@openrig/cli 0.5.15 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-process.js

@@ -1,60 +0,0 @@
-// ── RETIRED IN PLACE (S10, OPR.0.5.5.10) ────────────────────────────────────────────────
-// The process-split gateway shape retired under the amended M1 §3 (desk head-amendment,
-// founder R2): the gateway runs as an IN-DAEMON SUBSYSTEM (gateway-subsystem.ts) — no spawned
-// gateway process, no gateway↔connector socket wire. This module keeps compiling and its
-// tests keep passing as a historical component, but it MUST NOT gain a production caller:
-// the second-deployable ABSENCE proof pins that (any spawned gateway process or open
-// connector wire is the red). Kept in place rather than deleted per the spec-level ruling
-// (delete-or-mark is builder discretion).
-// ─────────────────────────────────────────────────────────────────────────────────────────
-// M1 A4a — the gateway OS PROCESS runner: the long-lived brain the daemon spawns. It out-dials
-// the connector socket (transport.ts), and — critically — STAYS ALIVE across a connector outage.
-//
-// Liveness (lesson idle-process-needs-refd-handle): a connected socket is a ref'd libuv handle,
-// but during an outage there is NO open socket, so the event loop would empty and the process
-// would SILENTLY EXIT. A ref'd heartbeat interval is the keepalive AND the re-dial driver: while
-// disconnected it re-dials every reconnectMs; while connected it is a cheap no-op. We never park
-// on `new Promise(() => {})` (no ref'd handle -> silent exit) — the interval is the anchor.
-import { DispatchBuffer } from "./dispatch-buffer.js";
-import { connectGateway } from "./transport.js";
-/** Start the gateway process brain. Returns a handle for lifecycle/tests. Idempotent re-dials are
- *  safe: the durable buffer replays un-Acked decisions on every (re)connect (no-loss). */
-export function runGatewayProcess(opts) {
-    const reconnectMs = opts.reconnectMs ?? 1000;
-    const buffer = new DispatchBuffer(opts.home);
-    let conn;
-    let connected = false;
-    let stopped = false;
-    const dial = () => {
-        if (stopped || connected)
-            return;
-        connected = true; // optimistic: onClose flips it back if the dial fails/drops
-        conn = connectGateway({
-            socketPath: opts.socketPath,
-            buffer,
-            onError: opts.onError,
-            onProtocolError: opts.onProtocolError,
-            onClose: () => { connected = false; conn = undefined; }, // heartbeat re-dials next tick
-        });
-    };
-    dial();
-    // Ref'd heartbeat: keeps the event loop alive during an outage AND drives re-dial. NOT unref'd —
-    // the whole point is that the process does not exit while it owes the connector delivery.
-    const heartbeat = setInterval(() => { if (!connected)
-        dial(); }, reconnectMs);
-    return {
-        connection: () => conn,
-        connected: () => connected,
-        stop: () => {
-            stopped = true;
-            clearInterval(heartbeat);
-            try {
-                conn?.close();
-            }
-            catch { /* best-effort */ }
-            conn = undefined;
-            connected = false;
-        },
-    };
-}
-//# sourceMappingURL=gateway-process.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-process.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-process.js","sourceRoot":"","sources":["../../../src/domain/gateway/gateway-process.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,wFAAwF;AACxF,8FAA8F;AAC9F,yFAAyF;AACzF,0FAA0F;AAC1F,qFAAqF;AACrF,0FAA0F;AAC1F,0CAA0C;AAC1C,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AACjG,iGAAiG;AACjG,4FAA4F;AAE5F,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,cAAc,EAA0B,MAAM,gBAAgB,CAAC;AAmBxE;0FAC0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,IAAmC,CAAC;IACxC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,OAAO,IAAI,SAAS;YAAE,OAAO;QACjC,SAAS,GAAG,IAAI,CAAC,CAAC,4DAA4D;QAC9E,IAAI,GAAG,cAAc,CAAC;YACpB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,GAAG,EAAE,GAAG,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,+BAA+B;SACzF,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,EAAE,CAAC;IACP,iGAAiG;IACjG,0FAA0F;IAC1F,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;QAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAE9E,OAAO;QACL,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;QACtB,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;QAC1B,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC;gBAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAClD,IAAI,GAAG,SAAS,CAAC;YACjB,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-subsystem.d.ts

@@ -1,87 +0,0 @@
-import { GatewayDispatcher, type DispatchResult } from "./dispatcher.js";
-import type { OutboundDecision } from "./protocol.js";
-/** The in-process delivery outcome (mirrors the retired connector's DeliveryOutcome shape so
- *  the slice-11 delivery semantics carry over verbatim at cutover). */
-export type SubsystemDeliveryOutcome = {
-    ok: true;
-} | {
-    ok: false;
-    class: string;
-    detail?: string;
-};
-export type SubsystemDeliverFn = (decision: OutboundDecision) => Promise<SubsystemDeliveryOutcome>;
-/** What a wiring step yields: the live dispatcher, its teardown, and (optionally) the
- *  NETWORK-TOUCHING services (replay, outbound poll, socket inbound). Services start only via
- *  startServices() — invoked POST-BIND from index.ts (the contextMonitor pattern), so a
- *  test-built daemon (createDaemon without serve) composes the wire but never dials out. */
-export interface GatewayWire {
-    dispatcher: GatewayDispatcher;
-    stop(): void;
-    startServices?(): void;
-    status?(): Record<string, unknown>;
-}
-export interface InProcessWireOpts {
-    home: string;
-    /** The platform delivery seam. Until the relay cutover wires Slack, startup passes an
-     *  honest unwired refusal — dispatches are retained durably, never silently dropped. */
-    deliver: SubsystemDeliverFn;
-    /** Ops the delivery layer advertises. The shipped proof-9 rail holds in-process: an
-     *  unadvertised op is refused, never attempted. Empty = nothing dispatchable yet. */
-    ops?: string[];
-    connectorId?: string;
-    platform?: string;
-    log?: (msg: string) => void;
-}
-/** Compose the SHIPPED dispatcher + durable buffer in-process. The capability handshake
- *  becomes a local declaration by the delivery layer (same closed contract, no socket);
- *  ack-after-delivery becomes deliver() resolving ok. replayPending() at build time is the
- *  restart no-loss leg: un-Acked decisions from a prior run re-enter delivery. */
-export declare function buildInProcessWire(opts: InProcessWireOpts): GatewayWire;
-export type GatewaySubsystemState = "inactive" | "active" | "failed" | "stopped";
-export interface GatewaySubsystemStatus {
-    state: GatewaySubsystemState;
-    /** Present iff state=failed: the named cause (honest failure, never a silent dead gateway). */
-    reason?: string;
-    activatedAt?: string;
-    /** Durable un-delivered decisions awaiting delivery/replay (undefined until first start). */
-    pendingDispatches?: number;
-    /** Connector-owned live observations; never inferred when the wire has none. */
-    connector?: Record<string, unknown>;
-}
-export interface GatewaySubsystemDeps {
-    home: string;
-    /** The wiring step. Production: () => buildInProcessWire({...}). Injectable so tests can
-     *  induce a wiring failure and pin the honest-failure contract. */
-    wire: () => GatewayWire;
-    log?: (msg: string) => void;
-    now?: () => Date;
-}
-export declare class GatewaySubsystem {
-    private readonly deps;
-    private state;
-    private reason;
-    private activatedAt;
-    private wireHandle;
-    private servicesStarted;
-    constructor(deps: GatewaySubsystemDeps);
-    /** Activate in-process. NEVER throws: a wiring failure records state=failed with the cause
-     *  and returns — daemon boot proceeds and the health surface tells the truth. */
-    start(): void;
-    /** Start the wire's network services (replay, pollers, sockets). Post-bind only — the
-     *  index.ts supervision tree calls this beside contextMonitor.start(); test-built daemons
-     *  never do, so composing a daemon never dials out. Idempotence is the wire's concern. */
-    startServices(): void;
-    /** Dispatch through the live wire (refused honestly when not active).
-     *  opts.decisionId: a caller-supplied durable episode-stable identity
-     *  (OPR.0.5.6.1 — redrive idempotence for deferral fires and digest posts). */
-    dispatch(op: string, entityBindingRef: string, payload: unknown, opts?: {
-        decisionId?: string;
-    }): DispatchResult;
-    status(): GatewaySubsystemStatus;
-    /** Recovery half of recovers-or-reports: tear down and re-run the wiring. If services were
-     *  live (post-bind), the rebuilt wire's services start too — a config flip (enable/disable)
-     *  lands without a daemon restart. */
-    restart(): void;
-    stop(): void;
-}
-//# sourceMappingURL=gateway-subsystem.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-subsystem.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-subsystem.d.ts","sourceRoot":"","sources":["../../../src/domain/gateway/gateway-subsystem.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD;uEACuE;AACvE,MAAM,MAAM,wBAAwB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AACpG,MAAM,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEnG;;;4FAG4F;AAC5F,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,IAAI,IAAI,IAAI,CAAC;IACb,aAAa,CAAC,IAAI,IAAI,CAAC;IACvB,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb;4FACwF;IACxF,OAAO,EAAE,kBAAkB,CAAC;IAC5B;yFACqF;IACrF,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED;;;kFAGkF;AAClF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,WAAW,CAkCvE;AAED,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6FAA6F;IAC7F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb;uEACmE;IACnE,IAAI,EAAE,MAAM,WAAW,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,gBAAgB;IAOf,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,eAAe,CAAS;gBAEH,IAAI,EAAE,oBAAoB;IAEvD;qFACiF;IACjF,KAAK,IAAI,IAAI;IAgBb;;8FAE0F;IAC1F,aAAa,IAAI,IAAI;IAarB;;mFAE+E;IAC/E,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc;IAOhH,MAAM,IAAI,sBAAsB;IAchC;;0CAEsC;IACtC,OAAO,IAAI,IAAI;IAQf,IAAI,IAAI,IAAI;CAOb"}

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-subsystem.js

@@ -1,154 +0,0 @@
-// S10 (OPR.0.5.5.10) — the gateway as an IN-DAEMON SUBSYSTEM. M1 §3 as amended 2026-08-26
-// (desk head-amendment under founder R2): the gateway runs in-process at daemon boot — the
-// shipped components (GatewayDispatcher + DispatchBuffer) reused verbatim, NO child process,
-// NO gateway↔connector socket wire. spawn-gateway.ts / gateway-process*.ts / transport.ts are
-// the retired process-split shape and must not gain callers (second-deployable ABSENCE is a
-// proof-contract red).
-//
-// Durability is the shipped contract, unchanged by the re-homing: a decision is persisted to
-// the durable buffer BEFORE delivery is attempted (dispatcher enqueues first), drained ONLY
-// after the delivery layer reports success (the in-process ack), and un-Acked decisions replay
-// on every subsystem (re)start — a delivery failure is retained, never dropped.
-//
-// Failure honesty (mini-req 1): a wiring failure at start() surfaces as state=failed with the
-// cause named, visible on the health surface — it never throws into daemon boot (a broken
-// gateway must not take the daemon down) and never reads as silently active.
-import { DispatchBuffer } from "./dispatch-buffer.js";
-import { GatewayDispatcher } from "./dispatcher.js";
-/** Compose the SHIPPED dispatcher + durable buffer in-process. The capability handshake
- *  becomes a local declaration by the delivery layer (same closed contract, no socket);
- *  ack-after-delivery becomes deliver() resolving ok. replayPending() at build time is the
- *  restart no-loss leg: un-Acked decisions from a prior run re-enter delivery. */
-export function buildInProcessWire(opts) {
-    const log = opts.log ?? (() => { });
-    const buffer = new DispatchBuffer(opts.home);
-    const deliverAndAck = async (decision) => {
-        let outcome;
-        try {
-            outcome = await opts.deliver(decision);
-        }
-        catch (e) {
-            outcome = { ok: false, class: "delivery-threw", detail: e.message };
-        }
-        if (outcome.ok) {
-            dispatcher.onAck(decision.decisionId); // drain only after delivered
-        }
-        else {
-            log(`delivery failed ${decision.decisionId} (${outcome.class}${outcome.detail ? ": " + outcome.detail : ""}) — retained for replay`);
-        }
-    };
-    const dispatcher = new GatewayDispatcher({
-        buffer,
-        send: (decision) => { void deliverAndAck(decision); },
-    });
-    dispatcher.onCapability({
-        kind: "capability",
-        connectorId: opts.connectorId ?? "slack-subsystem",
-        platform: opts.platform ?? "slack",
-        protocolVersion: 1,
-        ops: opts.ops ?? [],
-    });
-    return {
-        dispatcher,
-        stop: () => { },
-        // Restart no-loss: un-Acked decisions re-enter delivery — a NETWORK action, so it rides
-        // startServices() (post-bind), never wire composition.
-        startServices: () => dispatcher.replayPending(),
-    };
-}
-export class GatewaySubsystem {
-    deps;
-    state = "inactive";
-    reason;
-    activatedAt;
-    wireHandle;
-    servicesStarted = false;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    /** Activate in-process. NEVER throws: a wiring failure records state=failed with the cause
-     *  and returns — daemon boot proceeds and the health surface tells the truth. */
-    start() {
-        if (this.state === "active")
-            return;
-        try {
-            this.wireHandle = this.deps.wire();
-            this.state = "active";
-            this.reason = undefined;
-            this.activatedAt = (this.deps.now?.() ?? new Date()).toISOString();
-            this.deps.log?.("gateway subsystem active (in-process)");
-        }
-        catch (e) {
-            this.state = "failed";
-            this.reason = e.message;
-            this.wireHandle = undefined;
-            this.deps.log?.(`gateway subsystem FAILED to activate: ${this.reason}`);
-        }
-    }
-    /** Start the wire's network services (replay, pollers, sockets). Post-bind only — the
-     *  index.ts supervision tree calls this beside contextMonitor.start(); test-built daemons
-     *  never do, so composing a daemon never dials out. Idempotence is the wire's concern. */
-    startServices() {
-        if (this.state !== "active")
-            return;
-        try {
-            this.wireHandle?.startServices?.();
-            this.servicesStarted = true;
-        }
-        catch (e) {
-            // Service startup failure is honest but NOT fatal to the composed wire: dispatches
-            // still persist durably; the health surface names the degradation.
-            this.reason = `services failed to start: ${e.message}`;
-            this.deps.log?.(`gateway subsystem services FAILED to start: ${e.message}`);
-        }
-    }
-    /** Dispatch through the live wire (refused honestly when not active).
-     *  opts.decisionId: a caller-supplied durable episode-stable identity
-     *  (OPR.0.5.6.1 — redrive idempotence for deferral fires and digest posts). */
-    dispatch(op, entityBindingRef, payload, opts) {
-        if (this.state !== "active" || !this.wireHandle) {
-            return { ok: false, error: `dispatch refused: gateway subsystem is ${this.state}${this.reason ? ` (${this.reason})` : ""}` };
-        }
-        return this.wireHandle.dispatcher.dispatch(op, entityBindingRef, payload, opts);
-    }
-    status() {
-        const s = { state: this.state };
-        if (this.reason !== undefined)
-            s.reason = this.reason;
-        if (this.activatedAt !== undefined)
-            s.activatedAt = this.activatedAt;
-        if (this.state === "active" || this.state === "failed") {
-            try {
-                s.pendingDispatches = new DispatchBuffer(this.deps.home).pending().length;
-            }
-            catch { /* buffer unreadable — omit rather than lie */ }
-            const connector = this.wireHandle?.status?.();
-            if (connector)
-                s.connector = connector;
-        }
-        return s;
-    }
-    /** Recovery half of recovers-or-reports: tear down and re-run the wiring. If services were
-     *  live (post-bind), the rebuilt wire's services start too — a config flip (enable/disable)
-     *  lands without a daemon restart. */
-    restart() {
-        const resumeServices = this.servicesStarted;
-        this.stop();
-        this.state = "inactive";
-        this.start();
-        if (resumeServices)
-            this.startServices();
-    }
-    stop() {
-        try {
-            this.wireHandle?.stop();
-        }
-        catch { /* best-effort */ }
-        this.wireHandle = undefined;
-        this.servicesStarted = false;
-        if (this.state !== "failed")
-            this.state = "stopped";
-        this.deps.log?.("gateway subsystem stopped");
-    }
-}
-//# sourceMappingURL=gateway-subsystem.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/gateway-subsystem.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-subsystem.js","sourceRoot":"","sources":["../../../src/domain/gateway/gateway-subsystem.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,uBAAuB;AACvB,EAAE;AACF,6FAA6F;AAC7F,4FAA4F;AAC5F,+FAA+F;AAC/F,gFAAgF;AAChF,EAAE;AACF,8FAA8F;AAC9F,0FAA0F;AAC1F,6EAA6E;AAE7E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAuB,MAAM,iBAAiB,CAAC;AAgCzE;;;kFAGkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,KAAK,EAAE,QAA0B,EAAiB,EAAE;QACxE,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,6BAA6B;QACtE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,mBAAmB,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACvI,CAAC;IACH,CAAC,CAAC;IACF,MAAM,UAAU,GAAsB,IAAI,iBAAiB,CAAC;QAC1D,MAAM;QACN,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,UAAU,CAAC,YAAY,CAAC;QACtB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,iBAAiB;QAClD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;QAClC,eAAe,EAAE,CAAC;QAClB,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;KACpB,CAAC,CAAC;IACH,OAAO;QACL,UAAU;QACV,IAAI,EAAE,GAAG,EAAE,GAAwD,CAAC;QACpE,wFAAwF;QACxF,uDAAuD;QACvD,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE;KAChD,CAAC;AACJ,CAAC;AAwBD,MAAM,OAAO,gBAAgB;IAOE;IANrB,KAAK,GAA0B,UAAU,CAAC;IAC1C,MAAM,CAAqB;IAC3B,WAAW,CAAqB;IAChC,UAAU,CAA0B;IACpC,eAAe,GAAG,KAAK,CAAC;IAEhC,YAA6B,IAA0B;QAA1B,SAAI,GAAJ,IAAI,CAAsB;IAAG,CAAC;IAE3D;qFACiF;IACjF,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;YACtB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;YACtB,IAAI,CAAC,MAAM,GAAI,CAAW,CAAC,OAAO,CAAC;YACnC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yCAAyC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED;;8FAE0F;IAC1F,aAAa;QACX,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,mFAAmF;YACnF,mEAAmE;YACnE,IAAI,CAAC,MAAM,GAAG,6BAA8B,CAAW,CAAC,OAAO,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+CAAgD,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED;;mFAE+E;IAC/E,QAAQ,CAAC,EAAU,EAAE,gBAAwB,EAAE,OAAgB,EAAE,IAA8B;QAC7F,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/H,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,MAAM;QACJ,MAAM,CAAC,GAA2B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACtD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrE,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,CAAC,CAAC,iBAAiB,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;YAC5E,CAAC;YAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC;YAC9C,IAAI,SAAS;gBAAE,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC;QACzC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;;0CAEsC;IACtC,OAAO;QACL,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,cAAc;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/gateway/human-readiness.d.ts

@@ -1,37 +0,0 @@
-import type { HumanFragment } from "./human-registry.js";
-import type { SlackConnectorConfig } from "./slack/config.js";
-import { type ScopeVerdict } from "./slack/slack-api.js";
-export type HumanDeliveryReadinessState = "ready" | "not-ready" | "indeterminate";
-export interface HumanDeliveryReadiness {
-    state: HumanDeliveryReadinessState;
-    configured: boolean;
-    enabled: boolean;
-    active: boolean;
-    ready: boolean;
-    connector: {
-        kind: string;
-        ref: string;
-    };
-    reason: string;
-    nextAction: string | null;
-    checkedAt: string;
-}
-export interface HumanDeliveryReadinessInput {
-    human: HumanFragment;
-    config: SlackConnectorConfig;
-    gatewayState: string;
-    botToken: string | null;
-}
-export interface HumanDeliveryReadinessDeps {
-    verifyScopes?: (token: string, required: string[]) => Promise<ScopeVerdict>;
-    verifyMembership?: (token: string, channel: string) => Promise<{
-        ok: boolean;
-        isMember: boolean;
-        error?: string;
-    }>;
-    now?: () => Date;
-}
-/** Resolve the registered human's PRIMARY binding to delivery truth in one record.
- * Connector details stay behind this transport-neutral shape; secrets never leave it. */
-export declare function resolveHumanDeliveryReadiness(input: HumanDeliveryReadinessInput, deps?: HumanDeliveryReadinessDeps): Promise<HumanDeliveryReadiness>;
-//# sourceMappingURL=human-readiness.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/human-readiness.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"human-readiness.d.ts","sourceRoot":"","sources":["../../../src/domain/gateway/human-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAyC,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEhG,MAAM,MAAM,2BAA2B,GAAG,OAAO,GAAG,WAAW,GAAG,eAAe,CAAC;AAElF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,2BAA2B,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5E,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;yFACyF;AACzF,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,2BAA2B,EAClC,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAyCjC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/human-readiness.js

@@ -1,44 +0,0 @@
-import { verifyScopes, verifyChannelMembership } from "./slack/slack-api.js";
-/** Resolve the registered human's PRIMARY binding to delivery truth in one record.
- * Connector details stay behind this transport-neutral shape; secrets never leave it. */
-export async function resolveHumanDeliveryReadiness(input, deps = {}) {
-    const primary = input.human.connectorBindings.find((binding) => binding.role === "primary");
-    const checkedAt = (deps.now?.() ?? new Date()).toISOString();
-    const base = {
-        connector: { kind: primary.kind, ref: primary.connectorRef },
-        checkedAt,
-    };
-    const configured = primary.kind === "slack" && input.botToken !== null && input.config.channel !== null;
-    const enabled = input.config.enabled;
-    const active = enabled && input.gatewayState === "active";
-    const result = (state, reason, nextAction) => ({ state, configured, enabled, active, ready: state === "ready", ...base, reason, nextAction });
-    if (primary.kind !== "slack")
-        return result("not-ready", `primary connector kind '${primary.kind}' is unsupported`, "rig gateway human show " + input.human.entityId + " --json");
-    if (!input.botToken || !input.config.channel)
-        return result("not-ready", "connector configuration is incomplete (bot token or channel missing)", "rig slack status --json");
-    if (!enabled)
-        return result("not-ready", "connector is configured but disabled", "rig slack enable");
-    if (input.gatewayState !== "active")
-        return result("not-ready", `gateway subsystem is ${input.gatewayState}`, "rig daemon logs");
-    if (input.config.outboundDestinations.length > 0 && !input.config.outboundDestinations.includes(input.human.address)) {
-        return result("not-ready", `registered address ${input.human.address} is excluded by connector policy`, "rig slack status --json");
-    }
-    try {
-        const scope = await (deps.verifyScopes ?? ((token, required) => verifyScopes(token, required)))(input.botToken, [...new Set([...input.config.requiredScopes, "chat:write"])]);
-        if (!scope.ok) {
-            return scope.error
-                ? result("indeterminate", `scope verification unavailable: ${scope.error}`, "rig slack verify --json")
-                : result("not-ready", `connector is missing required scopes: ${scope.missing.join(", ")}`, "rig slack verify --json");
-        }
-        const membership = await (deps.verifyMembership ?? ((token, channel) => verifyChannelMembership(token, channel)))(input.botToken, input.config.channel);
-        if (!membership.ok)
-            return result("indeterminate", `channel membership verification unavailable: ${membership.error ?? "unknown error"}`, "rig slack verify --json");
-        if (!membership.isMember)
-            return result("not-ready", "connector is not a member of its configured channel", "rig slack verify --json");
-        return result("ready", "required scopes and channel membership verified", null);
-    }
-    catch (error) {
-        return result("indeterminate", `connector readiness could not be verified: ${error.message}`, "rig slack verify --json");
-    }
-}
-//# sourceMappingURL=human-readiness.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/human-readiness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"human-readiness.js","sourceRoot":"","sources":["../../../src/domain/gateway/human-readiness.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAqB,MAAM,sBAAsB,CAAC;AA6BhG;yFACyF;AACzF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAkC,EAClC,OAAmC,EAAE;IAErC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAE,CAAC;IAC7F,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE;QAC5D,SAAS;KACV,CAAC;IACF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACxG,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;IAC1D,MAAM,MAAM,GAAG,CACb,KAAkC,EAClC,MAAc,EACd,UAAyB,EACD,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,KAAK,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAE7H,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,2BAA2B,OAAO,CAAC,IAAI,kBAAkB,EAAE,yBAAyB,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IAClL,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,sEAAsE,EAAE,yBAAyB,CAAC,CAAC;IAC5K,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,sCAAsC,EAAE,kBAAkB,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,wBAAwB,KAAK,CAAC,YAAY,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACjI,IAAI,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrH,OAAO,MAAM,CAAC,WAAW,EAAE,sBAAsB,KAAK,CAAC,KAAK,CAAC,OAAO,kCAAkC,EAAE,yBAAyB,CAAC,CAAC;IACrI,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAC7F,KAAK,CAAC,QAAQ,EACd,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAC7D,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,KAAK;gBAChB,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,mCAAmC,KAAK,CAAC,KAAK,EAAE,EAAE,yBAAyB,CAAC;gBACtG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,yCAAyC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC1H,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxJ,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,eAAe,EAAE,gDAAgD,UAAU,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACrK,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,WAAW,EAAE,qDAAqD,EAAE,yBAAyB,CAAC,CAAC;QACvI,OAAO,MAAM,CAAC,OAAO,EAAE,iDAAiD,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,eAAe,EAAE,8CAA+C,KAAe,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAC;IACtI,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/human-registry.d.ts

@@ -1,239 +0,0 @@
-export declare const HUMAN_ENTITY_CLASSES: Set<string>;
-export declare const HUMAN_CONNECTOR_KINDS: Set<string>;
-export declare const HUMAN_BINDING_ROLES: Set<string>;
-export declare const HUMAN_DELIVERY_CLASSES: Set<string>;
-export declare const ENTITY_ID_PATTERN: RegExp;
-export declare const ADDRESS_DOMAIN = "external";
-export declare const HANDLE_PATTERN: RegExp;
-export declare const HUMAN_AVAILABILITY_MODES: Set<string>;
-export interface HumanConnectorBinding {
-    kind: "slack";
-    connectorRef: string;
-    /** POINTER at the connector's vault (secrets-on-connector) — NEVER the secret. */
-    secretsRef: string;
-    /** Per-BINDING routing: EXACTLY ONE primary per entity = the default channel. */
-    role: "primary" | "secondary";
-    /** A6 v3: the platform-native id of this human on the connector (e.g. Slack user id).
-     *  OPTIONAL — a handle-less binding is OUTBOUND-ONLY (delivery works; it is NOT
-     *  inbound-resolvable, so an inbound event on it fails admission LOUDLY). REQUIRED to be
-     *  inbound-resolvable. UNIQUE per kind across ALL bindings of ALL humans (one platform id =
-     *  exactly one human; a duplicate is a registration conflict, REFUSED). */
-    handle?: string;
-}
-export interface HumanPrefs {
-    /** Per-ENTITY loudness — a SELECTION from the notifications register (spec §6);
-     *  A3 carries it, never redefines it. Forward-compatible if the register grows. */
-    deliveryClass: "A" | "B" | "C" | "D";
-    /** The AWAY preset (optional; LEGACY spelling — availability=away supersedes).
-     *  Read via the engine's resolveAvailability: consulted only when
-     *  `availability` is whole-field-absent. */
-    away?: boolean;
-    /** OPR.0.5.6.1 — availability mode (available | focus | away | off). */
-    availability?: "available" | "focus" | "away" | "off";
-}
-export interface HumanFragment {
-    entityId: string;
-    class: "human";
-    displayName: string;
-    /** The registered @external ref, = <entityId>@external by convention. */
-    address: string;
-    connectorBindings: HumanConnectorBinding[];
-    prefs: HumanPrefs;
-}
-export type ValidateResult = {
-    ok: true;
-    fragment: HumanFragment;
-} | {
-    ok: false;
-    error: string;
-};
-/** add-time == load-time validation. Returns the typed fragment or a loud error.
- *  Structural + closed-enum + the two cross-field invariants (>=1 binding,
- *  exactly-one-primary-per-entity). Does NOT touch the filesystem. */
-export declare function validateHumanFragment(raw: unknown): ValidateResult;
-export declare function humansDir(home?: string): string;
-export declare function projectionPath(home?: string): string;
-/** @deprecated Historical spelling retained for readers of old records only.
- * Never a routing default: an address must resolve to an actual registry entity. */
-export declare const OPERATOR_HUMAN_DEFAULT_SLOT = "human-operator@kernel";
-export type ProjectResult = {
-    ok: true;
-    body: string;
-    entities: HumanFragment[];
-} | {
-    ok: false;
-    error: string;
-};
-/** Generate the canonical registry projection from the fragments (the ONE generator
- *  used by both the write path and the drift/load check). Load-time validation is the
- *  SAME validateHumanFragment as add-time; the filename must equal <entityId>.yaml
- *  (collision-free key). Entities are sorted by entityId for a stable, diffable body. */
-export declare function projectHumans(home?: string): ProjectResult;
-export type SlackHandleResolution = {
-    kind: "registered";
-    entityId: string;
-    address: string;
-} | {
-    kind: "unregistered";
-    handle: string;
-    error: string;
-};
-/** A6 v3 pins 2+3 — resolve an INBOUND connector handle to its registered human. Walks every
- *  human's bindings of `connectorKind` for one whose `handle` equals `handle`:
- *   - a match          -> registered (admit as that entity; its address is the human-class source)
- *   - no match         -> unregistered LOUD teaching (admit-iff-registered — never fabricate a
- *                         human seat from a raw platform id; a handle-LESS binding is outbound-only
- *                         and simply never matches, so it fails inbound here, loudly).
- *  Cross-fragment uniqueness (projectHumans) guarantees at most one match. */
-export declare function resolveSlackHandle(handle: string, entities: readonly HumanFragment[], connectorKind?: "slack"): SlackHandleResolution;
-/** (Re)write the generated projection from the current fragments. Atomic. */
-export declare function writeProjection(home?: string): {
-    ok: true;
-    path: string;
-} | {
-    ok: false;
-    error: string;
-};
-export type AddHumanResult = {
-    ok: true;
-    path: string;
-    fragment: HumanFragment;
-} | {
-    ok: false;
-    error: string;
-};
-/** The verb-add writer: validate (add-time) -> atomic write the ONE fragment file ->
- *  re-project. Operators never hand-create the fragment YAML; the verb owns it.
- *  NO SILENT CLOBBER (mirrors hosts-registry addHostEntry): an existing entityId is
- *  REFUSED unless `replace` is passed explicitly — a re-run must not silently replace
- *  a human's data (managed-config data-safety class). */
-export declare function addHumanFragment(raw: unknown, home?: string, opts?: {
-    replace?: boolean;
-}): AddHumanResult;
-/** One in-flight item standing between a human and a clean remove. The registry does not
- *  own the sources (queue rows live behind the daemon; conversations in the dispatch
- *  buffer) — callers assemble the list; `pendingConversationsFor` covers the buffer half. */
-export interface InflightItem {
-    kind: "open-conversation" | "queue-row";
-    id: string;
-    detail: string;
-}
-export interface HumanBindingsSummary {
-    count: number;
-    primary: {
-        kind: string;
-        connectorRef: string;
-    };
-    /** true iff any binding carries a handle (outbound-only otherwise). */
-    inboundResolvable: boolean;
-}
-export interface HumanSummary {
-    entityId: string;
-    displayName: string;
-    address: string;
-    deliveryClass: HumanPrefs["deliveryClass"];
-    /** EFFECTIVE availability preset (default false when unauthored). */
-    away: boolean;
-    bindings: HumanBindingsSummary;
-    fragmentPath: string;
-}
-export type ListHumansResult = {
-    ok: true;
-    humans: HumanSummary[];
-    advisory?: string;
-} | {
-    ok: false;
-    error: string;
-};
-/** Amendment A1 (founder R5): the 0.5.5 surface is SINGLE-HUMAN. Several fragments render
- *  honestly, but enumeration is display, never management — the advisory names the boundary. */
-export declare const MULTI_HUMAN_ADVISORY = "several human fragments exist; this release's surface is single-human \u2014 multi-human management is 0.5.7 scope (fragments are displayed honestly; no plural management verbs exist)";
-/** A field value with its provenance: authored in the fragment, or filled by a default. */
-export interface ProvenancedValue<T> {
-    value: T;
-    source: "authored" | "default";
-}
-export interface EffectiveHumanRecord {
-    entityId: string;
-    address: string;
-    displayName: string;
-    fragmentPath: string;
-    prefs: {
-        deliveryClass: ProvenancedValue<HumanPrefs["deliveryClass"]>;
-        away: ProvenancedValue<boolean>;
-    };
-    connectorBindings: Array<HumanConnectorBinding & {
-        inboundResolvable: boolean;
-    }>;
-}
-export type ShowHumanResult = {
-    ok: true;
-    record: EffectiveHumanRecord;
-} | {
-    ok: false;
-    error: string;
-};
-export type SetHumanFieldResult = {
-    ok: true;
-    path: string;
-    fragment: HumanFragment;
-} | {
-    ok: false;
-    error: string;
-};
-export type RemoveHumanResult = {
-    ok: true;
-    removed: string;
-    archivedPath: string;
-    orphanRecordPath?: string;
-} | {
-    ok: false;
-    error: string;
-    inflight?: InflightItem[];
-};
-/** --binding / set-binding spec: kind:connectorRef:secretsRef:role[:handle=<id>]. secretsRef is
- *  a vault POINTER and may itself contain ':', so kind/connectorRef are the first two fields,
- *  role is the LAST positional, secretsRef is everything between. An optional handle= token may
- *  appear anywhere. ONE source for add (CLI) and set (here) — the same parse both paths. */
-export declare function parseBindingSpec(spec: string): {
-    ok: true;
-    binding: {
-        kind: string;
-        connectorRef: string;
-        secretsRef: string;
-        role: string;
-        handle?: string;
-    };
-} | {
-    ok: false;
-    error: string;
-};
-export declare function listHumans(home?: string): ListHumansResult;
-export declare function showHuman(entityId: string, home?: string): ShowHumanResult;
-export declare function setHumanField(entityId: string, field: string, value: string, home?: string): SetHumanFieldResult;
-export declare function removeHumanFragment(entityId: string, opts: {
-    force?: boolean;
-    inflight: InflightItem[];
-}, home?: string): RemoveHumanResult;
-/** The dispatch-buffer half of the remove guard: un-Acked outbound decisions bound to this
- *  entity are open conversations. Match rule (documented, not guessed): entityBindingRef equal
- *  to the entityId, equal to its registered address, or prefixed "<entityId>:". */
-export declare function pendingConversationsFor(entityId: string, home?: string): InflightItem[];
-export type LoadResult = {
-    ok: true;
-    entities: HumanFragment[];
-} | {
-    ok: false;
-    error: string;
-};
-/** Load the registry via the projection, but REFUSE a hand-edited/drifted projection:
- *  the fragments are truth, so identities always come from a fresh fragment projection.
- *  A canonical snapshot from an adopted projection format is compatible and is
- *  rewritten atomically; malformed/non-canonical bytes remain a loud error. */
-export declare function loadHumanRegistry(home?: string, opts?: {
-    readOnly?: boolean;
-}): LoadResult;
-/** Resolve every registered spelling of a human to its canonical external address.
- * Identity comes from the registry entity, never from a domain/suffix allow-list. */
-export declare function resolveRegisteredHumanAddress(sessionRef: string | null | undefined, entities: readonly HumanFragment[]): string | null;
-//# sourceMappingURL=human-registry.d.ts.map