@openrig/cli 0.4.6 → 0.4.7

package/dist/slack/slack-api.d.ts

@@ -0,0 +1,49 @@
+export type FetchImpl = (url: string, init?: RequestInit) => Promise<Response>;
+export interface HttpResult {
+    ok: boolean;
+    status: number;
+    error?: string;
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ */
+export declare function postWebhook(url: string, payload: unknown, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
+export interface WebApiResult {
+    ok: boolean;
+    status: number;
+    grantedScopes: string[];
+    json: Record<string, unknown>;
+    error?: string;
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export declare function callWebApi(method: string, token: string, body: Record<string, unknown>, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<WebApiResult>;
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export declare function getGrantedScopes(token: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    granted: string[];
+    error?: string;
+}>;
+export interface ScopeVerdict {
+    ok: boolean;
+    granted: string[];
+    missing: string[];
+    error?: string;
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export declare function verifyScopes(token: string, required: string[], fetchImpl?: FetchImpl, timeoutMs?: number): Promise<ScopeVerdict>;
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export declare function verifyChannelMembership(token: string, channel: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    isMember: boolean;
+    name?: string;
+    error?: string;
+}>;
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export declare function openSocketConnection(appToken: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    url?: string;
+    error?: string;
+}>;
+//# sourceMappingURL=slack-api.d.ts.map

package/dist/slack/slack-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.d.ts","sourceRoot":"","sources":["../../src/slack/slack-api.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAK/E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAYD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CA0BvB;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG7D;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,uFAAuF;AACvF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAK5E;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD"}

package/dist/slack/slack-api.js

@@ -0,0 +1,110 @@
+// Slice-11 slack-connector — Slack HTTP client.
+//
+// `fetch`-based (http/https agnostic + injectable) matching the daemon's
+// WebhookNotificationAdapter + its fake-fetch test pattern; every call is
+// bounded by an explicit timeout with a structured failure result (never
+// throws past the boundary, never hangs) — the remote-daemon-http discipline.
+//
+// Item 5 (the setup-scope trap): Slack's "Add New Webhook" grants ONLY the
+// webhook scope; configured bot scopes are NOT granted until a full reinstall,
+// with no warning. The ONLY proof of granted scopes is the `x-oauth-scopes`
+// RESPONSE HEADER on a real API call — configured != granted. getGrantedScopes()
+// reads exactly that header. Channel membership is likewise verified live
+// (conversations.info.is_member) before declaring inbound ready.
+const defaultFetch = (url, init) => fetch(url, init);
+const DEFAULT_TIMEOUT_MS = 15000;
+async function withTimeout(timeoutMs, run) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+    try {
+        return await run(ctrl.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ */
+export async function postWebhook(url, payload, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+                signal,
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                return { ok: false, status: res.status, error: `slack ${res.status}: ${text.slice(0, 160)}` };
+            }
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `webhook transport: ${e.message}` };
+    }
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export async function callWebApi(method, token, body, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(`https://slack.com/api/${method}`, {
+                method: "POST",
+                headers: { authorization: `Bearer ${token}`, "content-type": "application/json; charset=utf-8" },
+                body: JSON.stringify(body),
+                signal,
+            });
+            const scopeHeader = res.headers.get("x-oauth-scopes") ?? "";
+            const grantedScopes = scopeHeader
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean);
+            let json = {};
+            try {
+                json = (await res.json());
+            }
+            catch {
+                /* non-JSON */
+            }
+            const ok = res.ok && json.ok === true;
+            return { ok, status: res.status, grantedScopes, json, error: ok ? undefined : String(json.error ?? `http ${res.status}`) };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, grantedScopes: [], json: {}, error: `web-api transport: ${e.message}` };
+    }
+}
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export async function getGrantedScopes(token, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("auth.test", token, {}, fetchImpl, timeoutMs);
+    return { ok: r.ok, granted: r.grantedScopes, error: r.error };
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export async function verifyScopes(token, required, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const g = await getGrantedScopes(token, fetchImpl, timeoutMs);
+    if (!g.ok)
+        return { ok: false, granted: g.granted, missing: required, error: g.error };
+    const grantedSet = new Set(g.granted);
+    const missing = required.filter((s) => !grantedSet.has(s));
+    return { ok: missing.length === 0, granted: g.granted, missing };
+}
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export async function verifyChannelMembership(token, channel, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("conversations.info", token, { channel }, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, isMember: false, error: r.error };
+    const ch = (r.json.channel ?? {});
+    return { ok: true, isMember: ch.is_member === true, name: ch.name };
+}
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export async function openSocketConnection(appToken, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("apps.connections.open", appToken, {}, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, url: r.json.url };
+}
+//# sourceMappingURL=slack-api.js.map

package/dist/slack/slack-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.js","sourceRoot":"","sources":["../../src/slack/slack-api.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,iEAAiE;AAIjE,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC,KAAK,UAAU,WAAW,CAAI,SAAiB,EAAE,GAAwC;IACvF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAUD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,IAA6B,EAC7B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,yBAAyB,MAAM,EAAE,EAAE;gBAC7D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;gBAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM;aACP,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,IAAI,GAA4B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChE,CAAC;AASD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,QAAkB,EAClB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3F,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2C,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC;AACjD,CAAC"}

package/dist/slack/state-store.d.ts

@@ -0,0 +1,62 @@
+export interface StateFsOps {
+    readFileSync(p: string): string;
+    appendFileSync(p: string, data: string): void;
+    writeFileSync(p: string, data: string): void;
+    rename(from: string, to: string): void;
+    mkdirp(dir: string): void;
+}
+export declare const nodeStateFs: StateFsOps;
+export interface SeenRecord {
+    id: string;
+    ts: string;
+    status: string;
+}
+/**
+ * Delivery-dedup log. `load()` reads the durable set from disk; `mark()` appends
+ * AFTER the guarded side effect. Idempotent on id: a repeated id collapses in
+ * `load()`'s Set, and callers gate the side effect on `!seen.has(id)` so a
+ * duplicate is never re-delivered within a run.
+ */
+export declare class SeenStore {
+    private readonly file;
+    private readonly fsops;
+    private readonly now;
+    constructor(file: string, fsops?: StateFsOps, now?: () => Date);
+    load(): Set<string>;
+    /** Append a seen record. MUST be called only after the guarded side effect succeeds. */
+    mark(id: string, status: string): void;
+    /**
+     * Seed existing ids as already-seen WITHOUT triggering the side effect
+     * (locked item 9: enable-time backlog seeds as history, zero replay storm).
+     */
+    seed(ids: string[], status?: string): number;
+}
+export interface DeadLetterEntry<T = unknown> {
+    ev: T;
+    at: string;
+    attempts: number;
+}
+/**
+ * Inbound never-drop net. Every event that fails to land is appended
+ * (attempt-counted) BEFORE the error path returns.
+ *
+ * INTERRUPTION-SAFE retry (the B2 fix): retry does NOT truncate first. The
+ * caller `readAll()`s (non-destructive), attempts each, then `replaceAll()`s the
+ * file with ONLY the still-failing entries via an atomic temp-write + rename. So
+ * the durable file always reflects the unrecovered set: a crash at ANY point
+ * before the rename leaves the ORIGINAL file fully intact (at-least-once — a
+ * since-landed event is skipped on re-read via the seen-set, so not even a dup).
+ * There is no truncate-before-success window.
+ */
+export declare class DeadLetterStore<T = unknown> {
+    private readonly file;
+    private readonly fsops;
+    private readonly now;
+    constructor(file: string, fsops?: StateFsOps, now?: () => Date);
+    append(ev: T, attempts: number): void;
+    /** Non-destructive read of all durable entries. */
+    readAll(): DeadLetterEntry<T>[];
+    /** Atomically replace the durable set (temp-write + rename). Used after a retry pass. */
+    replaceAll(entries: DeadLetterEntry<T>[]): void;
+}
+//# sourceMappingURL=state-store.d.ts.map

package/dist/slack/state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.d.ts","sourceRoot":"","sources":["../../src/slack/state-store.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,WAAW,EAAE,UAQzB,CAAC;AAiBF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;IAUnB,wFAAwF;IACxF,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtC;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,SAAW,GAAG,MAAM;CAQ/C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,CAAC,CAAC;IACN,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAe,CAAC,CAAC,GAAG,OAAO;IAEpC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQrC,mDAAmD;IACnD,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE;IAU/B,yFAAyF;IACzF,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI;CAOhD"}

package/dist/slack/state-store.js

@@ -0,0 +1,132 @@
+// Slice-11 slack-connector — durable, restart-surviving state.
+//
+// Two append-only JSONL stores, both written to disk so they survive BOTH a
+// connector restart AND a queue-daemon restart (locked item 2 + item 8):
+//   - SeenStore     : delivery-dedup by id; a line is appended ONLY AFTER the
+//                     side effect succeeds (outbound: after a 200 from Slack;
+//                     inbound: after the durable qitem exists). At-least-once —
+//                     a crash between success and append re-delivers a
+//                     BYTE-IDENTICAL duplicate next run, never a drop.
+//   - DeadLetterStore : the inbound never-drop net. An event that fails to land
+//                     in the queue is appended (attempt-counted) BEFORE the
+//                     failure path returns; drain() truncates and hands the
+//                     lines back so the caller re-appends any that fail again
+//                     ("zero-drop means zero, not zero-until-the-second-failure").
+//
+// FS + clock are injected so the whole thing is unit-testable with no real disk.
+import fs from "node:fs";
+import path from "node:path";
+export const nodeStateFs = {
+    readFileSync: (p) => fs.readFileSync(p, "utf8"),
+    appendFileSync: (p, d) => fs.appendFileSync(p, d),
+    writeFileSync: (p, d) => fs.writeFileSync(p, d),
+    rename: (from, to) => fs.renameSync(from, to),
+    mkdirp: (dir) => {
+        fs.mkdirSync(dir, { recursive: true });
+    },
+};
+function parseLines(raw) {
+    return raw
+        .trim()
+        .split("\n")
+        .filter(Boolean)
+        .map((l) => {
+        try {
+            return JSON.parse(l);
+        }
+        catch {
+            return null; // tolerate a torn final line from a crash mid-append
+        }
+    })
+        .filter((x) => x !== null);
+}
+/**
+ * Delivery-dedup log. `load()` reads the durable set from disk; `mark()` appends
+ * AFTER the guarded side effect. Idempotent on id: a repeated id collapses in
+ * `load()`'s Set, and callers gate the side effect on `!seen.has(id)` so a
+ * duplicate is never re-delivered within a run.
+ */
+export class SeenStore {
+    file;
+    fsops;
+    now;
+    constructor(file, fsops = nodeStateFs, now = () => new Date()) {
+        this.file = file;
+        this.fsops = fsops;
+        this.now = now;
+    }
+    load() {
+        let raw;
+        try {
+            raw = this.fsops.readFileSync(this.file);
+        }
+        catch {
+            return new Set();
+        }
+        return new Set(parseLines(raw).map((r) => r.id).filter((id) => typeof id === "string"));
+    }
+    /** Append a seen record. MUST be called only after the guarded side effect succeeds. */
+    mark(id, status) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        this.fsops.appendFileSync(this.file, JSON.stringify({ id, ts: this.now().toISOString(), status }) + "\n");
+    }
+    /**
+     * Seed existing ids as already-seen WITHOUT triggering the side effect
+     * (locked item 9: enable-time backlog seeds as history, zero replay storm).
+     */
+    seed(ids, status = "seeded") {
+        if (ids.length === 0)
+            return 0;
+        this.fsops.mkdirp(path.dirname(this.file));
+        const at = this.now().toISOString();
+        const chunk = ids.map((id) => JSON.stringify({ id, ts: at, status })).join("\n") + "\n";
+        this.fsops.appendFileSync(this.file, chunk);
+        return ids.length;
+    }
+}
+/**
+ * Inbound never-drop net. Every event that fails to land is appended
+ * (attempt-counted) BEFORE the error path returns.
+ *
+ * INTERRUPTION-SAFE retry (the B2 fix): retry does NOT truncate first. The
+ * caller `readAll()`s (non-destructive), attempts each, then `replaceAll()`s the
+ * file with ONLY the still-failing entries via an atomic temp-write + rename. So
+ * the durable file always reflects the unrecovered set: a crash at ANY point
+ * before the rename leaves the ORIGINAL file fully intact (at-least-once — a
+ * since-landed event is skipped on re-read via the seen-set, so not even a dup).
+ * There is no truncate-before-success window.
+ */
+export class DeadLetterStore {
+    file;
+    fsops;
+    now;
+    constructor(file, fsops = nodeStateFs, now = () => new Date()) {
+        this.file = file;
+        this.fsops = fsops;
+        this.now = now;
+    }
+    append(ev, attempts) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        this.fsops.appendFileSync(this.file, JSON.stringify({ ev, at: this.now().toISOString(), attempts }) + "\n");
+    }
+    /** Non-destructive read of all durable entries. */
+    readAll() {
+        let raw;
+        try {
+            raw = this.fsops.readFileSync(this.file);
+        }
+        catch {
+            return [];
+        }
+        return parseLines(raw);
+    }
+    /** Atomically replace the durable set (temp-write + rename). Used after a retry pass. */
+    replaceAll(entries) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        const body = entries.map((e) => JSON.stringify(e)).join("\n") + (entries.length ? "\n" : "");
+        const tmp = `${this.file}.tmp`;
+        this.fsops.writeFileSync(tmp, body);
+        this.fsops.rename(tmp, this.file); // atomic: original intact until this instant
+    }
+}
+//# sourceMappingURL=state-store.js.map

package/dist/slack/state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../src/slack/state-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,iFAAiF;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QACd,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,qDAAqD;QACpE,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC7C,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,SAAS;IAED;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,IAAI;QACF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,EAAU,EAAE,MAAc;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5G,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,GAAa,EAAE,MAAM,GAAG,QAAQ;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;CACF;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAEP;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,MAAM,CAAC,EAAK,EAAE,QAAgB;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAA+B,CAAC,GAAG,IAAI,CACnG,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,OAAO;QACL,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,UAAU,CAAC,GAAG,CAAyB,CAAC;IACjD,CAAC;IAED,yFAAyF;IACzF,UAAU,CAAC,OAA6B;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;IAClF,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrig/cli",
-  "version": "0.4.6",
+  "version": "0.4.7",
   "type": "module",
   "description": "Local control plane for multi-agent coding topologies",
   "keywords": [