@openrig/cli 0.5.3 → 0.5.5

package/daemon/dist/domain/gateway/slack/slack-delivery.js

@@ -0,0 +1,147 @@
+// S10 — the subsystem's Slack DELIVERY path (successor to the retired connector-server's
+// slackDeliverFn; the proof-1 semantics carry over unchanged): render the OutboundDecision to a
+// hygienic payload (slice-11 item 7 redaction + Block Kit via message.ts) and post it. A 2xx →
+// ok (the in-process ack drains the durable buffer); any failure → a bounded failure class (the
+// wire retains + replays — fail-visible, never a silent drop).
+//
+// Changes from the retired path, each contract-driven:
+//   - postWebhook → postChatMessage: the R2 thread shape needs thread_ts, which a webhook
+//     cannot carry. The webhook retires with the relay.
+//   - decisionId idempotent redelivery moved HERE from the connector: an already-delivered
+//     decisionId is re-acked WITHOUT re-posting (the delivered-store is the same SeenStore
+//     pattern, keyed by decisionId — distinct from the qitemId outbound seen-state).
+//   - delivered-ok additionally marks the qitemId seen (slice-11: seen ONLY after success) and
+//     releases the driver's in-flight guard.
+import fs from "node:fs";
+import path from "node:path";
+import { postChatMessage, getUploadURLExternal, uploadBytesExternal, completeUploadExternal, fetchRecentMessageTexts } from "./slack-api.js";
+import { buildOutboundMessage, attributionFromSession, reconcileToken } from "./message.js";
+const LOCAL_IMAGE_EXT = new Set([".png", ".jpg", ".jpeg", ".gif", ".webp"]);
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export function defaultReadLocalImage(refPath) {
+    try {
+        if (!path.isAbsolute(refPath))
+            return null;
+        if (!LOCAL_IMAGE_EXT.has(path.extname(refPath).toLowerCase()))
+            return null;
+        const bytes = fs.readFileSync(refPath);
+        return { bytes: new Uint8Array(bytes), filename: path.basename(refPath) };
+    }
+    catch {
+        return null;
+    }
+}
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export function subsystemSlackDeliver(opts) {
+    const log = opts.log ?? (() => { });
+    return async (decision) => {
+        // Idempotent redelivery: an already-delivered decisionId is re-acked without re-posting.
+        if (opts.delivered.load().has(decision.decisionId)) {
+            log(`delivery: decision ${decision.decisionId} already delivered — re-ack, no re-post`);
+            return { ok: true };
+        }
+        const q = (decision.payload ?? {});
+        // M1 A5b (carried over from the retired sweep): an alert's evidenceRef IS the artifact the
+        // human judges — an https image URL rides as a Block Kit image. buildImageBlocks stays the
+        // single hygiene gate (drops non-https / secret-bearing), so the predicate lives in ONE place.
+        const mediaRefs = Array.isArray(q.media)
+            ? q.media
+            : q.evidenceRef
+                ? [{ imageUrl: String(q.evidenceRef), altText: q.summary ?? "attachment" }]
+                : undefined;
+        const payload = buildOutboundMessage({
+            qitemId: q.qitemId ?? decision.decisionId,
+            summary: q.summary,
+            body: q.body,
+            destinationSession: q.destinationSession ?? decision.entityBindingRef,
+        }, {
+            sourceLabel: opts.sourceLabel,
+            bodyExcerpt: opts.bodyExcerpt,
+            mediaRefs,
+            // A1.2 — attribution rides every post; identity stays the app's own (postChatMessage
+            // structurally cannot carry username/icon overrides — the customize-absence rail).
+            attribution: attributionFromSession(q.sourceSession),
+            mentionUserId: opts.resolveMentionUserId?.(q),
+            // fix-r3 — the reconcile identity, reserved outside the clamp budget (same function
+            // the scan below matches: one identity, same bytes, both sides).
+            reconcileMarker: reconcileToken(decision.decisionId),
+        });
+        const threadTs = opts.resolveThreadTs?.(q);
+        // H — RECONCILE-BY-MARKER before any RESEND: if this decision was attempted before, the
+        // prior outcome is ambiguous (a timeout may have posted). Search where the message would
+        // live (the thread, else channel history) for the message's STRUCTURAL identity; FOUND →
+        // already delivered, record + ack, never repost. Search failure = stay ambiguous = retain
+        // for the next replay (never a blind repost on an unreadable channel — a duplicate human
+        // notification is the red; a delay is not).
+        // fix-r3 (R2 exactly-once): the identity is reconcileToken(decisionId) — a bounded,
+        // decision-scoped token the renderer reserves OUTSIDE the clamp budget, so it is
+        // GUARANTEED present in the scanned top-level text at any ordinary length, and ordinary
+        // prose quoting a qitem id can never reproduce it (it embeds the daemon-minted
+        // decisionId in a delimited form). Producer and scanner call the same function: one
+        // identity, same bytes, both sides.
+        const marker = reconcileToken(decision.decisionId);
+        if (opts.attempted.load().has(decision.decisionId)) {
+            const scan = await fetchRecentMessageTexts(opts.botToken, opts.channel, threadTs, opts.fetchImpl);
+            if (!scan.ok) {
+                log(`reconcile scan failed for ${decision.decisionId} (${scan.error}) — retained, no blind repost`);
+                return { ok: false, class: "reconcile-unreadable", detail: scan.error };
+            }
+            if (scan.texts.some((t) => t.includes(marker))) {
+                log(`reconcile: marker "${marker}" FOUND — prior ambiguous post landed; ack without repost`);
+                opts.delivered.mark(decision.decisionId, "reconciled-delivered");
+                if (q.qitemId) {
+                    opts.outboundSeen.mark(q.qitemId, "posted");
+                    opts.release?.(q.qitemId);
+                }
+                return { ok: true };
+            }
+            log(`reconcile: marker "${marker}" absent — safe to send`);
+        }
+        // Marked ATTEMPTED durably BEFORE the post: from here any outcome is ambiguous until 2xx.
+        opts.attempted.mark(decision.decisionId, "attempted");
+        const res = await postChatMessage(opts.botToken, { channel: opts.channel, text: payload.text, blocks: payload.blocks, thread_ts: threadTs }, opts.fetchImpl);
+        if (!res.ok) {
+            return { ok: false, class: res.status === 0 ? "transport" : `http-${res.status}`, detail: res.error };
+        }
+        // Delivered: record decisionId BEFORE returning ok (a crash after this point re-acks via
+        // dedup — no double-post; before it, the wire retains + replays — at-least-once, never a drop).
+        opts.delivered.mark(decision.decisionId, "delivered");
+        if (q.qitemId) {
+            opts.outboundSeen.mark(q.qitemId, "posted"); // slice-11: seen ONLY after success
+            opts.release?.(q.qitemId);
+        }
+        if (res.ts && threadTs === undefined)
+            opts.onPostedRoot?.(q, res.ts);
+        // G — a LOCAL image evidenceRef (the founder screenshot) rides the EXTERNAL-UPLOAD flow
+        // into the conversation thread (files.upload is sunset). Upload failure is fail-VISIBLE
+        // but does NOT fail the decision: the text delivered; failing here would replay the whole
+        // post and duplicate the human notification (the H red). https refs already rode as Block
+        // Kit image blocks above; non-image/non-existent refs are a clean skip.
+        const local = q.evidenceRef && !/^https:\/\//.test(String(q.evidenceRef))
+            ? (opts.readLocalImage ?? defaultReadLocalImage)(String(q.evidenceRef))
+            : null;
+        if (local) {
+            const intoThread = threadTs ?? res.ts;
+            const up = await getUploadURLExternal(opts.botToken, local.filename, local.bytes.length, opts.fetchImpl);
+            if (up.ok && up.uploadUrl && up.fileId) {
+                const put = await uploadBytesExternal(up.uploadUrl, local.bytes, opts.fetchImpl);
+                if (put.ok) {
+                    const done = await completeUploadExternal(opts.botToken, { files: [{ id: up.fileId, title: q.summary ?? local.filename }], channelId: opts.channel, threadTs: intoThread }, opts.fetchImpl);
+                    if (done.ok)
+                        log(`uploaded ${local.filename} into thread ${intoThread ?? "(root)"} for ${q.qitemId ?? decision.decisionId}`);
+                    else
+                        log(`ATTACHMENT upload complete FAILED for ${q.qitemId ?? decision.decisionId}: ${done.error} (text delivered; attachment missing)`);
+                }
+                else {
+                    log(`ATTACHMENT byte upload FAILED for ${q.qitemId ?? decision.decisionId}: ${put.error} (text delivered; attachment missing)`);
+                }
+            }
+            else {
+                log(`ATTACHMENT upload-url FAILED for ${q.qitemId ?? decision.decisionId}: ${up.error} (text delivered; attachment missing)`);
+            }
+        }
+        log(`delivered ${decision.decisionId}${q.qitemId ? ` (qitem ${q.qitemId})` : ""}`);
+        return { ok: true };
+    };
+}
+//# sourceMappingURL=slack-delivery.js.map

package/daemon/dist/domain/gateway/slack/slack-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,gGAAgG;AAChG,+FAA+F;AAC/F,gGAAgG;AAChG,+DAA+D;AAC/D,EAAE;AACF,uDAAuD;AACvD,0FAA0F;AAC1F,wDAAwD;AACxD,2FAA2F;AAC3F,2FAA2F;AAC3F,qFAAqF;AACrF,+FAA+F;AAC/F,6CAA6C;AAE7C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EAAkB,MAAM,gBAAgB,CAAC;AAC7J,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAuChH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAgC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,EAAE,QAA0B,EAAqC,EAAE;QAC7E,yFAAyF;QACzF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,sBAAsB,QAAQ,CAAC,UAAU,yCAAyC,CAAC,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAsD,CAAC;QACxF,2FAA2F;QAC3F,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,SAAS,GAAgC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;gBAC3E,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,oBAAoB,CAClC;YACE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU;YACzC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,QAAQ,CAAC,gBAAgB;SACtE,EACD;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS;YACT,qFAAqF;YACrF,mFAAmF;YACnF,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YAC7C,oFAAoF;YACpF,iEAAiE;YACjE,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;SACrD,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3C,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,yFAAyF;QACzF,4CAA4C;QAC5C,oFAAoF;QACpF,iFAAiF;QACjF,wFAAwF;QACxF,+EAA+E;QAC/E,oFAAoF;QACpF,oCAAoC;QACpC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,6BAA6B,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,+BAA+B,CAAC,CAAC;gBACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,sBAAsB,MAAM,2DAA2D,CAAC,CAAC;gBAC7F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC5C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,GAAG,CAAC,sBAAsB,MAAM,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,0FAA0F;QAC1F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,eAAe,CAC/B,IAAI,CAAC,QAAQ,EACb,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC1F,IAAI,CAAC,SAAS,CACf,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACxG,CAAC;QACD,yFAAyF;QACzF,gGAAgG;QAChG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,oCAAoC;YACjF,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAErE,wFAAwF;QACxF,wFAAwF;QACxF,0FAA0F;QAC1F,0FAA0F;QAC1F,wEAAwE;QACxE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,GAAG,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzG,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,MAAM,sBAAsB,CACvC,IAAI,CAAC,QAAQ,EACb,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EACjH,IAAI,CAAC,SAAS,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,EAAE;wBAAE,GAAG,CAAC,YAAY,KAAK,CAAC,QAAQ,gBAAgB,UAAU,IAAI,QAAQ,QAAQ,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;;wBACxH,GAAG,CAAC,yCAAyC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAC5I,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,qCAAqC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAClI,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,oCAAoC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC,KAAK,uCAAuC,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-subsystem.d.ts

@@ -0,0 +1,21 @@
+import { type GatewayWire } from "../gateway-subsystem.js";
+import { type RegistrySurface } from "./inbound-admission.js";
+import { type WsLike } from "./socket-inbound.js";
+import type { QueueRepository } from "../../queue-repository.js";
+import type { FetchImpl } from "./slack-api.js";
+export interface SlackWireOpts {
+    home: string;
+    queueRepo: QueueRepository;
+    log?: (msg: string) => void;
+    /** Injectable seams (tests): fetch, websocket factory, sweep cadence, registry surface. */
+    fetchImpl?: FetchImpl;
+    wsFactory?: (url: string) => WsLike;
+    outboundIntervalMs?: number;
+    inboundRetryIntervalMs?: number;
+    inboundMaxConnects?: number;
+    registry?: RegistrySurface;
+}
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export declare function buildSlackGatewayWire(opts: SlackWireOpts): GatewayWire;
+//# sourceMappingURL=slack-subsystem.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-subsystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-subsystem.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-subsystem.ts"],"names":[],"mappings":"AAeA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAQ/E,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EAAgD,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEhG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,2FAA2F;IAC3F,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAMD;wEACwE;AACxE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,CAiKtE"}

package/daemon/dist/domain/gateway/slack/slack-subsystem.js

@@ -0,0 +1,198 @@
+// S10 — the SLACK gateway wiring: composes the in-process wire (shipped dispatcher + durable
+// buffer), the chat.postMessage delivery path, the outbound queue-poll driver, and the Socket
+// Mode inbound service into ONE GatewayWire the subsystem activates at daemon boot.
+//
+// Configuration honesty: an unconfigured/disabled connector yields an INERT wire — delivery
+// refuses with a named class, no ops advertised, no drivers started — never a throw (boot
+// proceeds; `rig slack status` names what is missing) and never a silent pretend-active
+// delivery path.
+//
+// Durable-state continuity through the cutover: the SAME slice-11 state files carry over
+// (slack-outbound-seen.jsonl, slack-inbound-seen.jsonl, slack-inbound-deadletter.jsonl), so
+// the relay's history IS the subsystem's history — enabling the subsystem replays nothing the
+// relay already delivered (the enable-time backlog rule survives the cutover by construction).
+import path from "node:path";
+import { buildInProcessWire } from "../gateway-subsystem.js";
+import { loadConfig } from "./config.js";
+import { resolveSecret } from "./secrets.js";
+import { SeenStore, DeadLetterStore } from "./state-store.js";
+import { makeQueuePorts } from "./queue-access.js";
+import { SlackOutboundDriver, OUTBOUND_OP } from "./outbound-driver.js";
+import { subsystemSlackDeliver } from "./slack-delivery.js";
+import { InboundRouter } from "./inbound.js";
+import { makeInboundSenderResolver } from "./inbound-admission.js";
+import { ThreadSeatMap, formatPostedStamp } from "./thread-seat-map.js";
+import { makeThreadRouteResolver } from "./thread-routing.js";
+import { startSocketInbound } from "./socket-inbound.js";
+import { loadHumanRegistry, resolveSlackHandle } from "../human-registry.js";
+const SECRET_BOT = "SLACK_BOT_TOKEN";
+const SECRET_APP = "SLACK_APP_TOKEN";
+function stateDir(home) {
+    return path.join(home, "state");
+}
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export function buildSlackGatewayWire(opts) {
+    const log = opts.log ?? (() => { });
+    const cfg = loadConfig(opts.home);
+    const envFile = cfg.secretsEnvFile ?? undefined;
+    const bot = resolveSecret(SECRET_BOT, { envFile });
+    const app = resolveSecret(SECRET_APP, { envFile });
+    const outboundReady = cfg.enabled && bot !== null && cfg.channel !== null;
+    const inboundReady = cfg.enabled && app !== null;
+    if (!outboundReady && !inboundReady) {
+        const missing = !cfg.enabled ? "connector disabled (rig slack enable)" : !bot ? "SLACK_BOT_TOKEN unresolved" : "channel unconfigured";
+        log(`slack delivery not configured (${missing}) — wire is inert; dispatches would be refused honestly`);
+        return buildInProcessWire({
+            home: opts.home,
+            ops: [],
+            deliver: async () => ({ ok: false, class: "slack-not-configured", detail: missing }),
+            log,
+        });
+    }
+    const ports = makeQueuePorts(opts.queueRepo);
+    const outboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-outbound-seen.jsonl"));
+    const delivered = new SeenStore(path.join(stateDir(opts.home), "slack-delivered-decisions.jsonl"));
+    const attempted = new SeenStore(path.join(stateDir(opts.home), "slack-attempted-decisions.jsonl"));
+    // S10 thread routing — the map shares the daemon DB (queue rows carry the rebuild stamps).
+    const threadMap = new ThreadSeatMap(opts.queueRepo.db);
+    // Late-bound so deliver can release the driver's in-flight guard (built after the wire).
+    let releaseRef = () => { };
+    const deliver = outboundReady
+        ? subsystemSlackDeliver({
+            botToken: bot,
+            channel: cfg.channel,
+            sourceLabel: cfg.sourceLabel,
+            fetchImpl: opts.fetchImpl,
+            delivered,
+            attempted,
+            outboundSeen,
+            release: (q) => releaseRef(q),
+            // Thread reuse: an open (human, seat) conversation threads; otherwise a new root.
+            // For an outbound alert, human = the destination seat-ref, seat = the source seat.
+            resolveThreadTs: (p) => threadMap.resolveOpenForPair(p.destinationSession ?? "", p.sourceSession ?? "")?.threadTs,
+            // F — interim loudness rule: ONLY an escalation mentions its human (tier human-gate or
+            // an escalation tag); the mention id is the registered human's slack HANDLE from the
+            // registry. No handle / not registered → quiet (a mention that cannot resolve is
+            // silence, never a guessed id).
+            resolveMentionUserId: (p) => {
+                const escalation = p.tier === "human-gate" || (p.tags ?? []).includes("escalation");
+                if (!escalation)
+                    return undefined;
+                const local = (p.destinationSession ?? "").split("@")[0] ?? "";
+                if (!local)
+                    return undefined;
+                const reg = (opts.registry ?? { loadHumanRegistry, resolveSlackHandle }).loadHumanRegistry(opts.home);
+                if (!reg.ok)
+                    return undefined;
+                for (const e of reg.entities) {
+                    if (e.entityId !== local)
+                        continue;
+                    for (const b of e.connectorBindings) {
+                        if (b.kind === "slack" && b.handle)
+                            return b.handle;
+                    }
+                }
+                return undefined;
+            },
+            onPostedRoot: (p, ts) => {
+                const human = p.destinationSession ?? "";
+                const seat = p.sourceSession ?? "";
+                threadMap.open({ threadTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId });
+                // The REBUILD stamp: the queue row is the durable source the map re-derives from.
+                try {
+                    opts.queueRepo.update({
+                        qitemId: p.qitemId,
+                        actorSession: "daemon@kernel",
+                        transitionNote: formatPostedStamp({ threadTs: ts, messageTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId }),
+                    });
+                }
+                catch (e) {
+                    // Stamp failure degrades REBUILDABILITY, not routing — loud, never fatal to delivery.
+                    log(`thread stamp failed for ${p.qitemId}: ${e.message}`);
+                }
+            },
+            log,
+        })
+        : async () => ({ ok: false, class: "slack-outbound-not-configured", detail: "bot token or channel missing" });
+    const wire = buildInProcessWire({
+        home: opts.home,
+        ops: outboundReady ? [OUTBOUND_OP] : [],
+        deliver,
+        log,
+    });
+    // Services are CONSTRUCTED here but started only via startServices() (post-bind, index.ts):
+    // composing a daemon must never dial Slack or start pollers — the createDaemon-in-tests
+    // hermeticity rule, same as every monitor in the supervision tree.
+    const stops = [];
+    const starts = [];
+    if (outboundReady) {
+        const driver = new SlackOutboundDriver({
+            home: opts.home,
+            queue: ports,
+            seen: outboundSeen,
+            filter: { alertTag: cfg.alertTag, destinations: cfg.outboundDestinations },
+            dispatch: (op, ref, payload) => wire.dispatcher.dispatch(op, ref, payload),
+            intervalMs: opts.outboundIntervalMs,
+            log,
+        });
+        releaseRef = (q) => driver.release(q);
+        starts.push(() => {
+            driver.start();
+            log("slack outbound driver started (subsystem path)");
+        });
+        stops.push(() => driver.stop());
+    }
+    if (inboundReady) {
+        const inboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-inbound-seen.jsonl"));
+        const dead = new DeadLetterStore(path.join(stateDir(opts.home), "slack-inbound-deadletter.jsonl"));
+        const registry = opts.registry ?? { loadHumanRegistry, resolveSlackHandle };
+        const router = new InboundRouter({
+            queue: ports,
+            seen: inboundSeen,
+            deadLetter: dead,
+            destination: cfg.inboundDestination,
+            resolveSender: makeInboundSenderResolver(registry, opts.home),
+            // S10 — deterministic thread routing: mapped thread → exactly the mapped seat; unmapped
+            // or human-initiated → the configured orchestrator slot as an unrouted-signal row.
+            resolveRoute: makeThreadRouteResolver({ map: threadMap, unroutedDestination: cfg.inboundDestination, log }),
+            log,
+        });
+        let handle;
+        starts.push(() => {
+            handle = startSocketInbound(app, router, {
+                fetchImpl: opts.fetchImpl,
+                wsFactory: opts.wsFactory,
+                retryIntervalMs: opts.inboundRetryIntervalMs,
+                inboundMaxConnects: opts.inboundMaxConnects,
+                log,
+            });
+            log("slack socket-mode inbound started (subsystem path)");
+        });
+        stops.push(() => handle?.stop());
+    }
+    const baseStop = wire.stop;
+    const baseStartServices = wire.startServices;
+    let servicesLive = false;
+    return {
+        dispatcher: wire.dispatcher,
+        startServices: () => {
+            if (servicesLive)
+                return; // idempotent — a double post-bind start must not double-poll
+            servicesLive = true;
+            baseStartServices?.(); // replay un-Acked decisions through delivery (restart no-loss)
+            for (const s of starts)
+                s();
+        },
+        stop: () => {
+            for (const s of stops) {
+                try {
+                    s();
+                }
+                catch { /* best-effort */ }
+            }
+            baseStop();
+        },
+    };
+}
+//# sourceMappingURL=slack-subsystem.js.map

package/daemon/dist/domain/gateway/slack/slack-subsystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-subsystem.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-subsystem.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,8FAA8F;AAC9F,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAC1F,wFAAwF;AACxF,iBAAiB;AACjB,EAAE;AACF,yFAAyF;AACzF,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAE/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAoB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAwB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAyC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAI7E,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAerC,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,CAAC;IAEjD,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACtI,GAAG,CAAC,kCAAkC,OAAO,yDAAyD,CAAC,CAAC;QACxG,OAAO,kBAAkB,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACpF,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAEnG,2FAA2F;IAC3F,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEvD,yFAAyF;IACzF,IAAI,UAAU,GAA8B,GAAG,EAAE,GAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,aAAa;QAC3B,CAAC,CAAC,qBAAqB,CAAC;YACpB,QAAQ,EAAE,GAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,SAAS;YACT,YAAY;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7B,kFAAkF;YAClF,mFAAmF;YACnF,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACrB,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,QAAQ;YAC3F,uFAAuF;YACvF,qFAAqF;YACrF,iFAAiF;YACjF,gCAAgC;YAChC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACpF,IAAI,CAAC,UAAU;oBAAE,OAAO,SAAS,CAAC;gBAClC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtG,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;wBAAE,SAAS;oBACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;wBACpC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM;4BAAE,OAAO,CAAC,CAAC,MAAM,CAAC;oBACtD,CAAC;gBACH,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChG,kFAAkF;gBAClF,IAAI,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,YAAY,EAAE,eAAe;wBAC7B,cAAc,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;qBAClI,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,sFAAsF;oBACtF,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,GAAG;SACJ,CAAC;QACJ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAEzH,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACvC,OAAO;QACP,GAAG;KACJ,CAAC,CAAC;IAEH,4FAA4F;IAC5F,wFAAwF;IACxF,mEAAmE;IACnE,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,oBAAoB,EAAE;YAC1E,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC;YAC1E,UAAU,EAAE,IAAI,CAAC,kBAAkB;YACnC,GAAG;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,eAAe,CAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAoB,IAAI,CAAC,QAAQ,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,GAAG,CAAC,kBAAkB;YACnC,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YAC7D,wFAAwF;YACxF,mFAAmF;YACnF,YAAY,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,MAAuC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,kBAAkB,CAAC,GAAI,EAAE,MAAM,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,sBAAsB;gBAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,GAAG;aACJ,CAAC,CAAC;YACH,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC;IAC7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,YAAY;gBAAE,OAAO,CAAC,6DAA6D;YACvF,YAAY,GAAG,IAAI,CAAC;YACpB,iBAAiB,EAAE,EAAE,CAAC,CAAC,+DAA+D;YACtF,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YACnE,QAAQ,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/socket-inbound.d.ts

@@ -0,0 +1,30 @@
+import { type FetchImpl } from "./slack-api.js";
+import { type InboundRouter } from "./inbound.js";
+export interface WsLike {
+    send(data: string): void;
+    close(): void;
+    onopen: ((this: unknown, ev?: unknown) => void) | null;
+    onmessage: ((this: unknown, ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((this: unknown, ev?: unknown) => void) | null;
+    onerror: ((this: unknown, ev?: unknown) => void) | null;
+}
+export interface SocketInboundDeps {
+    fetchImpl?: FetchImpl;
+    /** Open a Socket Mode WebSocket (default: global WebSocket). Injectable for tests. */
+    wsFactory?: (url: string) => WsLike;
+    /** Test seam: run N reconnect cycles then stop (default: forever, until stop()). */
+    inboundMaxConnects?: number;
+    /** Dead-letter retry cadence WHILE the socket stays connected (default 5min). */
+    retryIntervalMs?: number;
+    log?: (msg: string) => void;
+}
+export interface SocketInboundHandle {
+    /** Resolves when the loop ends (maxConnects reached or stop() called). */
+    done: Promise<void>;
+    stop(): void;
+}
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export declare function startSocketInbound(appToken: string, router: InboundRouter, deps?: SocketInboundDeps): SocketInboundHandle;
+//# sourceMappingURL=socket-inbound.d.ts.map

package/daemon/dist/domain/gateway/slack/socket-inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAWA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAkB,KAAK,aAAa,EAAuB,MAAM,cAAc,CAAC;AAEvF,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sFAAsF;IACtF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,GAAE,iBAAsB,GAAG,mBAAmB,CA0E7H"}

package/daemon/dist/domain/gateway/slack/socket-inbound.js

@@ -0,0 +1,99 @@
+// S10 — the Socket Mode INBOUND service, in-daemon. The loop is the shipped relay runner's
+// (moved verbatim from the CLI `rig slack inbound` action, which retires with the cutover):
+// open the ws via apps.connections.open, FAST-ACK every envelope, route human messages through
+// the InboundRouter, drain the dead-letter on connect + periodically (B1), reconnect with
+// backoff. Amendment A1 (M1 §3): inbound rides the PLATFORM socket — this service — never a
+// gateway↔connector wire.
+//
+// Cold-init receipts (dual-path class "inbound cold-init"): on every (re)connect the router's
+// dead-letter set drains before new traffic matters, and a fresh boot picks up where the
+// durable seen/dead-letter stores left off — no replay storm, no drop.
+import { openSocketConnection } from "./slack-api.js";
+import { handleEnvelope } from "./inbound.js";
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export function startSocketInbound(appToken, router, deps = {}) {
+    const log = deps.log ?? (() => { });
+    const wsFactory = deps.wsFactory ?? ((url) => new globalThis.WebSocket(url));
+    const retryIntervalMs = deps.retryIntervalMs ?? 5 * 60 * 1000;
+    let connects = 0;
+    let backoff = 1000;
+    let stopped = false;
+    let liveWs;
+    let pendingTimer;
+    const done = new Promise((resolve) => {
+        const connect = async () => {
+            if (stopped)
+                return resolve();
+            connects++;
+            const open = await openSocketConnection(appToken, deps.fetchImpl);
+            if (stopped)
+                return resolve();
+            if (!open.ok || !open.url) {
+                log(`connect failed: ${open.error}`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+                return;
+            }
+            const ws = wsFactory(open.url);
+            liveWs = ws;
+            let retryTimer;
+            ws.onopen = () => {
+                backoff = 1000;
+                log("socket connected");
+                void router.retryDeadLetters(); // drain on connect (cold-init)…
+                // …AND periodically WHILE connected (B1: recovery after a queue outage
+                // must not wait for the next Slack reconnect). Cleared on close.
+                retryTimer = setInterval(() => void router.retryDeadLetters(), retryIntervalMs);
+                if (typeof retryTimer.unref === "function") {
+                    retryTimer.unref();
+                }
+            };
+            ws.onmessage = (m) => {
+                let env;
+                try {
+                    env = JSON.parse(String(m.data));
+                }
+                catch {
+                    return;
+                }
+                void handleEnvelope(env, () => env.envelope_id && ws.send(JSON.stringify({ envelope_id: env.envelope_id })), router, log);
+            };
+            ws.onclose = () => {
+                if (retryTimer)
+                    clearInterval(retryTimer);
+                liveWs = undefined;
+                if (stopped)
+                    return resolve();
+                log(`socket closed; reconnect in ${backoff}ms`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+            };
+            ws.onerror = () => {
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            };
+        };
+        void connect();
+    });
+    return {
+        done,
+        stop: () => {
+            stopped = true;
+            if (pendingTimer)
+                clearTimeout(pendingTimer);
+            try {
+                liveWs?.close();
+            }
+            catch { /* best-effort */ }
+        },
+    };
+}
+//# sourceMappingURL=socket-inbound.js.map

package/daemon/dist/domain/gateway/slack/socket-inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,4FAA4F;AAC5F,+FAA+F;AAC/F,0FAA0F;AAC1F,4FAA4F;AAC5F,0BAA0B;AAC1B,EAAE;AACF,8FAA8F;AAC9F,yFAAyF;AACzF,uEAAuE;AAEvE,OAAO,EAAE,oBAAoB,EAAkB,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,cAAc,EAA2C,MAAM,cAAc,CAAC;AA4BvF,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAqB,EAAE,OAA0B,EAAE;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAK,UAAkE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9I,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAA0B,CAAC;IAC/B,IAAI,YAAuD,CAAC;IAE5D,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,UAAsD,CAAC;YAC3D,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBACf,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBACxB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,gCAAgC;gBAChE,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;gBAChF,IAAI,OAAQ,UAAgD,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjF,UAA+C,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC;YACF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;gBACnB,IAAI,GAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5H,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,MAAM,GAAG,SAAS,CAAC;gBACnB,IAAI,OAAO;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC9B,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/state-store.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,WAAW,EAAE,UAQzB,CAAC;AAiBF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;IAUnB,wFAAwF;IACxF,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtC;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,SAAW,GAAG,MAAM;CAQ/C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,CAAC,CAAC;IACN,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAe,CAAC,CAAC,GAAG,OAAO;IAEpC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQrC,mDAAmD;IACnD,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE;IAU/B,yFAAyF;IACzF,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI;CAOhD"}

package/daemon/dist/domain/gateway/slack/state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/state-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,iFAAiF;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QACd,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,qDAAqD;QACpE,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC7C,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,SAAS;IAED;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,IAAI;QACF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,EAAU,EAAE,MAAc;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5G,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,GAAa,EAAE,MAAM,GAAG,QAAQ;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;CACF;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAEP;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,MAAM,CAAC,EAAK,EAAE,QAAgB;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAA+B,CAAC,GAAG,IAAI,CACnG,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,OAAO;QACL,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,UAAU,CAAC,GAAG,CAAyB,CAAC;IACjD,CAAC;IAED,yFAAyF;IACzF,UAAU,CAAC,OAA6B;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;IAClF,CAAC;CACF"}

package/daemon/dist/domain/gateway/slack/thread-routing.d.ts

@@ -0,0 +1,17 @@
+import type { SlackEvent } from "./inbound.js";
+import type { ThreadSeatMap } from "./thread-seat-map.js";
+export interface InboundRoute {
+    destination: string;
+    tags: string[];
+    /** The routing class that fired — receipts per class ride the row tags + logs. */
+    routeClass: "existing-thread" | "closed-thread" | "unmapped-thread" | "human-initiated";
+}
+export declare function makeThreadRouteResolver(opts: {
+    map: ThreadSeatMap;
+    /** The orchestrator slot for unrouted signals (first-class config: inboundDestination). */
+    unroutedDestination: string;
+    log?: (msg: string) => void;
+}): (ev: SlackEvent & {
+    thread_ts?: string;
+}) => InboundRoute;
+//# sourceMappingURL=thread-routing.d.ts.map

package/daemon/dist/domain/gateway/slack/thread-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-routing.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/thread-routing.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kFAAkF;IAClF,UAAU,EAAE,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;CACzF;AAID,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,aAAa,CAAC;IACnB,2FAA2F;IAC3F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,YAAY,CAqB5D"}

package/daemon/dist/domain/gateway/slack/thread-routing.js

@@ -0,0 +1,35 @@
+// S10 — deterministic thread ROUTING over the thread↔seat map. The four enumerated classes
+// (proof contract), each a pure lookup — zero inference:
+//   1. NEW conversation      — outbound-only: a fresh root posts un-threaded, then the map
+//                              opens (thread_ts = the posted root's ts). Inbound never mints.
+//   2. EXISTING thread       — reply carries thread_ts, map hit (open) → EXACTLY the mapped seat.
+//   3. CLOSED thread         — map hit (closed) → STILL exactly the mapped seat (closure is
+//                              conversation state, never a routing black hole).
+//   4. UNMAPPED / human-initiated — thread_ts with no mapping, or a top-level channel message
+//                              (no thread_ts): the ORCHESTRATOR's unrouted-signal row — the
+//                              configured inbound destination with the unrouted-signal tag.
+//                              Never dropped, never guessed at a seat.
+const BASE_TAGS = ["founder-slack", "inbound"];
+export function makeThreadRouteResolver(opts) {
+    const log = opts.log ?? (() => { });
+    return (ev) => {
+        const threadTs = ev.thread_ts;
+        if (threadTs) {
+            const mapping = opts.map.resolveByThread(threadTs);
+            if (mapping) {
+                // FOUNDER ROOT INVARIANT (2026-08-27): the map stores the bare local seat because the
+                // queue row's source_session is bare inside one instance — the seat routes as stored.
+                // (The interim self-host localizer from the L2 first pass was deleted with the root
+                // stamping; historical triple rows are the operator adoption's one-time cleanup.)
+                const routeClass = mapping.state === "closed" ? "closed-thread" : "existing-thread";
+                log(`inbound routed thread_ts=${threadTs} -> ${mapping.seat} (${routeClass})`);
+                return { destination: mapping.seat, tags: [...BASE_TAGS, "thread"], routeClass };
+            }
+            log(`inbound UNMAPPED thread_ts=${threadTs} -> unrouted-signal to ${opts.unroutedDestination} (never dropped, never guessed)`);
+            return { destination: opts.unroutedDestination, tags: [...BASE_TAGS, "unrouted-signal"], routeClass: "unmapped-thread" };
+        }
+        log(`inbound human-initiated (no thread_ts) -> unrouted-signal to ${opts.unroutedDestination}`);
+        return { destination: opts.unroutedDestination, tags: [...BASE_TAGS, "unrouted-signal"], routeClass: "human-initiated" };
+    };
+}
+//# sourceMappingURL=thread-routing.js.map

package/daemon/dist/domain/gateway/slack/thread-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-routing.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/thread-routing.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,yDAAyD;AACzD,2FAA2F;AAC3F,8FAA8F;AAC9F,kGAAkG;AAClG,4FAA4F;AAC5F,gFAAgF;AAChF,8FAA8F;AAC9F,4FAA4F;AAC5F,4FAA4F;AAC5F,uEAAuE;AAYvE,MAAM,SAAS,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAE/C,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,EAAE,EAAE;QACZ,MAAM,QAAQ,GAAI,EAA6B,CAAC,SAAS,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,sFAAsF;gBACtF,sFAAsF;gBACtF,oFAAoF;gBACpF,kFAAkF;gBAClF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBACpF,GAAG,CAAC,4BAA4B,QAAQ,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,GAAG,CAAC,CAAC;gBAC/E,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;YACnF,CAAC;YACD,GAAG,CAAC,8BAA8B,QAAQ,0BAA0B,IAAI,CAAC,mBAAmB,iCAAiC,CAAC,CAAC;YAC/H,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAC3H,CAAC;QACD,GAAG,CAAC,gEAAgE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAC3H,CAAC,CAAC;AACJ,CAAC"}