@openrig/cli 0.5.3 → 0.5.5

package/daemon/dist/domain/gateway/slack/queue-access.d.ts

@@ -0,0 +1,53 @@
+import type { QueueRepository } from "../../queue-repository.js";
+/** The narrow projection the slack path consumes (shape-compatible with the retired bridge's
+ *  QueueItem so message construction and tests carry over). */
+export interface QueueItem {
+    qitemId: string;
+    destinationSession?: string | null;
+    sourceSession?: string | null;
+    tags?: string[] | null;
+    state?: string | null;
+    tier?: string | null;
+    summary?: string | null;
+    body?: string | null;
+    evidenceRef?: string | null;
+}
+export interface AlertFilterOpts {
+    alertTag: string;
+    /** Optional explicit human-seat allow-list; when empty, any human-seat destination or human-gate tier matches. */
+    destinations?: string[];
+}
+/** PURE (verbatim from the retired queue-bridge): select the qitems that should alert a human. */
+export declare function filterHumanAlerts(items: QueueItem[], opts: AlertFilterOpts): QueueItem[];
+export interface CreateQitemInput {
+    source: string;
+    destination: string;
+    summary: string;
+    body: string;
+    priority?: string;
+    tags?: string[];
+}
+/** What the inbound router needs: land a durable qitem, get its id (or throw). */
+export interface InboundQueuePort {
+    createQitem(input: CreateQitemInput): Promise<string>;
+}
+/** What the outbound driver needs: the current human-alert set, full items included. */
+export interface OutboundQueuePort {
+    listHumanAlerts(filter: AlertFilterOpts): Promise<QueueItem[]>;
+}
+/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
+ *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
+ *  never replays the backlog. Returns the honest online-status line marking the transition. */
+export declare function seedBacklogAsHistory(opts: {
+    queue: OutboundQueuePort;
+    seen: import("./state-store.js").SeenStore;
+    filter: AlertFilterOpts;
+    log?: (msg: string) => void;
+}): Promise<{
+    seeded: number;
+    onlineStatus: string;
+}>;
+/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
+ *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
+export declare function makeQueuePorts(queueRepo: QueueRepository): InboundQueuePort & OutboundQueuePort;
+//# sourceMappingURL=queue-access.d.ts.map

package/daemon/dist/domain/gateway/slack/queue-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-access.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,2BAA2B,CAAC;AAG7F;+DAC+D;AAC/D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,kHAAkH;IAClH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,SAAS,EAAE,CAUxF;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CAChE;AAiBD;;+FAE+F;AAC/F,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAC;IAC3C,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAQpD;AAED;oGACoG;AACpG,wBAAgB,cAAc,CAAC,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,CAmB/F"}

package/daemon/dist/domain/gateway/slack/queue-access.js

@@ -0,0 +1,72 @@
+// S10 — the IN-PROCESS queue port for the gateway subsystem. Successor to the retired CLI
+// queue-bridge (which shelled out to `rig queue` from the relay's separate process): in-daemon
+// there is no process boundary, so fleet access is a direct QueueRepository read/write. The
+// SELECTION SEMANTICS are the shipped slice-11 rules carried over unchanged (filterHumanAlerts
+// moved verbatim from queue-bridge.ts, which was DELETED with the relay runners at the cutover):
+//   - a qitem alerts iff ACTIVE (pending/in-progress/blocked), tagged with the alert tag, AND
+//     human-destined (explicit allow-list, a human-seat session ref, or tier human-gate);
+//   - reads are unbounded (the B5 lesson: a default limit silently truncates a large backlog).
+import { isHumanSeatSessionRef } from "../../session-name.js";
+/** PURE (verbatim from the retired queue-bridge): select the qitems that should alert a human. */
+export function filterHumanAlerts(items, opts) {
+    const active = new Set(["pending", "in-progress", "blocked"]);
+    const allow = new Set(opts.destinations ?? []);
+    return items.filter((q) => {
+        if (q.state && !active.has(q.state))
+            return false;
+        if (!(q.tags ?? []).includes(opts.alertTag))
+            return false;
+        const dest = q.destinationSession ?? "";
+        const isHuman = allow.size > 0 ? allow.has(dest) : isHumanSeatSessionRef(dest) || q.tier === "human-gate";
+        return isHuman;
+    });
+}
+function project(q) {
+    const r = q;
+    return {
+        qitemId: String(r.qitemId),
+        destinationSession: r.destinationSession ?? null,
+        sourceSession: r.sourceSession ?? null,
+        tags: r.tags ?? null,
+        state: r.state ?? null,
+        tier: r.tier ?? null,
+        summary: r.summary ?? null,
+        body: r.body ?? null,
+        evidenceRef: r.evidenceRef ?? null,
+    };
+}
+/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
+ *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
+ *  never replays the backlog. Returns the honest online-status line marking the transition. */
+export async function seedBacklogAsHistory(opts) {
+    const alerts = await opts.queue.listHumanAlerts(opts.filter);
+    const already = opts.seen.load();
+    const toSeed = alerts.map((a) => a.qitemId).filter((id) => !already.has(id));
+    const seeded = opts.seen.seed(toSeed, "seeded-at-enable");
+    const onlineStatus = `slack outbound ENABLED at enable-time: ${seeded} pre-existing alert(s) seeded as history (not reposted); only alerts created after this point will deliver.`;
+    opts.log?.(onlineStatus);
+    return { seeded, onlineStatus };
+}
+/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
+ *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
+export function makeQueuePorts(queueRepo) {
+    return {
+        async createQitem(input) {
+            const created = await queueRepo.create({
+                sourceSession: input.source,
+                destinationSession: input.destination,
+                body: input.body,
+                summary: input.summary,
+                priority: (input.priority ?? "routine"),
+                tags: input.tags ?? ["founder-slack", "inbound"],
+            });
+            return created.qitemId;
+        },
+        async listHumanAlerts(filter) {
+            // activeOnly narrows at the repo; filterHumanAlerts re-checks state defensively (verbatim rule).
+            const rows = queueRepo.list({ activeOnly: true, limit: 1000000 });
+            return filterHumanAlerts(rows.map(project), filter);
+        },
+    };
+}
+//# sourceMappingURL=queue-access.js.map

package/daemon/dist/domain/gateway/slack/queue-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-access.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,+FAA+F;AAC/F,4FAA4F;AAC5F,+FAA+F;AAC/F,iGAAiG;AACjG,8FAA8F;AAC9F,0FAA0F;AAC1F,+FAA+F;AAG/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAsB9D,kGAAkG;AAClG,MAAM,UAAU,iBAAiB,CAAC,KAAkB,EAAE,IAAqB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;QAC1G,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAqBD,SAAS,OAAO,CAAC,CAAgB;IAC/B,MAAM,CAAC,GAAG,CAAuC,CAAC;IAClD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,kBAAkB,EAAG,CAAC,CAAC,kBAAoC,IAAI,IAAI;QACnE,aAAa,EAAG,CAAC,CAAC,aAA+B,IAAI,IAAI;QACzD,IAAI,EAAG,CAAC,CAAC,IAAwB,IAAI,IAAI;QACzC,KAAK,EAAG,CAAC,CAAC,KAAuB,IAAI,IAAI;QACzC,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,OAAO,EAAG,CAAC,CAAC,OAAyB,IAAI,IAAI;QAC7C,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,WAAW,EAAG,CAAC,CAAC,WAA6B,IAAI,IAAI;KACtD,CAAC;AACJ,CAAC;AAED;;+FAE+F;AAC/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAK1C;IACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,0CAA0C,MAAM,6GAA6G,CAAC;IACnL,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,cAAc,CAAC,SAA0B;IACvD,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAuB;YACvC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;gBACrC,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,kBAAkB,EAAE,KAAK,CAAC,WAAW;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAU;gBAChD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;aACjD,CAAC,CAAC;YACH,OAAQ,OAA0C,CAAC,OAAO,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,MAAuB;YAC3C,iGAAiG;YACjG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,eAAO,MAAM,YAAY,EAAE,WAS1B,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,WAA0B,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,MAAM,GAAG,IAAI,CAmBtF"}

package/daemon/dist/domain/gateway/slack/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,8CAA8C;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAOzB,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;aACZ,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,QAAqB,YAAY;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC7E,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,mBAAmB,OAAO,YAAY,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC;IACvI,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,2EAA2E;IAC3E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-api.d.ts

@@ -0,0 +1,106 @@
+export type FetchImpl = (url: string, init?: RequestInit) => Promise<Response>;
+export interface HttpResult {
+    ok: boolean;
+    status: number;
+    error?: string;
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export declare function postWebhook(url: string, payload: unknown, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
+export interface WebApiResult {
+    ok: boolean;
+    status: number;
+    grantedScopes: string[];
+    json: Record<string, unknown>;
+    error?: string;
+}
+/** S10 shape-fix — the per-method REQUEST SHAPE. Slack's read methods (conversations.info /
+ *  history / replies) reject a JSON POST with `invalid_arguments` (operator-measured live);
+ *  their supported shape is GET with URL-query args. Write/JSON methods (auth.test,
+ *  apps.connections.open, chat.postMessage, files.completeUploadExternal) keep JSON POST
+ *  byte-identically — the default, so no existing caller changes shape implicitly. */
+export type WebApiRequestShape = "json-post" | "get-query";
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export declare function callWebApi(method: string, token: string, body: Record<string, unknown>, fetchImpl?: FetchImpl, timeoutMs?: number, shape?: WebApiRequestShape): Promise<WebApiResult>;
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export declare function getGrantedScopes(token: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    granted: string[];
+    error?: string;
+}>;
+export interface ScopeVerdict {
+    ok: boolean;
+    granted: string[];
+    missing: string[];
+    error?: string;
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export declare function verifyScopes(token: string, required: string[], fetchImpl?: FetchImpl, timeoutMs?: number): Promise<ScopeVerdict>;
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export declare function verifyChannelMembership(token: string, channel: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    isMember: boolean;
+    name?: string;
+    error?: string;
+}>;
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export declare function openSocketConnection(appToken: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    url?: string;
+    error?: string;
+}>;
+export declare function getUploadURLExternal(token: string, filename: string, length: number, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    uploadUrl?: string;
+    fileId?: string;
+    error?: string;
+}>;
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export declare function uploadBytesExternal(uploadUrl: string, bytes: Uint8Array, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
+export declare function completeUploadExternal(token: string, input: {
+    files: {
+        id: string;
+        title?: string;
+    }[];
+    channelId: string;
+    threadTs?: string;
+    initialComment?: string;
+}, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export declare function fetchRecentMessageTexts(token: string, channel: string, threadTs: string | undefined, fetchImpl?: FetchImpl, limit?: number, timeoutMs?: number): Promise<{
+    ok: boolean;
+    texts: string[];
+    error?: string;
+}>;
+export interface PostChatMessageInput {
+    channel: string;
+    text: string;
+    blocks?: unknown[];
+    /** Thread reply: the PARENT message's ts (never a reply's ts — the affordance discriminator). */
+    thread_ts?: string;
+}
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export declare function postChatMessage(token: string, input: PostChatMessageInput, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    status: number;
+    ts?: string;
+    error?: string;
+}>;
+//# sourceMappingURL=slack-api.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAK/E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAYD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;sFAIsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3D,uFAAuF;AACvF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,EAC9B,KAAK,GAAE,kBAAgC,GACtC,OAAO,CAAC,YAAY,CAAC,CAyCvB;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG7D;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,uFAAuF;AACvF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAK5E;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD;AASD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAI/E;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,UAAU,EACjB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EACjH,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAM1C;AAED;;;wFAGwF;AACxF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,GAAE,SAAwB,EACnC,KAAK,SAAM,EACX,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAO3D;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;uFAIuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,oBAAoB,EAC3B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAMvE"}

package/daemon/dist/domain/gateway/slack/slack-api.js

@@ -0,0 +1,198 @@
+// Slice-11 slack-connector — Slack HTTP client.
+//
+// `fetch`-based (http/https agnostic + injectable) matching the daemon's
+// WebhookNotificationAdapter + its fake-fetch test pattern; every call is
+// bounded by an explicit timeout with a structured failure result (never
+// throws past the boundary, never hangs) — the remote-daemon-http discipline.
+//
+// Item 5 (the setup-scope trap): Slack's "Add New Webhook" grants ONLY the
+// webhook scope; configured bot scopes are NOT granted until a full reinstall,
+// with no warning. The ONLY proof of granted scopes is the `x-oauth-scopes`
+// RESPONSE HEADER on a real API call — configured != granted. getGrantedScopes()
+// reads exactly that header. Channel membership is likewise verified live
+// (conversations.info.is_member) before declaring inbound ready.
+const defaultFetch = (url, init) => fetch(url, init);
+const DEFAULT_TIMEOUT_MS = 15000;
+async function withTimeout(timeoutMs, run) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+    try {
+        return await run(ctrl.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export async function postWebhook(url, payload, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+                signal,
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                return { ok: false, status: res.status, error: `slack ${res.status}: ${text.slice(0, 160)}` };
+            }
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `webhook transport: ${e.message}` };
+    }
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export async function callWebApi(method, token, body, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS, shape = "json-post") {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            let res;
+            if (shape === "get-query") {
+                // The read shape: args in the query string, Authorization only — no body, no
+                // content-type (a body or JSON content-type is exactly what the endpoint rejects).
+                const url = new URL(`https://slack.com/api/${method}`);
+                for (const [k, v] of Object.entries(body)) {
+                    if (v !== undefined && v !== null)
+                        url.searchParams.set(k, String(v));
+                }
+                res = await fetchImpl(url.toString(), {
+                    method: "GET",
+                    headers: { authorization: `Bearer ${token}` },
+                    signal,
+                });
+            }
+            else {
+                res = await fetchImpl(`https://slack.com/api/${method}`, {
+                    method: "POST",
+                    headers: { authorization: `Bearer ${token}`, "content-type": "application/json; charset=utf-8" },
+                    body: JSON.stringify(body),
+                    signal,
+                });
+            }
+            const scopeHeader = res.headers.get("x-oauth-scopes") ?? "";
+            const grantedScopes = scopeHeader
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean);
+            let json = {};
+            try {
+                json = (await res.json());
+            }
+            catch {
+                /* non-JSON */
+            }
+            const ok = res.ok && json.ok === true;
+            return { ok, status: res.status, grantedScopes, json, error: ok ? undefined : String(json.error ?? `http ${res.status}`) };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, grantedScopes: [], json: {}, error: `web-api transport: ${e.message}` };
+    }
+}
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export async function getGrantedScopes(token, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("auth.test", token, {}, fetchImpl, timeoutMs);
+    return { ok: r.ok, granted: r.grantedScopes, error: r.error };
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export async function verifyScopes(token, required, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const g = await getGrantedScopes(token, fetchImpl, timeoutMs);
+    if (!g.ok)
+        return { ok: false, granted: g.granted, missing: required, error: g.error };
+    const grantedSet = new Set(g.granted);
+    const missing = required.filter((s) => !grantedSet.has(s));
+    return { ok: missing.length === 0, granted: g.granted, missing };
+}
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export async function verifyChannelMembership(token, channel, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("conversations.info", token, { channel }, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, isMember: false, error: r.error };
+    const ch = (r.json.channel ?? {});
+    return { ok: true, isMember: ch.is_member === true, name: ch.name };
+}
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export async function openSocketConnection(appToken, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("apps.connections.open", appToken, {}, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, url: r.json.url };
+}
+// ── S10 outbound images — the EXTERNAL-UPLOAD flow (the only living upload path) ────────────
+// `files.upload` was sunset 2025-11-12 and no longer functions (affordance-verified). The flow:
+//   1. files.getUploadURLExternal (filename, length)  → { upload_url, file_id }
+//   2. POST the raw bytes to upload_url (octet-stream)
+//   3. files.completeUploadExternal ({ files, channel_id, thread_ts?, initial_comment? })
+// Scope: files:write. thread_ts attaches the file INTO the conversation thread.
+export async function getUploadURLExternal(token, filename, length, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("files.getUploadURLExternal", token, { filename, length }, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, uploadUrl: r.json.upload_url, fileId: r.json.file_id };
+}
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export async function uploadBytesExternal(uploadUrl, bytes, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(uploadUrl, {
+                method: "POST",
+                headers: { "content-type": "application/octet-stream" },
+                body: bytes,
+                signal,
+            });
+            if (!res.ok)
+                return { ok: false, status: res.status, error: `upload ${res.status}` };
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `upload transport: ${e.message}` };
+    }
+}
+export async function completeUploadExternal(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { files: input.files, channel_id: input.channelId };
+    if (input.threadTs)
+        body.thread_ts = input.threadTs;
+    if (input.initialComment)
+        body.initial_comment = input.initialComment;
+    const r = await callWebApi("files.completeUploadExternal", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, error: r.error };
+}
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export async function fetchRecentMessageTexts(token, channel, threadTs, fetchImpl = defaultFetch, limit = 100, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const method = threadTs ? "conversations.replies" : "conversations.history";
+    const body = threadTs ? { channel, ts: threadTs, limit } : { channel, limit };
+    const r = await callWebApi(method, token, body, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, texts: [], error: r.error };
+    const messages = (r.json.messages ?? []);
+    return { ok: true, texts: messages.map((m) => String(m.text ?? "")) };
+}
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export async function postChatMessage(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { channel: input.channel, text: input.text };
+    if (input.blocks?.length)
+        body.blocks = input.blocks;
+    if (input.thread_ts)
+        body.thread_ts = input.thread_ts;
+    const r = await callWebApi("chat.postMessage", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, status: r.status, ts: typeof r.json.ts === "string" ? r.json.ts : undefined, error: r.error };
+}
+//# sourceMappingURL=slack-api.js.map

package/daemon/dist/domain/gateway/slack/slack-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,iEAAiE;AAIjE,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC,KAAK,UAAU,WAAW,CAAI,SAAiB,EAAE,GAAwC;IACvF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAiBD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,IAA6B,EAC7B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB,EAC9B,QAA4B,WAAW;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,GAAa,CAAC;YAClB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,6EAA6E;gBAC7E,mFAAmF;gBACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;wBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBAC7C,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,SAAS,CAAC,yBAAyB,MAAM,EAAE,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;oBAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,IAAI,GAA4B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChE,CAAC;AASD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,QAAkB,EAClB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2C,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC;AACjD,CAAC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,gFAAgF;AAChF,uDAAuD;AACvD,0FAA0F;AAC1F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,MAAc,EACd,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,UAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAiB,EAAE,CAAC;AAChG,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,KAAiB,EACjB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACvD,IAAI,EAAE,KAAuC;gBAC7C,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAAiH,EACjH,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IACpD,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;wFAGwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,QAA4B,EAC5B,YAAuB,YAAY,EACnC,KAAK,GAAG,GAAG,EACX,SAAS,GAAG,kBAAkB;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5E,MAAM,IAAI,GAA4B,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAUD;;;;uFAIuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,KAA2B,EAC3B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACrD,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACnH,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts

@@ -0,0 +1,47 @@
+import { type FetchImpl } from "./slack-api.js";
+import type { SeenStore } from "./state-store.js";
+import type { SubsystemDeliverFn } from "../gateway-subsystem.js";
+import type { OutboundPostPayload } from "./outbound-driver.js";
+export interface SubsystemSlackDeliveryOpts {
+    botToken: string;
+    channel: string;
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    fetchImpl?: FetchImpl;
+    /** decisionId-keyed delivered-store (idempotent redelivery: replay re-acks, never re-posts). */
+    delivered: SeenStore;
+    /** H — decisionId-keyed ATTEMPTED-store, marked BEFORE the HTTP post. A retry of an attempted
+     *  decision has an AMBIGUOUS prior outcome (a timeout may have landed), so it RECONCILES by
+     *  marker before any resend — never a blind repost. Distinct from `delivered` (proven 2xx). */
+    attempted: SeenStore;
+    /** qitemId-keyed outbound seen-state (slice-11: marked ONLY after a successful post). */
+    outboundSeen: SeenStore;
+    /** Release the outbound driver's in-flight guard once a qitem is durably seen. */
+    release?: (qitemId: string) => void;
+    /** E (thread routing): resolve the thread anchor for this payload; undefined = new root.
+     *  Wired by the thread-seat map; absent in the pre-routing composition. */
+    resolveThreadTs?: (payload: OutboundPostPayload) => string | undefined;
+    /** E: record a NEW root's ts so the conversation threads from here on. */
+    onPostedRoot?: (payload: OutboundPostPayload, ts: string) => void;
+    /** F (interim loudness rule): return the Slack USER ID to mention for an ESCALATION payload,
+     *  undefined for everything else (quiet-threaded). The composition wires the registry lookup
+     *  + the escalation predicate; delivery just renders what it is told. */
+    resolveMentionUserId?: (payload: OutboundPostPayload) => string | undefined;
+    /** G — read a LOCAL image the evidenceRef points at (the founder screenshot class: a seat's
+     *  file has no public URL, so it rides the EXTERNAL-UPLOAD flow into the thread). Injectable
+     *  for hermetic tests; default reads the filesystem, image extensions only. Return null =
+     *  not an uploadable local image. */
+    readLocalImage?: (refPath: string) => {
+        bytes: Uint8Array;
+        filename: string;
+    } | null;
+    log?: (msg: string) => void;
+}
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export declare function defaultReadLocalImage(refPath: string): {
+    bytes: Uint8Array;
+    filename: string;
+} | null;
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export declare function subsystemSlackDeliver(opts: SubsystemSlackDeliveryOpts): SubsystemDeliverFn;
+//# sourceMappingURL=slack-delivery.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA+G,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7J,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gGAAgG;IAChG,SAAS,EAAE,SAAS,CAAC;IACrB;;mGAE+F;IAC/F,SAAS,EAAE,SAAS,CAAC;IACrB,yFAAyF;IACzF,YAAY,EAAE,SAAS,CAAC;IACxB,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;+EAC2E;IAC3E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE;;6EAEyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5E;;;yCAGqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAID,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrG;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,kBAAkB,CAyH1F"}