@openrig/cli 0.4.6 → 0.4.7

package/dist/slack/inbound.js

@@ -0,0 +1,133 @@
+import { createQitem } from "./queue-bridge.js";
+/**
+ * Loop-safety + non-text ignore. Ingest ONLY genuine human text messages:
+ * reject bot posts (our own loop), message subtypes (edits/joins/file_share),
+ * and — T1076 — anything carrying files/images. v1 ignores non-text CLEANLY:
+ * a false return is a clean skip, never a crash or partial ingestion.
+ */
+export function shouldIngest(ev) {
+    if (ev.type !== "message" && ev.type !== "app_mention")
+        return false;
+    if (ev.bot_id)
+        return false; // never ingest our own / any bot post
+    if (ev.subtype)
+        return false; // edits, joins, file_share, etc.
+    if (ev.files && ev.files.length > 0)
+        return false; // T1076: image/file events ignored cleanly (Slice-12)
+    if (!ev.user || !ev.text || !ev.text.trim())
+        return false;
+    return true;
+}
+export class InboundRouter {
+    deps;
+    inflight = new Set(); // same-ts double-dispatch guard (item 8)
+    constructor(deps) {
+        this.deps = deps;
+    }
+    summaryOf(ev) {
+        const text = String(ev.text ?? "").slice(0, 1800);
+        const meta = `slack channel=${ev.channel} user=${ev.user} ts=${ev.ts}`;
+        return {
+            summary: `Founder via Slack: ${text.slice(0, 90)}`,
+            body: `${text}\n\n---\nSource: ${meta}\nRouted by openrig slack-inbound. Default destination per config; re-route via queue as needed.`,
+        };
+    }
+    /**
+     * Core landing attempt — NO dead-letter side effect. Dedup by ts (in-flight +
+     * durable seen). `reason` distinguishes a dedup skip from a genuine create
+     * failure so callers dead-letter ONLY real failures. On success, marks seen
+     * (durable qitem exists → safe).
+     */
+    async attemptLand(ev) {
+        const ts = ev.ts ?? "";
+        if (!ts || this.inflight.has(ts) || this.deps.seen.load().has(ts))
+            return { landed: false, reason: "dup" };
+        this.inflight.add(ts);
+        try {
+            const { summary, body } = this.summaryOf(ev);
+            let qitemId;
+            try {
+                qitemId = await createQitem(this.deps.runner, {
+                    source: `human-${ev.user}@kernel`, // provenance classifies as human (name convention)
+                    destination: this.deps.destination,
+                    priority: "routine",
+                    tags: ["founder-slack", "inbound"],
+                    summary,
+                    body,
+                });
+            }
+            catch (e) {
+                this.deps.log?.(`qitem create failed ts=${ts}: ${e.message}`);
+                return { landed: false, reason: "create_failed" };
+            }
+            this.deps.seen.mark(ts, "landed"); // durable qitem exists → safe to mark
+            this.deps.log?.(`qitem ${qitemId} -> ${this.deps.destination} (ts=${ts})`);
+            return { landed: true, qitemId };
+        }
+        finally {
+            this.inflight.delete(ts);
+        }
+    }
+    /**
+     * LIVE path: attempt to land; on a genuine create failure, dead-letter the
+     * event (attempt-counted) BEFORE returning — NOT marked seen (item 8).
+     */
+    async route(ev, attempts = 0) {
+        const r = await this.attemptLand(ev);
+        if (!r.landed && r.reason === "create_failed") {
+            this.deps.deadLetter.append(ev, attempts + 1);
+            this.deps.log?.(`dead-lettered ts=${ev.ts} (attempt ${attempts + 1})`);
+        }
+        return { landed: r.landed, qitemId: r.qitemId };
+    }
+    /**
+     * INTERRUPTION-SAFE retry (item 8): read the durable set NON-destructively,
+     * attempt each, then ATOMICALLY replace the file with only the still-failing
+     * entries. The original file stays intact until the atomic replace, so a crash
+     * at any point loses nothing (a since-landed event is skipped via the seen-set).
+     * Does NOT go through route() (which would double-append) — uses attemptLand.
+     */
+    async retryDeadLetters() {
+        const entries = this.deps.deadLetter.readAll();
+        if (entries.length === 0)
+            return { retried: 0, landed: 0 };
+        this.deps.log?.(`retrying ${entries.length} dead-letter(s)`);
+        const stillFailing = [];
+        let landed = 0;
+        const seen = this.deps.seen.load();
+        for (const e of entries) {
+            if (e.ev.ts && seen.has(e.ev.ts))
+                continue; // already landed → recovered, drop from set
+            const r = await this.attemptLand(e.ev);
+            if (r.landed)
+                landed++;
+            else if (r.reason === "create_failed")
+                stillFailing.push({ ev: e.ev, at: e.at, attempts: e.attempts + 1 });
+            // reason === "dup" (in-flight) → drop; a concurrent path owns it
+        }
+        this.deps.deadLetter.replaceAll(stillFailing); // atomic; original intact until here
+        return { retried: entries.length, landed };
+    }
+}
+/**
+ * Handle one Socket Mode envelope. FAST-ACK first, ALWAYS (item 8: Socket Mode
+ * punishes slow acks; transport redelivery is not the safety net). Then filter
+ * and route. Ack happens even if routing later fails — the dead-letter, not
+ * transport redelivery, is the zero-drop net.
+ */
+export async function handleEnvelope(env, ack, router, log) {
+    if (env.envelope_id)
+        ack(); // fast-ack, unconditional, first
+    if (env.type === "disconnect")
+        return;
+    if (env.type !== "events_api")
+        return;
+    const ev = env.payload?.event ?? {};
+    if (!shouldIngest(ev)) {
+        if (ev.type)
+            log?.(`ignored non-ingestible event type=${ev.type} subtype=${ev.subtype ?? "-"} files=${ev.files?.length ?? 0}`);
+        return;
+    }
+    await router.route(ev);
+}
+//# sourceMappingURL=inbound.js.map

package/dist/slack/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../src/slack/inbound.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAahD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,EAAc;IACzC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,sCAAsC;IACnE,IAAI,EAAE,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IAC/D,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,sDAAsD;IACzG,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,OAAO,aAAa;IAEK;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yCAAyC;IACxF,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAE1C,SAAS,CAAC,EAAc;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAClD,IAAI,EAAE,GAAG,IAAI,oBAAoB,IAAI,kGAAkG;SACxI,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,EAAc;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,SAAS,EAAE,mDAAmD;oBACtF,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;oBAClC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;oBAClC,OAAO;oBACP,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,sCAAsC;YACzE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,EAAc,EAAE,QAAQ,GAAG,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAE,aAAa,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAkC,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,4CAA4C;YACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC;iBAClB,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,iEAAiE;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,qCAAqC;QACpF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;CACF;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,GAAe,EAAE,MAAqB,EAAE,GAAyB;IACzH,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;IAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,IAAI;YAAE,GAAG,EAAE,CAAC,qCAAqC,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/slack/message.d.ts

@@ -0,0 +1,26 @@
+export declare const SLACK_TEXT_CAP = 3900;
+export declare const DEFAULT_BODY_EXCERPT = 800;
+export interface QitemLike {
+    qitemId: string;
+    summary?: string | null;
+    body?: string | null;
+    destinationSession?: string | null;
+}
+export interface OutboundMessageOpts {
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    /** T1076 extension point: extra Block Kit blocks (e.g. future media). v1 unused. */
+    extraBlocks?: unknown[];
+}
+export declare function containsSecret(text: string): boolean;
+export declare function redactSecrets(text: string): string;
+export interface SlackMessagePayload {
+    text: string;
+    blocks: unknown[];
+}
+/**
+ * Build the Slack payload for a human-destined qitem. Pure + deterministic
+ * (no clock, no io) so it is trivially testable and safe to snapshot.
+ */
+export declare function buildOutboundMessage(q: QitemLike, opts: OutboundMessageOpts): SlackMessagePayload;
+//# sourceMappingURL=message.d.ts.map

package/dist/slack/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/slack/message.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;CACzB;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,CAiBjG"}

package/dist/slack/message.js

@@ -0,0 +1,60 @@
+// Slice-11 slack-connector — outbound message construction.
+//
+// Locked item 7 (content hygiene): a posted message carries summary + qitem id
+// + source + a BOUNDED body excerpt, and NEVER a token/secret/secret-bearing
+// path. We never add our own credentials (we only render qitem fields), and as
+// defense-in-depth we redact anything that looks like a Slack/bearer secret
+// leaking through a qitem body before it goes out.
+//
+// T1076 (don't preclude Slice-12): construction is BLOCKS/ATTACHMENTS-capable —
+// we always emit Block Kit `blocks` PLUS a plain-text fallback, and accept
+// optional extra blocks / media refs so image relay can extend this later
+// WITHOUT redefining the shape here. v1 ships text only.
+export const SLACK_TEXT_CAP = 3900; // Slack hard-limits ~4000; stay under.
+export const DEFAULT_BODY_EXCERPT = 800;
+// Secret-looking patterns we refuse to forward (item 7 defense-in-depth).
+const SECRET_PATTERNS = [
+    /xox[baprs]-[A-Za-z0-9-]+/g, // Slack bot/user/app/refresh tokens
+    /xapp-[A-Za-z0-9-]+/g, // Slack app-level (Socket Mode) token
+    /https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/_-]+/g, // incoming webhook URL
+    /\bBearer\s+[A-Za-z0-9._-]{12,}/gi, // bearer tokens
+    /xoxe\.xox[bp]-[A-Za-z0-9-]+/g, // rotation tokens
+];
+export function containsSecret(text) {
+    return SECRET_PATTERNS.some((p) => {
+        p.lastIndex = 0;
+        return p.test(text);
+    });
+}
+export function redactSecrets(text) {
+    let out = text;
+    for (const p of SECRET_PATTERNS) {
+        out = out.replace(p, "[redacted-secret]");
+    }
+    return out;
+}
+function clamp(s, max) {
+    return s.length > max ? s.slice(0, max) : s;
+}
+/**
+ * Build the Slack payload for a human-destined qitem. Pure + deterministic
+ * (no clock, no io) so it is trivially testable and safe to snapshot.
+ */
+export function buildOutboundMessage(q, opts) {
+    const summary = redactSecrets(String(q.summary || "(no summary)"));
+    const bodyRaw = redactSecrets(String(q.body || ""));
+    const body = clamp(bodyRaw, opts.bodyExcerpt ?? DEFAULT_BODY_EXCERPT);
+    const dest = q.destinationSession || "(unknown destination)";
+    const footer = `qitem ${q.qitemId} → ${dest} on ${opts.sourceLabel}`;
+    const text = clamp(`:rotating_light: *${summary}*\n${body}\n_${footer}_`, SLACK_TEXT_CAP);
+    const blocks = [
+        { type: "section", text: { type: "mrkdwn", text: clamp(`:rotating_light: *${summary}*`, 3000) } },
+    ];
+    if (body.trim())
+        blocks.push({ type: "section", text: { type: "mrkdwn", text: clamp(body, 3000) } });
+    blocks.push({ type: "context", elements: [{ type: "mrkdwn", text: footer }] });
+    if (opts.extraBlocks?.length)
+        blocks.push(...opts.extraBlocks);
+    return { text, blocks };
+}
+//# sourceMappingURL=message.js.map

package/dist/slack/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../src/slack/message.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,mDAAmD;AACnD,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,yDAAyD;AAEzD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,uCAAuC;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAgBxC,0EAA0E;AAC1E,MAAM,eAAe,GAAa;IAChC,2BAA2B,EAAE,oCAAoC;IACjE,qBAAqB,EAAE,sCAAsC;IAC7D,yDAAyD,EAAE,uBAAuB;IAClF,kCAAkC,EAAE,gBAAgB;IACpD,8BAA8B,EAAE,kBAAkB;CACnD,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW;IACnC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAY,EAAE,IAAyB;IAC1E,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,IAAI,uBAAuB,CAAC;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,OAAO,MAAM,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAErE,MAAM,IAAI,GAAG,KAAK,CAAC,qBAAqB,OAAO,MAAM,IAAI,MAAM,MAAM,GAAG,EAAE,cAAc,CAAC,CAAC;IAE1F,MAAM,MAAM,GAAc;QACxB,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,qBAAqB,OAAO,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE;KAClG,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/dist/slack/outbound.d.ts

@@ -0,0 +1,39 @@
+import type { SeenStore } from "./state-store.js";
+import type { QueueRunner, AlertFilterOpts } from "./queue-bridge.js";
+import { type FetchImpl } from "./slack-api.js";
+export interface OutboundDeps {
+    runner: QueueRunner;
+    seen: SeenStore;
+    webhookUrl: string;
+    fetchImpl?: FetchImpl;
+    sourceLabel: string;
+    filter: AlertFilterOpts;
+    bodyExcerpt?: number;
+    log?: (msg: string) => void;
+}
+export interface OutboundResult {
+    freshCount: number;
+    posted: string[];
+    failed: {
+        id: string;
+        error: string;
+    }[];
+}
+/**
+ * One outbound sweep. Posts every FRESH human alert, marking it seen ONLY after
+ * a 200. A failed post is logged loudly and left UNSEEN so the next sweep
+ * retries it — never a silent drop. Returns failures so the caller exits
+ * non-zero (fail-visible).
+ */
+export declare function runOutboundOnce(deps: OutboundDeps): Promise<OutboundResult>;
+export interface SeedResult {
+    seeded: number;
+    onlineStatus: string;
+}
+/**
+ * Item 9: on ENABLE, seed all currently-active human alerts as history/seen
+ * WITHOUT posting, so turning the connector on never replays the backlog.
+ * Returns an honest online-status line marking the transition.
+ */
+export declare function seedBacklogOnEnable(deps: Pick<OutboundDeps, "runner" | "seen" | "filter" | "log">): Promise<SeedResult>;
+//# sourceMappingURL=outbound.d.ts.map

package/dist/slack/outbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.d.ts","sourceRoot":"","sources":["../../src/slack/outbound.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG7D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CA6BjF;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAQ7H"}

package/dist/slack/outbound.js

@@ -0,0 +1,52 @@
+import { listHumanAlerts, showFull } from "./queue-bridge.js";
+import { postWebhook } from "./slack-api.js";
+import { buildOutboundMessage } from "./message.js";
+/**
+ * One outbound sweep. Posts every FRESH human alert, marking it seen ONLY after
+ * a 200. A failed post is logged loudly and left UNSEEN so the next sweep
+ * retries it — never a silent drop. Returns failures so the caller exits
+ * non-zero (fail-visible).
+ */
+export async function runOutboundOnce(deps) {
+    const log = deps.log ?? (() => { });
+    const alerts = await listHumanAlerts(deps.runner, deps.filter);
+    const seen = deps.seen.load();
+    const fresh = alerts.filter((q) => !seen.has(q.qitemId));
+    log(`alerts=${alerts.length} fresh=${fresh.length}`);
+    const posted = [];
+    const failed = [];
+    for (const a of fresh) {
+        // list bounds bodies (item 9 N+1) — pull the full item for summary+body.
+        const full = (await showFull(deps.runner, a.qitemId)) ?? a;
+        const payload = buildOutboundMessage({ qitemId: a.qitemId, summary: full.summary ?? a.summary, body: full.body, destinationSession: a.destinationSession }, { sourceLabel: deps.sourceLabel, bodyExcerpt: deps.bodyExcerpt });
+        const res = await postWebhook(deps.webhookUrl, payload, deps.fetchImpl);
+        if (res.ok) {
+            deps.seen.mark(a.qitemId, "posted"); // …seen ONLY after success (item 2)
+            posted.push(a.qitemId);
+            log(`posted ${a.qitemId}`);
+        }
+        else {
+            // fail-VISIBLE (item 3): loud, NOT marked seen → retried next sweep (no drop).
+            log(`ERROR posting ${a.qitemId}: ${res.error}`);
+            failed.push({ id: a.qitemId, error: res.error ?? "unknown" });
+        }
+    }
+    if (fresh.length === 0)
+        log("nothing new");
+    return { freshCount: fresh.length, posted, failed };
+}
+/**
+ * Item 9: on ENABLE, seed all currently-active human alerts as history/seen
+ * WITHOUT posting, so turning the connector on never replays the backlog.
+ * Returns an honest online-status line marking the transition.
+ */
+export async function seedBacklogOnEnable(deps) {
+    const alerts = await listHumanAlerts(deps.runner, deps.filter);
+    const already = deps.seen.load();
+    const toSeed = alerts.map((a) => a.qitemId).filter((id) => !already.has(id));
+    const seeded = deps.seen.seed(toSeed, "seeded-at-enable");
+    const onlineStatus = `slack outbound ENABLED at enable-time: ${seeded} pre-existing alert(s) seeded as history (not reposted); only alerts created after this point will deliver.`;
+    deps.log?.(onlineStatus);
+    return { seeded, onlineStatus };
+}
+//# sourceMappingURL=outbound.js.map

package/dist/slack/outbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound.js","sourceRoot":"","sources":["../../src/slack/outbound.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAkB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAmBpD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAkB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAErD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,yEAAyE;QACzE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,oBAAoB,CAClC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,EACrH,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CACjE,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,oCAAoC;YACzE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvB,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,+EAA+E;YAC/E,GAAG,CAAC,iBAAiB,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3C,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACtD,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA8D;IACtG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,0CAA0C,MAAM,6GAA6G,CAAC;IACnL,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC"}

package/dist/slack/queue-bridge.d.ts

@@ -0,0 +1,56 @@
+export interface RunResult {
+    ok: boolean;
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+/** Injectable: run `rig queue <args>` and return the result. */
+export type QueueRunner = (args: string[]) => Promise<RunResult>;
+/**
+ * Default runner: spawn the configured `rig` binary. `env` carries OPENRIG_URL
+ * (or nothing, letting rig resolve the local daemon); `baseArgs` can inject
+ * `--host <id>` for a registered remote queue. No shell — argv only.
+ */
+export declare function makeExecRunner(opts: {
+    rigBin: string;
+    baseArgs?: string[];
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}): QueueRunner;
+export interface QueueItem {
+    qitemId: string;
+    destinationSession?: string | null;
+    sourceSession?: string | null;
+    tags?: string[] | null;
+    state?: string | null;
+    tier?: string | null;
+    summary?: string | null;
+    body?: string | null;
+}
+export interface AlertFilterOpts {
+    alertTag: string;
+    /** Optional explicit human-seat allow-list; when empty, any human-seat destination or human-gate tier matches. */
+    destinations?: string[];
+}
+/**
+ * PURE: select the qitems that should alert a human. A qitem alerts iff it is
+ * active, carries the alert tag, AND targets a human — either an explicit
+ * configured destination, a human-seat session name, or tier `human-gate`.
+ */
+export declare function filterHumanAlerts(items: QueueItem[], opts: AlertFilterOpts): QueueItem[];
+export declare const QUEUE_LIST_LIMIT = 100000;
+/** Read active human alerts across ALL rigs (the -A scope fix) with a full-backlog limit. */
+export declare function listHumanAlerts(runner: QueueRunner, opts: AlertFilterOpts): Promise<QueueItem[]>;
+/** Full single-item read (list omits/bounds body — item 9 N+1). */
+export declare function showFull(runner: QueueRunner, qitemId: string): Promise<QueueItem | null>;
+export interface CreateQitemInput {
+    source: string;
+    destination: string;
+    summary: string;
+    body: string;
+    priority?: string;
+    tags?: string[];
+}
+/** Create a qitem (inbound landing). Returns the created qitem id, or throws. */
+export declare function createQitem(runner: QueueRunner, input: CreateQitemInput): Promise<string>;
+//# sourceMappingURL=queue-bridge.d.ts.map

package/dist/slack/queue-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-bridge.d.ts","sourceRoot":"","sources":["../../src/slack/queue-bridge.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,gEAAgE;AAChE,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,WAAW,CAiBd;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAcD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,SAAS,EAAE,CAUxF;AASD,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,6FAA6F;AAC7F,wBAAsB,eAAe,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAItG;AAED,mEAAmE;AACnE,wBAAsB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQ9F;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,iFAAiF;AACjF,wBAAsB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB/F"}

package/dist/slack/queue-bridge.js

@@ -0,0 +1,114 @@
+// Slice-11 slack-connector — fleet access via the `rig` CLI ONLY.
+//
+// The connector NEVER imports daemon internals; it shells out to `rig queue`
+// exactly like the reference relay (which ssh'd `rig queue` to the box). That
+// keeps it transport-agnostic (local daemon via OPENRIG_URL, a registered
+// remote via `--host`, or an ssh wrapper) and honors the secret-host axis
+// (item 10): connector-host may differ from the queue/alert host.
+//
+// Productization fix over the reference (proven firsthand): reads use `-A`
+// (all-rigs), because bare `rig queue list --json` is CURRENT-RIG only and
+// silently misses cross-rig human-destined alerts.
+import { execFile } from "node:child_process";
+import { isHumanSeatSessionRef } from "../session-name.js";
+/**
+ * Default runner: spawn the configured `rig` binary. `env` carries OPENRIG_URL
+ * (or nothing, letting rig resolve the local daemon); `baseArgs` can inject
+ * `--host <id>` for a registered remote queue. No shell — argv only.
+ */
+export function makeExecRunner(opts) {
+    return (args) => new Promise((resolve) => {
+        execFile(opts.rigBin, [...(opts.baseArgs ?? []), ...args], { timeout: opts.timeoutMs ?? 30000, env: opts.env ?? process.env, maxBuffer: 16 * 1024 * 1024 }, (err, stdout, stderr) => {
+            resolve({
+                ok: !err,
+                stdout: String(stdout ?? ""),
+                stderr: String(stderr ?? ""),
+                code: err && typeof err.code === "number" ? err.code : err ? 1 : 0,
+            });
+        });
+    });
+}
+function parseArray(stdout) {
+    let j;
+    try {
+        j = JSON.parse(stdout);
+    }
+    catch {
+        throw new Error("queue list: non-JSON output");
+    }
+    if (Array.isArray(j))
+        return j;
+    const o = j;
+    return o.qitems ?? o.items ?? [];
+}
+/**
+ * PURE: select the qitems that should alert a human. A qitem alerts iff it is
+ * active, carries the alert tag, AND targets a human — either an explicit
+ * configured destination, a human-seat session name, or tier `human-gate`.
+ */
+export function filterHumanAlerts(items, opts) {
+    const active = new Set(["pending", "in-progress", "blocked"]);
+    const allow = new Set(opts.destinations ?? []);
+    return items.filter((q) => {
+        if (q.state && !active.has(q.state))
+            return false;
+        if (!(q.tags ?? []).includes(opts.alertTag))
+            return false;
+        const dest = q.destinationSession ?? "";
+        const isHuman = allow.size > 0 ? allow.has(dest) : isHumanSeatSessionRef(dest) || q.tier === "human-gate";
+        return isHuman;
+    });
+}
+// Cross-host queue targeting is via OPENRIG_URL on the runner's env (supported
+// by ALL queue verbs), NOT `--host` — `queue list`/`queue show` reject `--host`
+// (only write/handoff verbs accept it). See makeExecRunner env / config.queueUrl.
+// `queue list` defaults to --limit 100 and ALWAYS sends it, so an unbounded read
+// silently truncates a large backlog (the B5 defect). Pass an explicit high
+// limit so enable-time seeding + outbound see the COMPLETE matching set.
+export const QUEUE_LIST_LIMIT = 100000;
+/** Read active human alerts across ALL rigs (the -A scope fix) with a full-backlog limit. */
+export async function listHumanAlerts(runner, opts) {
+    const r = await runner(["queue", "list", "-A", "--limit", String(QUEUE_LIST_LIMIT), "--json"]);
+    if (!r.ok)
+        throw new Error(`rig queue list failed (code ${r.code}): ${r.stderr.slice(0, 200)}`);
+    return filterHumanAlerts(parseArray(r.stdout), opts);
+}
+/** Full single-item read (list omits/bounds body — item 9 N+1). */
+export async function showFull(runner, qitemId) {
+    const r = await runner(["queue", "show", qitemId, "--full", "--json"]);
+    if (!r.ok)
+        return null;
+    try {
+        return JSON.parse(r.stdout);
+    }
+    catch {
+        return null;
+    }
+}
+/** Create a qitem (inbound landing). Returns the created qitem id, or throws. */
+export async function createQitem(runner, input) {
+    const args = [
+        "queue",
+        "create",
+        "--source",
+        input.source,
+        "--destination",
+        input.destination,
+        "--priority",
+        input.priority ?? "routine",
+        "--tags",
+        (input.tags ?? ["founder-slack", "inbound"]).join(","),
+        "--summary",
+        input.summary,
+        "--body",
+        input.body,
+    ];
+    const r = await runner(args);
+    if (!r.ok)
+        throw new Error(`rig queue create failed (code ${r.code}): ${r.stderr.slice(0, 200) || r.stdout.slice(0, 200)}`);
+    const id = (r.stdout.match(/qitem-[a-z0-9-]+/) ?? [])[0];
+    if (!id)
+        throw new Error("rig queue create: no qitem id in output");
+    return id;
+}
+//# sourceMappingURL=queue-bridge.js.map

package/dist/slack/queue-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-bridge.js","sourceRoot":"","sources":["../../src/slack/queue-bridge.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,0EAA0E;AAC1E,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,mDAAmD;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAY3D;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAK9B;IACC,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACtB,QAAQ,CACN,IAAI,CAAC,MAAM,EACX,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,EACnC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAC/F,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACtB,OAAO,CAAC;gBACN,EAAE,EAAE,CAAC,GAAG;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5B,IAAI,EAAE,GAAG,IAAI,OAAQ,GAAyB,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAChH,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAaD,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAgB,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAkD,CAAC;IAC7D,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;AACnC,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAkB,EAAE,IAAqB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1G,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,kFAAkF;AAElF,iFAAiF;AACjF,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAmB,EAAE,IAAqB;IAC9E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAmB,EAAE,OAAe;IACjE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAc,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAWD,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAmB,EAAE,KAAuB;IAC5E,MAAM,IAAI,GAAG;QACX,OAAO;QACP,QAAQ;QACR,UAAU;QACV,KAAK,CAAC,MAAM;QACZ,eAAe;QACf,KAAK,CAAC,WAAW;QACjB,YAAY;QACZ,KAAK,CAAC,QAAQ,IAAI,SAAS;QAC3B,QAAQ;QACR,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACtD,WAAW;QACX,KAAK,CAAC,OAAO;QACb,QAAQ;QACR,KAAK,CAAC,IAAI;KACX,CAAC;IACF,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5H,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpE,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/slack/secrets.d.ts

@@ -0,0 +1,21 @@
+export interface SecretFsOps {
+    readFileSync(p: string): string;
+    statMode(p: string): number | null;
+}
+export declare const nodeSecretFs: SecretFsOps;
+/** Parse KEY=VALUE lines (quotes trimmed). Blank lines / #comments ignored. */
+export declare function parseEnvFile(text: string): Record<string, string>;
+export interface SecretLookupOpts {
+    envFile?: string;
+    env?: NodeJS.ProcessEnv;
+    fsops?: SecretFsOps;
+}
+/** Warn if the env file is group/world readable (item 10 hygiene). Returns a warning string or null. */
+export declare function checkEnvFilePermissions(envFile: string, fsops?: SecretFsOps): string | null;
+/**
+ * Resolve a secret by logical name. Precedence: explicit env var (OPENRIG_SLACK_<NAME>
+ * or the raw name) → env-file key. Returns null when unresolved (honest: callers
+ * report "unconfigured", they do NOT fabricate). Never logs the value.
+ */
+export declare function resolveSecret(name: string, opts?: SecretLookupOpts): string | null;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/slack/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/slack/secrets.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,eAAO,MAAM,YAAY,EAAE,WAS1B,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,WAA0B,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,MAAM,GAAG,IAAI,CAmBtF"}

package/dist/slack/secrets.js

@@ -0,0 +1,73 @@
+// Slice-11 slack-connector — secret resolution (item 7 + 10).
+//
+// Secrets (Slack bot token / app-level token / incoming-webhook URL) resolve
+// from EITHER an OPENRIG_SLACK_* environment variable OR a 0600 env file, at
+// call time — NEVER stored in the connector config file, NEVER in the repo,
+// NEVER logged. Mirrors the daemon's bearer_file/activity-hook-token posture.
+// The env file lives on the TRUSTED host (item 10 secret-host axis); it may be
+// a different host from the queue/alert host.
+import fs from "node:fs";
+export const nodeSecretFs = {
+    readFileSync: (p) => fs.readFileSync(p, "utf8"),
+    statMode: (p) => {
+        try {
+            return fs.statSync(p).mode & 0o777;
+        }
+        catch {
+            return null;
+        }
+    },
+};
+/** Parse KEY=VALUE lines (quotes trimmed). Blank lines / #comments ignored. */
+export function parseEnvFile(text) {
+    const out = {};
+    for (const line of text.split("\n")) {
+        const t = line.trim();
+        if (!t || t.startsWith("#") || !t.includes("="))
+            continue;
+        const i = t.indexOf("=");
+        out[t.slice(0, i).trim()] = t
+            .slice(i + 1)
+            .trim()
+            .replace(/^"|"$/g, "");
+    }
+    return out;
+}
+/** Warn if the env file is group/world readable (item 10 hygiene). Returns a warning string or null. */
+export function checkEnvFilePermissions(envFile, fsops = nodeSecretFs) {
+    const mode = fsops.statMode(envFile);
+    if (mode === null)
+        return null; // absent — a separate "unconfigured" concern
+    if (mode & 0o077)
+        return `secret env file ${envFile} is mode ${mode.toString(8)} — should be 0600 (group/other must not read secrets)`;
+    return null;
+}
+/**
+ * Resolve a secret by logical name. Precedence: explicit env var (OPENRIG_SLACK_<NAME>
+ * or the raw name) → env-file key. Returns null when unresolved (honest: callers
+ * report "unconfigured", they do NOT fabricate). Never logs the value.
+ */
+export function resolveSecret(name, opts = {}) {
+    const env = opts.env ?? process.env;
+    const fsops = opts.fsops ?? nodeSecretFs;
+    // Aliases: the raw name (e.g. SLACK_WEBHOOK_URL) and the OPENRIG_-prefixed
+    // form (OPENRIG_SLACK_WEBHOOK_URL). NOT OPENRIG_SLACK_<name> — that would
+    // double the SLACK_ segment (the B4 defect).
+    const envKeys = [name, `OPENRIG_${name.replace(/[^A-Za-z0-9]/g, "_").toUpperCase()}`];
+    for (const k of envKeys) {
+        if (env[k])
+            return env[k];
+    }
+    if (opts.envFile) {
+        try {
+            const map = parseEnvFile(fsops.readFileSync(opts.envFile));
+            if (map[name])
+                return map[name];
+        }
+        catch {
+            /* absent/unreadable → null */
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/slack/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/slack/secrets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,8CAA8C;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAOzB,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;aACZ,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,QAAqB,YAAY;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC7E,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,mBAAmB,OAAO,YAAY,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC;IACvI,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,2EAA2E;IAC3E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}