@openrig/cli 0.5.3 → 0.5.5

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-subsystem.js

@@ -0,0 +1,198 @@
+// S10 — the SLACK gateway wiring: composes the in-process wire (shipped dispatcher + durable
+// buffer), the chat.postMessage delivery path, the outbound queue-poll driver, and the Socket
+// Mode inbound service into ONE GatewayWire the subsystem activates at daemon boot.
+//
+// Configuration honesty: an unconfigured/disabled connector yields an INERT wire — delivery
+// refuses with a named class, no ops advertised, no drivers started — never a throw (boot
+// proceeds; `rig slack status` names what is missing) and never a silent pretend-active
+// delivery path.
+//
+// Durable-state continuity through the cutover: the SAME slice-11 state files carry over
+// (slack-outbound-seen.jsonl, slack-inbound-seen.jsonl, slack-inbound-deadletter.jsonl), so
+// the relay's history IS the subsystem's history — enabling the subsystem replays nothing the
+// relay already delivered (the enable-time backlog rule survives the cutover by construction).
+import path from "node:path";
+import { buildInProcessWire } from "../gateway-subsystem.js";
+import { loadConfig } from "./config.js";
+import { resolveSecret } from "./secrets.js";
+import { SeenStore, DeadLetterStore } from "./state-store.js";
+import { makeQueuePorts } from "./queue-access.js";
+import { SlackOutboundDriver, OUTBOUND_OP } from "./outbound-driver.js";
+import { subsystemSlackDeliver } from "./slack-delivery.js";
+import { InboundRouter } from "./inbound.js";
+import { makeInboundSenderResolver } from "./inbound-admission.js";
+import { ThreadSeatMap, formatPostedStamp } from "./thread-seat-map.js";
+import { makeThreadRouteResolver } from "./thread-routing.js";
+import { startSocketInbound } from "./socket-inbound.js";
+import { loadHumanRegistry, resolveSlackHandle } from "../human-registry.js";
+const SECRET_BOT = "SLACK_BOT_TOKEN";
+const SECRET_APP = "SLACK_APP_TOKEN";
+function stateDir(home) {
+    return path.join(home, "state");
+}
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export function buildSlackGatewayWire(opts) {
+    const log = opts.log ?? (() => { });
+    const cfg = loadConfig(opts.home);
+    const envFile = cfg.secretsEnvFile ?? undefined;
+    const bot = resolveSecret(SECRET_BOT, { envFile });
+    const app = resolveSecret(SECRET_APP, { envFile });
+    const outboundReady = cfg.enabled && bot !== null && cfg.channel !== null;
+    const inboundReady = cfg.enabled && app !== null;
+    if (!outboundReady && !inboundReady) {
+        const missing = !cfg.enabled ? "connector disabled (rig slack enable)" : !bot ? "SLACK_BOT_TOKEN unresolved" : "channel unconfigured";
+        log(`slack delivery not configured (${missing}) — wire is inert; dispatches would be refused honestly`);
+        return buildInProcessWire({
+            home: opts.home,
+            ops: [],
+            deliver: async () => ({ ok: false, class: "slack-not-configured", detail: missing }),
+            log,
+        });
+    }
+    const ports = makeQueuePorts(opts.queueRepo);
+    const outboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-outbound-seen.jsonl"));
+    const delivered = new SeenStore(path.join(stateDir(opts.home), "slack-delivered-decisions.jsonl"));
+    const attempted = new SeenStore(path.join(stateDir(opts.home), "slack-attempted-decisions.jsonl"));
+    // S10 thread routing — the map shares the daemon DB (queue rows carry the rebuild stamps).
+    const threadMap = new ThreadSeatMap(opts.queueRepo.db);
+    // Late-bound so deliver can release the driver's in-flight guard (built after the wire).
+    let releaseRef = () => { };
+    const deliver = outboundReady
+        ? subsystemSlackDeliver({
+            botToken: bot,
+            channel: cfg.channel,
+            sourceLabel: cfg.sourceLabel,
+            fetchImpl: opts.fetchImpl,
+            delivered,
+            attempted,
+            outboundSeen,
+            release: (q) => releaseRef(q),
+            // Thread reuse: an open (human, seat) conversation threads; otherwise a new root.
+            // For an outbound alert, human = the destination seat-ref, seat = the source seat.
+            resolveThreadTs: (p) => threadMap.resolveOpenForPair(p.destinationSession ?? "", p.sourceSession ?? "")?.threadTs,
+            // F — interim loudness rule: ONLY an escalation mentions its human (tier human-gate or
+            // an escalation tag); the mention id is the registered human's slack HANDLE from the
+            // registry. No handle / not registered → quiet (a mention that cannot resolve is
+            // silence, never a guessed id).
+            resolveMentionUserId: (p) => {
+                const escalation = p.tier === "human-gate" || (p.tags ?? []).includes("escalation");
+                if (!escalation)
+                    return undefined;
+                const local = (p.destinationSession ?? "").split("@")[0] ?? "";
+                if (!local)
+                    return undefined;
+                const reg = (opts.registry ?? { loadHumanRegistry, resolveSlackHandle }).loadHumanRegistry(opts.home);
+                if (!reg.ok)
+                    return undefined;
+                for (const e of reg.entities) {
+                    if (e.entityId !== local)
+                        continue;
+                    for (const b of e.connectorBindings) {
+                        if (b.kind === "slack" && b.handle)
+                            return b.handle;
+                    }
+                }
+                return undefined;
+            },
+            onPostedRoot: (p, ts) => {
+                const human = p.destinationSession ?? "";
+                const seat = p.sourceSession ?? "";
+                threadMap.open({ threadTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId });
+                // The REBUILD stamp: the queue row is the durable source the map re-derives from.
+                try {
+                    opts.queueRepo.update({
+                        qitemId: p.qitemId,
+                        actorSession: "daemon@kernel",
+                        transitionNote: formatPostedStamp({ threadTs: ts, messageTs: ts, channel: cfg.channel, human, seat, conversationId: p.qitemId }),
+                    });
+                }
+                catch (e) {
+                    // Stamp failure degrades REBUILDABILITY, not routing — loud, never fatal to delivery.
+                    log(`thread stamp failed for ${p.qitemId}: ${e.message}`);
+                }
+            },
+            log,
+        })
+        : async () => ({ ok: false, class: "slack-outbound-not-configured", detail: "bot token or channel missing" });
+    const wire = buildInProcessWire({
+        home: opts.home,
+        ops: outboundReady ? [OUTBOUND_OP] : [],
+        deliver,
+        log,
+    });
+    // Services are CONSTRUCTED here but started only via startServices() (post-bind, index.ts):
+    // composing a daemon must never dial Slack or start pollers — the createDaemon-in-tests
+    // hermeticity rule, same as every monitor in the supervision tree.
+    const stops = [];
+    const starts = [];
+    if (outboundReady) {
+        const driver = new SlackOutboundDriver({
+            home: opts.home,
+            queue: ports,
+            seen: outboundSeen,
+            filter: { alertTag: cfg.alertTag, destinations: cfg.outboundDestinations },
+            dispatch: (op, ref, payload) => wire.dispatcher.dispatch(op, ref, payload),
+            intervalMs: opts.outboundIntervalMs,
+            log,
+        });
+        releaseRef = (q) => driver.release(q);
+        starts.push(() => {
+            driver.start();
+            log("slack outbound driver started (subsystem path)");
+        });
+        stops.push(() => driver.stop());
+    }
+    if (inboundReady) {
+        const inboundSeen = new SeenStore(path.join(stateDir(opts.home), "slack-inbound-seen.jsonl"));
+        const dead = new DeadLetterStore(path.join(stateDir(opts.home), "slack-inbound-deadletter.jsonl"));
+        const registry = opts.registry ?? { loadHumanRegistry, resolveSlackHandle };
+        const router = new InboundRouter({
+            queue: ports,
+            seen: inboundSeen,
+            deadLetter: dead,
+            destination: cfg.inboundDestination,
+            resolveSender: makeInboundSenderResolver(registry, opts.home),
+            // S10 — deterministic thread routing: mapped thread → exactly the mapped seat; unmapped
+            // or human-initiated → the configured orchestrator slot as an unrouted-signal row.
+            resolveRoute: makeThreadRouteResolver({ map: threadMap, unroutedDestination: cfg.inboundDestination, log }),
+            log,
+        });
+        let handle;
+        starts.push(() => {
+            handle = startSocketInbound(app, router, {
+                fetchImpl: opts.fetchImpl,
+                wsFactory: opts.wsFactory,
+                retryIntervalMs: opts.inboundRetryIntervalMs,
+                inboundMaxConnects: opts.inboundMaxConnects,
+                log,
+            });
+            log("slack socket-mode inbound started (subsystem path)");
+        });
+        stops.push(() => handle?.stop());
+    }
+    const baseStop = wire.stop;
+    const baseStartServices = wire.startServices;
+    let servicesLive = false;
+    return {
+        dispatcher: wire.dispatcher,
+        startServices: () => {
+            if (servicesLive)
+                return; // idempotent — a double post-bind start must not double-poll
+            servicesLive = true;
+            baseStartServices?.(); // replay un-Acked decisions through delivery (restart no-loss)
+            for (const s of starts)
+                s();
+        },
+        stop: () => {
+            for (const s of stops) {
+                try {
+                    s();
+                }
+                catch { /* best-effort */ }
+            }
+            baseStop();
+        },
+    };
+}
+//# sourceMappingURL=slack-subsystem.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-subsystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-subsystem.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-subsystem.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,8FAA8F;AAC9F,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAC1F,wFAAwF;AACxF,iBAAiB;AACjB,EAAE;AACF,yFAAyF;AACzF,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAE/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAoB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAmB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAwB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAyC,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAI7E,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAerC,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;IAChD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC;IAC1E,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,CAAC;IAEjD,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACtI,GAAG,CAAC,kCAAkC,OAAO,yDAAyD,CAAC,CAAC;QACxG,OAAO,kBAAkB,CAAC;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,EAAE;YACP,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACpF,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACnG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAEnG,2FAA2F;IAC3F,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAEvD,yFAAyF;IACzF,IAAI,UAAU,GAA8B,GAAG,EAAE,GAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,aAAa;QAC3B,CAAC,CAAC,qBAAqB,CAAC;YACpB,QAAQ,EAAE,GAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS;YACT,SAAS;YACT,YAAY;YACZ,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7B,kFAAkF;YAClF,mFAAmF;YACnF,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACrB,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,QAAQ;YAC3F,uFAAuF;YACvF,qFAAqF;YACrF,iFAAiF;YACjF,gCAAgC;YAChC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC1B,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBACpF,IAAI,CAAC,UAAU;oBAAE,OAAO,SAAS,CAAC;gBAClC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,KAAK;oBAAE,OAAO,SAAS,CAAC;gBAC7B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtG,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;wBAAE,SAAS;oBACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;wBACpC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM;4BAAE,OAAO,CAAC,CAAC,MAAM,CAAC;oBACtD,CAAC;gBACH,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE;gBACtB,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChG,kFAAkF;gBAClF,IAAI,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,YAAY,EAAE,eAAe;wBAC7B,cAAc,EAAE,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;qBAClI,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,sFAAsF;oBACtF,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,GAAG;SACJ,CAAC;QACJ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAEzH,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE;QACvC,OAAO;QACP,GAAG;KACJ,CAAC,CAAC;IAEH,4FAA4F;IAC5F,wFAAwF;IACxF,mEAAmE;IACnE,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,oBAAoB,EAAE;YAC1E,QAAQ,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC;YAC1E,UAAU,EAAE,IAAI,CAAC,kBAAkB;YACnC,GAAG;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,eAAe,CAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC,CAAC;QAC/G,MAAM,QAAQ,GAAoB,IAAI,CAAC,QAAQ,IAAI,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;QAC7F,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,GAAG,CAAC,kBAAkB;YACnC,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC;YAC7D,wFAAwF;YACxF,mFAAmF;YACnF,YAAY,EAAE,uBAAuB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,MAAuC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,kBAAkB,CAAC,GAAI,EAAE,MAAM,EAAE;gBACxC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,eAAe,EAAE,IAAI,CAAC,sBAAsB;gBAC5C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,GAAG;aACJ,CAAC,CAAC;YACH,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC;IAC7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,YAAY;gBAAE,OAAO,CAAC,6DAA6D;YACvF,YAAY,GAAG,IAAI,CAAC;YACpB,iBAAiB,EAAE,EAAE,CAAC,CAAC,+DAA+D;YACtF,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,CAAC,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAAC,CAAC;YACnE,QAAQ,EAAE,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/socket-inbound.d.ts

@@ -0,0 +1,30 @@
+import { type FetchImpl } from "./slack-api.js";
+import { type InboundRouter } from "./inbound.js";
+export interface WsLike {
+    send(data: string): void;
+    close(): void;
+    onopen: ((this: unknown, ev?: unknown) => void) | null;
+    onmessage: ((this: unknown, ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((this: unknown, ev?: unknown) => void) | null;
+    onerror: ((this: unknown, ev?: unknown) => void) | null;
+}
+export interface SocketInboundDeps {
+    fetchImpl?: FetchImpl;
+    /** Open a Socket Mode WebSocket (default: global WebSocket). Injectable for tests. */
+    wsFactory?: (url: string) => WsLike;
+    /** Test seam: run N reconnect cycles then stop (default: forever, until stop()). */
+    inboundMaxConnects?: number;
+    /** Dead-letter retry cadence WHILE the socket stays connected (default 5min). */
+    retryIntervalMs?: number;
+    log?: (msg: string) => void;
+}
+export interface SocketInboundHandle {
+    /** Resolves when the loop ends (maxConnects reached or stop() called). */
+    done: Promise<void>;
+    stop(): void;
+}
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export declare function startSocketInbound(appToken: string, router: InboundRouter, deps?: SocketInboundDeps): SocketInboundHandle;
+//# sourceMappingURL=socket-inbound.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/socket-inbound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAWA,OAAO,EAAwB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAkB,KAAK,aAAa,EAAuB,MAAM,cAAc,CAAC;AAEvF,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACnE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;CACzD;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,sFAAsF;IACtF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,oFAAoF;IACpF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,IAAI,IAAI,CAAC;CACd;AAED,kGAAkG;AAClG,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,GAAE,iBAAsB,GAAG,mBAAmB,CA0E7H"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/socket-inbound.js

@@ -0,0 +1,99 @@
+// S10 — the Socket Mode INBOUND service, in-daemon. The loop is the shipped relay runner's
+// (moved verbatim from the CLI `rig slack inbound` action, which retires with the cutover):
+// open the ws via apps.connections.open, FAST-ACK every envelope, route human messages through
+// the InboundRouter, drain the dead-letter on connect + periodically (B1), reconnect with
+// backoff. Amendment A1 (M1 §3): inbound rides the PLATFORM socket — this service — never a
+// gateway↔connector wire.
+//
+// Cold-init receipts (dual-path class "inbound cold-init"): on every (re)connect the router's
+// dead-letter set drains before new traffic matters, and a fresh boot picks up where the
+// durable seen/dead-letter stores left off — no replay storm, no drop.
+import { openSocketConnection } from "./slack-api.js";
+import { handleEnvelope } from "./inbound.js";
+/** Start the Socket Mode loop (the shipped runner's exact shape, service-ified with a stop()). */
+export function startSocketInbound(appToken, router, deps = {}) {
+    const log = deps.log ?? (() => { });
+    const wsFactory = deps.wsFactory ?? ((url) => new globalThis.WebSocket(url));
+    const retryIntervalMs = deps.retryIntervalMs ?? 5 * 60 * 1000;
+    let connects = 0;
+    let backoff = 1000;
+    let stopped = false;
+    let liveWs;
+    let pendingTimer;
+    const done = new Promise((resolve) => {
+        const connect = async () => {
+            if (stopped)
+                return resolve();
+            connects++;
+            const open = await openSocketConnection(appToken, deps.fetchImpl);
+            if (stopped)
+                return resolve();
+            if (!open.ok || !open.url) {
+                log(`connect failed: ${open.error}`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+                return;
+            }
+            const ws = wsFactory(open.url);
+            liveWs = ws;
+            let retryTimer;
+            ws.onopen = () => {
+                backoff = 1000;
+                log("socket connected");
+                void router.retryDeadLetters(); // drain on connect (cold-init)…
+                // …AND periodically WHILE connected (B1: recovery after a queue outage
+                // must not wait for the next Slack reconnect). Cleared on close.
+                retryTimer = setInterval(() => void router.retryDeadLetters(), retryIntervalMs);
+                if (typeof retryTimer.unref === "function") {
+                    retryTimer.unref();
+                }
+            };
+            ws.onmessage = (m) => {
+                let env;
+                try {
+                    env = JSON.parse(String(m.data));
+                }
+                catch {
+                    return;
+                }
+                void handleEnvelope(env, () => env.envelope_id && ws.send(JSON.stringify({ envelope_id: env.envelope_id })), router, log);
+            };
+            ws.onclose = () => {
+                if (retryTimer)
+                    clearInterval(retryTimer);
+                liveWs = undefined;
+                if (stopped)
+                    return resolve();
+                log(`socket closed; reconnect in ${backoff}ms`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                pendingTimer = setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+            };
+            ws.onerror = () => {
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            };
+        };
+        void connect();
+    });
+    return {
+        done,
+        stop: () => {
+            stopped = true;
+            if (pendingTimer)
+                clearTimeout(pendingTimer);
+            try {
+                liveWs?.close();
+            }
+            catch { /* best-effort */ }
+        },
+    };
+}
+//# sourceMappingURL=socket-inbound.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/socket-inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket-inbound.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/socket-inbound.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,4FAA4F;AAC5F,+FAA+F;AAC/F,0FAA0F;AAC1F,4FAA4F;AAC5F,0BAA0B;AAC1B,EAAE;AACF,8FAA8F;AAC9F,yFAAyF;AACzF,uEAAuE;AAEvE,OAAO,EAAE,oBAAoB,EAAkB,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,cAAc,EAA2C,MAAM,cAAc,CAAC;AA4BvF,kGAAkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,MAAqB,EAAE,OAA0B,EAAE;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAK,UAAkE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9I,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,MAA0B,CAAC;IAC/B,IAAI,YAAuD,CAAC;IAE5D,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClE,IAAI,OAAO;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,EAAE,CAAC;YACZ,IAAI,UAAsD,CAAC;YAC3D,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBACf,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBACxB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,gCAAgC;gBAChE,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;gBAChF,IAAI,OAAQ,UAAgD,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjF,UAA+C,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC;YACF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;gBACnB,IAAI,GAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5H,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,MAAM,GAAG,SAAS,CAAC;gBACnB,IAAI,OAAO;oBAAE,OAAO,OAAO,EAAE,CAAC;gBAC9B,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,YAAY,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/state-store.d.ts

@@ -0,0 +1,62 @@
+export interface StateFsOps {
+    readFileSync(p: string): string;
+    appendFileSync(p: string, data: string): void;
+    writeFileSync(p: string, data: string): void;
+    rename(from: string, to: string): void;
+    mkdirp(dir: string): void;
+}
+export declare const nodeStateFs: StateFsOps;
+export interface SeenRecord {
+    id: string;
+    ts: string;
+    status: string;
+}
+/**
+ * Delivery-dedup log. `load()` reads the durable set from disk; `mark()` appends
+ * AFTER the guarded side effect. Idempotent on id: a repeated id collapses in
+ * `load()`'s Set, and callers gate the side effect on `!seen.has(id)` so a
+ * duplicate is never re-delivered within a run.
+ */
+export declare class SeenStore {
+    private readonly file;
+    private readonly fsops;
+    private readonly now;
+    constructor(file: string, fsops?: StateFsOps, now?: () => Date);
+    load(): Set<string>;
+    /** Append a seen record. MUST be called only after the guarded side effect succeeds. */
+    mark(id: string, status: string): void;
+    /**
+     * Seed existing ids as already-seen WITHOUT triggering the side effect
+     * (locked item 9: enable-time backlog seeds as history, zero replay storm).
+     */
+    seed(ids: string[], status?: string): number;
+}
+export interface DeadLetterEntry<T = unknown> {
+    ev: T;
+    at: string;
+    attempts: number;
+}
+/**
+ * Inbound never-drop net. Every event that fails to land is appended
+ * (attempt-counted) BEFORE the error path returns.
+ *
+ * INTERRUPTION-SAFE retry (the B2 fix): retry does NOT truncate first. The
+ * caller `readAll()`s (non-destructive), attempts each, then `replaceAll()`s the
+ * file with ONLY the still-failing entries via an atomic temp-write + rename. So
+ * the durable file always reflects the unrecovered set: a crash at ANY point
+ * before the rename leaves the ORIGINAL file fully intact (at-least-once — a
+ * since-landed event is skipped on re-read via the seen-set, so not even a dup).
+ * There is no truncate-before-success window.
+ */
+export declare class DeadLetterStore<T = unknown> {
+    private readonly file;
+    private readonly fsops;
+    private readonly now;
+    constructor(file: string, fsops?: StateFsOps, now?: () => Date);
+    append(ev: T, attempts: number): void;
+    /** Non-destructive read of all durable entries. */
+    readAll(): DeadLetterEntry<T>[];
+    /** Atomically replace the durable set (temp-write + rename). Used after a retry pass. */
+    replaceAll(entries: DeadLetterEntry<T>[]): void;
+}
+//# sourceMappingURL=state-store.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/state-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/state-store.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,UAAU;IACzB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,WAAW,EAAE,UAQzB,CAAC;AAiBF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,qBAAa,SAAS;IAElB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;IAUnB,wFAAwF;IACxF,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAKtC;;;OAGG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,MAAM,SAAW,GAAG,MAAM;CAQ/C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,EAAE,EAAE,CAAC,CAAC;IACN,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAe,CAAC,CAAC,GAAG,OAAO;IAEpC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAFH,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,UAAwB,EAC/B,GAAG,GAAE,MAAM,IAAuB;IAGrD,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQrC,mDAAmD;IACnD,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE;IAU/B,yFAAyF;IACzF,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI;CAOhD"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/state-store.js

@@ -0,0 +1,132 @@
+// Slice-11 slack-connector — durable, restart-surviving state.
+//
+// Two append-only JSONL stores, both written to disk so they survive BOTH a
+// connector restart AND a queue-daemon restart (locked item 2 + item 8):
+//   - SeenStore     : delivery-dedup by id; a line is appended ONLY AFTER the
+//                     side effect succeeds (outbound: after a 200 from Slack;
+//                     inbound: after the durable qitem exists). At-least-once —
+//                     a crash between success and append re-delivers a
+//                     BYTE-IDENTICAL duplicate next run, never a drop.
+//   - DeadLetterStore : the inbound never-drop net. An event that fails to land
+//                     in the queue is appended (attempt-counted) BEFORE the
+//                     failure path returns; drain() truncates and hands the
+//                     lines back so the caller re-appends any that fail again
+//                     ("zero-drop means zero, not zero-until-the-second-failure").
+//
+// FS + clock are injected so the whole thing is unit-testable with no real disk.
+import fs from "node:fs";
+import path from "node:path";
+export const nodeStateFs = {
+    readFileSync: (p) => fs.readFileSync(p, "utf8"),
+    appendFileSync: (p, d) => fs.appendFileSync(p, d),
+    writeFileSync: (p, d) => fs.writeFileSync(p, d),
+    rename: (from, to) => fs.renameSync(from, to),
+    mkdirp: (dir) => {
+        fs.mkdirSync(dir, { recursive: true });
+    },
+};
+function parseLines(raw) {
+    return raw
+        .trim()
+        .split("\n")
+        .filter(Boolean)
+        .map((l) => {
+        try {
+            return JSON.parse(l);
+        }
+        catch {
+            return null; // tolerate a torn final line from a crash mid-append
+        }
+    })
+        .filter((x) => x !== null);
+}
+/**
+ * Delivery-dedup log. `load()` reads the durable set from disk; `mark()` appends
+ * AFTER the guarded side effect. Idempotent on id: a repeated id collapses in
+ * `load()`'s Set, and callers gate the side effect on `!seen.has(id)` so a
+ * duplicate is never re-delivered within a run.
+ */
+export class SeenStore {
+    file;
+    fsops;
+    now;
+    constructor(file, fsops = nodeStateFs, now = () => new Date()) {
+        this.file = file;
+        this.fsops = fsops;
+        this.now = now;
+    }
+    load() {
+        let raw;
+        try {
+            raw = this.fsops.readFileSync(this.file);
+        }
+        catch {
+            return new Set();
+        }
+        return new Set(parseLines(raw).map((r) => r.id).filter((id) => typeof id === "string"));
+    }
+    /** Append a seen record. MUST be called only after the guarded side effect succeeds. */
+    mark(id, status) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        this.fsops.appendFileSync(this.file, JSON.stringify({ id, ts: this.now().toISOString(), status }) + "\n");
+    }
+    /**
+     * Seed existing ids as already-seen WITHOUT triggering the side effect
+     * (locked item 9: enable-time backlog seeds as history, zero replay storm).
+     */
+    seed(ids, status = "seeded") {
+        if (ids.length === 0)
+            return 0;
+        this.fsops.mkdirp(path.dirname(this.file));
+        const at = this.now().toISOString();
+        const chunk = ids.map((id) => JSON.stringify({ id, ts: at, status })).join("\n") + "\n";
+        this.fsops.appendFileSync(this.file, chunk);
+        return ids.length;
+    }
+}
+/**
+ * Inbound never-drop net. Every event that fails to land is appended
+ * (attempt-counted) BEFORE the error path returns.
+ *
+ * INTERRUPTION-SAFE retry (the B2 fix): retry does NOT truncate first. The
+ * caller `readAll()`s (non-destructive), attempts each, then `replaceAll()`s the
+ * file with ONLY the still-failing entries via an atomic temp-write + rename. So
+ * the durable file always reflects the unrecovered set: a crash at ANY point
+ * before the rename leaves the ORIGINAL file fully intact (at-least-once — a
+ * since-landed event is skipped on re-read via the seen-set, so not even a dup).
+ * There is no truncate-before-success window.
+ */
+export class DeadLetterStore {
+    file;
+    fsops;
+    now;
+    constructor(file, fsops = nodeStateFs, now = () => new Date()) {
+        this.file = file;
+        this.fsops = fsops;
+        this.now = now;
+    }
+    append(ev, attempts) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        this.fsops.appendFileSync(this.file, JSON.stringify({ ev, at: this.now().toISOString(), attempts }) + "\n");
+    }
+    /** Non-destructive read of all durable entries. */
+    readAll() {
+        let raw;
+        try {
+            raw = this.fsops.readFileSync(this.file);
+        }
+        catch {
+            return [];
+        }
+        return parseLines(raw);
+    }
+    /** Atomically replace the durable set (temp-write + rename). Used after a retry pass. */
+    replaceAll(entries) {
+        this.fsops.mkdirp(path.dirname(this.file));
+        const body = entries.map((e) => JSON.stringify(e)).join("\n") + (entries.length ? "\n" : "");
+        const tmp = `${this.file}.tmp`;
+        this.fsops.writeFileSync(tmp, body);
+        this.fsops.rename(tmp, this.file); // atomic: original intact until this instant
+    }
+}
+//# sourceMappingURL=state-store.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/state-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,uEAAuE;AACvE,uEAAuE;AACvE,gFAAgF;AAChF,4EAA4E;AAC5E,4EAA4E;AAC5E,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,iFAAiF;AACjF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAU7B,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;IAC7C,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QACd,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,qDAAqD;QACpE,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC7C,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,SAAS;IAED;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,IAAI;QACF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,EAAU,EAAE,MAAc;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5G,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,GAAa,EAAE,MAAM,GAAG,QAAQ;QACnC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;CACF;AAQD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,eAAe;IAEP;IACA;IACA;IAHnB,YACmB,IAAY,EACZ,QAAoB,WAAW,EAC/B,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAFlC,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEJ,MAAM,CAAC,EAAK,EAAE,QAAgB;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,cAAc,CACvB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAA+B,CAAC,GAAG,IAAI,CACnG,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,OAAO;QACL,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,UAAU,CAAC,GAAG,CAAyB,CAAC;IACjD,CAAC;IAED,yFAAyF;IACzF,UAAU,CAAC,OAA6B;QACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,6CAA6C;IAClF,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/thread-routing.d.ts

@@ -0,0 +1,17 @@
+import type { SlackEvent } from "./inbound.js";
+import type { ThreadSeatMap } from "./thread-seat-map.js";
+export interface InboundRoute {
+    destination: string;
+    tags: string[];
+    /** The routing class that fired — receipts per class ride the row tags + logs. */
+    routeClass: "existing-thread" | "closed-thread" | "unmapped-thread" | "human-initiated";
+}
+export declare function makeThreadRouteResolver(opts: {
+    map: ThreadSeatMap;
+    /** The orchestrator slot for unrouted signals (first-class config: inboundDestination). */
+    unroutedDestination: string;
+    log?: (msg: string) => void;
+}): (ev: SlackEvent & {
+    thread_ts?: string;
+}) => InboundRoute;
+//# sourceMappingURL=thread-routing.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/thread-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-routing.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/thread-routing.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kFAAkF;IAClF,UAAU,EAAE,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;CACzF;AAID,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,GAAG,EAAE,aAAa,CAAC;IACnB,2FAA2F;IAC3F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,YAAY,CAqB5D"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/thread-routing.js

@@ -0,0 +1,35 @@
+// S10 — deterministic thread ROUTING over the thread↔seat map. The four enumerated classes
+// (proof contract), each a pure lookup — zero inference:
+//   1. NEW conversation      — outbound-only: a fresh root posts un-threaded, then the map
+//                              opens (thread_ts = the posted root's ts). Inbound never mints.
+//   2. EXISTING thread       — reply carries thread_ts, map hit (open) → EXACTLY the mapped seat.
+//   3. CLOSED thread         — map hit (closed) → STILL exactly the mapped seat (closure is
+//                              conversation state, never a routing black hole).
+//   4. UNMAPPED / human-initiated — thread_ts with no mapping, or a top-level channel message
+//                              (no thread_ts): the ORCHESTRATOR's unrouted-signal row — the
+//                              configured inbound destination with the unrouted-signal tag.
+//                              Never dropped, never guessed at a seat.
+const BASE_TAGS = ["founder-slack", "inbound"];
+export function makeThreadRouteResolver(opts) {
+    const log = opts.log ?? (() => { });
+    return (ev) => {
+        const threadTs = ev.thread_ts;
+        if (threadTs) {
+            const mapping = opts.map.resolveByThread(threadTs);
+            if (mapping) {
+                // FOUNDER ROOT INVARIANT (2026-08-27): the map stores the bare local seat because the
+                // queue row's source_session is bare inside one instance — the seat routes as stored.
+                // (The interim self-host localizer from the L2 first pass was deleted with the root
+                // stamping; historical triple rows are the operator adoption's one-time cleanup.)
+                const routeClass = mapping.state === "closed" ? "closed-thread" : "existing-thread";
+                log(`inbound routed thread_ts=${threadTs} -> ${mapping.seat} (${routeClass})`);
+                return { destination: mapping.seat, tags: [...BASE_TAGS, "thread"], routeClass };
+            }
+            log(`inbound UNMAPPED thread_ts=${threadTs} -> unrouted-signal to ${opts.unroutedDestination} (never dropped, never guessed)`);
+            return { destination: opts.unroutedDestination, tags: [...BASE_TAGS, "unrouted-signal"], routeClass: "unmapped-thread" };
+        }
+        log(`inbound human-initiated (no thread_ts) -> unrouted-signal to ${opts.unroutedDestination}`);
+        return { destination: opts.unroutedDestination, tags: [...BASE_TAGS, "unrouted-signal"], routeClass: "human-initiated" };
+    };
+}
+//# sourceMappingURL=thread-routing.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/thread-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-routing.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/thread-routing.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,yDAAyD;AACzD,2FAA2F;AAC3F,8FAA8F;AAC9F,kGAAkG;AAClG,4FAA4F;AAC5F,gFAAgF;AAChF,8FAA8F;AAC9F,4FAA4F;AAC5F,4FAA4F;AAC5F,uEAAuE;AAYvE,MAAM,SAAS,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;AAE/C,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,EAAE,EAAE,EAAE;QACZ,MAAM,QAAQ,GAAI,EAA6B,CAAC,SAAS,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,OAAO,EAAE,CAAC;gBACZ,sFAAsF;gBACtF,sFAAsF;gBACtF,oFAAoF;gBACpF,kFAAkF;gBAClF,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBACpF,GAAG,CAAC,4BAA4B,QAAQ,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,GAAG,CAAC,CAAC;gBAC/E,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;YACnF,CAAC;YACD,GAAG,CAAC,8BAA8B,QAAQ,0BAA0B,IAAI,CAAC,mBAAmB,iCAAiC,CAAC,CAAC;YAC/H,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;QAC3H,CAAC;QACD,GAAG,CAAC,gEAAgE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,GAAG,SAAS,EAAE,iBAAiB,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAC3H,CAAC,CAAC;AACJ,CAAC"}