    if (requiredRoles.length === 0) {
+        return { ok: true, userId };
+    }
+    const heldRoles = new Set(await getUserRoles(userId));
+    for (const role of requiredRoles) {
+        if (heldRoles.has(role))
+            return { ok: true, userId };
+    }
+    return { ok: false, reason: 'forbidden', shouldReply: true, userId };
+}
+//# sourceMappingURL=authorize.js.map

package/dist/inbound/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/inbound/authorize.ts"],"names":[],"mappings":"AA4CA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAyB,EACzB,aAAgC,EAChC,YAA4D;IAE5D,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAA;IACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IACrD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACtE,CAAC"}

package/dist/inbound/router.d.ts

@@ -0,0 +1,67 @@
+import type { ChannelIdentity } from '../adapter.js';
+/**
+ * A structured inbound command, never free text handed to an agent —
+ * "conversation libre avec un agent depuis le canal" is explicitly hors
+ * périmètre (`## Hors périmètre`). `/approve 3f2c` parses to
+ * `{name: 'approve', args: ['3f2c']}`.
+ */
+export interface ParsedCommand {
+    readonly name: string;
+    readonly args: readonly string[];
+}
+/** Whitespace-separated; a leading `/` is optional and stripped if present. */
+export declare function parseCommand(text: string): ParsedCommand | null;
+export interface CommandHandlerInput {
+    readonly args: readonly string[];
+    /** The identified human this command runs as — never the agent's identity. */
+    readonly userId: string;
+    readonly identity: ChannelIdentity;
+}
+export type CommandHandler = (input: CommandHandlerInput) => Promise<void> | void;
+export interface RegisteredCommand {
+    readonly name: string;
+    /** Open role-name list, same convention as `CollectionDefinition.permissions` — empty means "any linked user". */
+    readonly requiredRoles: readonly string[];
+    readonly handler: CommandHandler;
+}
+/**
+ * What `route()` did with an inbound command, so a channel adapter knows
+ * exactly whether — and what — to reply. `shouldReply: false` on an
+ * unlinked identity is the one case a caller must be able to implement by
+ * doing nothing; every other case is safe to surface to the sender.
+ */
+export type RouteResult = {
+    readonly kind: 'unlinked';
+    readonly shouldReply: false;
+} | {
+    readonly kind: 'forbidden';
+    readonly shouldReply: true;
+    readonly userId: string;
+} | {
+    readonly kind: 'unrecognized';
+    readonly shouldReply: true;
+    readonly commandName: string;
+} | {
+    readonly kind: 'invalid';
+    readonly shouldReply: false;
+} | {
+    readonly kind: 'handled';
+    readonly shouldReply: false;
+    readonly userId: string;
+};
+export interface CommandRouter {
+    register(command: RegisteredCommand): void;
+    route(text: string, identity: ChannelIdentity): Promise<RouteResult>;
+}
+export interface CommandRouterOptions {
+    readonly getUserRoles: (userId: string) => Promise<readonly string[]>;
+}
+/**
+ * The routing mechanism task 3 exists to build: parse → look up → the
+ * security gate (`authorizeInboundCommand`) → invoke, with no path from a
+ * raw inbound string to a handler call that skips authorization. The full
+ * command vocabulary (an approval queue's `/approve`, `/deny`, ...) is a
+ * later task's job — this is the mechanism they will register into.
+ */
+export declare function createCommandRouter(options: CommandRouterOptions): CommandRouter;
+//# sourceMappingURL=router.d.ts.map

package/dist/inbound/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/inbound/router.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAGpD;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;CACjC;AAED,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAQ/D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;CACnC;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAEjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kHAAkH;IAClH,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CACjC;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAA;IAC1C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CACrE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;CACtE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAsDhF"}

package/dist/inbound/router.js

@@ -0,0 +1,69 @@
+import { CogentaError } from '@cogenta/core';
+import { authorizeInboundCommand } from './authorize.js';
+/** Whitespace-separated; a leading `/` is optional and stripped if present. */
+export function parseCommand(text) {
+    const trimmed = text.trim();
+    if (trimmed.length === 0)
+        return null;
+    const [rawName, ...args] = trimmed.split(/\s+/);
+    if (rawName === undefined)
+        return null;
+    const name = rawName.startsWith('/') ? rawName.slice(1) : rawName;
+    if (name.length === 0)
+        return null;
+    return { name, args };
+}
+/**
+ * The routing mechanism task 3 exists to build: parse → look up → the
+ * security gate (`authorizeInboundCommand`) → invoke, with no path from a
+ * raw inbound string to a handler call that skips authorization. The full
+ * command vocabulary (an approval queue's `/approve`, `/deny`, ...) is a
+ * later task's job — this is the mechanism they will register into.
+ */
+export function createCommandRouter(options) {
+    const commands = new Map();
+    return {
+        register(command) {
+            if (commands.has(command.name)) {
+                throw new CogentaError({
+                    code: 'CHANNEL_COMMAND_DUPLICATE',
+                    message: `A command named "${command.name}" is already registered.`,
+                    hint: 'Command names must be unique across everything registered on this router.',
+                    details: { name: command.name },
+                });
+            }
+            commands.set(command.name, command);
+        },
+        async route(text, identity) {
+            // Checked before anything else, including whether the command even
+            // exists: an unlinked identity gets silence no matter what it sends,
+            // never even an "unknown command" reply — any reply at all would
+            // confirm the bot's existence to a stranger.
+            if (identity.linkedUserId === null) {
+                return { kind: 'unlinked', shouldReply: false };
+            }
+            const parsed = parseCommand(text);
+            if (parsed === null)
+                return { kind: 'invalid', shouldReply: false };
+            const command = commands.get(parsed.name);
+            if (command === undefined) {
+                return { kind: 'unrecognized', shouldReply: true, commandName: parsed.name };
+            }
+            const decision = await authorizeInboundCommand(identity, command.requiredRoles, options.getUserRoles);
+            if (!decision.ok) {
+                // decision.reason is always 'forbidden' here — the unlinked case was
+                // already returned above, before authorizeInboundCommand was even
+                // called — but the type doesn't know that, so narrow explicitly
+                // rather than asserting it.
+                if (decision.reason === 'unlinked')
+                    return { kind: 'unlinked', shouldReply: false };
+                return { kind: 'forbidden', shouldReply: true, userId: decision.userId };
+            }
+            // The handler receives exactly the identified human's userId — never
+            // `identity.channelUserId`, never anything parsed from `text`.
+            await command.handler({ args: parsed.args, userId: decision.userId, identity });
+            return { kind: 'handled', shouldReply: false, userId: decision.userId };
+        },
+    };
+}
+//# sourceMappingURL=router.js.map

package/dist/inbound/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/inbound/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAaxD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAwCD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAA;IAErD,OAAO;QACL,QAAQ,CAAC,OAAO;YACd,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,0BAA0B;oBACnE,IAAI,EAAE,2EAA2E;oBACjF,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;iBAChC,CAAC,CAAA;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACrC,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ;YACxB,mEAAmE;YACnE,qEAAqE;YACrE,iEAAiE;YACjE,6CAA6C;YAC7C,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;YACjD,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;YAEnE,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,QAAQ,EACR,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,YAAY,CACrB,CAAA;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,qEAAqE;gBACrE,kEAAkE;gBAClE,gEAAgE;gBAChE,4BAA4B;gBAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;gBACnF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;YAC1E,CAAC;YAED,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;QACzE,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,77 @@
+export type { AlertChannelMessage, ChannelAction, ChannelAdapter, ChannelIdentity, ChannelKeyFigure, ChannelMessage, ChannelMessageSection, ChannelSeverity, ChannelTarget, InboundCommand, InboundHandler, MessageId, NotificationChannelMessage, ReportChannelMessage, } from './adapter.js';
+export type { ApprovalCommandsOptions } from './approvals/commands.js';
+export { createApprovalCommands } from './approvals/commands.js';
+export type { DispatchApprovalOptions } from './approvals/dispatch.js';
+export { dispatchApproval } from './approvals/dispatch.js';
+export type { RenderApprovalMessageOptions } from './approvals/message.js';
+export { renderApprovalMessage } from './approvals/message.js';
+export { buildSignedApprovalLink, signApprovalLink, verifyApprovalLinkSignature, } from './approvals/signed-link.js';
+export type { ApprovalTokenOutcome, ApprovalTokenStore, ApprovalTokenStoreOptions, GeneratedApprovalToken, } from './approvals/store.js';
+export { createApprovalTokenStore } from './approvals/store.js';
+export { APPROVAL_TOKEN_TTL_MS, generateApprovalToken, hashApprovalToken, normalizeApprovalToken, } from './approvals/token.js';
+export type { BuildAlertInput } from './formats/alert.js';
+export { buildAlert } from './formats/alert.js';
+export { REPORT_SCREEN_BUDGET_CHARS } from './formats/budget.js';
+export { buildNotification } from './formats/notification.js';
+export type { BuildReportInput } from './formats/report.js';
+export { buildReport } from './formats/report.js';
+export type { AuthorizationResult, AuthorizedResult, ForbiddenResult, UnlinkedResult, } from './inbound/authorize.js';
+export { authorizeInboundCommand } from './inbound/authorize.js';
+export type { CommandHandler, CommandHandlerInput, CommandRouter, CommandRouterOptions, ParsedCommand, RegisteredCommand, RouteResult, } from './inbound/router.js';
+export { createCommandRouter, parseCommand } from './inbound/router.js';
+export { generateLinkCode, hashLinkCode, normalizeCode } from './linking/codes.js';
+export type { ChannelLinkStore, GeneratedLinkCode, LinkedChannel } from './linking/store.js';
+export { createChannelLinkStore } from './linking/store.js';
+export { ensureChannelTables, LINKING_TABLES } from './linking/tables.js';
+export type { CreateNotificationDispatcherOptions, NotificationDispatcher, NotifyInput, NotifyOutcome, } from './preferences/dispatcher.js';
+export { createNotificationDispatcher } from './preferences/dispatcher.js';
+export { isWithinQuietHours, minuteOfDayUtc } from './preferences/quiet-hours.js';
+export type { PreferenceStore } from './preferences/store.js';
+export { createPreferenceStore } from './preferences/store.js';
+export { ensurePreferenceTables, PREFERENCE_TABLES } from './preferences/tables.js';
+export type { ChannelEventType, ChannelPreferences, GroupingMode, QuietHours, } from './preferences/types.js';
+export { CHANNEL_EVENT_TYPES, DEFAULT_CHANNEL_PREFERENCES, SEVERITY_RANK, } from './preferences/types.js';
+export type { DiscordAdapter, DiscordAdapterOptions, DiscordLinkProof, } from './providers/discord/adapter.js';
+export { createDiscordAdapter } from './providers/discord/adapter.js';
+export type { DiscordActionRow, DiscordButtonComponent, DiscordClient, DiscordClientConfig, DiscordEmbed, DiscordEmbedField, DiscordMessageResult, DiscordSendMessageParams, DiscordUpdateMessageParams, } from './providers/discord/client.js';
+export { createDiscordClient } from './providers/discord/client.js';
+export type { DiscordDispatchEvent, DiscordGatewayClient, DiscordGatewayClientConfig, DiscordGatewayPayload, } from './providers/discord/gateway.js';
+export { createDiscordGatewayClient } from './providers/discord/gateway.js';
+export type { DiscordInboundDeps } from './providers/discord/inbound.js';
+export { createDiscordInboundHandler } from './providers/discord/inbound.js';
+export type { RenderedDiscordMessage } from './providers/discord/render.js';
+export { renderDiscordMessage } from './providers/discord/render.js';
+export type { EmailAdapterOptions } from './providers/email/adapter.js';
+export { createEmailAdapter } from './providers/email/adapter.js';
+export type { FileEmailTransportOptions } from './providers/email/file-transport.js';
+export { createFileEmailTransport } from './providers/email/file-transport.js';
+export type { EmailActionLinkOptions, RenderedEmailMessage } from './providers/email/render.js';
+export { renderEmailMessage } from './providers/email/render.js';
+export type { EmailTransport, OutgoingEmail, SentEmail } from './providers/email/transport.js';
+export type { SlackAdapter, SlackAdapterOptions, SlackLinkProof, } from './providers/slack/adapter.js';
+export { createSlackAdapter } from './providers/slack/adapter.js';
+export type { SlackBlock, SlackClient, SlackClientConfig, SlackMessageResult, SlackPostMessageParams, SlackUpdateMessageParams, } from './providers/slack/client.js';
+export { createSlackClient } from './providers/slack/client.js';
+export type { SlackInboundDeps } from './providers/slack/inbound.js';
+export { createSlackInboundHandler } from './providers/slack/inbound.js';
+export type { RenderedSlackMessage } from './providers/slack/render.js';
+export { renderSlackMessage } from './providers/slack/render.js';
+export type { SlackSocketClient, SlackSocketClientConfig, SlackSocketEnvelope, } from './providers/slack/socket.js';
+export { createSlackSocketClient } from './providers/slack/socket.js';
+export type { TelegramAdapter, TelegramAdapterOptions, TelegramLinkProof, } from './providers/telegram/adapter.js';
+export { createTelegramAdapter } from './providers/telegram/adapter.js';
+export type { TelegramCallbackQuery, TelegramClient, TelegramClientConfig, TelegramEditMessageParams, TelegramIncomingMessage, TelegramInlineButton, TelegramMessage, TelegramReplyMarkup, TelegramSendMessageParams, TelegramUpdate, TelegramUser, } from './providers/telegram/client.js';
+export { createTelegramClient } from './providers/telegram/client.js';
+export type { TelegramInboundDeps } from './providers/telegram/inbound.js';
+export { createTelegramInboundHandler } from './providers/telegram/inbound.js';
+export type { RenderedTelegramMessage } from './providers/telegram/render.js';
+export { escapeMarkdownV2, renderTelegramMessage } from './providers/telegram/render.js';
+export type { WebhookAdapterOptions, WebhookFetch } from './providers/webhook/adapter.js';
+export { createWebhookAdapter } from './providers/webhook/adapter.js';
+export type { WebhookActionLinkOptions, WebhookPayload } from './providers/webhook/render.js';
+export { renderWebhookPayload } from './providers/webhook/render.js';
+export type { SignedWebhookRequest, VerifyIncomingWebhookInput, WebhookVerificationResult, } from './providers/webhook/signing.js';
+export { assertValidIncomingWebhook, signOutgoingWebhook, verifyIncomingWebhook, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER, WebhookReplayGuard, } from './providers/webhook/signing.js';
+export type { ChannelRegistry } from './registry.js';
+export { createChannelRegistry } from './registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,cAAc,EACd,cAAc,EACd,SAAS,EACT,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,YAAY,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,YAAY,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAA;AACnC,YAAY,EACV,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAChE,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClF,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACzE,YAAY,EACV,mCAAmC,EACnC,sBAAsB,EACtB,WAAW,EACX,aAAa,GACd,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AACjF,YAAY,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACnF,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,UAAU,GACX,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,aAAa,GACd,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAC3E,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAC5E,YAAY,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACpE,YAAY,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAA;AACpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAC9F,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,cAAc,GACf,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AACjE,YAAY,EACV,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AACxE,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACrE,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AACvE,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,cAAc,EACd,YAAY,GACb,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,YAAY,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAA;AAC9E,YAAY,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AACxF,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AACrE,YAAY,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC7F,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACpE,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,gCAAgC,CAAA;AACvC,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -0,0 +1,42 @@
+export { createApprovalCommands } from './approvals/commands.js';
+export { dispatchApproval } from './approvals/dispatch.js';
+export { renderApprovalMessage } from './approvals/message.js';
+export { buildSignedApprovalLink, signApprovalLink, verifyApprovalLinkSignature, } from './approvals/signed-link.js';
+export { createApprovalTokenStore } from './approvals/store.js';
+export { APPROVAL_TOKEN_TTL_MS, generateApprovalToken, hashApprovalToken, normalizeApprovalToken, } from './approvals/token.js';
+export { buildAlert } from './formats/alert.js';
+export { REPORT_SCREEN_BUDGET_CHARS } from './formats/budget.js';
+export { buildNotification } from './formats/notification.js';
+export { buildReport } from './formats/report.js';
+export { authorizeInboundCommand } from './inbound/authorize.js';
+export { createCommandRouter, parseCommand } from './inbound/router.js';
+export { generateLinkCode, hashLinkCode, normalizeCode } from './linking/codes.js';
+export { createChannelLinkStore } from './linking/store.js';
+export { ensureChannelTables, LINKING_TABLES } from './linking/tables.js';
+export { createNotificationDispatcher } from './preferences/dispatcher.js';
+export { isWithinQuietHours, minuteOfDayUtc } from './preferences/quiet-hours.js';
+export { createPreferenceStore } from './preferences/store.js';
+export { ensurePreferenceTables, PREFERENCE_TABLES } from './preferences/tables.js';
+export { CHANNEL_EVENT_TYPES, DEFAULT_CHANNEL_PREFERENCES, SEVERITY_RANK, } from './preferences/types.js';
+export { createDiscordAdapter } from './providers/discord/adapter.js';
+export { createDiscordClient } from './providers/discord/client.js';
+export { createDiscordGatewayClient } from './providers/discord/gateway.js';
+export { createDiscordInboundHandler } from './providers/discord/inbound.js';
+export { renderDiscordMessage } from './providers/discord/render.js';
+export { createEmailAdapter } from './providers/email/adapter.js';
+export { createFileEmailTransport } from './providers/email/file-transport.js';
+export { renderEmailMessage } from './providers/email/render.js';
+export { createSlackAdapter } from './providers/slack/adapter.js';
+export { createSlackClient } from './providers/slack/client.js';
+export { createSlackInboundHandler } from './providers/slack/inbound.js';
+export { renderSlackMessage } from './providers/slack/render.js';
+export { createSlackSocketClient } from './providers/slack/socket.js';
+export { createTelegramAdapter } from './providers/telegram/adapter.js';
+export { createTelegramClient } from './providers/telegram/client.js';
+export { createTelegramInboundHandler } from './providers/telegram/inbound.js';
+export { escapeMarkdownV2, renderTelegramMessage } from './providers/telegram/render.js';
+export { createWebhookAdapter } from './providers/webhook/adapter.js';
+export { renderWebhookPayload } from './providers/webhook/render.js';
+export { assertValidIncomingWebhook, signOutgoingWebhook, verifyIncomingWebhook, WEBHOOK_SIGNATURE_HEADER, WEBHOOK_TIMESTAMP_HEADER, WebhookReplayGuard, } from './providers/webhook/signing.js';
+export { createChannelRegistry } from './registry.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAA;AAOnC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAOjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAA;AAUhE,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAOzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAEjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAC9D,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAOnF,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,aAAa,GACd,MAAM,wBAAwB,CAAA;AAM/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AAYrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AAOnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAE3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AAE5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AAEjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAOhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAA;AASjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAMhE,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAMrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAcvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AAErE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAA;AAE9E,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAA;AAExF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAMpE,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,gCAAgC,CAAA;AAEvC,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA"}

package/dist/linking/codes.d.ts

@@ -0,0 +1,6 @@
+export declare function generateLinkCode(): string;
+/** Stored hashed, exactly like a session token (`@cogenta/auth/sessions.ts`) — a leaked table hands out nothing usable. */
+export declare function hashLinkCode(code: string): string;
+/** Case-insensitive, whitespace-tolerant — a code typed by hand into a chat app should not fail on a stray space or lowercase letter. */
+export declare function normalizeCode(code: string): string;
+//# sourceMappingURL=codes.d.ts.map

package/dist/linking/codes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codes.d.ts","sourceRoot":"","sources":["../../src/linking/codes.ts"],"names":[],"mappings":"AAsBA,wBAAgB,gBAAgB,IAAI,MAAM,CAQzC;AAED,2HAA2H;AAC3H,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,yIAAyI;AACzI,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD"}