@coralai/nps-cli 0.1.0

package/dist/daemon/daemon.js

@@ -0,0 +1,166 @@
+/**
+ * Daemon — wires all the modules together. Entrypoint for `nps daemon start`.
+ */
+import { mkdirSync, existsSync } from 'node:fs';
+import { getLogger } from '../logger.js';
+import { PATHS } from '../config/paths.js';
+import { loadGlobalConfig } from '../config/loader.js';
+import { assertRuntime } from '../runtime-check.js';
+import { AuditLog } from '../audit-log.js';
+import { ProfileRegistry } from '../profile/profile-registry.js';
+import { BindingsLoader } from '../bindings/bindings-loader.js';
+import { SessionStore } from '../session/session-store.js';
+import { ControlSocket } from './control-socket.js';
+import { DispatchPipeline } from '../dispatch/dispatch-pipeline.js';
+import { MatrixGateway } from '../gateway/matrix-gateway.js';
+import { cacheRuntimeVersions } from '../session/compat-hash.js';
+import { NPS_VERSION } from '../version.js';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { dirname } from 'node:path';
+let activeDaemon;
+function readAgentPkgVersion() {
+    // Locate node_modules relative to this file when bundled.
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        // dist/daemon/daemon.js → up to nps-cli root → node_modules/@coralai/claude-code-agent/package.json
+        for (const up of ['../..', '../../..', '../../../..']) {
+            const candidate = join(here, up, 'node_modules', '@coralai', 'claude-code-agent', 'package.json');
+            if (existsSync(candidate)) {
+                return JSON.parse(readFileSync(candidate, 'utf8')).version;
+            }
+        }
+    }
+    catch { /* fall through */ }
+    return 'unknown';
+}
+export async function startDaemon() {
+    if (activeDaemon) {
+        throw new Error('daemon already running in this process');
+    }
+    const logger = getLogger('daemon');
+    // 1. ensure ~/.nps/ exists
+    mkdirSync(PATHS.home, { recursive: true });
+    mkdirSync(PATHS.stateDir, { recursive: true });
+    mkdirSync(PATHS.agentsDir, { recursive: true });
+    // 2. boot runtime check
+    assertRuntime(logger);
+    // 3. load global config
+    if (!existsSync(PATHS.configFile)) {
+        throw new Error(`config not found at ${PATHS.configFile}. Run \`nps daemon init\` or create it manually.`);
+    }
+    const config = loadGlobalConfig(PATHS.configFile);
+    // 4. audit log
+    const audit = new AuditLog(PATHS.auditFile);
+    // 5. registries
+    const registry = new ProfileRegistry(PATHS.agentsDir);
+    await registry.start();
+    const bindings = new BindingsLoader(PATHS.bindingsFile);
+    await bindings.start();
+    const sessions = new SessionStore(PATHS.stateDir);
+    // 6. runtime version cache (for compatHash stability across a daemon run)
+    const runtimeVersions = cacheRuntimeVersions();
+    const agentPkgVersion = readAgentPkgVersion();
+    logger.info({ ...runtimeVersions, agentPkgVersion }, 'cached runtime versions for compatHash');
+    // 7. pipeline
+    const adminSet = new Set(config.daemon.adminUserIds);
+    const pipeline = new DispatchPipeline({
+        registry,
+        bindings,
+        sessions,
+        audit,
+        adminUserIds: adminSet,
+        runtime: { ...runtimeVersions, agentPkgVersion },
+    });
+    // 8. control socket + RPC methods
+    const controlSocket = new ControlSocket(PATHS.daemonSocket, PATHS.daemonPid);
+    controlSocket.register('health', async () => ({
+        status: 'ok',
+        pid: process.pid,
+        uptimeSec: Math.round((Date.now() - state.startedAt) / 1000),
+        profileCount: registry.list().length,
+        bindingCount: Object.keys(bindings.snapshot().matrix).length,
+        npsVersion: NPS_VERSION,
+        matrixConnected: !!state.matrix,
+    }));
+    controlSocket.register('stop', async () => {
+        // schedule shutdown on next tick so we can ack first
+        setTimeout(() => { void stopDaemon().then(() => process.exit(0)); }, 50);
+        return { ack: true };
+    });
+    controlSocket.register('bindings.list', async () => bindings.snapshot());
+    controlSocket.register('profile.list', async () => registry.list().map(p => ({ name: p.name, workspace: p.config.workspace })));
+    controlSocket.register('version', async () => ({
+        nps: NPS_VERSION,
+        agentPkg: agentPkgVersion,
+        claude: runtimeVersions.claudeVersion,
+        shim: runtimeVersions.shimVersion,
+    }));
+    await controlSocket.start();
+    const state = {
+        logger,
+        audit,
+        registry,
+        bindings,
+        sessions,
+        controlSocket,
+        startedAt: Date.now(),
+    };
+    // 9. Matrix gateway (if configured)
+    if (config.im.matrix) {
+        const matrix = new MatrixGateway({
+            homeserver: config.im.matrix.homeserver,
+            userId: config.im.matrix.user,
+            accessToken: config.im.matrix.accessToken,
+        }, pipeline);
+        await matrix.start();
+        state.matrix = matrix;
+    }
+    else {
+        logger.warn('no matrix config in ~/.nps/config.yaml — daemon running but no IM transport active');
+    }
+    activeDaemon = state;
+    process.on('SIGINT', () => { void stopDaemon().then(() => process.exit(0)); });
+    process.on('SIGTERM', () => { void stopDaemon().then(() => process.exit(0)); });
+    logger.info({ version: NPS_VERSION, pid: process.pid }, 'nps daemon started');
+    return state;
+}
+export async function stopDaemon() {
+    if (!activeDaemon)
+        return;
+    const s = activeDaemon;
+    activeDaemon = undefined;
+    try {
+        await s.matrix?.stop();
+    }
+    catch (e) {
+        s.logger.warn({ err: e instanceof Error ? e.message : e }, 'matrix stop');
+    }
+    try {
+        await s.bindings.stop();
+    }
+    catch (e) {
+        s.logger.warn({ err: e instanceof Error ? e.message : e }, 'bindings stop');
+    }
+    try {
+        await s.registry.stop();
+    }
+    catch (e) {
+        s.logger.warn({ err: e instanceof Error ? e.message : e }, 'registry stop');
+    }
+    try {
+        await s.controlSocket.stop();
+    }
+    catch (e) {
+        s.logger.warn({ err: e instanceof Error ? e.message : e }, 'control socket stop');
+    }
+    try {
+        s.audit.close();
+    }
+    catch (e) {
+        s.logger.warn({ err: e instanceof Error ? e.message : e }, 'audit close');
+    }
+    s.logger.info('nps daemon stopped cleanly');
+}
+//# sourceMappingURL=daemon.js.map

package/dist/daemon/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/daemon/daemon.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAapC,IAAI,YAAqC,CAAC;AAE1C,SAAS,mBAAmB;IAC1B,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,oGAAoG;QACpG,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;YAClG,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEnC,2BAA2B;IAC3B,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,wBAAwB;IACxB,aAAa,CAAC,MAAM,CAAC,CAAC;IAEtB,wBAAwB;IACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,UAAU,kDAAkD,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAElD,eAAe;IACf,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE5C,gBAAgB;IAChB,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAElD,0EAA0E;IAC1E,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;IAC/C,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,eAAe,EAAE,eAAe,EAAE,EAAE,wCAAwC,CAAC,CAAC;IAE/F,cAAc;IACd,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC;QACpC,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,KAAK;QACL,YAAY,EAAE,QAAQ;QACtB,OAAO,EAAE,EAAE,GAAG,eAAe,EAAE,eAAe,EAAE;KACjD,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7E,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAC5D,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM;QACpC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM;QAC5D,UAAU,EAAE,WAAW;QACvB,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;KAChC,CAAC,CAAC,CAAC;IACJ,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QACxC,qDAAqD;QACrD,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,aAAa,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzE,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAChI,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,eAAe,CAAC,aAAa;QACrC,IAAI,EAAE,eAAe,CAAC,WAAW;KAClC,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;IAE5B,MAAM,KAAK,GAAgB;QACzB,MAAM;QACN,KAAK;QACL,QAAQ;QACR,QAAQ;QACR,QAAQ;QACR,aAAa;QACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IAEF,oCAAoC;IACpC,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B;YACE,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU;YACvC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI;YAC7B,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW;SAC1C,EACD,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;IACpG,CAAC;IAED,YAAY,GAAG,KAAK,CAAC;IAErB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhF,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,CAAC,GAAG,YAAY,CAAC;IACvB,YAAY,GAAG,SAAS,CAAC;IACzB,IAAI,CAAC;QAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAAC,CAAC;IACxH,IAAI,CAAC;QAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IAC3H,IAAI,CAAC;QAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IAC3H,IAAI,CAAC;QAAC,MAAM,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAAC,CAAC;IACtI,IAAI,CAAC;QAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAAC,CAAC;IACjH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;AAC9C,CAAC"}

package/dist/dispatch/dispatch-pipeline.d.ts

@@ -0,0 +1,39 @@
+import type { Logger } from 'pino';
+import type { SessionStore } from '../session/session-store.js';
+import type { ProfileRegistry } from '../profile/profile-registry.js';
+import type { BindingsLoader } from '../bindings/bindings-loader.js';
+import type { AuditLog } from '../audit-log.js';
+export interface IncomingMessage {
+    channelId: string;
+    eventId: string;
+    text: string;
+    sender: string;
+    transport: 'matrix';
+}
+export interface ReplyTarget {
+    /** Called BEFORE start() (long latency) so user sees a typing indicator. */
+    startTyping?: () => Promise<void>;
+    /** Called when stop() finishes (or on error). */
+    stopTyping?: () => Promise<void>;
+    /** Final reply text. */
+    send: (text: string) => Promise<void>;
+}
+export interface PipelineDeps {
+    registry: ProfileRegistry;
+    bindings: BindingsLoader;
+    sessions: SessionStore;
+    audit?: AuditLog;
+    adminUserIds: ReadonlySet<string>;
+    runtime: {
+        claudeVersion: string;
+        shimVersion: string;
+        agentPkgVersion: string;
+    };
+}
+export declare class DispatchPipeline {
+    private readonly deps;
+    private logger;
+    constructor(deps: PipelineDeps, logger?: Logger);
+    dispatch(msg: IncomingMessage, reply: ReplyTarget): Promise<void>;
+}
+//# sourceMappingURL=dispatch-pipeline.d.ts.map

package/dist/dispatch/dispatch-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-pipeline.d.ts","sourceRoot":"","sources":["../../src/dispatch/dispatch-pipeline.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAGnC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,wBAAwB;IACxB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;CAClF;AAED,qBAAa,gBAAgB;IAEf,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,MAAM,CAAS;gBACM,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM;IAI1D,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CA6LxE"}

package/dist/dispatch/dispatch-pipeline.js

@@ -0,0 +1,219 @@
+/**
+ * M4 — DispatchPipeline.
+ *
+ * Per CEO plan rev 5 §6.2 corrected order:
+ *
+ *   1. event-id dedupe          → silent drop on duplicate
+ *   2. binding lookup           → /help reply on miss
+ *   3. compute currentCompatHash
+ *   4. compat check BEFORE resume    ← codex F1: not after
+ *   5. spawn ClaudeCodeAgent (cwd=profile, env, permissionMode)
+ *   6. agent.start({ resumeSession }) (or fresh if hash mismatch / no stored)
+ *   7. agent.prompt(text)
+ *   8. persist sessionId + compatHash + lastEventId BEFORE send  ← codex F11
+ *   9. agent.stop()
+ *  10. gateway.sendReply()
+ */
+import { ClaudeCodeAgent, isAgentError } from '@coralai/claude-code-agent';
+import { getLogger } from '../logger.js';
+import { computeCompatHash } from '../session/compat-hash.js';
+import { isSlashCommand, handleSlash, defaultHelpText } from './slash-commands.js';
+export class DispatchPipeline {
+    deps;
+    logger;
+    constructor(deps, logger) {
+        this.deps = deps;
+        this.logger = logger ?? getLogger('dispatch');
+    }
+    async dispatch(msg, reply) {
+        // 1. event-id dedupe
+        if (this.deps.sessions.hasSeenEvent(msg.channelId, msg.eventId)) {
+            this.logger.debug({ eventId: msg.eventId }, 'duplicate event — silent drop');
+            this.deps.audit?.append({
+                sender: msg.sender,
+                transport: msg.transport,
+                channel: msg.channelId,
+                command_or_event: 'message',
+                decision: 'dropped',
+                detail: 'duplicate event id',
+            });
+            return;
+        }
+        // Slash command path: short-circuit before agent dispatch
+        const binding = this.deps.bindings.lookupMatrix(msg.channelId);
+        if (isSlashCommand(msg.text)) {
+            const ctx = {
+                channelId: msg.channelId,
+                sender: msg.sender,
+                transport: msg.transport,
+                adminUserIds: this.deps.adminUserIds,
+                ...(binding ? { binding: { profile: binding } } : {}),
+            };
+            const handlers = {
+                help: async (c) => {
+                    const stored = this.deps.sessions.get(c.channelId);
+                    if (binding) {
+                        return `Bound to profile: ${binding}\nSession active: ${stored ? 'yes' : 'no'}\n\n${defaultHelpText(true)}`;
+                    }
+                    return defaultHelpText(c.adminUserIds.has(c.sender));
+                },
+                status: async (c) => {
+                    const stored = this.deps.sessions.get(c.channelId);
+                    if (!binding)
+                        return 'status: unbound. Run `nps bind add` on the host.';
+                    return [
+                        `status: bound to '${binding}'`,
+                        `session: ${stored ? `present (id ${stored.sessionId.slice(0, 8)}...)` : 'fresh'}`,
+                        `lastSeen: ${stored?.lastSeenAt ?? '—'}`,
+                    ].join('\n');
+                },
+            };
+            const result = await handleSlash(msg.text, ctx, handlers, this.deps.audit);
+            if (result.text)
+                await reply.send(result.text);
+            return;
+        }
+        // 2. binding lookup
+        if (!binding) {
+            this.deps.audit?.append({
+                sender: msg.sender,
+                transport: msg.transport,
+                channel: msg.channelId,
+                command_or_event: 'message',
+                decision: 'dropped',
+                detail: 'no binding',
+            });
+            await reply.send(defaultHelpText(this.deps.adminUserIds.has(msg.sender)));
+            return;
+        }
+        // Sender auth check (single-user v0.1 — non-admin messages refused)
+        if (!this.deps.adminUserIds.has(msg.sender)) {
+            this.deps.audit?.append({
+                sender: msg.sender,
+                transport: msg.transport,
+                channel: msg.channelId,
+                command_or_event: 'message',
+                decision: 'denied',
+                detail: 'non-admin sender',
+            });
+            await reply.send('denied: nps v0.1 is single-user; only the daemon admin may chat.');
+            return;
+        }
+        const profile = this.deps.registry.get(binding);
+        if (!profile) {
+            this.logger.error({ profile: binding, channelId: msg.channelId }, 'binding points to unknown profile');
+            this.deps.audit?.append({
+                sender: msg.sender,
+                transport: msg.transport,
+                channel: msg.channelId,
+                command_or_event: 'message',
+                decision: 'error',
+                detail: `unknown profile '${binding}'`,
+            });
+            await reply.send(`error: profile '${binding}' not found. Check \`nps agent list\` on the host.`);
+            return;
+        }
+        // 3. compute currentCompatHash
+        let currentHash;
+        try {
+            currentHash = computeCompatHash({
+                profileDir: profile.dir,
+                claudeVersion: this.deps.runtime.claudeVersion,
+                shimVersion: this.deps.runtime.shimVersion,
+                agentPkgVersion: this.deps.runtime.agentPkgVersion,
+            });
+        }
+        catch (e) {
+            this.logger.error({ err: e instanceof Error ? e.message : e, profile: binding }, 'compatHash compute failed');
+            await reply.send('error: failed to verify session integrity. Run `nps daemon status` for details.');
+            return;
+        }
+        // 4. compat check BEFORE resume (codex F1)
+        const stored = this.deps.sessions.get(msg.channelId);
+        let resumeId;
+        let resumedHint = false;
+        if (stored && stored.compatHash === currentHash && stored.profile === binding) {
+            resumeId = stored.sessionId;
+        }
+        else if (stored) {
+            // Hash mismatch — drop stale session
+            resumedHint = true;
+            this.logger.info({ channelId: msg.channelId, oldHash: stored.compatHash.slice(0, 8), newHash: currentHash.slice(0, 8) }, 'compatHash mismatch — fresh start');
+            this.deps.sessions.delete(msg.channelId);
+        }
+        // 5-6. Spawn + start
+        await reply.startTyping?.();
+        const agent = new ClaudeCodeAgent({
+            cwd: profile.dir,
+            env: profile.config.env,
+            permissionMode: profile.config.permissionMode,
+            ...(profile.config.recording ? { recording: profile.config.recording } : {}),
+        });
+        let resultText;
+        let newSessionId;
+        try {
+            await agent.start(resumeId ? { resumeSession: resumeId } : {});
+            // Augment user text with workspace pointer (M-WS strategy: workspace in prompt)
+            const promptText = profile.config.workspace
+                ? `[Your task workspace is at: ${profile.config.workspace}]\n\n${msg.text}`
+                : msg.text;
+            const handle = agent.prompt(promptText);
+            const result = await handle.result;
+            resultText = result.text;
+            newSessionId = agent.sessionId ?? '';
+        }
+        catch (e) {
+            try {
+                await agent.stop();
+            }
+            catch { /* ignore */ }
+            await reply.stopTyping?.();
+            const msgText = e instanceof Error ? e.message : String(e);
+            this.logger.error({ err: msgText, channelId: msg.channelId }, 'agent dispatch failed');
+            this.deps.audit?.append({
+                sender: msg.sender,
+                transport: msg.transport,
+                channel: msg.channelId,
+                command_or_event: 'message',
+                decision: 'error',
+                detail: isAgentError(e) ? e.code : 'agent error',
+            });
+            await reply.send(`error: agent failed (${isAgentError(e) ? e.code : 'unknown'}). Check daemon logs.`);
+            return;
+        }
+        // 8. persist BEFORE send (codex F11)
+        try {
+            this.deps.sessions.put(msg.channelId, {
+                sessionId: newSessionId,
+                compatHash: currentHash,
+                profile: binding,
+                lastEventId: msg.eventId,
+            });
+        }
+        catch (e) {
+            this.logger.error({ err: e instanceof Error ? e.message : e }, 'session persist failed — message handled but state may be lost on restart');
+        }
+        // 9. stop
+        try {
+            await agent.stop();
+        }
+        catch (e) {
+            this.logger.warn({ err: e instanceof Error ? e.message : e }, 'agent.stop failed (best-effort)');
+        }
+        await reply.stopTyping?.();
+        // 10. send reply
+        const finalText = resumedHint
+            ? `[session reset: profile or skills changed since last turn]\n\n${resultText}`
+            : resultText;
+        await reply.send(finalText);
+        this.deps.audit?.append({
+            sender: msg.sender,
+            transport: msg.transport,
+            channel: msg.channelId,
+            command_or_event: 'message',
+            decision: 'accepted',
+            profile: binding,
+        });
+    }
+}
+//# sourceMappingURL=dispatch-pipeline.js.map

package/dist/dispatch/dispatch-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-pipeline.js","sourceRoot":"","sources":["../../src/dispatch/dispatch-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAM9D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA4BnF,MAAM,OAAO,gBAAgB;IAEE;IADrB,MAAM,CAAS;IACvB,YAA6B,IAAkB,EAAE,MAAe;QAAnC,SAAI,GAAJ,IAAI,CAAc;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAoB,EAAE,KAAkB;QACrD,qBAAqB;QACrB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC7E,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAiB;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;gBACpC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC;YACF,MAAM,QAAQ,GAAkB;gBAC9B,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBAChB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACnD,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,qBAAqB,OAAO,qBAAqB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9G,CAAC;oBACD,OAAO,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;oBAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACnD,IAAI,CAAC,OAAO;wBAAE,OAAO,kDAAkD,CAAC;oBACxE,OAAO;wBACL,qBAAqB,OAAO,GAAG;wBAC/B,YAAY,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;wBAClF,aAAa,MAAM,EAAE,UAAU,IAAI,GAAG,EAAE;qBACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;aACF,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,IAAI;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,YAAY;aACrB,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,kBAAkB;aAC3B,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,mCAAmC,CAAC,CAAC;YACvG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,oBAAoB,OAAO,GAAG;aACvC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,OAAO,oDAAoD,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QAED,+BAA+B;QAC/B,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,iBAAiB,CAAC;gBAC9B,UAAU,EAAE,OAAO,CAAC,GAAG;gBACvB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa;gBAC9C,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW;gBAC1C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe;aACnD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAC;YAC9G,MAAM,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,2CAA2C;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,QAA4B,CAAC;QACjC,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC9E,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9B,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,qCAAqC;YACrC,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,mCAAmC,CAAC,CAAC;YAC9J,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;QAED,qBAAqB;QACrB,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG;YACvB,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;YAC7C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,UAAkB,CAAC;QACvB,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/D,gFAAgF;YAChF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS;gBACzC,CAAC,CAAC,+BAA+B,OAAO,CAAC,MAAM,CAAC,SAAS,QAAQ,GAAG,CAAC,IAAI,EAAE;gBAC3E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACb,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC;YACnC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,YAAY,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACvF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;gBACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa;aACjD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,wBAAwB,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,uBAAuB,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACpC,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,WAAW;gBACvB,OAAO,EAAE,OAAO;gBAChB,WAAW,EAAE,GAAG,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,2EAA2E,CAAC,CAAC;QAC9I,CAAC;QAED,UAAU;QACV,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QAE3B,iBAAiB;QACjB,MAAM,SAAS,GAAG,WAAW;YAC3B,CAAC,CAAC,iEAAiE,UAAU,EAAE;YAC/E,CAAC,CAAC,UAAU,CAAC;QACf,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAE5B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,SAAS;YACtB,gBAAgB,EAAE,SAAS;YAC3B,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/dispatch/slash-commands.d.ts

@@ -0,0 +1,35 @@
+/**
+ * M8 — slash command parser + dispatcher.
+ *
+ * v0.1 minimal contract per CEO plan rev 5 D6=A:
+ *   /help    — open to any sender (DM-friendly; lets a new admin discover the bot)
+ *   /status  — admin only
+ *   /unknown → reply with /help (open)
+ *   denied   → audit-logged + reply "denied"
+ *
+ * The actual binding mgmt (/bind /unbind /reset /persona) is CLI-only in v0.1.
+ */
+import type { AuditLog } from '../audit-log.js';
+export interface SlashContext {
+    channelId: string;
+    sender: string;
+    transport: 'matrix';
+    adminUserIds: ReadonlySet<string>;
+    binding?: {
+        profile: string;
+        lastEventId?: string;
+    };
+}
+export interface SlashResult {
+    /** If true: gateway should reply with `text` and skip agent dispatch. */
+    handled: boolean;
+    text?: string;
+}
+export interface SlashHandlers {
+    status: (ctx: SlashContext) => Promise<string>;
+    help: (ctx: SlashContext) => Promise<string>;
+}
+export declare function isSlashCommand(text: string): boolean;
+export declare function handleSlash(text: string, ctx: SlashContext, handlers: SlashHandlers, audit?: AuditLog): Promise<SlashResult>;
+export declare function defaultHelpText(adminMode: boolean): string;
+//# sourceMappingURL=slash-commands.d.ts.map

package/dist/dispatch/slash-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-commands.d.ts","sourceRoot":"","sources":["../../src/dispatch/slash-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,QAAQ,CAAC;IACpB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,YAAY,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,CAAC,EAAE,QAAQ,GACf,OAAO,CAAC,WAAW,CAAC,CAmDtB;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAU1D"}

package/dist/dispatch/slash-commands.js

@@ -0,0 +1,67 @@
+export function isSlashCommand(text) {
+    return text.startsWith('/');
+}
+export async function handleSlash(text, ctx, handlers, audit) {
+    const trimmed = text.trim();
+    const [cmd] = trimmed.split(/\s+/);
+    switch (cmd) {
+        case '/help': {
+            // Open to any sender — codex F12 fix
+            const reply = await handlers.help(ctx);
+            audit?.append({
+                sender: ctx.sender,
+                transport: ctx.transport,
+                channel: ctx.channelId,
+                command_or_event: '/help',
+                decision: 'accepted',
+            });
+            return { handled: true, text: reply };
+        }
+        case '/status': {
+            if (!ctx.adminUserIds.has(ctx.sender)) {
+                audit?.append({
+                    sender: ctx.sender,
+                    transport: ctx.transport,
+                    channel: ctx.channelId,
+                    command_or_event: '/status',
+                    decision: 'denied',
+                });
+                return { handled: true, text: 'denied: /status requires admin privileges' };
+            }
+            const reply = await handlers.status(ctx);
+            audit?.append({
+                sender: ctx.sender,
+                transport: ctx.transport,
+                channel: ctx.channelId,
+                command_or_event: '/status',
+                decision: 'accepted',
+            });
+            return { handled: true, text: reply };
+        }
+        default: {
+            audit?.append({
+                sender: ctx.sender,
+                transport: ctx.transport,
+                channel: ctx.channelId,
+                command_or_event: cmd ?? '/(empty)',
+                decision: 'dropped',
+                detail: 'unknown command',
+            });
+            // Show help to anyone — open
+            const reply = await handlers.help(ctx);
+            return { handled: true, text: `Unknown command: ${cmd ?? '?'}\n\n${reply}` };
+        }
+    }
+}
+export function defaultHelpText(adminMode) {
+    const base = [
+        'nps DM commands:',
+        '  /help     show this message (open)',
+        '  /status   show current binding (admin only)',
+    ].join('\n');
+    if (adminMode) {
+        return base + '\n\nManage bindings via host CLI:\n  nps bind add <channel-id> <profile>\n  nps bind list';
+    }
+    return base + '\n\nDM is not yet bound. The admin must run `nps bind add` on the host.';
+}
+//# sourceMappingURL=slash-commands.js.map

package/dist/dispatch/slash-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-commands.js","sourceRoot":"","sources":["../../src/dispatch/slash-commands.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,GAAiB,EACjB,QAAuB,EACvB,KAAgB;IAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,qCAAqC;YACrC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,KAAK,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,OAAO;gBACzB,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,KAAK,EAAE,MAAM,CAAC;oBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;oBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;oBACtB,gBAAgB,EAAE,SAAS;oBAC3B,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;YAC9E,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzC,KAAK,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,SAAS;gBAC3B,QAAQ,EAAE,UAAU;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,KAAK,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,SAAS;gBACtB,gBAAgB,EAAE,GAAG,IAAI,UAAU;gBACnC,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;YACH,6BAA6B;YAC7B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,GAAG,IAAI,GAAG,OAAO,KAAK,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAkB;IAChD,MAAM,IAAI,GAAG;QACX,kBAAkB;QAClB,sCAAsC;QACtC,+CAA+C;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,IAAI,GAAG,2FAA2F,CAAC;IAC5G,CAAC;IACD,OAAO,IAAI,GAAG,yEAAyE,CAAC;AAC1F,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * NpsError — typed errors for nps-cli operations.
+ *
+ * Codes are grouped by concern:
+ *  - Profile / workspace: PROFILE_NOT_FOUND, WORKSPACE_INVALID, NPS_YAML_INVALID
+ *  - Bindings: BINDING_NOT_FOUND, BINDING_WRITE_FAILED
+ *  - Session: COMPAT_HASH_MISMATCH, SESSION_STORE_CORRUPT
+ *  - Gateway: GATEWAY_AUTH_FAILED, ROOM_ENCRYPTED, ROOM_NOT_DM
+ *  - Runtime: CLAUDE_BIN_MISSING, ACP_SHIM_MISSING, SHIM_UNHEALTHY
+ *  - Daemon: SOCKET_BUSY, DAEMON_ALREADY_RUNNING, STALE_SOCKET
+ */
+export type NpsErrorCode = 'PROFILE_NOT_FOUND' | 'WORKSPACE_INVALID' | 'NPS_YAML_INVALID' | 'BINDING_NOT_FOUND' | 'BINDING_WRITE_FAILED' | 'COMPAT_HASH_MISMATCH' | 'COMPAT_HASH_FAILED' | 'SESSION_STORE_CORRUPT' | 'GATEWAY_AUTH_FAILED' | 'ROOM_ENCRYPTED' | 'ROOM_NOT_DM' | 'CLAUDE_BIN_MISSING' | 'ACP_SHIM_MISSING' | 'SHIM_UNHEALTHY' | 'SOCKET_BUSY' | 'DAEMON_ALREADY_RUNNING' | 'STALE_SOCKET' | 'UNAUTHORIZED' | 'EVENT_DUPLICATE';
+export declare class NpsError extends Error {
+    readonly code: NpsErrorCode;
+    readonly context?: Record<string, unknown>;
+    constructor(code: NpsErrorCode, message: string, opts?: {
+        cause?: Error;
+        context?: Record<string, unknown>;
+    });
+}
+export declare function isNpsError(e: unknown): e is NpsError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,GACtB,oBAAoB,GACpB,uBAAuB,GACvB,qBAAqB,GACrB,gBAAgB,GAChB,aAAa,GACb,oBAAoB,GACpB,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb,wBAAwB,GACxB,cAAc,GACd,cAAc,GACd,iBAAiB,CAAC;AAEtB,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,KAAK,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;CAQ9D;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD"}

package/dist/errors.js

@@ -0,0 +1,17 @@
+export class NpsError extends Error {
+    code;
+    context;
+    constructor(code, message, opts) {
+        super(message);
+        this.name = 'NpsError';
+        this.code = code;
+        if (opts?.cause !== undefined)
+            this.cause = opts.cause;
+        if (opts?.context !== undefined)
+            this.context = opts.context;
+    }
+}
+export function isNpsError(e) {
+    return e instanceof NpsError;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAgCA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IACnB,OAAO,CAA2B;IAE3C,YACE,IAAkB,EAClB,OAAe,EACf,IAA2D;QAE3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,CAAC,YAAY,QAAQ,CAAC;AAC/B,CAAC"}

package/dist/gateway/matrix-gateway.d.ts

@@ -0,0 +1,24 @@
+import type { Logger } from 'pino';
+import type { DispatchPipeline } from '../dispatch/dispatch-pipeline.js';
+export interface MatrixGatewayConfig {
+    homeserver: string;
+    userId: string;
+    accessToken: string;
+    /** Type indicator timeout (ms) shown while agent runs. matrix-js-sdk default is OK. */
+    typingTimeoutMs?: number;
+}
+export declare class MatrixGateway {
+    private readonly config;
+    private readonly pipeline;
+    private logger;
+    private client;
+    private dispatching;
+    private stopRequested;
+    constructor(config: MatrixGatewayConfig, pipeline: DispatchPipeline, logger?: Logger);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private onTimeline;
+    private handleMessage;
+    private makeReplyTarget;
+}
+//# sourceMappingURL=matrix-gateway.d.ts.map

package/dist/gateway/matrix-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-gateway.d.ts","sourceRoot":"","sources":["../../src/gateway/matrix-gateway.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,KAAK,EAAE,gBAAgB,EAAgC,MAAM,kCAAkC,CAAC;AAEvG,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,aAAa;IAOtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAP3B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;gBAGX,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,gBAAgB,EAC3C,MAAM,CAAC,EAAE,MAAM;IAKX,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,UAAU;YAcJ,aAAa;IAuD3B,OAAO,CAAC,eAAe;CAsBxB"}