@openrig/cli 0.5.0 → 0.5.1

package/dist/remote-host-ops.js

@@ -1,4 +1,6 @@
+import { remoteDaemonClient } from "./client.js";
 import { loadHostRegistry, resolveHost, resolveRemoteBearer, bearerAuthHeaders, classifyHttpFailedStep, classifyHttpError } from "./host-registry.js";
+import { resolveOriginSelfHostId } from "./daemon-lifecycle.js";
 export async function runRemoteHttpOp(hostId, method, apiPath, body, deps, 
 // OPR.0.4.6.MH4 — optional per-call deadline (additive; absent = the
 // DaemonClient default). Every remote call site names its own budget.
@@ -21,7 +23,10 @@ opts) {
     if (!bearerResult.ok) {
         return { ok: false, failedStep: bearerResult.failedStep, error: bearerResult.error };
     }
-    const client = deps.clientFactory(httpHost.url);
+    // A4: the SINGLE remote-origin construction for the 8 modules that route through this chokepoint —
+    // stamp the origin triple (fail-open to 2-part when the local selfHostId is unavailable / no lifecycleDeps).
+    const originSelfHostId = deps.lifecycleDeps ? await resolveOriginSelfHostId(deps.lifecycleDeps) : undefined;
+    const client = remoteDaemonClient(deps.clientFactory, httpHost.url, originSelfHostId);
     const headers = bearerAuthHeaders(bearerResult.token);
     const requestOptions = opts.timeoutMs !== undefined ? { headers, timeoutMs: opts.timeoutMs } : { headers };
     try {

package/dist/remote-host-ops.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-host-ops.js","sourceRoot":"","sources":["../src/remote-host-ops.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAe1K,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAsB,EACtB,OAAe,EACf,IAAyB,EACzB,IAAoB;AACpB,qEAAqE;AACrE,sEAAsE;AACtE,IAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAE3B,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,KAAK,EAAE,QAAQ,MAAM,gDAAgD,EAAE,CAAC;IACnI,CAAC;IAED,MAAM,QAAQ,GAAG,IAAqB,CAAC;IACvC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAE3G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM;YAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAU,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;YAC3D,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAU,OAAO,EAAE,cAAc,CAAC,CAAC;QAEvD,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,iEAAiE;YACjE,8DAA8D;YAC9D,kCAAkC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAAc,EACd,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,8BAA8B,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3G,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,MAAM,KAAK,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEzG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA0E,CAAC;IAEjG,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,MAAM,aAAa,MAAM,KAAK,MAAM,CAAC,MAAM,uDAAuD,EAAE,CAAC;IACzJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,MAAM,uBAAuB,MAAM,EAAE,EAAE,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"remote-host-ops.js","sourceRoot":"","sources":["../src/remote-host-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAsB,MAAM,uBAAuB,CAAC;AAsBpF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAsB,EACtB,OAAe,EACf,IAAyB,EACzB,IAAoB;AACpB,qEAAqE;AACrE,sEAAsE;AACtE,IAA4C;IAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAE3B,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,KAAK,EAAE,QAAQ,MAAM,gDAAgD,EAAE,CAAC;IACnI,CAAC;IAED,MAAM,QAAQ,GAAG,IAAqB,CAAC;IACvC,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC;IACvF,CAAC;IAED,mGAAmG;IACnG,6GAA6G;IAC7G,MAAM,gBAAgB,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAE3G,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM;YAC3B,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAU,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC;YAC3D,CAAC,CAAC,MAAM,MAAM,CAAC,GAAG,CAAU,OAAO,EAAE,cAAc,CAAC,CAAC;QAEvD,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,iEAAiE;YACjE,8DAA8D;YAC9D,kCAAkC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAAc,EACd,IAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,8BAA8B,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3G,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,MAAM,KAAK,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IAEzG,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA0E,CAAC;IAEjG,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,MAAM,aAAa,MAAM,KAAK,MAAM,CAAC,MAAM,uDAAuD,EAAE,CAAC;IACzJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,MAAM,uBAAuB,MAAM,EAAE,EAAE,CAAC;AAC7E,CAAC"}

package/dist/sender-identity.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The seat identity a CLI dispatch is attributed to — the SAME value the
+ * DaemonClient stamps as `X-OpenRig-Session` (the P18 chokepoint), from which
+ * the daemon DERIVES the actor / rendered `From:`. `--from` is deprecated and
+ * ignored: origin is the seat env, never a caller-supplied body claim. Returns
+ * `undefined` when the seat is unresolvable — the caller then delivers-and-labels
+ * with `SENDER_FALLBACK` (never a refusal, never a forged actor).
+ */
+export declare function resolveSenderSession(): string | undefined;
+/**
+ * The session-less fall-open marker for an unattributable CLI dispatch. P18 (deletion atom) REVERSES A1's
+ * seat-boundary refusal: an env-less `rig send`/`broadcast` now DELIVERS carrying this HONEST label rather
+ * than refusing, because the daemon half delivers-and-labels the header-absent write (no downstream 401) —
+ * unverified is labelled unknown, never laundered to verified.
+ *
+ * This is ONE of the TWO named twin definition sites of the literal; the other is the daemon's
+ * `pane-envelope.ts::SENDER_FALLBACK` (its byte-identical `wrapPaneEnvelope` twin). Both `send.ts`
+ * (`wrapSendBody`) and `broadcast.ts` (the enveloped-fan-out marker) IMPORT this single CLI origin rather
+ * than re-declaring it — so the CLI has NO scattered fallbacks. A THIRD literal definition anywhere in src
+ * is caught BY NAME by the `send.test.ts` canonicity guard.
+ */
+export declare const SENDER_FALLBACK = "<unknown sender>";
+//# sourceMappingURL=sender-identity.d.ts.map

package/dist/sender-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-identity.d.ts","sourceRoot":"","sources":["../src/sender-identity.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAEzD;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,qBAAqB,CAAC"}

package/dist/sender-identity.js

@@ -0,0 +1,26 @@
+import { readOpenRigEnv } from "./openrig-compat.js";
+/**
+ * The seat identity a CLI dispatch is attributed to — the SAME value the
+ * DaemonClient stamps as `X-OpenRig-Session` (the P18 chokepoint), from which
+ * the daemon DERIVES the actor / rendered `From:`. `--from` is deprecated and
+ * ignored: origin is the seat env, never a caller-supplied body claim. Returns
+ * `undefined` when the seat is unresolvable — the caller then delivers-and-labels
+ * with `SENDER_FALLBACK` (never a refusal, never a forged actor).
+ */
+export function resolveSenderSession() {
+    return readOpenRigEnv("OPENRIG_SESSION_NAME", "RIGGED_SESSION_NAME");
+}
+/**
+ * The session-less fall-open marker for an unattributable CLI dispatch. P18 (deletion atom) REVERSES A1's
+ * seat-boundary refusal: an env-less `rig send`/`broadcast` now DELIVERS carrying this HONEST label rather
+ * than refusing, because the daemon half delivers-and-labels the header-absent write (no downstream 401) —
+ * unverified is labelled unknown, never laundered to verified.
+ *
+ * This is ONE of the TWO named twin definition sites of the literal; the other is the daemon's
+ * `pane-envelope.ts::SENDER_FALLBACK` (its byte-identical `wrapPaneEnvelope` twin). Both `send.ts`
+ * (`wrapSendBody`) and `broadcast.ts` (the enveloped-fan-out marker) IMPORT this single CLI origin rather
+ * than re-declaring it — so the CLI has NO scattered fallbacks. A THIRD literal definition anywhere in src
+ * is caught BY NAME by the `send.test.ts` canonicity guard.
+ */
+export const SENDER_FALLBACK = "<unknown sender>";
+//# sourceMappingURL=sender-identity.js.map

package/dist/sender-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender-identity.js","sourceRoot":"","sources":["../src/sender-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,cAAc,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC"}

package/dist/session-name.d.ts

@@ -5,13 +5,21 @@ export type ParsedSessionName = {
 } | {
     kind: "legacy";
     name: string;
+} | {
+    kind: "external";
+    local: string;
+    domain: string;
 } | {
     kind: "malformed";
     error: "malformed_session_name";
     input: string;
 };
-/** Arch tooth 1: human-seat classification runs BEFORE any parse at sites
- *  where the human/agent distinction matters (the queue-destination gate). */
+export declare const VIRTUAL_DOMAIN_TOKENS: readonly ["external"];
+/** Arch tooth 1: human-CLASS classification runs BEFORE any parse at sites where
+ *  the human/agent distinction matters (the queue-destination gate + attention
+ *  union). A2 widened it: virtual-domain refs (<local>@external) are human-CLASS
+ *  too (they join human-route enforcement; NEVER a silent agent-class downgrade).
+ *  Admission stays at the A1/A4 gateway. */
 export declare function isHumanSeatSessionRef(sessionRef: string): boolean;
 export declare function parseSessionName(raw: string): ParsedSessionName;
 /** Display: the member/local leg — text before the first "@", or the whole

package/dist/session-name.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-name.d.ts","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAgCA,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAK1E;8EAC8E;AAC9E,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEjE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAS/D;AAED;;mCAEmC;AACnC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhE"}
+{"version":3,"file":"session-name.d.ts","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAgCA,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAIhC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAS1E,eAAO,MAAM,qBAAqB,uBAAwB,CAAC;AAK3D;;;;4CAI4C;AAC5C,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgB/D;AAED;;mCAEmC;AACnC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhE"}

package/dist/session-name.js

@@ -31,12 +31,30 @@
 // ============================================================================
 const HUMAN_SEAT_SESSION_REF_PATTERN = /^human(?:-[A-Za-z0-9._-]+)?@(kernel|host)$/;
 const LEGACY_FLAT_SESSION_PATTERN = /^r\d{2}-.+$/;
-/** Arch tooth 1: human-seat classification runs BEFORE any parse at sites
- *  where the human/agent distinction matters (the queue-destination gate). */
+// A2 4th leg — CLOSED virtual-domain token set as a NAMED CONSTANT beside the
+// pattern (arch: not inline alternation; lexical-only pure fn, no state/IO).
+// Future domain words extend this array (e.g. @a2a) as explicit alternation.
+// Admission (is this @external ref registered?) is NOT here — it is the A1/A4
+// gateway's job; the classifier only recognizes the lexical shape.
+export const VIRTUAL_DOMAIN_TOKENS = ["external"];
+const VIRTUAL_DOMAIN_SESSION_REF_PATTERN = new RegExp(`^[A-Za-z0-9._:-]+@(${VIRTUAL_DOMAIN_TOKENS.join("|")})$`);
+/** Arch tooth 1: human-CLASS classification runs BEFORE any parse at sites where
+ *  the human/agent distinction matters (the queue-destination gate + attention
+ *  union). A2 widened it: virtual-domain refs (<local>@external) are human-CLASS
+ *  too (they join human-route enforcement; NEVER a silent agent-class downgrade).
+ *  Admission stays at the A1/A4 gateway. */
 export function isHumanSeatSessionRef(sessionRef) {
-    return HUMAN_SEAT_SESSION_REF_PATTERN.test(sessionRef);
+    return HUMAN_SEAT_SESSION_REF_PATTERN.test(sessionRef) ||
+        VIRTUAL_DOMAIN_SESSION_REF_PATTERN.test(sessionRef);
 }
 export function parseSessionName(raw) {
+    // Precedence (arch): human -> EXTERNAL -> canonical -> legacy -> malformed. The
+    // virtual-domain leg MUST precede canonical, else "mike@external" parses as
+    // member=mike rig=external; A1's rig-name reservation keeps that unambiguous.
+    if (VIRTUAL_DOMAIN_SESSION_REF_PATTERN.test(raw)) {
+        const domainAt = raw.lastIndexOf("@");
+        return { kind: "external", local: raw.slice(0, domainAt), domain: raw.slice(domainAt + 1) };
+    }
     const at = raw.indexOf("@");
     if (at > 0 && at < raw.length - 1) {
         return { kind: "canonical", member: raw.slice(0, at), rig: raw.slice(at + 1) };

package/dist/session-name.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-name.js","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,iEAAiE;AACjE,8CAA8C;AAC9C,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,+BAA+B;AAC/B,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,sEAAsE;AACtE,wEAAwE;AACxE,2DAA2D;AAC3D,yEAAyE;AACzE,sDAAsD;AACtD,0EAA0E;AAC1E,2EAA2E;AAC3E,mCAAmC;AACnC,2EAA2E;AAC3E,+BAA+B;AAC/B,wEAAwE;AACxE,6BAA6B;AAC7B,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,qBAAqB;AACrB,+EAA+E;AAO/E,MAAM,8BAA8B,GAAG,4CAA4C,CAAC;AACpF,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAElD;8EAC8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED;;mCAEmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"session-name.js","sourceRoot":"","sources":["../src/session-name.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,iEAAiE;AACjE,8CAA8C;AAC9C,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,+BAA+B;AAC/B,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,sEAAsE;AACtE,wEAAwE;AACxE,2DAA2D;AAC3D,yEAAyE;AACzE,sDAAsD;AACtD,0EAA0E;AAC1E,2EAA2E;AAC3E,mCAAmC;AACnC,2EAA2E;AAC3E,+BAA+B;AAC/B,wEAAwE;AACxE,6BAA6B;AAC7B,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,qBAAqB;AACrB,+EAA+E;AAW/E,MAAM,8BAA8B,GAAG,4CAA4C,CAAC;AACpF,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAClD,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,UAAU,CAAU,CAAC;AAC3D,MAAM,kCAAkC,GAAG,IAAI,MAAM,CACnD,sBAAsB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;AAEF;;;;4CAI4C;AAC5C,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC;QACpD,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED;;mCAEmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC"}

package/dist/slack/connector-server.d.ts

@@ -0,0 +1,31 @@
+import { type Server } from "node:net";
+import type { SeenStore } from "./state-store.js";
+import type { OutboundDecision } from "@openrig/daemon/gateway-protocol";
+/** The platform delivery outcome for one decision. */
+export type DeliveryOutcome = {
+    ok: true;
+} | {
+    ok: false;
+    class: string;
+    detail?: string;
+};
+export type DeliverFn = (decision: OutboundDecision) => Promise<DeliveryOutcome>;
+export interface ConnectorServerDeps {
+    socketPath: string;
+    /** Advertised in the CapabilityDescriptor — the gateway refuses any op not listed here (proof-9). */
+    connectorId: string;
+    platform: string;
+    ops: string[];
+    deliver: DeliverFn;
+    /** decisionId dedup (SeenStore keyed by decisionId) — idempotent redelivery. */
+    delivered: SeenStore;
+    log?: (msg: string) => void;
+}
+export interface ConnectorServer {
+    server: Server;
+    close(): Promise<void>;
+}
+/** Start the connector socket server. Each dialing gateway is greeted with the CapabilityDescriptor,
+ *  then its OutboundDecision frames are delivered + acked (ack-after-delivery). Returns a handle. */
+export declare function startConnectorServer(deps: ConnectorServerDeps): Promise<ConnectorServer>;
+//# sourceMappingURL=connector-server.d.ts.map

package/dist/slack/connector-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-server.d.ts","sourceRoot":"","sources":["../../src/slack/connector-server.ts"],"names":[],"mappings":"AAcA,OAAO,EAAgB,KAAK,MAAM,EAAe,MAAM,UAAU,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAEV,gBAAgB,EAGjB,MAAM,kCAAkC,CAAC;AAE1C,sDAAsD;AACtD,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3F,MAAM,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAEjF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,OAAO,EAAE,SAAS,CAAC;IACnB,gFAAgF;IAChF,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAOD;qGACqG;AACrG,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsD9F"}

package/dist/slack/connector-server.js

@@ -0,0 +1,108 @@
+// M1 A5 — the Slack CONNECTOR as a unix-socket SERVER. The hardened slice-11 relay evolves:
+// the gateway (daemon-spawned) now OWNS the outbound decision (queue poll + entity-admission)
+// and DIALS this connector; the connector owns platform delivery (Slack) and acks AFTER it.
+//
+// Ack-after-delivery (proof-1): a decision is delivered on the SHIPPED postWebhook path, and an
+// ok:true ack is sent ONLY after a 2xx — the decisionId is recorded delivered BEFORE the ack, so
+// a gateway replay of an already-delivered decision is de-duplicated and RE-ACKED without a
+// double-post. A failed delivery sends ok:false{class} and is NOT recorded → the gateway retains
+// it in its dispatch buffer and replays (no loss). This is the connector-side mirror of the
+// gateway dispatch buffer — the two stores are DISTINCT and never merged.
+//
+// The wire codec is the ONE canonical daemon definition (lane rule: import via the narrow
+// @openrig/daemon/gateway-protocol subpath; runtime codec is lazy-imported per house precedent).
+import { createServer } from "node:net";
+/** Start the connector socket server. Each dialing gateway is greeted with the CapabilityDescriptor,
+ *  then its OutboundDecision frames are delivered + acked (ack-after-delivery). Returns a handle. */
+export async function startConnectorServer(deps) {
+    const log = deps.log ?? (() => { });
+    const { decodeGatewayMessage, encodeGatewayMessage } = (await import("@openrig/daemon/gateway-protocol"));
+    const descriptor = {
+        kind: "capability",
+        connectorId: deps.connectorId,
+        platform: deps.platform,
+        protocolVersion: 1,
+        ops: deps.ops,
+    };
+    const sockets = new Set();
+    const server = createServer((sock) => {
+        sockets.add(sock);
+        sock.setEncoding("utf8");
+        sock.on("error", () => { });
+        sock.on("close", () => sockets.delete(sock));
+        sock.write(encodeGatewayMessage(descriptor)); // greet: advertise capabilities
+        let acc = "";
+        sock.on("data", (chunk) => {
+            acc += chunk;
+            let nl;
+            while ((nl = acc.indexOf("\n")) >= 0) {
+                const frame = acc.slice(0, nl);
+                acc = acc.slice(nl + 1);
+                if (frame.length === 0)
+                    continue;
+                const decoded = decodeGatewayMessage(frame);
+                if (!decoded.ok) {
+                    log(`connector: refused frame: ${decoded.error}`);
+                    continue;
+                } // LOUD, no partials
+                const msg = decoded.message;
+                if (msg.kind === "outbound_decision") {
+                    void handleDecision(msg, sock, deps, encodeGatewayMessage, log);
+                }
+                // capability/ack are gateway-inbound only; the connector ignores them.
+            }
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.on("error", reject);
+        server.listen(deps.socketPath, () => resolve());
+    });
+    log(`connector ${deps.connectorId} listening on ${deps.socketPath}`);
+    return {
+        server,
+        close: () => new Promise((resolve) => {
+            for (const s of sockets) {
+                try {
+                    s.destroy();
+                }
+                catch { /* best-effort */ }
+            }
+            server.close(() => resolve());
+        }),
+    };
+}
+async function handleDecision(decision, sock, deps, encode, log) {
+    const ackOk = { kind: "ack", decisionId: decision.decisionId, ok: true };
+    // Idempotent redelivery: an already-delivered decisionId is RE-ACKED without re-posting.
+    if (deps.delivered.load().has(decision.decisionId)) {
+        log(`connector: decision ${decision.decisionId} already delivered — re-ack, no re-post`);
+        safeWrite(sock, encode(ackOk));
+        return;
+    }
+    let outcome;
+    try {
+        outcome = await deps.deliver(decision);
+    }
+    catch (e) {
+        outcome = { ok: false, class: "delivery-threw", detail: e.message };
+    }
+    if (outcome.ok) {
+        // Record delivered BEFORE the ack: a crash after this point re-acks via dedup (no double-post);
+        // a crash before it replays + re-delivers (at-least-once, byte-identical dup) — never a drop.
+        deps.delivered.mark(decision.decisionId, "delivered");
+        safeWrite(sock, encode(ackOk));
+        log(`connector: delivered + acked ${decision.decisionId}`);
+    }
+    else {
+        const ackFail = { kind: "ack", decisionId: decision.decisionId, ok: false, failed: { class: outcome.class, detail: outcome.detail } };
+        safeWrite(sock, encode(ackFail)); // NOT recorded → gateway retains + replays
+        log(`connector: delivery FAILED ${decision.decisionId} (${outcome.class}) — ack ok:false, gateway will replay`);
+    }
+}
+function safeWrite(sock, data) {
+    try {
+        sock.write(data);
+    }
+    catch { /* the gateway re-dials + replays on a dropped socket */ }
+}
+//# sourceMappingURL=connector-server.js.map

package/dist/slack/connector-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-server.js","sourceRoot":"","sources":["../../src/slack/connector-server.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,8FAA8F;AAC9F,4FAA4F;AAC5F,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,4FAA4F;AAC5F,iGAAiG;AACjG,4FAA4F;AAC5F,0EAA0E;AAC1E,EAAE;AACF,0FAA0F;AAC1F,iGAAiG;AAEjG,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAmClE;qGACqG;AACrG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAyB;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,CAAC,MAAM,MAAM,CAClE,kCAAkC,CACnC,CAAU,CAAC;IAEZ,MAAM,UAAU,GAAyB;QACvC,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,CAAC;QAClB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAsD,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,gCAAgC;QAE9E,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,GAAG,IAAI,KAAK,CAAC;YACb,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBAAC,SAAS;gBAAC,CAAC,CAAC,oBAAoB;gBACtG,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBACrC,KAAK,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;gBAClE,CAAC;gBACD,uEAAuE;YACzE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,aAAa,IAAI,CAAC,WAAW,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAErE,OAAO;QACL,MAAM;QACN,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,QAA0B,EAC1B,IAAY,EACZ,IAAyB,EACzB,MAAqC,EACrC,GAAwB;IAExB,MAAM,KAAK,GAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAE9E,yFAAyF;IACzF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,uBAAuB,QAAQ,CAAC,UAAU,yCAAyC,CAAC,CAAC;QACzF,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,gGAAgG;QAChG,8FAA8F;QAC9F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,GAAG,CAAC,gCAAgC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3I,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,2CAA2C;QAC7E,GAAG,CAAC,8BAA8B,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,uCAAuC,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;AAC9F,CAAC"}

package/dist/slack/inbound-admission.d.ts

@@ -0,0 +1,8 @@
+import type { InboundSenderResolution } from "./inbound.js";
+import type { loadHumanRegistry as LoadFn, resolveSlackHandle as ResolveFn } from "@openrig/daemon/gateway-human-registry";
+export interface RegistrySurface {
+    loadHumanRegistry: typeof LoadFn;
+    resolveSlackHandle: typeof ResolveFn;
+}
+export declare function makeInboundSenderResolver(reg: RegistrySurface, home?: string): (slackUserId: string) => InboundSenderResolution;
+//# sourceMappingURL=inbound-admission.d.ts.map

package/dist/slack/inbound-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-admission.d.ts","sourceRoot":"","sources":["../../src/slack/inbound-admission.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,IAAI,MAAM,EAAE,kBAAkB,IAAI,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAE3H,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,OAAO,MAAM,CAAC;IACjC,kBAAkB,EAAE,OAAO,SAAS,CAAC;CACtC;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,uBAAuB,CAS/H"}

package/dist/slack/inbound-admission.js

@@ -0,0 +1,20 @@
+// M1 A6 v3 — wire the inbound registration gate to the daemon human-registry. Kept as a pure
+// factory (the registry surface is injected) so it is unit-testable without the daemon and the
+// actual daemon import stays LAZY at the call site (dep rail). Maps a registry lookup to the
+// InboundRouter's InboundSenderResolution:
+//   - registry load FAILS   -> REFUSE, fail-CLOSED, surfacing reg.error (r1 A4b follow-on: a
+//                              broken registry is distinct from an absent entity; never fabricate
+//                              a human seat because we could not check).
+//   - sender REGISTERED     -> admit; source = the registered human's @external address.
+//   - sender UNREGISTERED   -> REFUSE with the resolver's LOUD teaching.
+export function makeInboundSenderResolver(reg, home) {
+    return (slackUserId) => {
+        const loaded = reg.loadHumanRegistry(home);
+        if (!loaded.ok) {
+            return { admitted: false, teaching: `human registry unavailable — inbound refused (fail-closed): ${loaded.error}` };
+        }
+        const r = reg.resolveSlackHandle(slackUserId, loaded.entities);
+        return r.kind === "registered" ? { admitted: true, source: r.address } : { admitted: false, teaching: r.error };
+    };
+}
+//# sourceMappingURL=inbound-admission.js.map

package/dist/slack/inbound-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-admission.js","sourceRoot":"","sources":["../../src/slack/inbound-admission.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,+FAA+F;AAC/F,6FAA6F;AAC7F,2CAA2C;AAC3C,6FAA6F;AAC7F,kGAAkG;AAClG,yEAAyE;AACzE,yFAAyF;AACzF,yEAAyE;AAUzE,MAAM,UAAU,yBAAyB,CAAC,GAAoB,EAAE,IAAa;IAC3E,OAAO,CAAC,WAAW,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,+DAA+D,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtH,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/D,OAAO,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClH,CAAC,CAAC;AACJ,CAAC"}

package/dist/slack/inbound.d.ts

@@ -16,12 +16,39 @@ export interface SlackEvent {
  * and — T1076 — anything carrying files/images. v1 ignores non-text CLEANLY:
  * a false return is a clean skip, never a crash or partial ingestion.
  */
+/** P28 — the rejection BRANCH, as data. The ignore path used to log type/subtype/files, which
+ *  are precisely the fields that have all PASSED when a message dies on bot_id or on
+ *  missing-user/empty-text — so a silent discard could not be explained, and with `channels:read`
+ *  ungranted there was no read that could even name the source conversation. This is the SINGLE
+ *  definition of the ingest decision; `shouldIngest` is a thin wrapper over it so the branch logic
+ *  has one origin and the log can never drift from the behaviour it describes. */
+export type IngestReason = "type" | "bot_id" | "subtype" | "files" | "no-user" | "empty-text";
+export declare function ingestDecision(ev: SlackEvent): {
+    ingest: true;
+} | {
+    ingest: false;
+    reason: IngestReason;
+};
 export declare function shouldIngest(ev: SlackEvent): boolean;
+/** A6 v3: the sender-admission verdict. An inbound Slack message may become a human-provenance
+ *  qitem ONLY if its sender resolves to a REGISTERED human (admit-iff-registered); the stamped
+ *  `source` is that human's canonical ref (never a raw platform id). An unregistered sender — or a
+ *  registry that itself failed to load — is REFUSED with LOUD teaching, never a fabricated seat. */
+export type InboundSenderResolution = {
+    admitted: true;
+    source: string;
+} | {
+    admitted: false;
+    teaching: string;
+};
 export interface InboundDeps {
     runner: QueueRunner;
     seen: SeenStore;
     deadLetter: DeadLetterStore<SlackEvent>;
     destination: string;
+    /** A6 v3 registration gate. Resolves ev.user -> a registered human (or refuses). Injected so
+     *  this core stays pure/testable; the runner wires it via the daemon human-registry resolver. */
+    resolveSender: (slackUserId: string) => InboundSenderResolution;
     sourceLabel?: string;
     log?: (msg: string) => void;
 }

package/dist/slack/inbound.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../src/slack/inbound.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAOpD;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,aAAa;IAEZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBACjB,IAAI,EAAE,WAAW;IAE9C,OAAO,CAAC,SAAS;IASjB;;;;;OAKG;YACW,WAAW;IA4BzB;;;OAGG;IACG,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IASzF;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAiBvE;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAU1I"}
+{"version":3,"file":"inbound.d.ts","sourceRoot":"","sources":["../../src/slack/inbound.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAmB,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB;AAED;;;;;GAKG;AACH;;;;;kFAKkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAE9F,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAQzG;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAEpD;AAED;;;oGAGoG;AACpG,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB;qGACiG;IACjG,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,uBAAuB,CAAC;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,qBAAa,aAAa;IAEZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;gBACjB,IAAI,EAAE,WAAW;IAE9C,OAAO,CAAC,SAAS;IASjB;;;;;OAKG;YACW,WAAW;IAoCzB;;;OAGG;IACG,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IASzF;;;;;;OAMG;IACG,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAiBvE;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC;CAClC;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1I"}

package/dist/slack/inbound.js

@@ -1,22 +1,21 @@
 import { createQitem } from "./queue-bridge.js";
-/**
- * Loop-safety + non-text ignore. Ingest ONLY genuine human text messages:
- * reject bot posts (our own loop), message subtypes (edits/joins/file_share),
- * and — T1076 — anything carrying files/images. v1 ignores non-text CLEANLY:
- * a false return is a clean skip, never a crash or partial ingestion.
- */
-export function shouldIngest(ev) {
+export function ingestDecision(ev) {
     if (ev.type !== "message" && ev.type !== "app_mention")
-        return false;
+        return { ingest: false, reason: "type" };
     if (ev.bot_id)
-        return false; // never ingest our own / any bot post
+        return { ingest: false, reason: "bot_id" }; // never ingest our own / any bot post
     if (ev.subtype)
-        return false; // edits, joins, file_share, etc.
+        return { ingest: false, reason: "subtype" }; // edits, joins, file_share, etc.
     if (ev.files && ev.files.length > 0)
-        return false; // T1076: image/file events ignored cleanly (Slice-12)
-    if (!ev.user || !ev.text || !ev.text.trim())
-        return false;
-    return true;
+        return { ingest: false, reason: "files" }; // T1076 (Slice-12)
+    if (!ev.user)
+        return { ingest: false, reason: "no-user" };
+    if (!ev.text || !ev.text.trim())
+        return { ingest: false, reason: "empty-text" };
+    return { ingest: true };
+}
+export function shouldIngest(ev) {
+    return ingestDecision(ev).ingest;
 }
 export class InboundRouter {
     deps;
@@ -42,13 +41,21 @@ export class InboundRouter {
         const ts = ev.ts ?? "";
         if (!ts || this.inflight.has(ts) || this.deps.seen.load().has(ts))
             return { landed: false, reason: "dup" };
+        // A6 v3 registration gate: admit-iff-registered. An unregistered sender is REFUSED here —
+        // never landed as a fabricated human-<slackid>@kernel seat. This is a POLICY refusal, not a
+        // transient failure, so it is NOT dead-lettered (retrying can't help until the human registers).
+        const who = this.deps.resolveSender(ev.user ?? "");
+        if (!who.admitted) {
+            this.deps.log?.(`inbound REFUSED — unregistered sender ${ev.user} (ts=${ts}): ${who.teaching}`);
+            return { landed: false, reason: "unregistered" };
+        }
         this.inflight.add(ts);
         try {
             const { summary, body } = this.summaryOf(ev);
             let qitemId;
             try {
                 qitemId = await createQitem(this.deps.runner, {
-                    source: `human-${ev.user}@kernel`, // provenance classifies as human (name convention)
+                    source: who.source, // the REGISTERED human's canonical ref (human-class), never a raw platform id
                     destination: this.deps.destination,
                     priority: "routine",
                     tags: ["founder-slack", "inbound"],
@@ -123,9 +130,14 @@ export async function handleEnvelope(env, ack, router, log) {
     if (env.type !== "events_api")
         return;
     const ev = env.payload?.event ?? {};
-    if (!shouldIngest(ev)) {
-        if (ev.type)
-            log?.(`ignored non-ingestible event type=${ev.type} subtype=${ev.subtype ?? "-"} files=${ev.files?.length ?? 0}`);
+    const decision = ingestDecision(ev);
+    if (!decision.ingest) {
+        // P28: name the branch that FIRED and the conversation it came from. Privacy rail — a channel
+        // id and a branch LABEL only: never bodies, tokens, user ids, or text content/length.
+        if (ev.type) {
+            log?.(`ignored non-ingestible event type=${ev.type} subtype=${ev.subtype ?? "-"} files=${ev.files?.length ?? 0}` +
+                ` channel=${ev.channel ?? "-"} reason=${decision.reason}`);
+        }
         return;
     }
     await router.route(ev);

package/dist/slack/inbound.js.map

@@ -1 +1 @@
-{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../src/slack/inbound.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAahD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,EAAc;IACzC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,sCAAsC;IACnE,IAAI,EAAE,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IAC/D,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,sDAAsD;IACzG,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,OAAO,aAAa;IAEK;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yCAAyC;IACxF,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAE1C,SAAS,CAAC,EAAc;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAClD,IAAI,EAAE,GAAG,IAAI,oBAAoB,IAAI,kGAAkG;SACxI,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,EAAc;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,SAAS,EAAE,mDAAmD;oBACtF,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;oBAClC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;oBAClC,OAAO;oBACP,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,sCAAsC;YACzE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,EAAc,EAAE,QAAQ,GAAG,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAE,aAAa,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAkC,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,4CAA4C;YACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC;iBAClB,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,iEAAiE;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,qCAAqC;QACpF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;CACF;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,GAAe,EAAE,MAAqB,EAAE,GAAyB;IACzH,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;IAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,IAAI,EAAE,CAAC,IAAI;YAAE,GAAG,EAAE,CAAC,qCAAqC,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../src/slack/inbound.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA2BhD,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,EAAE,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,sCAAsC;IACjG,IAAI,EAAE,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,iCAAiC;IAC9F,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,mBAAmB;IACnG,IAAI,CAAC,EAAE,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAc;IACzC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACnC,CAAC;AAsBD,MAAM,OAAO,aAAa;IAEK;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yCAAyC;IACxF,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAE1C,SAAS,CAAC,EAAc;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,sBAAsB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YAClD,IAAI,EAAE,GAAG,IAAI,oBAAoB,IAAI,kGAAkG;SACxI,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,EAAc;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3G,0FAA0F;QAC1F,4FAA4F;QAC5F,iGAAiG;QACjG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yCAAyC,EAAE,CAAC,IAAI,QAAQ,EAAE,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAC5C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,8EAA8E;oBAClG,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;oBAClC,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,CAAC,eAAe,EAAE,SAAS,CAAC;oBAClC,OAAO;oBACP,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,sCAAsC;YACzE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,OAAO,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,EAAc,EAAE,QAAQ,GAAG,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAE,aAAa,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAkC,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,4CAA4C;YACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC;iBAClB,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,iEAAiE;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,qCAAqC;QACpF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;CACF;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,GAAe,EAAE,MAAqB,EAAE,GAAyB;IACzH,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;IAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,8FAA8F;QAC9F,sFAAsF;QACtF,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACZ,GAAG,EAAE,CACH,qCAAqC,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE;gBACxG,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,WAAW,QAAQ,CAAC,MAAM,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/dist/slack/message.d.ts

@@ -6,12 +6,25 @@ export interface QitemLike {
     body?: string | null;
     destinationSession?: string | null;
 }
+/** M1 A5b — an outbound image attachment. A media-bearing OutboundDecision carries these;
+ *  the connector renders each as a Slack Block Kit `image` block on the SHIPPED outbound path.
+ *  This is the T1076 seam finally wired (Slice-12's image relay), not a redesign. */
+export interface SlackMediaRef {
+    imageUrl: string;
+    altText: string;
+}
 export interface OutboundMessageOpts {
     sourceLabel: string;
     bodyExcerpt?: number;
     /** T1076 extension point: extra Block Kit blocks (e.g. future media). v1 unused. */
     extraBlocks?: unknown[];
+    /** M1 A5b: outbound image attachments, rendered as Block Kit `image` blocks (the wired seam). */
+    mediaRefs?: SlackMediaRef[];
 }
+/** M1 A5b — turn media refs into Block Kit `image` blocks. Item-7 hygiene: a secret-bearing
+ *  image_url (e.g. a webhook URL smuggled as an image) is REFUSED, never forwarded. Alt text is
+ *  redacted + clamped. Returns only the well-formed, secret-free image blocks. */
+export declare function buildImageBlocks(mediaRefs: readonly SlackMediaRef[] | undefined): unknown[];
 export declare function containsSecret(text: string): boolean;
 export declare function redactSecrets(text: string): string;
 export interface SlackMessagePayload {

package/dist/slack/message.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/slack/message.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;CACzB;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,CAiBjG"}
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/slack/message.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;qFAEqF;AACrF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,iGAAiG;IACjG,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;CAC7B;AAID;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAc3F;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,CAwBjG"}

package/dist/slack/message.js

@@ -12,6 +12,27 @@
 // WITHOUT redefining the shape here. v1 ships text only.
 export const SLACK_TEXT_CAP = 3900; // Slack hard-limits ~4000; stay under.
 export const DEFAULT_BODY_EXCERPT = 800;
+const SLACK_ALT_TEXT_CAP = 2000; // Slack image alt_text hard limit.
+/** M1 A5b — turn media refs into Block Kit `image` blocks. Item-7 hygiene: a secret-bearing
+ *  image_url (e.g. a webhook URL smuggled as an image) is REFUSED, never forwarded. Alt text is
+ *  redacted + clamped. Returns only the well-formed, secret-free image blocks. */
+export function buildImageBlocks(mediaRefs) {
+    if (!mediaRefs?.length)
+        return [];
+    const blocks = [];
+    for (const m of mediaRefs) {
+        const url = String(m.imageUrl || "");
+        // Only forward a clean https URL that carries no secret (defense-in-depth, item 7).
+        if (!/^https:\/\/\S+$/.test(url) || containsSecret(url))
+            continue;
+        blocks.push({
+            type: "image",
+            image_url: url,
+            alt_text: clamp(redactSecrets(String(m.altText || "attachment")), SLACK_ALT_TEXT_CAP),
+        });
+    }
+    return blocks;
+}
 // Secret-looking patterns we refuse to forward (item 7 defense-in-depth).
 const SECRET_PATTERNS = [
     /xox[baprs]-[A-Za-z0-9-]+/g, // Slack bot/user/app/refresh tokens
@@ -52,9 +73,16 @@ export function buildOutboundMessage(q, opts) {
     ];
     if (body.trim())
         blocks.push({ type: "section", text: { type: "mrkdwn", text: clamp(body, 3000) } });
+    // M1 A5b — outbound image attachments (the wired T1076 seam). Secret-bearing URLs are dropped.
+    const imageBlocks = buildImageBlocks(opts.mediaRefs);
+    blocks.push(...imageBlocks);
     blocks.push({ type: "context", elements: [{ type: "mrkdwn", text: footer }] });
     if (opts.extraBlocks?.length)
         blocks.push(...opts.extraBlocks);
-    return { text, blocks };
+    // Note the attachment count in the notification fallback so a text-only client still signals it.
+    const textWithMedia = imageBlocks.length > 0
+        ? clamp(`${text}\n_(${imageBlocks.length} image attachment${imageBlocks.length === 1 ? "" : "s"})_`, SLACK_TEXT_CAP)
+        : text;
+    return { text: textWithMedia, blocks };
 }
 //# sourceMappingURL=message.js.map