@interactive-inc/claude-funnel 0.26.0 → 0.27.0

package/dist/{gh-connector-schema-CQRIvPpz.js → gh-connector-schema-eYE4g77K.js}

@@ -1,5 +1,5 @@
 import { t as FunnelConnectorAdapter } from "./connector-adapter-D5Utumgz.js";
-import { n as FunnelConnectorListener } from "./logger-D1A3_JXV.js";
+import { n as FunnelConnectorListener } from "./logger-Czli2OKh.js";
 import { openSync } from "node:fs";
 import { z } from "zod";
 //#region lib/engine/process/process-runner.ts
@@ -267,8 +267,10 @@ const MAX_SEEN = 1e4;
 const KEEP_SEEN = 5e3;
 var FunnelGhListener = class extends FunnelConnectorListener {
 	config;
+	channelId;
 	process;
 	logger;
+	diagnosticLog;
 	now;
 	seen = /* @__PURE__ */ new Map();
 	bootstrapped = false;
@@ -277,12 +279,15 @@ var FunnelGhListener = class extends FunnelConnectorListener {
 	constructor(deps) {
 		super();
 		this.config = deps.config;
+		this.channelId = deps.channelId ?? null;
 		this.process = deps.process ?? defaultProcess;
 		this.logger = deps.logger;
+		this.diagnosticLog = deps.diagnosticLog;
 		this.now = deps.now ?? (() => /* @__PURE__ */ new Date());
 		this.since = this.now().toISOString();
 	}
 	async start(notify) {
+		this.recordConnection("started", "");
 		await this.pollOnce(notify);
 		const interval = this.config.pollInterval ?? 60;
 		this.timer = setInterval(() => void this.pollOnce(notify), interval * 1e3);
@@ -292,6 +297,7 @@ var FunnelGhListener = class extends FunnelConnectorListener {
 		if (!this.timer) return;
 		clearInterval(this.timer);
 		this.timer = null;
+		this.recordConnection("stopped", "");
 	}
 	isAlive() {
 		return this.timer !== null;
@@ -309,19 +315,26 @@ var FunnelGhListener = class extends FunnelConnectorListener {
 				`/notifications?${params}`
 			]);
 			if (result.exitCode !== 0) {
+				this.recordConnection("error", `gh api exited ${result.exitCode}: ${result.stderr}`);
 				this.logger?.error("gh poll failed", { stderr: result.stderr });
 				return;
 			}
 			const parsed = ghNotificationsSchema.safeParse(JSON.parse(result.stdout));
 			if (!parsed.success) {
+				this.recordConnection("error", `gh response schema mismatch: ${parsed.error.message}`);
 				this.logger?.warn("gh response did not match schema", { error: parsed.error.message });
 				return;
 			}
+			if (!this.bootstrapped) this.recordConnection("connected", "");
 			const items = parsed.data;
 			for (const item of items) {
 				if (this.seen.get(item.id) === item.updated_at) continue;
 				this.seen.set(item.id, item.updated_at);
-				if (!this.bootstrapped) continue;
+				this.recordRaw(item.id, item);
+				if (!this.bootstrapped) {
+					this.recordProcessed(item.id, item, "skip:bootstrap", "");
+					continue;
+				}
 				const meta = {
 					event_type: "gh",
 					reason: item.reason,
@@ -331,7 +344,14 @@ var FunnelGhListener = class extends FunnelConnectorListener {
 					thread_id: item.id,
 					updated_at: item.updated_at
 				};
-				await notify(JSON.stringify(item), meta);
+				const content = JSON.stringify(item);
+				try {
+					await notify(content, meta);
+				} catch (error) {
+					this.recordProcessed(item.id, item, "emitted:delivery-failed", content);
+					throw error;
+				}
+				this.recordProcessed(item.id, item, "emitted", content);
 			}
 			if (this.seen.size > MAX_SEEN) {
 				const toDrop = this.seen.size - KEEP_SEEN;
@@ -348,6 +368,34 @@ var FunnelGhListener = class extends FunnelConnectorListener {
 			this.logger?.error("gh poll error", { error: error instanceof Error ? error.message : String(error) });
 		}
 	}
+	recordRaw(eventId, item) {
+		this.diagnosticLog?.recordRaw({
+			eventId,
+			type: "gh",
+			connectorId: this.config.id,
+			channelId: this.channelId,
+			payload: JSON.stringify(item)
+		});
+	}
+	recordProcessed(eventId, item, outcome, content) {
+		this.diagnosticLog?.recordProcessed({
+			eventId,
+			type: "gh",
+			connectorId: this.config.id,
+			channelId: this.channelId,
+			outcome,
+			payload: content || JSON.stringify(item)
+		});
+	}
+	recordConnection(status, detail) {
+		this.diagnosticLog?.recordConnection({
+			type: "gh",
+			connectorId: this.config.id,
+			channelId: this.channelId,
+			status,
+			detail
+		});
+	}
 };
 //#endregion
 //#region lib/connectors/gh-connector-schema.ts

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { n as FunnelConnectorAdapter, t as CallInput } from "./connector-adapter-CXB-q_XC.js";
-import { n as discordConnectorSchema, t as DiscordConnectorConfig } from "./discord-connector-schema-Dww2I4zH.js";
-import { n as FunnelConnectorListener, r as NotifyFn, t as FunnelLogger } from "./logger-B3aXsVcX.js";
-import { a as FunnelProcessRunner, c as RunResult, i as DetachOptions, n as ghConnectorSchema, o as ProcessSnapshot, r as AttachOptions, s as RunOptions, t as GhConnectorConfig } from "./gh-connector-schema-Cmi57jvL.js";
-import { a as FunnelFileSystem, c as ScheduleEntry, d as scheduleEntrySchema, i as FileStat, l as scheduleCatchupPolicySchema, n as ScheduleOnFired, o as ScheduleCatchupPolicy, s as ScheduleConnectorConfig, u as scheduleConnectorSchema } from "./schedule-listener-CBYF2bGZ.js";
-import { a as SlackProcessed, c as SlackRawEvent, i as FunnelSlackEventProcessor, l as SlackConnectorConfig, n as SlackOnAppCreated, o as SlackProcessedEmit, r as SlackPreprocessEvent, s as SlackProcessedSkip, u as slackConnectorSchema } from "./slack-listener-DbNCPMqY.js";
+import { n as FunnelConnectorAdapter, t as CallInput } from "./connector-adapter-VA6undzc.js";
+import { n as discordConnectorSchema, t as DiscordConnectorConfig } from "./discord-connector-schema-Df_McRJI.js";
+import { S as NotifyFn, _ as connectorConnectionEventSchema, a as ConnectorConnectionStatus, b as FunnelLogger, c as ConnectorProcessedQuery, d as ConnectorRawEvent, f as ConnectorRawQuery, g as StoredRawEvent, h as StoredProcessedEvent, i as ConnectorConnectionRecord, l as ConnectorProcessedRecord, m as StoredConnectionEvent, n as ConnectorConnectionEvent, o as ConnectorDiagnosticLog, p as ConnectorRawRecord, r as ConnectorConnectionQuery, s as ConnectorProcessedEvent, t as CONNECTOR_CONNECTION_STATUSES, u as ConnectorQuery, v as connectorProcessedEventSchema, x as FunnelConnectorListener, y as connectorRawEventSchema } from "./connector-diagnostic-log-Clb2sCcz.js";
+import { a as FunnelProcessRunner, c as RunResult, i as DetachOptions, n as ghConnectorSchema, o as ProcessSnapshot, r as AttachOptions, s as RunOptions, t as GhConnectorConfig } from "./gh-connector-schema-CQmEWzdV.js";
+import { a as FunnelFileSystem, c as ScheduleEntry, d as scheduleEntrySchema, i as FileStat, l as scheduleCatchupPolicySchema, n as ScheduleOnFired, o as ScheduleCatchupPolicy, s as ScheduleConnectorConfig, u as scheduleConnectorSchema } from "./schedule-listener-C2-KqHQc.js";
+import { a as SlackProcessed, c as SlackRawEvent, d as slackConnectorSchema, i as FunnelSlackEventProcessor, l as SlackSkipReason, n as SlackOnAppCreated, o as SlackProcessedEmit, r as SlackPreprocessEvent, s as SlackProcessedSkip, u as SlackConnectorConfig } from "./slack-listener-BMknoyVr.js";
 import { z } from "zod";
 import * as _$hono_factory0 from "hono/factory";
 import { Hono } from "hono";
@@ -16,8 +16,10 @@ declare const connectorConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   id: z.ZodString;
   name: z.ZodString;
   type: z.ZodLiteral<"slack">;
-  botToken: z.ZodString;
-  appToken: z.ZodString;
+  botToken: z.ZodOptional<z.ZodString>;
+  appToken: z.ZodOptional<z.ZodString>;
+  botTokenEnv: z.ZodOptional<z.ZodString>;
+  appTokenEnv: z.ZodOptional<z.ZodString>;
   minify: z.ZodDefault<z.ZodBoolean>;
   createdAt: z.ZodOptional<z.ZodString>;
   updatedAt: z.ZodOptional<z.ZodString>;
@@ -32,7 +34,8 @@ declare const connectorConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   id: z.ZodString;
   name: z.ZodString;
   type: z.ZodLiteral<"discord">;
-  botToken: z.ZodString;
+  botToken: z.ZodOptional<z.ZodString>;
+  botTokenEnv: z.ZodOptional<z.ZodString>;
   createdAt: z.ZodOptional<z.ZodString>;
   updatedAt: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
@@ -68,7 +71,8 @@ type Deps$15 = {
   fs?: FunnelFileSystem;
   process?: FunnelProcessRunner;
   logger?: FunnelLogger;
-  dir?: string; /** Per-listener hooks for the slack connector type. Threaded into every Slack listener built by this factory. */
+  dir?: string; /** Diagnostic log of inbound connector traffic. Threaded into listeners that record raw/processed events. No-op when absent. */
+  diagnosticLog?: ConnectorDiagnosticLog; /** Per-listener hooks for the slack connector type. Threaded into every Slack listener built by this factory. */
   slackListenerOptions?: SlackListenerOptions; /** Per-listener hooks for the schedule connector type. Threaded into every Schedule listener built by this factory. */
   scheduleListenerOptions?: ScheduleListenerOptions;
 };
@@ -88,6 +92,7 @@ declare class FunnelConnectorFactory {
   private readonly fs;
   private readonly process;
   private readonly logger;
+  private readonly diagnosticLog;
   private readonly dir;
   private readonly slackListenerOptions;
   private readonly scheduleListenerOptions;
@@ -155,8 +160,10 @@ declare const channelConfigSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     type: z.ZodLiteral<"slack">;
-    botToken: z.ZodString;
-    appToken: z.ZodString;
+    botToken: z.ZodOptional<z.ZodString>;
+    appToken: z.ZodOptional<z.ZodString>;
+    botTokenEnv: z.ZodOptional<z.ZodString>;
+    appTokenEnv: z.ZodOptional<z.ZodString>;
     minify: z.ZodDefault<z.ZodBoolean>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
@@ -171,7 +178,8 @@ declare const channelConfigSchema: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
     type: z.ZodLiteral<"discord">;
-    botToken: z.ZodString;
+    botToken: z.ZodOptional<z.ZodString>;
+    botTokenEnv: z.ZodOptional<z.ZodString>;
     createdAt: z.ZodOptional<z.ZodString>;
     updatedAt: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>, z.ZodObject<{
@@ -219,8 +227,10 @@ declare const settingsSchema: z.ZodObject<{
       id: z.ZodString;
       name: z.ZodString;
       type: z.ZodLiteral<"slack">;
-      botToken: z.ZodString;
-      appToken: z.ZodString;
+      botToken: z.ZodOptional<z.ZodString>;
+      appToken: z.ZodOptional<z.ZodString>;
+      botTokenEnv: z.ZodOptional<z.ZodString>;
+      appTokenEnv: z.ZodOptional<z.ZodString>;
       minify: z.ZodDefault<z.ZodBoolean>;
       createdAt: z.ZodOptional<z.ZodString>;
       updatedAt: z.ZodOptional<z.ZodString>;
@@ -235,7 +245,8 @@ declare const settingsSchema: z.ZodObject<{
       id: z.ZodString;
       name: z.ZodString;
       type: z.ZodLiteral<"discord">;
-      botToken: z.ZodString;
+      botToken: z.ZodOptional<z.ZodString>;
+      botTokenEnv: z.ZodOptional<z.ZodString>;
       createdAt: z.ZodOptional<z.ZodString>;
       updatedAt: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
@@ -291,8 +302,10 @@ type ChannelConnectorView = ConnectorConfig & {
 type AddConnectorInput = {
   type: "slack";
   name: string;
-  botToken: string;
-  appToken: string;
+  botToken?: string;
+  appToken?: string;
+  botTokenEnv?: string;
+  appTokenEnv?: string;
   minify?: boolean;
 } | {
   type: "gh";
@@ -301,7 +314,8 @@ type AddConnectorInput = {
 } | {
   type: "discord";
   name: string;
-  botToken: string;
+  botToken?: string;
+  botTokenEnv?: string;
 } | {
   type: "schedule";
   name: string;
@@ -342,12 +356,15 @@ declare class FunnelChannels {
   updateSlackConnector(channelName: string, connectorName: string, fields: {
     botToken?: string;
     appToken?: string;
+    botTokenEnv?: string;
+    appTokenEnv?: string;
   }): void;
   updateGhConnector(channelName: string, connectorName: string, fields: {
     pollInterval?: number;
   }): void;
   updateDiscordConnector(channelName: string, connectorName: string, fields: {
     botToken?: string;
+    botTokenEnv?: string;
   }): void;
   listScheduleEntries(channelName: string, connectorName: string): ScheduleEntry[];
   addScheduleEntry(channelName: string, connectorName: string, entry: Pick<ScheduleEntry, "cron" | "prompt"> & Partial<Pick<ScheduleEntry, "id" | "enabled" | "catchupPolicy">>): ScheduleEntry;
@@ -365,6 +382,7 @@ declare class FunnelChannels {
     listener: FunnelConnectorListener;
   }[];
   private requireChannel;
+  private replaceConnector;
   private assertNoTokenCollision;
 }
 //#endregion
@@ -748,10 +766,20 @@ declare class FunnelLocalConfigSync {
   private ensureSchedule;
   private findExistingSlack;
   private findExistingDiscord;
-  private findSlackByToken;
-  private findDiscordByToken;
   private removeExtras;
-  private resolveField;
+  /**
+   * Decides how a single token slot is stored in settings.json:
+   *
+   *   - `env.<field>` reference → `{ tokenEnv: "<VAR>" }`; the secret is NOT
+   *     resolved into settings, it stays in the environment / `.env.local` and
+   *     the listener resolves it at start. We still assert the var is set so a
+   *     typo fails loudly here instead of as a dead listener later.
+   *   - literal → `{ token: "<secret>" }`.
+   *   - neither, but a prior value exists → carry it over verbatim (whichever
+   *     form it already was), so a tokenless re-sync is a no-op.
+   *   - nothing at all → prompt for a literal (TTY only; throws otherwise).
+   */
+  private resolveSlot;
 }
 //#endregion
 //#region lib/gateway/publish-schema.d.ts
@@ -1324,7 +1352,7 @@ declare class FunnelListenersClient {
 }
 //#endregion
 //#region lib/funnel.d.ts
-type Props$6 = {
+type Props$8 = {
   /** Settings persistence (channels with nested connectors / profiles). Defaults to a FunnelSettingsStore rooted at `dir`. */store?: FunnelSettingsReader; /** Filesystem boundary. Replace with MemoryFunnelFileSystem to sandbox all disk I/O. */
   fs?: FunnelFileSystem; /** Process runner used by gateway / claude / gh listener. Replace with MemoryFunnelProcessRunner for tests. */
   process?: FunnelProcessRunner; /** Logger flowed into every facet. Replace with MemoryFunnelLogger or NoopFunnelLogger to silence/inspect. */
@@ -1345,6 +1373,13 @@ type Props$6 = {
    * each successful fire, useful for dropping one-shot entries.
    */
   scheduleListenerOptions?: ScheduleListenerOptions;
+  /**
+   * Diagnostic log of inbound connector traffic (raw events before filtering
+   * and the processor's verdict after). Threaded into listeners that record
+   * it. Only the gateway daemon injects a `SqliteConnectorDiagnosticLog`; everywhere
+   * else this stays absent and recording is a no-op.
+   */
+  diagnosticLog?: ConnectorDiagnosticLog;
   /**
    * Called when Funnel catches an exception that would otherwise be silently
    * swallowed (subscriber throw, listener start/stop failure, etc.). Pass
@@ -1374,13 +1409,13 @@ type Props$6 = {
 declare class Funnel {
   private readonly props;
   private readonly memos;
-  constructor(props?: Props$6);
+  constructor(props?: Props$8);
   /**
    * Sandboxed Funnel wired with in-memory implementations for every IO boundary.
    * Touches no real disk, processes, wall-clock time, or UUIDs — safe for tests
    * and ad-hoc experiments. Override individual fields by passing them in `props`.
    */
-  static inMemory(props?: Props$6): Funnel;
+  static inMemory(props?: Props$8): Funnel;
   /** Resolved on-disk paths the facade will read/write when methods are called. Pure compute, not memoized. */
   get paths(): {
     dir: string;
@@ -1478,6 +1513,14 @@ declare const startChannelServer: (options?: ChannelServerOptions) => Promise<vo
 declare const funnelJsonSchema: () => Record<string, unknown>;
 //#endregion
 //#region lib/engine/settings/settings-store.d.ts
+/**
+ * Resolves the funnel home dir. Defaults to `~/.funnel`, overridable via
+ * `FUNNEL_DIR` so a funnel.json-scoped launch can point everything (settings,
+ * gateway pid/token, claude pids) at a repo-local `<repo>/.funnel` and never
+ * touch the global home. Read at call time, not module load, so a daemon
+ * spawned with the env set resolves the override.
+ */
+declare function resolveFunnelDir(): string;
 declare const FUNNEL_DIR: string;
 declare const SETTINGS_PATH: string;
 type Deps = {
@@ -1529,7 +1572,7 @@ declare class NodeFunnelFileSystem extends FunnelFileSystem {
 }
 //#endregion
 //#region lib/engine/fs/memory-file-system.d.ts
-type Props$5 = {
+type Props$7 = {
   dirs?: string[];
   files?: Record<string, string>;
   mtimes?: Record<string, number>;
@@ -1542,7 +1585,7 @@ declare class MemoryFunnelFileSystem extends FunnelFileSystem {
   private readonly mtimes;
   private readonly modes;
   private readonly now;
-  constructor(props?: Props$5);
+  constructor(props?: Props$7);
   existsSync(path: string): boolean;
   readFileSync(path: string): string;
   writeFileSync(path: string, data: string): void;
@@ -1628,14 +1671,14 @@ declare class MemoryFunnelProcessRunner extends FunnelProcessRunner {
 }
 //#endregion
 //#region lib/engine/logger/node-logger.d.ts
-type Props$4 = {
+type Props$6 = {
   file?: string;
   now?: () => Date;
 };
 declare class NodeFunnelLogger extends FunnelLogger {
   readonly file: string;
   private readonly now;
-  constructor(props?: Props$4);
+  constructor(props?: Props$6);
   info(message: string, meta?: Record<string, unknown>): void;
   warn(message: string, meta?: Record<string, unknown>): void;
   error(message: string, meta?: Record<string, unknown>): void;
@@ -1671,12 +1714,12 @@ declare class NodeFunnelClock extends FunnelClock {
 }
 //#endregion
 //#region lib/engine/time/memory-clock.d.ts
-type Props$3 = {
+type Props$5 = {
   start?: Date;
 };
 declare class MemoryFunnelClock extends FunnelClock {
   private current;
-  constructor(props?: Props$3);
+  constructor(props?: Props$5);
   now(): Date;
   set(date: Date): void;
   advance(ms: number): void;
@@ -1688,13 +1731,13 @@ declare class NodeFunnelIdGenerator extends FunnelIdGenerator {
 }
 //#endregion
 //#region lib/engine/id/memory-id-generator.d.ts
-type Props$2 = {
+type Props$4 = {
   prefix?: string;
 };
 declare class MemoryFunnelIdGenerator extends FunnelIdGenerator {
   private counter;
   private readonly prefix;
-  constructor(props?: Props$2);
+  constructor(props?: Props$4);
   generate(): string;
 }
 //#endregion
@@ -1711,7 +1754,7 @@ declare class NodeFunnelTokenPrompter extends FunnelTokenPrompter {
 }
 //#endregion
 //#region lib/engine/token-prompter/memory-token-prompter.d.ts
-type Props$1 = {
+type Props$3 = {
   answers?: Record<string, string>;
 };
 /**
@@ -1721,12 +1764,12 @@ type Props$1 = {
 declare class MemoryFunnelTokenPrompter extends FunnelTokenPrompter {
   private readonly answers;
   readonly asked: string[];
-  constructor(props?: Props$1);
+  constructor(props?: Props$3);
   promptSecret(label: string): Promise<string>;
 }
 //#endregion
 //#region lib/gateway/sqlite-funnel-event-log.d.ts
-type Props = {
+type Props$2 = {
   /** SQLite database file path. Created on first write. ":memory:" for tests. */path: string; /** Override for tests. Defaults to `Date.now`. */
   now?: () => number; /** Optional row cap. Pruned on every insert. */
   maxRows?: number; /** Optional age cap in ms. Pruned on every insert. */
@@ -1752,7 +1795,7 @@ type Props = {
 declare class SqliteFunnelEventLog extends FunnelEventLog {
   private readonly sink;
   private readonly now;
-  constructor(props: Props);
+  constructor(props: Props$2);
   /**
    * Persist a broadcaster-driven event with its assigned offset. Caller
    * (the gateway-server) supplies the offset from `broadcaster.broadcast()`
@@ -1797,6 +1840,112 @@ declare class MemoryFunnelEventLog extends FunnelEventLog {
   close(): void;
 }
 //#endregion
+//#region lib/gateway/sqlite-connector-diagnostic-log.d.ts
+type Props$1 = {
+  /** SQLite file for the raw (pre-filter) table. ":memory:" for tests. */rawPath: string; /** SQLite file for the processed (verdict) table. ":memory:" for tests. */
+  processedPath: string; /** SQLite file for the connection (lifecycle) table. ":memory:" for tests. */
+  connectionPath: string;
+  now?: () => number; /** Row cap for the processed and connection tables. Pruned on every insert. */
+  maxRows?: number;
+  /**
+   * Row cap for the raw table specifically. Raw rows can each hold up to
+   * `RAW_PAYLOAD_CAP` bytes, so they want a tighter cap than the small
+   * processed/connection verdict rows. Defaults to `maxRows` when unset.
+   */
+  rawMaxRows?: number; /** Age cap in ms for all tables — bounds how long untouched payloads (with PII) live. Pruned on every insert. */
+  maxAgeMs?: number; /** When set, `insert()` errors (disk full, WAL lock) are logged instead of silently dropped. */
+  logger?: FunnelLogger;
+};
+/**
+ * Default `ConnectorDiagnosticLog`: three independent `LeucoLoggerSqliteSink`s, one
+ * per table (raw / processed / connection), in separate files. Each sink
+ * indexes the columns its queries filter on — `event_id` / `connector_id` /
+ * `channel_id` for raw, plus `outcome` for processed and `status` for
+ * connection — so those lookups are indexed scans (`type` is a fixed column
+ * the sink extracts separately, not an index, so filtering by it is a scan).
+ *
+ * The raw table offloads any payload over `RAW_PAYLOAD_CAP`: rather than
+ * truncating mid-string (which yields unparseable JSON), it replaces the
+ * body with a small JSON object that keeps the diagnostic essentials and
+ * records the dropped size under `_funnel_oversized`. Every stored payload
+ * therefore stays valid JSON.
+ */
+declare class SqliteConnectorDiagnosticLog extends ConnectorDiagnosticLog {
+  private readonly raw;
+  private readonly processed;
+  private readonly connection;
+  private readonly now;
+  private readonly logger;
+  constructor(props: Props$1);
+  recordRaw(record: ConnectorRawRecord): void;
+  recordProcessed(record: ConnectorProcessedRecord): void;
+  recordConnection(record: ConnectorConnectionRecord): void;
+  private report;
+  queryRaw(query: ConnectorRawQuery): StoredRawEvent[];
+  queryProcessed(query: ConnectorProcessedQuery): StoredProcessedEvent[];
+  queryConnection(query: ConnectorConnectionQuery): StoredConnectionEvent[];
+  close(): void;
+}
+//#endregion
+//#region lib/gateway/memory-connector-diagnostic-log.d.ts
+/**
+ * In-process `ConnectorDiagnosticLog` backed by one array per table. Used by tests
+ * and embedders that do not need durability. Like the SQLite log it keeps
+ * `seq` per-table (each array's 1-based position) and returns the most recent
+ * `limit` rows oldest-first; unlike it, it never prunes and never offloads
+ * oversized payloads — it keeps whatever the caller hands it, which is fine
+ * for the bounded volumes a test produces. Payload-validity is therefore a
+ * SQLite-only guarantee; do not write a test that leans on this double
+ * rejecting a malformed payload.
+ */
+declare class MemoryConnectorDiagnosticLog extends ConnectorDiagnosticLog {
+  private readonly now;
+  private readonly raws;
+  private readonly processeds;
+  private readonly connections;
+  constructor(now?: () => number);
+  recordRaw(record: ConnectorRawRecord): void;
+  recordProcessed(record: ConnectorProcessedRecord): void;
+  recordConnection(record: ConnectorConnectionRecord): void;
+  queryRaw(query: ConnectorRawQuery): StoredRawEvent[];
+  queryProcessed(query: ConnectorProcessedQuery): StoredProcessedEvent[];
+  queryConnection(query: ConnectorConnectionQuery): StoredConnectionEvent[];
+  close(): void;
+}
+//#endregion
+//#region lib/gateway/connector-diagnostic-sql-reader.d.ts
+type Props = {
+  /** SQLite file holding the raw (pre-filter) table. */rawPath: string; /** SQLite file holding the processed (verdict) table. */
+  processedPath: string; /** SQLite file holding the connection (lifecycle) table. */
+  connectionPath: string;
+};
+type Row = Record<string, unknown>;
+/**
+ * Read-only SQL surface over the three diagnostic tables, for Claude to query
+ * the log with arbitrary `SELECT`s. It opens all files read-only and exposes
+ * three views — `raw`, `processed`, `connection` — that hide the storage
+ * details (the physical table is `leuco_log` and each row's columns live
+ * inside a JSON `event` blob): the views surface the columns as plain fields,
+ * with `payload` already pulled out of the nested JSON.
+ *
+ * The tables are separate files. `raw` and `processed` share an `event_id`,
+ * so a `JOIN` answers "the event arrived, but what verdict did it get?";
+ * `connection` answers the other half — "did the listener ever connect at
+ * all?". Writes are impossible: the connection is read-only and `query`
+ * rejects anything but a single `SELECT`.
+ */
+declare class ConnectorDiagnosticSqlReader {
+  private readonly db;
+  constructor(props: Props);
+  /**
+   * Run one read-only `SELECT` and return the rows. Returns an `Error` (rather
+   * than throwing) for a non-SELECT statement or a SQL error, so the caller
+   * can surface the message without a stack trace.
+   */
+  query(sql: string): Row[] | Error;
+  close(): void;
+}
+//#endregion
 //#region lib/cli/factory.d.ts
 type Env = {
   Variables: {
@@ -3051,6 +3200,19 @@ declare const createCliApp: (funnel: Funnel) => _$hono_hono_base0.HonoBase<Env,
       status: _$hono_utils_http_status0.ContentfulStatusCode;
     };
   };
+} & {
+  "/gateway/sql": {
+    $get: {
+      input: {
+        query: {
+          query?: string | undefined;
+        };
+      };
+      output: string;
+      outputFormat: "text";
+      status: _$hono_utils_http_status0.ContentfulStatusCode;
+    };
+  };
 } & {
   "/gateway/listeners": {
     $get: {
@@ -4352,6 +4514,19 @@ declare const app: _$hono_hono_base0.HonoBase<Env, {
       status: _$hono_utils_http_status0.ContentfulStatusCode;
     };
   };
+} & {
+  "/gateway/sql": {
+    $get: {
+      input: {
+        query: {
+          query?: string | undefined;
+        };
+      };
+      output: string;
+      outputFormat: "text";
+      status: _$hono_utils_http_status0.ContentfulStatusCode;
+    };
+  };
 } & {
   "/gateway/listeners": {
     $get: {
@@ -4431,4 +4606,4 @@ ${string}`;
 //#region lib/tui/tui.d.ts
 declare function launchTui(funnel: Funnel): Promise<void>;
 //#endregion
-export { AliveStub, AttachOptions, BroadcastEvent, BroadcastSubscriber, ChannelConfig, ChannelConnectorView, ChannelDeliveryMode, ChannelServerOptions, ChannelSpec, ConnectorConfig, ConnectorSpec, ConnectorSyncOutcome, ConnectorType, DEFAULT_GATEWAY_TOKEN_PATH, DetachOptions, DiscordConnectorConfig, Env, FUNNEL_DIR, FUNNEL_MCP_COMMAND, FUNNEL_MCP_NAME, FileStat, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClaude, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelDotenvReader, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLocalConfig, FunnelLocalConfigSync, FunnelLogger, FunnelMcp, FunnelProcessRunner, FunnelProfiles, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, FunnelTokenPrompter, type GatewayEmitInput, type GatewayRouteDeps, type Env$1 as GatewayServerEnv, GhConnectorConfig, LOCAL_CONFIG_FILENAME, LOCAL_ENV_FILENAME, LaunchOptions, ListListenersResult, ListenerEntry, ListenerOpResult, LocalConfig, LocalConfigSyncResult, LogEntry, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MemoryFunnelTokenPrompter, MemoryProcessCall, MemoryProcessHandler, MemoryProcessResponse, MemoryProcessSyncHandler, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NodeFunnelTokenPrompter, NoopFunnelLogger, NotifyFn, OnFunnelError, ProcessListStub, ProcessSnapshot, ProfileConfig, ProfileSpec, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, RunOptions, RunResult, SETTINGS_PATH, SETTINGS_VERSION, ScheduleCatchupPolicy, ScheduleConnectorConfig, ScheduleEntry, ScheduleListenerOptions, Settings, SlackConnectorConfig, SlackListenerOptions, SlackProcessed, SlackProcessedEmit, SlackProcessedSkip, SlackRawEvent, SqliteFunnelEventLog, channelConfigSchema, channelDeliveryModeSchema, channelSpecSchema, app as cliApp, connectorConfigSchema, connectorSpecSchema, createCliApp, createSettings, discordConnectorSchema, factory, funnelEventSchema, funnelJsonSchema, ghConnectorSchema, launchTui, localConfigSchema, profileConfigSchema, profileSpecSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, startChannelServer, toRequest };
+export { AliveStub, AttachOptions, BroadcastEvent, BroadcastSubscriber, CONNECTOR_CONNECTION_STATUSES, ChannelConfig, ChannelConnectorView, ChannelDeliveryMode, ChannelServerOptions, ChannelSpec, ConnectorConfig, ConnectorConnectionEvent, ConnectorConnectionQuery, ConnectorConnectionRecord, ConnectorConnectionStatus, ConnectorDiagnosticLog, ConnectorDiagnosticSqlReader, ConnectorProcessedEvent, ConnectorProcessedQuery, ConnectorProcessedRecord, ConnectorQuery, ConnectorRawEvent, ConnectorRawQuery, ConnectorRawRecord, ConnectorSpec, ConnectorSyncOutcome, ConnectorType, DEFAULT_GATEWAY_TOKEN_PATH, DetachOptions, DiscordConnectorConfig, Env, FUNNEL_DIR, FUNNEL_MCP_COMMAND, FUNNEL_MCP_NAME, FileStat, Funnel, FunnelBroadcaster, FunnelChannelPublisher, FunnelChannels, FunnelClaude, FunnelClock, FunnelConnectorFactory, FunnelConnectorListener, FunnelDotenvReader, FunnelEvent, FunnelEventLog, FunnelEventRecord, FunnelFileSystem, FunnelGateway, FunnelGatewayServer, FunnelGatewayToken, FunnelIdGenerator, FunnelListenerSupervisor, FunnelListenersClient, FunnelLocalConfig, FunnelLocalConfigSync, FunnelLogger, FunnelMcp, FunnelProcessRunner, FunnelProfiles, FunnelSettingsReader, FunnelSettingsStore, FunnelSlackEventProcessor, FunnelTokenPrompter, type GatewayEmitInput, type GatewayRouteDeps, type Env$1 as GatewayServerEnv, GhConnectorConfig, LOCAL_CONFIG_FILENAME, LOCAL_ENV_FILENAME, LaunchOptions, ListListenersResult, ListenerEntry, ListenerOpResult, LocalConfig, LocalConfigSyncResult, LogEntry, MemoryConnectorDiagnosticLog, MemoryFunnelClock, MemoryFunnelEventLog, MemoryFunnelFileSystem, MemoryFunnelIdGenerator, MemoryFunnelLogger, MemoryFunnelProcessRunner, MemoryFunnelTokenPrompter, MemoryProcessCall, MemoryProcessHandler, MemoryProcessResponse, MemoryProcessSyncHandler, MockFunnelSettingsReader, NodeFunnelClock, NodeFunnelFileSystem, NodeFunnelIdGenerator, NodeFunnelLogger, NodeFunnelProcessRunner, NodeFunnelTokenPrompter, NoopFunnelLogger, NotifyFn, OnFunnelError, ProcessListStub, ProcessSnapshot, ProfileConfig, ProfileSpec, PublishRequest, PublishResponse, PublishResult, ReplayableEvent, RunOptions, RunResult, SETTINGS_PATH, SETTINGS_VERSION, ScheduleCatchupPolicy, ScheduleConnectorConfig, ScheduleEntry, ScheduleListenerOptions, Settings, SlackConnectorConfig, SlackListenerOptions, SlackProcessed, SlackProcessedEmit, SlackProcessedSkip, SlackRawEvent, SlackSkipReason, SqliteConnectorDiagnosticLog, SqliteFunnelEventLog, StoredConnectionEvent, StoredProcessedEvent, StoredRawEvent, channelConfigSchema, channelDeliveryModeSchema, channelSpecSchema, app as cliApp, connectorConfigSchema, connectorConnectionEventSchema, connectorProcessedEventSchema, connectorRawEventSchema, connectorSpecSchema, createCliApp, createSettings, discordConnectorSchema, factory, funnelEventSchema, funnelJsonSchema, ghConnectorSchema, launchTui, localConfigSchema, profileConfigSchema, profileSpecSchema, publishRequestSchema, publishResponseSchema, queryToCliArgs, resolveFunnelDir, scheduleCatchupPolicySchema, scheduleConnectorSchema, scheduleEntrySchema, settingsSchema, slackConnectorSchema, startChannelServer, toRequest };