@femtomc/mu-control-plane 26.2.28

package/README.md

@@ -0,0 +1,29 @@
+# @femtomc/mu-control-plane
+
+Control-plane command pipeline for messaging ingress, policy/confirmation safety, idempotency, outbox delivery, and the dedicated messaging meta-agent runtime.
+
+## First-platform messaging adapters (v1)
+
+- Slack
+- Discord
+- Telegram
+
+All three adapters normalize inbound commands into the same control-plane pipeline and preserve correlation across command journal and outbox delivery.
+
+## Messaging meta-agent + safe CLI triggers
+
+`MessagingMetaAgentRuntime` is a dedicated user-facing runtime that sits outside orchestration execution dispatch. It can translate conversational channel input into an approved command proposal and routes that through the same policy/idempotency/confirmation pipeline.
+
+CLI execution is constrained through an explicit allowlist (`MuCliCommandSurface`) and a non-shell runner (`MuCliRunner`). Mutating run triggers (`run start`, `run resume`) still require confirmation and are correlated end-to-end via:
+
+- `meta_session_id`
+- `meta_turn_id`
+- `cli_invocation_id`
+- `cli_command_kind`
+- `run_root_id`
+
+Unsafe or ambiguous requests are rejected with explicit reasons (`context_missing`, `context_ambiguous`, `context_unauthorized`, `cli_validation_failed`, etc.).
+
+## iMessage status
+
+iMessage is explicitly de-scoped from first-platform runtime support in v1. Legacy iMessage identity rows are quarantined as `channel_deprecated` during replay and are not treated as active bindings.

package/dist/adapter_audit.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const AdapterAuditEntrySchema: z.ZodObject<{
+    kind: z.ZodLiteral<"adapter.audit">;
+    ts_ms: z.ZodNumber;
+    channel: z.ZodString;
+    request_id: z.ZodString;
+    delivery_id: z.ZodString;
+    channel_tenant_id: z.ZodString;
+    channel_conversation_id: z.ZodString;
+    actor_id: z.ZodString;
+    command_text: z.ZodString;
+    event: z.ZodString;
+    reason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AdapterAuditEntry = z.infer<typeof AdapterAuditEntrySchema>;
+export declare class AdapterAuditLog {
+    #private;
+    constructor(path: string);
+    get path(): string;
+    append(entry: Omit<AdapterAuditEntry, "kind">): Promise<AdapterAuditEntry>;
+    list(opts?: {
+        channel?: string | null;
+        event?: string | null;
+    }): Promise<AdapterAuditEntry[]>;
+}
+//# sourceMappingURL=adapter_audit.d.ts.map

package/dist/adapter_audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter_audit.d.ts","sourceRoot":"","sources":["../src/adapter_audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAalC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,qBAAa,eAAe;;gBAGR,IAAI,EAAE,MAAM;IAI/B,IAAW,IAAI,IAAI,MAAM,CAExB;IAEY,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAS1E,IAAI,CAAC,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;CAwB9G"}

package/dist/adapter_audit.js

@@ -0,0 +1,57 @@
+import { appendJsonl, readJsonl } from "@femtomc/mu-core/node";
+import { z } from "zod";
+export const AdapterAuditEntrySchema = z.object({
+    kind: z.literal("adapter.audit"),
+    ts_ms: z.number().int(),
+    channel: z.string().min(1),
+    request_id: z.string().min(1),
+    delivery_id: z.string().min(1),
+    channel_tenant_id: z.string().min(1),
+    channel_conversation_id: z.string().min(1),
+    actor_id: z.string().min(1),
+    command_text: z.string().min(1),
+    event: z.string().min(1),
+    reason: z.string().nullable().default(null),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+export class AdapterAuditLog {
+    #path;
+    constructor(path) {
+        this.#path = path;
+    }
+    get path() {
+        return this.#path;
+    }
+    async append(entry) {
+        const parsed = AdapterAuditEntrySchema.parse({
+            kind: "adapter.audit",
+            ...entry,
+        });
+        await appendJsonl(this.#path, parsed);
+        return parsed;
+    }
+    async list(opts = {}) {
+        const rows = await readJsonl(this.#path);
+        const out = [];
+        for (let idx = 0; idx < rows.length; idx++) {
+            const parsed = AdapterAuditEntrySchema.safeParse(rows[idx]);
+            if (!parsed.success) {
+                throw new Error(`invalid adapter audit row ${idx}: ${parsed.error.message}`);
+            }
+            if (opts.channel && parsed.data.channel !== opts.channel) {
+                continue;
+            }
+            if (opts.event && parsed.data.event !== opts.event) {
+                continue;
+            }
+            out.push(parsed.data);
+        }
+        out.sort((a, b) => {
+            if (a.ts_ms !== b.ts_ms) {
+                return a.ts_ms - b.ts_ms;
+            }
+            return a.request_id.localeCompare(b.request_id);
+        });
+        return out;
+    }
+}

package/dist/channel_adapters.d.ts

@@ -0,0 +1,53 @@
+import type { AdapterAuditEntry } from "./adapter_audit.js";
+import type { CommandPipelineResult, ControlPlaneCommandPipeline } from "./command_pipeline.js";
+import { type Channel } from "./identity_store.js";
+import { type InboundEnvelope } from "./models.js";
+import type { ControlPlaneOutbox, OutboxRecord } from "./outbox.js";
+export type AdapterIngressResult = {
+    channel: Channel;
+    accepted: boolean;
+    reason?: string;
+    response: Response;
+    inbound: InboundEnvelope | null;
+    pipelineResult: CommandPipelineResult | null;
+    outboxRecord: OutboxRecord | null;
+    auditEntry: AdapterAuditEntry | null;
+};
+export type SlackControlPlaneAdapterOpts = {
+    pipeline: ControlPlaneCommandPipeline;
+    outbox: ControlPlaneOutbox;
+    signingSecret: string;
+    nowMs?: () => number;
+    allowedTimestampSkewSec?: number;
+};
+export declare class SlackControlPlaneAdapter {
+    #private;
+    constructor(opts: SlackControlPlaneAdapterOpts);
+    ingest(req: Request): Promise<AdapterIngressResult>;
+}
+export type DiscordControlPlaneAdapterOpts = {
+    pipeline: ControlPlaneCommandPipeline;
+    outbox: ControlPlaneOutbox;
+    signingSecret: string;
+    nowMs?: () => number;
+    allowedTimestampSkewSec?: number;
+};
+export declare class DiscordControlPlaneAdapter {
+    #private;
+    constructor(opts: DiscordControlPlaneAdapterOpts);
+    ingest(req: Request): Promise<AdapterIngressResult>;
+}
+export type TelegramControlPlaneAdapterOpts = {
+    pipeline: ControlPlaneCommandPipeline;
+    outbox: ControlPlaneOutbox;
+    webhookSecret: string;
+    tenantId?: string;
+    botUsername?: string | null;
+    nowMs?: () => number;
+};
+export declare class TelegramControlPlaneAdapter {
+    #private;
+    constructor(opts: TelegramControlPlaneAdapterOpts);
+    ingest(req: Request): Promise<AdapterIngressResult>;
+}
+//# sourceMappingURL=channel_adapters.d.ts.map

package/dist/channel_adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel_adapters.d.ts","sourceRoot":"","sources":["../src/channel_adapters.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEhG,OAAO,EAA2B,KAAK,OAAO,EAAiB,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAsB,KAAK,eAAe,EAAgD,MAAM,aAAa,CAAC;AACrH,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA4QpE,MAAM,MAAM,oBAAoB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAC1C,QAAQ,EAAE,2BAA2B,CAAC;IACtC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAgCF,qBAAa,wBAAwB;;gBAOjB,IAAI,EAAE,4BAA4B;IAQxC,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAyGhE;AAED,MAAM,MAAM,8BAA8B,GAAG;IAC5C,QAAQ,EAAE,2BAA2B,CAAC;IACtC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAgCF,qBAAa,0BAA0B;;gBAOnB,IAAI,EAAE,8BAA8B;IAQ1C,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAuJhE;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC7C,QAAQ,EAAE,2BAA2B,CAAC;IACtC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,2BAA2B;;gBAQpB,IAAI,EAAE,+BAA+B;IAoB3C,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;CA+KhE"}