@openrig/cli 0.5.16 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/outbound-driver.d.ts

@@ -1,59 +0,0 @@
-import type { SeenStore } from "./state-store.js";
-import type { AlertFilterOpts, OutboundQueuePort } from "./queue-access.js";
-import type { DispatchResult } from "../dispatcher.js";
-export declare const OUTBOUND_OP = "post_message";
-/** The decision payload for op=post_message: the queue content the delivery layer renders.
- *  qitemId rides along as the idempotency anchor (seen-state key + the H reconcile marker). */
-export interface OutboundPostPayload {
-    qitemId: string;
-    notificationKey?: string | null;
-    ownerNotificationKind?: string | null;
-    ownerNotificationLevel?: import("../../queue-transition-log.js").OwnerNotificationLevel | null;
-    humanIntent?: "decision" | "update" | null;
-    humanDetail?: string | null;
-    summary?: string | null;
-    body?: string | null;
-    destinationSession?: string | null;
-    sourceSession?: string | null;
-    evidenceRef?: string | null;
-    /** F: the loudness discriminators (interim rule: escalations mention, all else quiet). */
-    tier?: string | null;
-    tags?: string[] | null;
-}
-export interface OutboundDriverDeps {
-    home: string;
-    queue: OutboundQueuePort;
-    seen: SeenStore;
-    filter: AlertFilterOpts;
-    /** Dispatch into the subsystem wire (durable-first). Injected: the driver never posts itself. */
-    dispatch: (op: string, entityBindingRef: string, payload: unknown) => DispatchResult;
-    /** Called by the delivery layer's ack path? No — the WIRE acks; the driver learns success by
-     *  the seen-store the delivery layer marks. This callback seam is for tests observing sweeps. */
-    onSweep?: (result: SweepResult) => void;
-    intervalMs?: number;
-    log?: (msg: string) => void;
-}
-export interface SweepResult {
-    alerts: number;
-    fresh: number;
-    dispatched: string[];
-    refused: {
-        qitemId: string;
-        error: string;
-    }[];
-}
-export declare class SlackOutboundDriver {
-    private readonly deps;
-    private readonly inflight;
-    private timer;
-    private sweeping;
-    constructor(deps: OutboundDriverDeps);
-    /** Seed inflight from the durable buffer (restart no-double-dispatch), then start the poll. */
-    start(): void;
-    /** One sweep: fresh = active human alerts minus seen minus inflight. Dispatch each. */
-    sweepOnce(): Promise<SweepResult>;
-    /** The delivery layer marked a qitem seen (delivered) — release the in-memory guard. */
-    release(qitemId: string): void;
-    stop(): void;
-}
-//# sourceMappingURL=outbound-driver.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/outbound-driver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"outbound-driver.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/outbound-driver.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAa,MAAM,mBAAmB,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,WAAW,iBAAiB,CAAC;AAE1C;+FAC+F;AAC/F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,OAAO,+BAA+B,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/F,WAAW,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,iGAAiG;IACjG,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,cAAc,CAAC;IACrF;qGACiG;IACjG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C;AAED,qBAAa,mBAAmB;IAKlB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,kBAAkB;IAErD,+FAA+F;IAC/F,KAAK,IAAI,IAAI;IAeb,uFAAuF;IACjF,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC;IA6BvC,wFAAwF;IACxF,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI9B,IAAI,IAAI,IAAI;CAIb"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/outbound-driver.js

@@ -1,105 +0,0 @@
-// S10 — the OUTBOUND driver: the gateway subsystem owns the outbound decision (the shape the
-// M1 reconciliation named — queue poll + admission — now in-process). Each sweep selects the
-// FRESH human alerts (slice-11 semantics preserved verbatim: qitemId-keyed durable seen-state,
-// marked ONLY after delivered) and dispatches each through the subsystem wire, which persists
-// the decision durably BEFORE delivery and retains it on failure (replay owns the retry).
-//
-// Duplicate-absence design (proof item: durability through failure):
-//   - seen(qitemId): marked only after delivered-ok — the slice-11 at-least-once contract.
-//   - inflight(qitemId), in-memory: a dispatched-but-unresolved qitem is not re-dispatched by
-//     a later sweep — the durable buffer owns its retry (replay), never a second decision.
-//   - at start(), inflight SEEDS from the durable buffer's pending decisions (payload carries
-//     qitemId): after a daemon restart the replay path owns those qitems, so a sweep cannot
-//     mint a second decisionId for the same alert — the restart double-dispatch window is
-//     closed by construction. The only remaining duplicate is the locked contract's accepted
-//     rare crash window (delivered but crashed before seen-mark/ack): byte-identical, never a drop.
-import { DispatchBuffer } from "../dispatch-buffer.js";
-export const OUTBOUND_OP = "post_message";
-export class SlackOutboundDriver {
-    deps;
-    inflight = new Set();
-    timer;
-    sweeping = false;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    /** Seed inflight from the durable buffer (restart no-double-dispatch), then start the poll. */
-    start() {
-        try {
-            for (const d of new DispatchBuffer(this.deps.home).pending()) {
-                const payload = d.payload;
-                const key = payload?.notificationKey ?? payload?.qitemId;
-                if (key)
-                    this.inflight.add(key);
-            }
-        }
-        catch { /* unreadable buffer: replay still dedups by decisionId at delivery */ }
-        const interval = this.deps.intervalMs ?? 30000;
-        this.timer = setInterval(() => void this.sweepOnce(), interval);
-        if (typeof this.timer.unref === "function") {
-            this.timer.unref();
-        }
-    }
-    /** One sweep: fresh = active human alerts minus seen minus inflight. Dispatch each. */
-    async sweepOnce() {
-        if (this.sweeping)
-            return { alerts: 0, fresh: 0, dispatched: [], refused: [] };
-        this.sweeping = true;
-        try {
-            const alerts = await this.deps.queue.listHumanAlerts(this.deps.filter);
-            const seen = this.deps.seen.load();
-            const fresh = alerts.filter((q) => !seen.has(notificationKey(q)) && !this.inflight.has(notificationKey(q)));
-            const dispatched = [];
-            const refused = [];
-            for (const alert of fresh) {
-                const res = this.deps.dispatch(OUTBOUND_OP, alert.destinationSession ?? "(unknown)", toPayload(alert));
-                if (res.ok) {
-                    this.inflight.add(notificationKey(alert));
-                    dispatched.push(alert.qitemId);
-                }
-                else {
-                    // Refused (e.g. delivery layer unconfigured → op unadvertised): honest, retried next
-                    // sweep — nothing durable was minted, so this is not a retained decision.
-                    refused.push({ qitemId: alert.qitemId, error: res.error });
-                    this.deps.log?.(`outbound dispatch refused for ${alert.qitemId}: ${res.error}`);
-                }
-            }
-            const result = { alerts: alerts.length, fresh: fresh.length, dispatched, refused };
-            this.deps.onSweep?.(result);
-            return result;
-        }
-        finally {
-            this.sweeping = false;
-        }
-    }
-    /** The delivery layer marked a qitem seen (delivered) — release the in-memory guard. */
-    release(qitemId) {
-        this.inflight.delete(qitemId);
-    }
-    stop() {
-        if (this.timer)
-            clearInterval(this.timer);
-        this.timer = undefined;
-    }
-}
-function toPayload(q) {
-    return {
-        qitemId: q.qitemId,
-        notificationKey: q.notificationKey,
-        ownerNotificationKind: q.ownerNotificationKind,
-        ownerNotificationLevel: q.ownerNotificationLevel,
-        humanIntent: q.humanIntent,
-        humanDetail: q.humanDetail,
-        summary: q.summary,
-        body: q.body,
-        destinationSession: q.destinationSession,
-        sourceSession: q.sourceSession,
-        evidenceRef: q.evidenceRef,
-        tier: q.tier,
-        tags: q.tags,
-    };
-}
-function notificationKey(q) {
-    return q.notificationKey ?? q.qitemId;
-}
-//# sourceMappingURL=outbound-driver.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/outbound-driver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"outbound-driver.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/outbound-driver.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,0FAA0F;AAC1F,EAAE;AACF,qEAAqE;AACrE,2FAA2F;AAC3F,8FAA8F;AAC9F,2FAA2F;AAC3F,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,6FAA6F;AAC7F,oGAAoG;AAKpG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC;AA0C1C,MAAM,OAAO,mBAAmB;IAKD;IAJZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,CAA6C;IAClD,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;IAAG,CAAC;IAEzD,+FAA+F;IAC/F,KAAK;QACH,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,OAA0C,CAAC;gBAC7D,MAAM,GAAG,GAAG,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,OAAO,CAAC;gBACzD,IAAI,GAAG;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,OAAQ,IAAI,CAAC,KAA2C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACjF,IAAI,CAAC,KAA0C,CAAC,KAAK,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,OAAO,GAAyC,EAAE,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,kBAAkB,IAAI,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvG,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,qFAAqF;oBACrF,0EAA0E;oBAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACnF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAY;IAC7B,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;QAC9C,sBAAsB,EAAE,CAAC,CAAC,sBAAsB;QAChD,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAY;IACnC,OAAO,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/queue-access.d.ts

@@ -1,61 +0,0 @@
-import type { QueueRepository } from "../../queue-repository.js";
-import { type LoadResult } from "../human-registry.js";
-import { type OwnerNotificationLevel } from "../../queue-transition-log.js";
-/** The narrow projection the slack path consumes (shape-compatible with the retired bridge's
- *  QueueItem so message construction and tests carry over). */
-export interface QueueItem {
-    qitemId: string;
-    destinationSession?: string | null;
-    sourceSession?: string | null;
-    tags?: string[] | null;
-    state?: string | null;
-    tier?: string | null;
-    humanIntent?: "decision" | "update" | null;
-    humanDetail?: string | null;
-    summary?: string | null;
-    body?: string | null;
-    evidenceRef?: string | null;
-    notificationKey?: string | null;
-    ownerNotificationKind?: string | null;
-    ownerNotificationLevel?: OwnerNotificationLevel | null;
-}
-export interface AlertFilterOpts {
-    minimumLevel?: OwnerNotificationLevel;
-}
-/** PURE: select active qitems whose transition carries a sufficient OWNER classification. */
-export declare function filterHumanAlerts(items: QueueItem[], opts: AlertFilterOpts): QueueItem[];
-export interface CreateQitemInput {
-    qitemId?: string;
-    source: string;
-    destination: string;
-    summary: string;
-    body: string;
-    priority?: string;
-    tags?: string[];
-}
-/** What the inbound router needs: land a durable qitem, get its id (or throw). */
-export interface InboundQueuePort {
-    createQitem(input: CreateQitemInput): Promise<string>;
-}
-/** What the outbound driver needs: the current human-alert set, full items included. */
-export interface OutboundQueuePort {
-    listHumanAlerts(filter: AlertFilterOpts): Promise<QueueItem[]>;
-}
-/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
- *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
- *  never replays the backlog. Returns the honest online-status line marking the transition. */
-export declare function seedBacklogAsHistory(opts: {
-    queue: OutboundQueuePort;
-    seen: import("./state-store.js").SeenStore;
-    filter: AlertFilterOpts;
-    log?: (msg: string) => void;
-}): Promise<{
-    seeded: number;
-    onlineStatus: string;
-}>;
-/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
- *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
-export declare function makeQueuePorts(queueRepo: QueueRepository, opts?: {
-    loadHumanRegistry?: () => LoadResult;
-}): InboundQueuePort & OutboundQueuePort;
-//# sourceMappingURL=queue-access.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/queue-access.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue-access.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAoD,KAAK,UAAU,EAAsB,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAiC,KAAK,sBAAsB,EAAwB,MAAM,+BAA+B,CAAC;AAEjI;+DAC+D;AAC/D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC3C,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,SAAS,EAAE,CAQxF;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CAChE;AAmCD;;+FAE+F;AAC/F,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAC;IAC3C,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAQpD;AAED;oGACoG;AACpG,wBAAgB,cAAc,CAC5B,SAAS,EAAE,eAAe,EAC1B,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,UAAU,CAAA;CAAO,GAClD,gBAAgB,GAAG,iBAAiB,CA6BtC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/queue-access.js

@@ -1,102 +0,0 @@
-// S10 — the IN-PROCESS queue port for the gateway subsystem. Successor to the retired CLI
-// queue-bridge (which shelled out to `rig queue` from the relay's separate process): in-daemon
-// there is no process boundary, so fleet access is a direct QueueRepository read/write. The
-// SELECTION SEMANTICS consume the single structured OWNER classification written with the
-// queue transition. Tags and destination spellings are not a second alert classifier.
-//   - reads are unbounded (the B5 lesson: a default limit silently truncates a large backlog).
-import { loadHumanRegistry, resolveRegisteredHumanAddress } from "../human-registry.js";
-import { ownerNotificationLevelAtLeast } from "../../queue-transition-log.js";
-/** PURE: select active qitems whose transition carries a sufficient OWNER classification. */
-export function filterHumanAlerts(items, opts) {
-    const active = new Set(["pending", "in-progress", "blocked"]);
-    return items.filter((q) => {
-        if (q.state && !active.has(q.state))
-            return false;
-        return q.ownerNotificationLevel
-            ? ownerNotificationLevelAtLeast(q.ownerNotificationLevel, opts.minimumLevel ?? "NOTICE")
-            : false;
-    });
-}
-function project(q, transition, entities) {
-    const r = q;
-    let destinationSession = null;
-    let sourceSession = null;
-    if (transition.ownerNotificationKind === "human-decision-resolved") {
-        destinationSession = resolveRegisteredHumanAddress(transition.actorSession, entities);
-        sourceSession = q.destinationSession;
-    }
-    else if (q.state === "blocked") {
-        destinationSession = resolveRegisteredHumanAddress(q.blockedOn, entities);
-        sourceSession = q.destinationSession;
-    }
-    else {
-        destinationSession = resolveRegisteredHumanAddress(q.destinationSession, entities);
-        sourceSession = q.sourceSession;
-    }
-    if (!destinationSession)
-        return null;
-    return {
-        qitemId: String(r.qitemId),
-        destinationSession,
-        sourceSession,
-        tags: r.tags ?? null,
-        state: r.state ?? null,
-        tier: r.tier ?? null,
-        humanIntent: q.humanIntent,
-        humanDetail: q.humanDetail,
-        summary: r.summary ?? null,
-        body: r.body ?? null,
-        evidenceRef: r.evidenceRef ?? null,
-        notificationKey: `${q.qitemId}:${transition.transitionId}`,
-        ownerNotificationKind: transition.ownerNotificationKind,
-        ownerNotificationLevel: transition.ownerNotificationLevel,
-    };
-}
-/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
- *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
- *  never replays the backlog. Returns the honest online-status line marking the transition. */
-export async function seedBacklogAsHistory(opts) {
-    const alerts = await opts.queue.listHumanAlerts(opts.filter);
-    const already = opts.seen.load();
-    const toSeed = alerts.map((a) => a.notificationKey ?? a.qitemId).filter((id) => !already.has(id));
-    const seeded = opts.seen.seed(toSeed, "seeded-at-enable");
-    const onlineStatus = `slack outbound ENABLED at enable-time: ${seeded} pre-existing alert(s) seeded as history (not reposted); only alerts created after this point will deliver.`;
-    opts.log?.(onlineStatus);
-    return { seeded, onlineStatus };
-}
-/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
- *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
-export function makeQueuePorts(queueRepo, opts = {}) {
-    return {
-        async createQitem(input) {
-            const created = await queueRepo.create({
-                qitemId: input.qitemId,
-                sourceSession: input.source,
-                destinationSession: input.destination,
-                body: input.body,
-                summary: input.summary,
-                priority: (input.priority ?? "routine"),
-                tags: input.tags ?? ["founder-slack", "inbound"],
-            });
-            return created.qitemId;
-        },
-        async listHumanAlerts(filter) {
-            const registry = (opts.loadHumanRegistry ?? (() => loadHumanRegistry()))();
-            if (!registry.ok)
-                return [];
-            const rows = queueRepo.list({ activeOnly: true, limit: 1000000 });
-            const projected = rows.flatMap((row) => {
-                const transition = queueRepo.transitionLog.latestOwnerNotificationForQitem(row.qitemId);
-                if (!transition)
-                    return [];
-                const notificationKey = `${row.qitemId}:${transition.transitionId}`;
-                if (queueRepo.transitionLog.hasOwnerNotificationReceipt(row.qitemId, notificationKey))
-                    return [];
-                const item = project(row, transition, registry.entities);
-                return item ? [item] : [];
-            });
-            return filterHumanAlerts(projected, filter);
-        },
-    };
-}
-//# sourceMappingURL=queue-access.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/queue-access.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"queue-access.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,+FAA+F;AAC/F,4FAA4F;AAC5F,0FAA0F;AAC1F,sFAAsF;AACtF,+FAA+F;AAG/F,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAuC,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,6BAA6B,EAAqD,MAAM,+BAA+B,CAAC;AAyBjI,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,KAAkB,EAAE,IAAqB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,CAAC,CAAC,sBAAsB;YAC7B,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC;YACxF,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAsBD,SAAS,OAAO,CAAC,CAAgB,EAAE,UAA2B,EAAE,QAAkC;IAChG,MAAM,CAAC,GAAG,CAAuC,CAAC;IAClD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,UAAU,CAAC,qBAAqB,KAAK,yBAAyB,EAAE,CAAC;QACnE,kBAAkB,GAAG,6BAA6B,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACtF,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC;IACvC,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,kBAAkB,GAAG,6BAA6B,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACnF,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,kBAAkB;QAClB,aAAa;QACb,IAAI,EAAG,CAAC,CAAC,IAAwB,IAAI,IAAI;QACzC,KAAK,EAAG,CAAC,CAAC,KAAuB,IAAI,IAAI;QACzC,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAG,CAAC,CAAC,OAAyB,IAAI,IAAI;QAC7C,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,WAAW,EAAG,CAAC,CAAC,WAA6B,IAAI,IAAI;QACrD,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE;QAC1D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;KAC1D,CAAC;AACJ,CAAC;AAED;;+FAE+F;AAC/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAK1C;IACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,0CAA0C,MAAM,6GAA6G,CAAC;IACnL,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,cAAc,CAC5B,SAA0B,EAC1B,OAAiD,EAAE;IAEnD,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAuB;YACvC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;gBACrC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,kBAAkB,EAAE,KAAK,CAAC,WAAW;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAU;gBAChD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;aACjD,CAAC,CAAC;YACH,OAAQ,OAA0C,CAAC,OAAO,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,MAAuB;YAC3C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrC,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxF,IAAI,CAAC,UAAU;oBAAE,OAAO,EAAE,CAAC;gBAC3B,MAAM,eAAe,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBACpE,IAAI,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACjG,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/secrets.d.ts

@@ -1,21 +0,0 @@
-export interface SecretFsOps {
-    readFileSync(p: string): string;
-    statMode(p: string): number | null;
-}
-export declare const nodeSecretFs: SecretFsOps;
-/** Parse KEY=VALUE lines (quotes trimmed). Blank lines / #comments ignored. */
-export declare function parseEnvFile(text: string): Record<string, string>;
-export interface SecretLookupOpts {
-    envFile?: string;
-    env?: NodeJS.ProcessEnv;
-    fsops?: SecretFsOps;
-}
-/** Warn if the env file is group/world readable (item 10 hygiene). Returns a warning string or null. */
-export declare function checkEnvFilePermissions(envFile: string, fsops?: SecretFsOps): string | null;
-/**
- * Resolve a secret by logical name. Precedence: explicit env var (OPENRIG_SLACK_<NAME>
- * or the raw name) → env-file key. Returns null when unresolved (honest: callers
- * report "unconfigured", they do NOT fabricate). Never logs the value.
- */
-export declare function resolveSecret(name: string, opts?: SecretLookupOpts): string | null;
-//# sourceMappingURL=secrets.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/secrets.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,eAAO,MAAM,YAAY,EAAE,WAS1B,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,WAA0B,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,MAAM,GAAG,IAAI,CAmBtF"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/secrets.js

@@ -1,73 +0,0 @@
-// Slice-11 slack-connector — secret resolution (item 7 + 10).
-//
-// Secrets (Slack bot token / app-level token / incoming-webhook URL) resolve
-// from EITHER an OPENRIG_SLACK_* environment variable OR a 0600 env file, at
-// call time — NEVER stored in the connector config file, NEVER in the repo,
-// NEVER logged. Mirrors the daemon's bearer_file/activity-hook-token posture.
-// The env file lives on the TRUSTED host (item 10 secret-host axis); it may be
-// a different host from the queue/alert host.
-import fs from "node:fs";
-export const nodeSecretFs = {
-    readFileSync: (p) => fs.readFileSync(p, "utf8"),
-    statMode: (p) => {
-        try {
-            return fs.statSync(p).mode & 0o777;
-        }
-        catch {
-            return null;
-        }
-    },
-};
-/** Parse KEY=VALUE lines (quotes trimmed). Blank lines / #comments ignored. */
-export function parseEnvFile(text) {
-    const out = {};
-    for (const line of text.split("\n")) {
-        const t = line.trim();
-        if (!t || t.startsWith("#") || !t.includes("="))
-            continue;
-        const i = t.indexOf("=");
-        out[t.slice(0, i).trim()] = t
-            .slice(i + 1)
-            .trim()
-            .replace(/^"|"$/g, "");
-    }
-    return out;
-}
-/** Warn if the env file is group/world readable (item 10 hygiene). Returns a warning string or null. */
-export function checkEnvFilePermissions(envFile, fsops = nodeSecretFs) {
-    const mode = fsops.statMode(envFile);
-    if (mode === null)
-        return null; // absent — a separate "unconfigured" concern
-    if (mode & 0o077)
-        return `secret env file ${envFile} is mode ${mode.toString(8)} — should be 0600 (group/other must not read secrets)`;
-    return null;
-}
-/**
- * Resolve a secret by logical name. Precedence: explicit env var (OPENRIG_SLACK_<NAME>
- * or the raw name) → env-file key. Returns null when unresolved (honest: callers
- * report "unconfigured", they do NOT fabricate). Never logs the value.
- */
-export function resolveSecret(name, opts = {}) {
-    const env = opts.env ?? process.env;
-    const fsops = opts.fsops ?? nodeSecretFs;
-    // Aliases: the raw name (e.g. SLACK_WEBHOOK_URL) and the OPENRIG_-prefixed
-    // form (OPENRIG_SLACK_WEBHOOK_URL). NOT OPENRIG_SLACK_<name> — that would
-    // double the SLACK_ segment (the B4 defect).
-    const envKeys = [name, `OPENRIG_${name.replace(/[^A-Za-z0-9]/g, "_").toUpperCase()}`];
-    for (const k of envKeys) {
-        if (env[k])
-            return env[k];
-    }
-    if (opts.envFile) {
-        try {
-            const map = parseEnvFile(fsops.readFileSync(opts.envFile));
-            if (map[name])
-                return map[name];
-        }
-        catch {
-            /* absent/unreadable → null */
-        }
-    }
-    return null;
-}
-//# sourceMappingURL=secrets.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/secrets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,8CAA8C;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAOzB,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;aACZ,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,QAAqB,YAAY;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC7E,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,mBAAmB,OAAO,YAAY,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC;IACvI,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,2EAA2E;IAC3E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-api.d.ts

@@ -1,129 +0,0 @@
-export type FetchImpl = (url: string, init?: RequestInit) => Promise<Response>;
-export interface HttpResult {
-    ok: boolean;
-    status: number;
-    error?: string;
-}
-/**
- * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
- * transport error returns ok:false with a bounded error string — the caller
- * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
- *
- * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
- * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
- * caller remains.
- */
-export declare function postWebhook(url: string, payload: unknown, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
-export interface WebApiResult {
-    ok: boolean;
-    status: number;
-    grantedScopes: string[];
-    json: Record<string, unknown>;
-    error?: string;
-}
-/** S10 shape-fix — the per-method REQUEST SHAPE. Slack's read methods (conversations.info /
- *  history / replies) reject a JSON POST with `invalid_arguments` (operator-measured live);
- *  their supported shape is GET with URL-query args. Write/JSON methods (auth.test,
- *  apps.connections.open, chat.postMessage, files.completeUploadExternal) keep JSON POST
- *  byte-identically — the default, so no existing caller changes shape implicitly. */
-export type WebApiRequestShape = "json-post" | "get-query";
-/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
-export declare function callWebApi(method: string, token: string, body: Record<string, unknown>, fetchImpl?: FetchImpl, timeoutMs?: number, shape?: WebApiRequestShape): Promise<WebApiResult>;
-/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
-export declare function getGrantedScopes(token: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
-    ok: boolean;
-    granted: string[];
-    error?: string;
-}>;
-/** OPR.0.5.6.2 — authenticated private-file download (`url_private` + Bearer,
- *  the verified inbound mechanic from the human-layer design §4.1). Bounded:
- *  a body over `maxBytes` is refused, never truncated-and-stored. Slack's
- *  classic auth-failure mode returns an HTML login page with status 200 —
- *  detected by content-type and named, so garbage is never stored as the file.
- *  Errors are MESSAGES, not exceptions: the caller's failure-honesty contract
- *  needs a name per file, never a thrown loss of the whole event. */
-export declare const INBOUND_FILE_MAX_BYTES = 26214400;
-export declare function downloadPrivateFile(url: string, token: string, fetchImpl?: FetchImpl, timeoutMs?: number, maxBytes?: number): Promise<{
-    ok: true;
-    bytes: Uint8Array;
-} | {
-    ok: false;
-    error: string;
-}>;
-export interface ScopeVerdict {
-    ok: boolean;
-    granted: string[];
-    missing: string[];
-    error?: string;
-}
-/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
-export declare function verifyScopes(token: string, required: string[], fetchImpl?: FetchImpl, timeoutMs?: number): Promise<ScopeVerdict>;
-/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
-export declare function verifyChannelMembership(token: string, channel: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
-    ok: boolean;
-    isMember: boolean;
-    name?: string;
-    error?: string;
-}>;
-/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
-export declare function openSocketConnection(appToken: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
-    ok: boolean;
-    url?: string;
-    error?: string;
-}>;
-export declare function getUploadURLExternal(token: string, filename: string, length: number, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
-    ok: boolean;
-    uploadUrl?: string;
-    fileId?: string;
-    error?: string;
-}>;
-/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
-export declare function uploadBytesExternal(uploadUrl: string, bytes: Uint8Array, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
-export declare function completeUploadExternal(token: string, input: {
-    files: {
-        id: string;
-        title?: string;
-    }[];
-    channelId: string;
-    threadTs?: string;
-    initialComment?: string;
-}, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
-    ok: boolean;
-    error?: string;
-}>;
-/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
- *  outcome (the post may have landed), so before any resend the sender searches for the
- *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
- *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
-export declare function fetchRecentMessageTexts(token: string, channel: string, threadTs: string | undefined, fetchImpl?: FetchImpl, limit?: number, timeoutMs?: number): Promise<{
-    ok: boolean;
-    texts: string[];
-    messages: {
-        text: string;
-        ts: string;
-    }[];
-    error?: string;
-}>;
-export interface PostChatMessageInput {
-    channel: string;
-    text: string;
-    blocks?: unknown[];
-    /** Thread reply: the PARENT message's ts (never a reply's ts — the affordance discriminator). */
-    thread_ts?: string;
-}
-export type PostChatMessageResult = {
-    ok: true;
-    status: number;
-    ts: string;
-} | {
-    ok: false;
-    status: number;
-    error?: string;
-};
-/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
- *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
- *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
- *  the app's own identity is the only outbound identity (the customize-absence proof leg).
- *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
-export declare function postChatMessage(token: string, input: PostChatMessageInput, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<PostChatMessageResult>;
-//# sourceMappingURL=slack-api.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"slack-api.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAK/E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAYD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;sFAIsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3D,uFAAuF;AACvF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,EAC9B,KAAK,GAAE,kBAAgC,GACtC,OAAO,CAAC,YAAY,CAAC,CAyCvB;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG7D;AAED;;;;;;qEAMqE;AACrE,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAiB,EAC5B,SAAS,SAAS,EAClB,QAAQ,SAAyB,GAChC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBzE;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,uFAAuF;AACvF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAK5E;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD;AASD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAI/E;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,UAAU,EACjB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EACjH,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAM1C;AAED;;;wFAGwF;AACxF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,GAAE,SAAwB,EACnC,KAAK,SAAM,EACX,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWrG;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;;;;uFAIuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,oBAAoB,EAC3B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CAWhC"}