@damian87/omp 0.6.0 → 0.8.0

package/dist/src/env/dotenv.js

@@ -0,0 +1,112 @@
+/**
+ * Tiny dotenv reader for the omp CLI. Two purposes:
+ *
+ *  1. {@link parseDotEnv} — pure string → record parser. Same rules the legacy
+ *     `loadDotEnv` in src/jira.ts:100-117 has used in production. Shared here
+ *     so jira and the new `~/.omp/.env` loader stay in sync.
+ *
+ *  2. {@link loadOmpEnv} — auto-loads `~/.omp/.env` into `process.env` so the
+ *     CLI works from any cwd without needing `set -a; source .env; set +a`.
+ *     Precedence: shell `process.env` always wins; the file only fills in
+ *     keys that are not already set, so CI environments and one-off
+ *     `KEY=value omp ...` invocations are unaffected.
+ *
+ *  Both functions are designed to fail open — a missing or unreadable file
+ *  must never crash the CLI; we degrade silently (loadOmpEnv) or emit a
+ *  one-line stderr warning, never the file contents.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const OMP_ENV_DIRNAME = ".omp";
+export const OMP_ENV_FILENAME = ".env";
+/**
+ * Parse the text of a `.env` file. Accepted syntax (a deliberate subset, the
+ * same rules src/jira.ts already follows):
+ *
+ *   KEY=value            → { KEY: "value" }
+ *   KEY="quoted value"   → { KEY: "quoted value" }   (single OR double quotes; matching outer pair stripped)
+ *   KEY=value with spaces → { KEY: "value with spaces" }
+ *   # comment            → ignored
+ *   (blank line)         → ignored
+ *   malformed (no `=`)   → skipped (no throw)
+ *   KEY=                 → empty string → caller decides whether to apply
+ *
+ * NOT supported (out of scope for `omp`): `export KEY=`, `${VAR}` interpolation,
+ * multi-line values, escape sequences. Keep this tiny.
+ */
+export function parseDotEnv(text) {
+    const env = {};
+    const lines = text.split(/\r?\n/);
+    for (const rawLine of lines) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const equals = line.indexOf("=");
+        if (equals === -1)
+            continue;
+        const key = line.slice(0, equals).trim();
+        if (!key)
+            continue;
+        // Strip a leading/trailing quote independently — preserves the legacy
+        // src/jira.ts loadDotEnv behavior verbatim so any existing .env files
+        // that jira used keep producing the same map.
+        const value = line
+            .slice(equals + 1)
+            .trim()
+            .replace(/^['"]|['"]$/g, "");
+        env[key] = value;
+    }
+    return env;
+}
+/**
+ * Locate `<home>/.omp/.env`, parse it, and apply non-conflicting keys onto
+ * `processEnv`. Keys already present in `processEnv` (incl. empty strings) are
+ * preserved — shell environment always wins.
+ *
+ * Returns a summary so the caller can log "loaded N keys from <path>" once at
+ * startup if desired. We do NOT log secret values; only the path and counts.
+ */
+export function loadOmpEnv(opts = {}) {
+    const home = opts.homeDir ?? homedir();
+    const env = opts.processEnv ?? process.env;
+    const log = opts.log ?? ((m) => console.error(m));
+    // Test escape hatch — OMP_SKIP_USER_ENV=1 in the target env disables the
+    // loader. Real CLI calls inherit process.env by default, so a single
+    // vitest setup line (process.env.OMP_SKIP_USER_ENV="1") opts the entire
+    // suite out. Unit tests that DO want to exercise the loader pass their
+    // own clean processEnv and don't inherit the flag.
+    if (env.OMP_SKIP_USER_ENV) {
+        return { loaded: 0, path: null };
+    }
+    const path = join(home, OMP_ENV_DIRNAME, OMP_ENV_FILENAME);
+    if (!existsSync(path))
+        return { loaded: 0, path: null };
+    let text;
+    try {
+        text = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        // Permissions error, racing delete — degrade gracefully. Don't leak path
+        // contents; just say we couldn't read it.
+        const msg = err instanceof Error ? err.message : String(err);
+        log(`omp: could not read ${path}: ${msg}`);
+        return { loaded: 0, path };
+    }
+    const parsed = parseDotEnv(text);
+    let loaded = 0;
+    for (const [key, value] of Object.entries(parsed)) {
+        // Skip empty values — treat `KEY=` in the file as "no opinion", so an
+        // empty file entry can't accidentally shadow a process.env value the
+        // user later sets in a parent shell.
+        if (value === "")
+            continue;
+        // process.env wins — only fill the gap.
+        if (env[key] !== undefined)
+            continue;
+        env[key] = value;
+        loaded++;
+    }
+    return { loaded, path };
+}
+//# sourceMappingURL=dotenv.js.map

package/dist/src/env/dotenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dotenv.js","sourceRoot":"","sources":["../../../src/env/dotenv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,sEAAsE;QACtE,sEAAsE;QACtE,8CAA8C;QAC9C,MAAM,KAAK,GAAG,IAAI;aACf,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;aACjB,IAAI,EAAE;aACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,OAA0B,EAAE;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAElD,yEAAyE;IACzE,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,mDAAmD;IACnD,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAExD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yEAAyE;QACzE,0CAA0C;QAC1C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,uBAAuB,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,sEAAsE;QACtE,qEAAqE;QACrE,qCAAqC;QACrC,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,wCAAwC;QACxC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACrC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjB,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/src/env/init.d.ts

@@ -0,0 +1,50 @@
+/** Where to send instructional and prompt text. */
+export interface InitIO {
+    /** Display a line to the user (stdout in interactive use). */
+    print(line: string): void;
+    /** Display a diagnostic warning (stderr — must NEVER pollute stdout when --json is in play). */
+    warn?(line: string): void;
+    /** Read one line of input (or undefined when stream closed/non-interactive). */
+    ask(prompt: string): Promise<string | undefined>;
+}
+export interface InitOptions {
+    io: InitIO;
+    /** Override the user's home directory (tests). */
+    homeDir?: string;
+    /** Use these answers verbatim — skips prompts (`--non-interactive` mode). */
+    answers?: Partial<InitAnswers>;
+    /** When true, overwrite an existing ~/.omp/.env without asking. */
+    force?: boolean;
+}
+export interface InitAnswers {
+    slackBotToken: string;
+    slackAppToken: string;
+    copilotTmuxSession: string;
+    slackAllowedUsers: string;
+}
+export interface InitResult {
+    /** Whether the file was written. False when the user aborted. */
+    ok: boolean;
+    /** Resolved file path. */
+    path: string;
+    /** Reason when ok=false. */
+    reason?: string;
+}
+/**
+ * Slack app manifest pre-configured for the omp gateway bridge. Includes the
+ * bot scopes Slack requires before letting you install the app, plus event
+ * subscriptions for DMs and @mentions, plus Socket Mode (no public URL).
+ *
+ * Keep this in sync with docs/slack-setup.md. If you change one, change both.
+ */
+export declare const SLACK_APP_MANIFEST_YAML = "display_information:\n  name: omp-copilot\n  description: Bridge to a local GitHub Copilot CLI session\nfeatures:\n  bot_user:\n    display_name: omp-copilot\n    always_online: true\n  app_home:\n    messages_tab_enabled: true\n    messages_tab_read_only_enabled: false\noauth_config:\n  scopes:\n    bot:\n      - app_mentions:read\n      - chat:write\n      - im:history\n      - im:read\n      - im:write\nsettings:\n  event_subscriptions:\n    bot_events:\n      - app_mention\n      - message.im\n  interactivity:\n    is_enabled: false\n  org_deploy_enabled: false\n  socket_mode_enabled: true\n";
+/**
+ * Run the interactive setup. Idempotent — re-running shows masked existing
+ * values and offers to overwrite (or pass `force: true`).
+ *
+ * Validation:
+ *   - bot token must start with `xoxb-` (we re-prompt up to 2 times)
+ *   - app token must start with `xapp-` (we re-prompt up to 2 times)
+ *   - empty bot/app token in non-interactive mode is an error
+ */
+export declare function runEnvInit(opts: InitOptions): Promise<InitResult>;

package/dist/src/env/init.js

@@ -0,0 +1,276 @@
+/**
+ * Interactive setup for `~/.omp/.env`.
+ *
+ * `omp env init` walks the user through getting their Slack tokens, prompts
+ * them, writes the file (chmod 600), and tells them what to run next. Anything
+ * that would prompt the user lives behind injectable I/O so unit tests can
+ * exercise the full happy path and the validation/abort paths without ever
+ * touching a real terminal.
+ */
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { OMP_ENV_DIRNAME, OMP_ENV_FILENAME } from "./dotenv.js";
+const BOT_TOKEN_PREFIX = "xoxb-";
+const APP_TOKEN_PREFIX = "xapp-";
+const SLACK_APP_URL = "https://api.slack.com/apps";
+/**
+ * Slack app manifest pre-configured for the omp gateway bridge. Includes the
+ * bot scopes Slack requires before letting you install the app, plus event
+ * subscriptions for DMs and @mentions, plus Socket Mode (no public URL).
+ *
+ * Keep this in sync with docs/slack-setup.md. If you change one, change both.
+ */
+export const SLACK_APP_MANIFEST_YAML = `display_information:
+  name: omp-copilot
+  description: Bridge to a local GitHub Copilot CLI session
+features:
+  bot_user:
+    display_name: omp-copilot
+    always_online: true
+  app_home:
+    messages_tab_enabled: true
+    messages_tab_read_only_enabled: false
+oauth_config:
+  scopes:
+    bot:
+      - app_mentions:read
+      - chat:write
+      - im:history
+      - im:read
+      - im:write
+settings:
+  event_subscriptions:
+    bot_events:
+      - app_mention
+      - message.im
+  interactivity:
+    is_enabled: false
+  org_deploy_enabled: false
+  socket_mode_enabled: true
+`;
+const INTRO_LINES = [
+    "",
+    "omp env init — set up ~/.omp/.env",
+    "",
+    "This writes your Slack tokens (and optional defaults) to ~/.omp/.env so",
+    "`omp gateway serve` works from any shell, without `source .env`.",
+    "Shell exports always win, so a one-off override still works.",
+    "",
+    "──────────────────────────────────────────────────────────────────────",
+    "STEP 1 — create the Slack app FROM AN APP MANIFEST (not from scratch).",
+    "──────────────────────────────────────────────────────────────────────",
+    `  • Open ${SLACK_APP_URL} → "Create New App" → "From an app manifest".`,
+    "  • Pick your workspace.",
+    `  • Choose YAML and paste the manifest below, then "Create" → "Install to Workspace".`,
+    "    (The manifest includes the required scopes so Slack will let you install it.",
+    "     Picking 'From scratch' leaves scopes empty — Slack then refuses to install.)",
+    "",
+    "── manifest (copy from here to the next dashed line) ──",
+    ...SLACK_APP_MANIFEST_YAML.trimEnd().split("\n"),
+    "── end of manifest ──",
+    "",
+    "──────────────────────────────────────────────────────────────────────",
+    "STEP 2 — grab the two tokens (≈1 min):",
+    "──────────────────────────────────────────────────────────────────────",
+    `  • Bot token (xoxb-…): "OAuth & Permissions" → "Bot User OAuth Token"`,
+    "    (visible after the 'Install to Workspace' step above).",
+    `  • App-level token (xapp-…): "Basic Information" → "App-Level Tokens"`,
+    "    → Generate, with scope `connections:write`.",
+    "",
+    "Then paste both tokens at the prompts below. Press ENTER on optional ones to skip.",
+    "",
+];
+/**
+ * Run the interactive setup. Idempotent — re-running shows masked existing
+ * values and offers to overwrite (or pass `force: true`).
+ *
+ * Validation:
+ *   - bot token must start with `xoxb-` (we re-prompt up to 2 times)
+ *   - app token must start with `xapp-` (we re-prompt up to 2 times)
+ *   - empty bot/app token in non-interactive mode is an error
+ */
+export async function runEnvInit(opts) {
+    const { io, force, answers } = opts;
+    const home = opts.homeDir ?? homedir();
+    const path = join(home, OMP_ENV_DIRNAME, OMP_ENV_FILENAME);
+    // Non-interactive path: take everything from `answers`. Used by the CLI
+    // when the user passes --bot-token / --app-token flags, or by tests.
+    const interactive = !answers;
+    if (interactive) {
+        for (const line of INTRO_LINES)
+            io.print(line);
+    }
+    if (existsSync(path) && !force) {
+        if (interactive) {
+            const existing = readExistingMasked(path);
+            io.print(`Existing config at ${path}:`);
+            for (const line of existing)
+                io.print(`  ${line}`);
+            io.print("");
+            const overwrite = await io.ask("Overwrite? [y/N] ");
+            if ((overwrite ?? "").trim().toLowerCase() !== "y") {
+                return { ok: false, path, reason: "aborted by user (no overwrite)" };
+            }
+        }
+        else {
+            return { ok: false, path, reason: `${path} already exists (use --force to overwrite)` };
+        }
+    }
+    const collected = {
+        slackBotToken: "",
+        slackAppToken: "",
+        copilotTmuxSession: "",
+        slackAllowedUsers: "",
+    };
+    if (answers) {
+        Object.assign(collected, answers);
+    }
+    else {
+        collected.slackBotToken = await promptForToken(io, "Slack BOT token", BOT_TOKEN_PREFIX);
+        collected.slackAppToken = await promptForToken(io, "Slack APP-LEVEL token", APP_TOKEN_PREFIX);
+        collected.copilotTmuxSession = (await io.ask("Pin Copilot tmux session (optional, e.g. omp-9999): ")) ?? "";
+        collected.slackAllowedUsers = (await io.ask("Slack user ID allowlist (optional, comma-separated, e.g. U0123ABCD): ")) ?? "";
+    }
+    // Final validation — in both interactive and non-interactive modes the
+    // required tokens must be present and prefix-shaped, otherwise refuse to
+    // write a config that wouldn't pass `gateway doctor`.
+    const botToken = collected.slackBotToken.trim();
+    const appToken = collected.slackAppToken.trim();
+    if (!botToken || !botToken.startsWith(BOT_TOKEN_PREFIX)) {
+        return {
+            ok: false,
+            path,
+            reason: `Slack BOT token is required and must start with "${BOT_TOKEN_PREFIX}".`,
+        };
+    }
+    if (!appToken || !appToken.startsWith(APP_TOKEN_PREFIX)) {
+        return {
+            ok: false,
+            path,
+            reason: `Slack APP-LEVEL token is required and must start with "${APP_TOKEN_PREFIX}".`,
+        };
+    }
+    const session = collected.copilotTmuxSession.trim();
+    const users = collected.slackAllowedUsers.trim();
+    const content = renderEnvFile({
+        botToken,
+        appToken,
+        session: session || undefined,
+        users: users || undefined,
+    });
+    mkdirSync(dirname(path), { recursive: true });
+    // Atomic, perm-safe write. mkdtempSync creates a brand-new sibling dir with
+    // a unique suffix (mode 0o700 on POSIX), so the temp file inside is always
+    // freshly created — `{ mode: 0o600 }` is guaranteed to apply, and there's
+    // no chance of stomping a pre-existing temp file with stale perms. The
+    // final rename then atomically installs the 0o600 file into place.
+    let tmpDir = null;
+    let tmpFile = null;
+    try {
+        tmpDir = mkdtempSync(join(dirname(path), ".env-init-"));
+        tmpFile = join(tmpDir, "env");
+        writeFileSync(tmpFile, content, { mode: 0o600, encoding: "utf8" });
+        // Defense-in-depth: confirm the perms we asked for are what we got
+        // before we publish the file. On Windows the check is a no-op.
+        if (process.platform !== "win32") {
+            const mode = statSync(tmpFile).mode & 0o777;
+            if (mode !== 0o600) {
+                throw new Error(`temp file mode is ${mode.toString(8)}, expected 600`);
+            }
+        }
+        renameSync(tmpFile, path);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { ok: false, path, reason: `failed to write ${path}: ${msg}` };
+    }
+    finally {
+        if (tmpDir) {
+            try {
+                rmSync(tmpDir, { recursive: true, force: true });
+            }
+            catch {
+                /* best effort */
+            }
+        }
+    }
+    // POSIX: file was created with mode 0o600 and that survives the rename.
+    // Windows: mode bits are largely meaningless. Either way, we never end up
+    // in a state where we'd need to apologize for the perms — if anything went
+    // wrong above we'd have returned the error already.
+    const lockedDown = process.platform !== "win32";
+    if (interactive) {
+        io.print("");
+        io.print(lockedDown ? `Wrote ${path} (chmod 600).` : `Wrote ${path}.`);
+        io.print("");
+        io.print("Next:");
+        io.print("  1. start a Copilot tmux session if one isn't running already");
+        io.print("     (any `omp-<digits>` name; e.g. `tmux new-session -d -s omp-9999`)");
+        io.print("  2. `omp gateway status`  — should report ready=true");
+        io.print("  3. `omp gateway serve`   — blocks; ^C to stop");
+        io.print("");
+    }
+    return { ok: true, path };
+}
+function renderEnvFile(k) {
+    const lines = [
+        "# Written by `omp env init`. Edit by hand or re-run the command.",
+        "# Precedence: shell exports always win over values in this file.",
+        "",
+        `SLACK_BOT_TOKEN=${k.botToken}`,
+        `SLACK_APP_TOKEN=${k.appToken}`,
+    ];
+    if (k.session)
+        lines.push(`COPILOT_TMUX_SESSION=${k.session}`);
+    if (k.users)
+        lines.push(`SLACK_ALLOWED_USERS=${k.users}`);
+    lines.push("");
+    return lines.join("\n");
+}
+async function promptForToken(io, label, prefix) {
+    for (let attempt = 0; attempt < 3; attempt++) {
+        const value = ((await io.ask(`${label} (starts with ${prefix}): `)) ?? "").trim();
+        if (value.startsWith(prefix))
+            return value;
+        if (!value) {
+            io.print(`  ${label} is required.`);
+            continue;
+        }
+        io.print(`  That doesn't look like a ${label.toLowerCase()} (expected to start with "${prefix}").`);
+    }
+    // Caller's final validation will reject — we don't throw here so the call
+    // site can return a structured error.
+    return "";
+}
+/** Read an existing file and return user-visible lines with values masked. */
+function readExistingMasked(path) {
+    try {
+        return readFileSync(path, "utf8")
+            .split(/\r?\n/)
+            .filter((l) => l.trim() && !l.trim().startsWith("#"))
+            .map((line) => {
+            const i = line.indexOf("=");
+            if (i === -1)
+                return line;
+            const key = line.slice(0, i);
+            const val = line.slice(i + 1);
+            return `${key}=${maskValue(val)}`;
+        });
+    }
+    catch {
+        return ["(could not read existing file)"];
+    }
+}
+function maskValue(v) {
+    const trimmed = v.trim();
+    if (trimmed.length <= 4)
+        return "****";
+    // Show prefix (e.g. xoxb-) + 3 stars + last 4 chars to confirm identity
+    // without leaking the bulk of the secret.
+    const dashIndex = trimmed.indexOf("-");
+    const prefix = dashIndex >= 0 ? trimmed.slice(0, dashIndex + 1) : "";
+    const tail = trimmed.slice(-4);
+    return `${prefix}***${tail}`;
+}
+//# sourceMappingURL=init.js.map

package/dist/src/env/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/env/init.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAsChE,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BtC,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,EAAE;IACF,mCAAmC;IACnC,EAAE;IACF,yEAAyE;IACzE,kEAAkE;IAClE,8DAA8D;IAC9D,EAAE;IACF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,YAAY,aAAa,+CAA+C;IACxE,0BAA0B;IAC1B,uFAAuF;IACvF,kFAAkF;IAClF,mFAAmF;IACnF,EAAE;IACF,yDAAyD;IACzD,GAAG,uBAAuB,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;IAChD,uBAAuB;IACvB,EAAE;IACF,wEAAwE;IACxE,wCAAwC;IACxC,wEAAwE;IACxE,wEAAwE;IACxE,4DAA4D;IAC5D,wEAAwE;IACxE,iDAAiD;IACjD,EAAE;IACF,oFAAoF;IACpF,EAAE;CACH,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAiB;IAChD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAE3D,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC;IAC7B,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,WAAW;YAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC1C,EAAE,CAAC,KAAK,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,QAAQ;gBAAE,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnD,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,EAAE,CAAC;gBACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;YACvE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,4CAA4C,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAgB;QAC7B,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,EAAE;KACtB,CAAC;IAEF,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,aAAa,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QACxF,SAAS,CAAC,aAAa,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;QAC9F,SAAS,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAC1C,sDAAsD,CACvD,CAAC,IAAI,EAAE,CAAC;QACT,SAAS,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CACzC,uEAAuE,CACxE,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE,oDAAoD,gBAAgB,IAAI;SACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE,0DAA0D,gBAAgB,IAAI;SACvF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAEjD,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,QAAQ;QACR,QAAQ;QACR,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,KAAK,EAAE,KAAK,IAAI,SAAS;KAC1B,CAAC,CAAC;IAEH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9B,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACnE,mEAAmE;QACnE,+DAA+D;QAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;YAC5C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAEhD,IAAI,WAAW,EAAE,CAAC;QAChB,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,IAAI,eAAe,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;QACvE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClB,EAAE,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAC3E,EAAE,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACnF,EAAE,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAClE,EAAE,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC5D,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AASD,SAAS,aAAa,CAAC,CAAe;IACpC,MAAM,KAAK,GAAa;QACtB,kEAAkE;QAClE,kEAAkE;QAClE,EAAE;QACF,mBAAmB,CAAC,CAAC,QAAQ,EAAE;QAC/B,mBAAmB,CAAC,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,IAAI,CAAC,CAAC,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,KAAa,EAAE,MAAc;IACrE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,iBAAiB,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,EAAE,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,WAAW,EAAE,6BAA6B,MAAM,KAAK,CAAC,CAAC;IACtG,CAAC;IACD,0EAA0E;IAC1E,sCAAsC;IACtC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;aAC9B,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,OAAO,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACvC,wEAAwE;IACxE,0CAA0C;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,GAAG,MAAM,MAAM,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/src/gateway/connector.d.ts

@@ -0,0 +1,37 @@
+/**
+ * A Gateway Connector is a long-lived event source that the gateway runtime
+ * starts, watches for readiness, and stops cleanly on shutdown. Connectors are
+ * intentionally tiny: name + lifecycle + status snapshot. All transport-specific
+ * concerns (Bolt, HTTP, MCP, etc.) live inside the connector implementation.
+ *
+ * Why not just call `runSlackBot()`? Adding a second connector later (Telegram,
+ * Discord, webhook) becomes one file implementing this interface, not a new
+ * top-level command and a new lifecycle.
+ */
+export interface ConnectorStatus {
+    /** True when the connector is connected and ready to handle events. */
+    ready: boolean;
+    /** Optional human-readable detail — error message, "not started", etc. */
+    detail?: string;
+}
+export interface Connector {
+    /** Stable identifier, e.g. "slack". Used for `--only` filtering and status output. */
+    readonly name: string;
+    /** Open whatever long-lived resources are needed (sockets, listeners). */
+    start(): Promise<void>;
+    /** Close cleanly. Must be idempotent — calling stop() twice is a no-op. */
+    stop(): Promise<void>;
+    /** Synchronous readiness snapshot — never opens sockets or makes I/O calls. */
+    status(): ConnectorStatus;
+}
+/**
+ * Static (no-I/O) readiness check for the doctor command. Connectors expose
+ * this so `omp gateway status` can answer "is this startable?" without
+ * actually starting it.
+ */
+export interface ConnectorDoctor {
+    /** Same name as the Connector. */
+    readonly name: string;
+    /** Returns a snapshot reporting whether start() would currently succeed. */
+    doctor(): ConnectorStatus;
+}

package/dist/src/gateway/connector.js

@@ -0,0 +1,12 @@
+/**
+ * A Gateway Connector is a long-lived event source that the gateway runtime
+ * starts, watches for readiness, and stops cleanly on shutdown. Connectors are
+ * intentionally tiny: name + lifecycle + status snapshot. All transport-specific
+ * concerns (Bolt, HTTP, MCP, etc.) live inside the connector implementation.
+ *
+ * Why not just call `runSlackBot()`? Adding a second connector later (Telegram,
+ * Discord, webhook) becomes one file implementing this interface, not a new
+ * top-level command and a new lifecycle.
+ */
+export {};
+//# sourceMappingURL=connector.js.map

package/dist/src/gateway/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/gateway/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/src/gateway/connectors/slack.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Slack {@link Connector} — wraps the @slack/bolt Socket Mode adapter that
+ * used to live in src/slack/serve.ts. Pure handler logic (handler.ts) and
+ * config loader (config.ts) are reused unchanged.
+ *
+ * Lifecycle:
+ *   start() → instantiate Bolt App, auth.test for botUserId, subscribe to
+ *             app.message (DMs) + app.event("app_mention"), then app.start().
+ *             If anything throws, state.error is recorded and status reports
+ *             not ready — the gateway runtime treats it as a failed start.
+ *   stop()  → idempotent app.stop().
+ *   status()→ derived from internal state; never opens sockets.
+ */
+import type { Connector, ConnectorDoctor } from "../connector.js";
+import type { SlackConfig } from "../../slack/config.js";
+import { type SlackHandlerDeps } from "../../slack/handler.js";
+export interface BoltLike {
+    client: {
+        auth: {
+            test: () => Promise<{
+                user_id?: string;
+            }>;
+        };
+    };
+    start: () => Promise<unknown>;
+    stop: () => Promise<unknown>;
+    message: (handler: (args: {
+        message: SlackMessage;
+        say: SaySig;
+    }) => Promise<void>) => void;
+    event: (name: "app_mention", handler: (args: {
+        event: SlackMessage;
+        say: SaySig;
+    }) => Promise<void>) => void;
+}
+export type AppFactory = (config: SlackConfig) => BoltLike;
+export type SaySig = (msg: {
+    text: string;
+    thread_ts?: string;
+}) => Promise<unknown>;
+export interface SlackMessage {
+    text?: string;
+    user?: string;
+    bot_id?: string;
+    subtype?: string;
+    channel_type?: string;
+    thread_ts?: string;
+    ts?: string;
+}
+export interface SlackConnectorOptions {
+    config: SlackConfig;
+    /** Inject an App factory for testing; default lazy-loads @slack/bolt. */
+    appFactory?: AppFactory;
+    /** Inject handler deps for testing; default wires comms resolveSession + commsAsk. */
+    handlerDeps?: Omit<SlackHandlerDeps, "allowedUsers" | "requireMention" | "sessionEnv">;
+    /** Logger; defaults to console.error. */
+    log?: (msg: string) => void;
+}
+export declare const SLACK_CONNECTOR_NAME = "slack";
+/**
+ * Build a Slack {@link Connector}. The factory is sync; all I/O happens in
+ * `start()`.
+ */
+export declare function createSlackConnector(opts: SlackConnectorOptions): Connector;
+/**
+ * Static readiness check (no sockets opened). True when both tokens are
+ * present in the loaded config AND a Copilot tmux session can be resolved.
+ */
+export declare function slackDoctor(config: SlackConfig | null, errorIfNoConfig?: string): ConnectorDoctor;