@openrig/cli 0.5.4 → 0.5.5

package/daemon/dist/domain/gateway/slack/slack-api.js

@@ -0,0 +1,198 @@
+// Slice-11 slack-connector — Slack HTTP client.
+//
+// `fetch`-based (http/https agnostic + injectable) matching the daemon's
+// WebhookNotificationAdapter + its fake-fetch test pattern; every call is
+// bounded by an explicit timeout with a structured failure result (never
+// throws past the boundary, never hangs) — the remote-daemon-http discipline.
+//
+// Item 5 (the setup-scope trap): Slack's "Add New Webhook" grants ONLY the
+// webhook scope; configured bot scopes are NOT granted until a full reinstall,
+// with no warning. The ONLY proof of granted scopes is the `x-oauth-scopes`
+// RESPONSE HEADER on a real API call — configured != granted. getGrantedScopes()
+// reads exactly that header. Channel membership is likewise verified live
+// (conversations.info.is_member) before declaring inbound ready.
+const defaultFetch = (url, init) => fetch(url, init);
+const DEFAULT_TIMEOUT_MS = 15000;
+async function withTimeout(timeoutMs, run) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+    try {
+        return await run(ctrl.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export async function postWebhook(url, payload, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+                signal,
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                return { ok: false, status: res.status, error: `slack ${res.status}: ${text.slice(0, 160)}` };
+            }
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `webhook transport: ${e.message}` };
+    }
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export async function callWebApi(method, token, body, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS, shape = "json-post") {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            let res;
+            if (shape === "get-query") {
+                // The read shape: args in the query string, Authorization only — no body, no
+                // content-type (a body or JSON content-type is exactly what the endpoint rejects).
+                const url = new URL(`https://slack.com/api/${method}`);
+                for (const [k, v] of Object.entries(body)) {
+                    if (v !== undefined && v !== null)
+                        url.searchParams.set(k, String(v));
+                }
+                res = await fetchImpl(url.toString(), {
+                    method: "GET",
+                    headers: { authorization: `Bearer ${token}` },
+                    signal,
+                });
+            }
+            else {
+                res = await fetchImpl(`https://slack.com/api/${method}`, {
+                    method: "POST",
+                    headers: { authorization: `Bearer ${token}`, "content-type": "application/json; charset=utf-8" },
+                    body: JSON.stringify(body),
+                    signal,
+                });
+            }
+            const scopeHeader = res.headers.get("x-oauth-scopes") ?? "";
+            const grantedScopes = scopeHeader
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean);
+            let json = {};
+            try {
+                json = (await res.json());
+            }
+            catch {
+                /* non-JSON */
+            }
+            const ok = res.ok && json.ok === true;
+            return { ok, status: res.status, grantedScopes, json, error: ok ? undefined : String(json.error ?? `http ${res.status}`) };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, grantedScopes: [], json: {}, error: `web-api transport: ${e.message}` };
+    }
+}
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export async function getGrantedScopes(token, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("auth.test", token, {}, fetchImpl, timeoutMs);
+    return { ok: r.ok, granted: r.grantedScopes, error: r.error };
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export async function verifyScopes(token, required, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const g = await getGrantedScopes(token, fetchImpl, timeoutMs);
+    if (!g.ok)
+        return { ok: false, granted: g.granted, missing: required, error: g.error };
+    const grantedSet = new Set(g.granted);
+    const missing = required.filter((s) => !grantedSet.has(s));
+    return { ok: missing.length === 0, granted: g.granted, missing };
+}
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export async function verifyChannelMembership(token, channel, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("conversations.info", token, { channel }, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, isMember: false, error: r.error };
+    const ch = (r.json.channel ?? {});
+    return { ok: true, isMember: ch.is_member === true, name: ch.name };
+}
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export async function openSocketConnection(appToken, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("apps.connections.open", appToken, {}, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, url: r.json.url };
+}
+// ── S10 outbound images — the EXTERNAL-UPLOAD flow (the only living upload path) ────────────
+// `files.upload` was sunset 2025-11-12 and no longer functions (affordance-verified). The flow:
+//   1. files.getUploadURLExternal (filename, length)  → { upload_url, file_id }
+//   2. POST the raw bytes to upload_url (octet-stream)
+//   3. files.completeUploadExternal ({ files, channel_id, thread_ts?, initial_comment? })
+// Scope: files:write. thread_ts attaches the file INTO the conversation thread.
+export async function getUploadURLExternal(token, filename, length, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("files.getUploadURLExternal", token, { filename, length }, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, uploadUrl: r.json.upload_url, fileId: r.json.file_id };
+}
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export async function uploadBytesExternal(uploadUrl, bytes, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(uploadUrl, {
+                method: "POST",
+                headers: { "content-type": "application/octet-stream" },
+                body: bytes,
+                signal,
+            });
+            if (!res.ok)
+                return { ok: false, status: res.status, error: `upload ${res.status}` };
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `upload transport: ${e.message}` };
+    }
+}
+export async function completeUploadExternal(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { files: input.files, channel_id: input.channelId };
+    if (input.threadTs)
+        body.thread_ts = input.threadTs;
+    if (input.initialComment)
+        body.initial_comment = input.initialComment;
+    const r = await callWebApi("files.completeUploadExternal", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, error: r.error };
+}
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export async function fetchRecentMessageTexts(token, channel, threadTs, fetchImpl = defaultFetch, limit = 100, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const method = threadTs ? "conversations.replies" : "conversations.history";
+    const body = threadTs ? { channel, ts: threadTs, limit } : { channel, limit };
+    const r = await callWebApi(method, token, body, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, texts: [], error: r.error };
+    const messages = (r.json.messages ?? []);
+    return { ok: true, texts: messages.map((m) => String(m.text ?? "")) };
+}
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export async function postChatMessage(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { channel: input.channel, text: input.text };
+    if (input.blocks?.length)
+        body.blocks = input.blocks;
+    if (input.thread_ts)
+        body.thread_ts = input.thread_ts;
+    const r = await callWebApi("chat.postMessage", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, status: r.status, ts: typeof r.json.ts === "string" ? r.json.ts : undefined, error: r.error };
+}
+//# sourceMappingURL=slack-api.js.map

package/daemon/dist/domain/gateway/slack/slack-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,iEAAiE;AAIjE,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC,KAAK,UAAU,WAAW,CAAI,SAAiB,EAAE,GAAwC;IACvF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAiBD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,IAA6B,EAC7B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB,EAC9B,QAA4B,WAAW;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,GAAa,CAAC;YAClB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,6EAA6E;gBAC7E,mFAAmF;gBACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;wBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBAC7C,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,SAAS,CAAC,yBAAyB,MAAM,EAAE,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;oBAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,IAAI,GAA4B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChE,CAAC;AASD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,QAAkB,EAClB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2C,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC;AACjD,CAAC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,gFAAgF;AAChF,uDAAuD;AACvD,0FAA0F;AAC1F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,MAAc,EACd,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,UAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAiB,EAAE,CAAC;AAChG,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,KAAiB,EACjB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACvD,IAAI,EAAE,KAAuC;gBAC7C,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAAiH,EACjH,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IACpD,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;wFAGwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,QAA4B,EAC5B,YAAuB,YAAY,EACnC,KAAK,GAAG,GAAG,EACX,SAAS,GAAG,kBAAkB;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5E,MAAM,IAAI,GAA4B,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAwB,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAUD;;;;uFAIuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,KAA2B,EAC3B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACrD,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACnH,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts

@@ -0,0 +1,47 @@
+import { type FetchImpl } from "./slack-api.js";
+import type { SeenStore } from "./state-store.js";
+import type { SubsystemDeliverFn } from "../gateway-subsystem.js";
+import type { OutboundPostPayload } from "./outbound-driver.js";
+export interface SubsystemSlackDeliveryOpts {
+    botToken: string;
+    channel: string;
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    fetchImpl?: FetchImpl;
+    /** decisionId-keyed delivered-store (idempotent redelivery: replay re-acks, never re-posts). */
+    delivered: SeenStore;
+    /** H — decisionId-keyed ATTEMPTED-store, marked BEFORE the HTTP post. A retry of an attempted
+     *  decision has an AMBIGUOUS prior outcome (a timeout may have landed), so it RECONCILES by
+     *  marker before any resend — never a blind repost. Distinct from `delivered` (proven 2xx). */
+    attempted: SeenStore;
+    /** qitemId-keyed outbound seen-state (slice-11: marked ONLY after a successful post). */
+    outboundSeen: SeenStore;
+    /** Release the outbound driver's in-flight guard once a qitem is durably seen. */
+    release?: (qitemId: string) => void;
+    /** E (thread routing): resolve the thread anchor for this payload; undefined = new root.
+     *  Wired by the thread-seat map; absent in the pre-routing composition. */
+    resolveThreadTs?: (payload: OutboundPostPayload) => string | undefined;
+    /** E: record a NEW root's ts so the conversation threads from here on. */
+    onPostedRoot?: (payload: OutboundPostPayload, ts: string) => void;
+    /** F (interim loudness rule): return the Slack USER ID to mention for an ESCALATION payload,
+     *  undefined for everything else (quiet-threaded). The composition wires the registry lookup
+     *  + the escalation predicate; delivery just renders what it is told. */
+    resolveMentionUserId?: (payload: OutboundPostPayload) => string | undefined;
+    /** G — read a LOCAL image the evidenceRef points at (the founder screenshot class: a seat's
+     *  file has no public URL, so it rides the EXTERNAL-UPLOAD flow into the thread). Injectable
+     *  for hermetic tests; default reads the filesystem, image extensions only. Return null =
+     *  not an uploadable local image. */
+    readLocalImage?: (refPath: string) => {
+        bytes: Uint8Array;
+        filename: string;
+    } | null;
+    log?: (msg: string) => void;
+}
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export declare function defaultReadLocalImage(refPath: string): {
+    bytes: Uint8Array;
+    filename: string;
+} | null;
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export declare function subsystemSlackDeliver(opts: SubsystemSlackDeliveryOpts): SubsystemDeliverFn;
+//# sourceMappingURL=slack-delivery.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA+G,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7J,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gGAAgG;IAChG,SAAS,EAAE,SAAS,CAAC;IACrB;;mGAE+F;IAC/F,SAAS,EAAE,SAAS,CAAC;IACrB,yFAAyF;IACzF,YAAY,EAAE,SAAS,CAAC;IACxB,kFAAkF;IAClF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;+EAC2E;IAC3E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE;;6EAEyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5E;;;yCAGqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAID,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrG;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,kBAAkB,CAyH1F"}

package/daemon/dist/domain/gateway/slack/slack-delivery.js

@@ -0,0 +1,147 @@
+// S10 — the subsystem's Slack DELIVERY path (successor to the retired connector-server's
+// slackDeliverFn; the proof-1 semantics carry over unchanged): render the OutboundDecision to a
+// hygienic payload (slice-11 item 7 redaction + Block Kit via message.ts) and post it. A 2xx →
+// ok (the in-process ack drains the durable buffer); any failure → a bounded failure class (the
+// wire retains + replays — fail-visible, never a silent drop).
+//
+// Changes from the retired path, each contract-driven:
+//   - postWebhook → postChatMessage: the R2 thread shape needs thread_ts, which a webhook
+//     cannot carry. The webhook retires with the relay.
+//   - decisionId idempotent redelivery moved HERE from the connector: an already-delivered
+//     decisionId is re-acked WITHOUT re-posting (the delivered-store is the same SeenStore
+//     pattern, keyed by decisionId — distinct from the qitemId outbound seen-state).
+//   - delivered-ok additionally marks the qitemId seen (slice-11: seen ONLY after success) and
+//     releases the driver's in-flight guard.
+import fs from "node:fs";
+import path from "node:path";
+import { postChatMessage, getUploadURLExternal, uploadBytesExternal, completeUploadExternal, fetchRecentMessageTexts } from "./slack-api.js";
+import { buildOutboundMessage, attributionFromSession, reconcileToken } from "./message.js";
+const LOCAL_IMAGE_EXT = new Set([".png", ".jpg", ".jpeg", ".gif", ".webp"]);
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export function defaultReadLocalImage(refPath) {
+    try {
+        if (!path.isAbsolute(refPath))
+            return null;
+        if (!LOCAL_IMAGE_EXT.has(path.extname(refPath).toLowerCase()))
+            return null;
+        const bytes = fs.readFileSync(refPath);
+        return { bytes: new Uint8Array(bytes), filename: path.basename(refPath) };
+    }
+    catch {
+        return null;
+    }
+}
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export function subsystemSlackDeliver(opts) {
+    const log = opts.log ?? (() => { });
+    return async (decision) => {
+        // Idempotent redelivery: an already-delivered decisionId is re-acked without re-posting.
+        if (opts.delivered.load().has(decision.decisionId)) {
+            log(`delivery: decision ${decision.decisionId} already delivered — re-ack, no re-post`);
+            return { ok: true };
+        }
+        const q = (decision.payload ?? {});
+        // M1 A5b (carried over from the retired sweep): an alert's evidenceRef IS the artifact the
+        // human judges — an https image URL rides as a Block Kit image. buildImageBlocks stays the
+        // single hygiene gate (drops non-https / secret-bearing), so the predicate lives in ONE place.
+        const mediaRefs = Array.isArray(q.media)
+            ? q.media
+            : q.evidenceRef
+                ? [{ imageUrl: String(q.evidenceRef), altText: q.summary ?? "attachment" }]
+                : undefined;
+        const payload = buildOutboundMessage({
+            qitemId: q.qitemId ?? decision.decisionId,
+            summary: q.summary,
+            body: q.body,
+            destinationSession: q.destinationSession ?? decision.entityBindingRef,
+        }, {
+            sourceLabel: opts.sourceLabel,
+            bodyExcerpt: opts.bodyExcerpt,
+            mediaRefs,
+            // A1.2 — attribution rides every post; identity stays the app's own (postChatMessage
+            // structurally cannot carry username/icon overrides — the customize-absence rail).
+            attribution: attributionFromSession(q.sourceSession),
+            mentionUserId: opts.resolveMentionUserId?.(q),
+            // fix-r3 — the reconcile identity, reserved outside the clamp budget (same function
+            // the scan below matches: one identity, same bytes, both sides).
+            reconcileMarker: reconcileToken(decision.decisionId),
+        });
+        const threadTs = opts.resolveThreadTs?.(q);
+        // H — RECONCILE-BY-MARKER before any RESEND: if this decision was attempted before, the
+        // prior outcome is ambiguous (a timeout may have posted). Search where the message would
+        // live (the thread, else channel history) for the message's STRUCTURAL identity; FOUND →
+        // already delivered, record + ack, never repost. Search failure = stay ambiguous = retain
+        // for the next replay (never a blind repost on an unreadable channel — a duplicate human
+        // notification is the red; a delay is not).
+        // fix-r3 (R2 exactly-once): the identity is reconcileToken(decisionId) — a bounded,
+        // decision-scoped token the renderer reserves OUTSIDE the clamp budget, so it is
+        // GUARANTEED present in the scanned top-level text at any ordinary length, and ordinary
+        // prose quoting a qitem id can never reproduce it (it embeds the daemon-minted
+        // decisionId in a delimited form). Producer and scanner call the same function: one
+        // identity, same bytes, both sides.
+        const marker = reconcileToken(decision.decisionId);
+        if (opts.attempted.load().has(decision.decisionId)) {
+            const scan = await fetchRecentMessageTexts(opts.botToken, opts.channel, threadTs, opts.fetchImpl);
+            if (!scan.ok) {
+                log(`reconcile scan failed for ${decision.decisionId} (${scan.error}) — retained, no blind repost`);
+                return { ok: false, class: "reconcile-unreadable", detail: scan.error };
+            }
+            if (scan.texts.some((t) => t.includes(marker))) {
+                log(`reconcile: marker "${marker}" FOUND — prior ambiguous post landed; ack without repost`);
+                opts.delivered.mark(decision.decisionId, "reconciled-delivered");
+                if (q.qitemId) {
+                    opts.outboundSeen.mark(q.qitemId, "posted");
+                    opts.release?.(q.qitemId);
+                }
+                return { ok: true };
+            }
+            log(`reconcile: marker "${marker}" absent — safe to send`);
+        }
+        // Marked ATTEMPTED durably BEFORE the post: from here any outcome is ambiguous until 2xx.
+        opts.attempted.mark(decision.decisionId, "attempted");
+        const res = await postChatMessage(opts.botToken, { channel: opts.channel, text: payload.text, blocks: payload.blocks, thread_ts: threadTs }, opts.fetchImpl);
+        if (!res.ok) {
+            return { ok: false, class: res.status === 0 ? "transport" : `http-${res.status}`, detail: res.error };
+        }
+        // Delivered: record decisionId BEFORE returning ok (a crash after this point re-acks via
+        // dedup — no double-post; before it, the wire retains + replays — at-least-once, never a drop).
+        opts.delivered.mark(decision.decisionId, "delivered");
+        if (q.qitemId) {
+            opts.outboundSeen.mark(q.qitemId, "posted"); // slice-11: seen ONLY after success
+            opts.release?.(q.qitemId);
+        }
+        if (res.ts && threadTs === undefined)
+            opts.onPostedRoot?.(q, res.ts);
+        // G — a LOCAL image evidenceRef (the founder screenshot) rides the EXTERNAL-UPLOAD flow
+        // into the conversation thread (files.upload is sunset). Upload failure is fail-VISIBLE
+        // but does NOT fail the decision: the text delivered; failing here would replay the whole
+        // post and duplicate the human notification (the H red). https refs already rode as Block
+        // Kit image blocks above; non-image/non-existent refs are a clean skip.
+        const local = q.evidenceRef && !/^https:\/\//.test(String(q.evidenceRef))
+            ? (opts.readLocalImage ?? defaultReadLocalImage)(String(q.evidenceRef))
+            : null;
+        if (local) {
+            const intoThread = threadTs ?? res.ts;
+            const up = await getUploadURLExternal(opts.botToken, local.filename, local.bytes.length, opts.fetchImpl);
+            if (up.ok && up.uploadUrl && up.fileId) {
+                const put = await uploadBytesExternal(up.uploadUrl, local.bytes, opts.fetchImpl);
+                if (put.ok) {
+                    const done = await completeUploadExternal(opts.botToken, { files: [{ id: up.fileId, title: q.summary ?? local.filename }], channelId: opts.channel, threadTs: intoThread }, opts.fetchImpl);
+                    if (done.ok)
+                        log(`uploaded ${local.filename} into thread ${intoThread ?? "(root)"} for ${q.qitemId ?? decision.decisionId}`);
+                    else
+                        log(`ATTACHMENT upload complete FAILED for ${q.qitemId ?? decision.decisionId}: ${done.error} (text delivered; attachment missing)`);
+                }
+                else {
+                    log(`ATTACHMENT byte upload FAILED for ${q.qitemId ?? decision.decisionId}: ${put.error} (text delivered; attachment missing)`);
+                }
+            }
+            else {
+                log(`ATTACHMENT upload-url FAILED for ${q.qitemId ?? decision.decisionId}: ${up.error} (text delivered; attachment missing)`);
+            }
+        }
+        log(`delivered ${decision.decisionId}${q.qitemId ? ` (qitem ${q.qitemId})` : ""}`);
+        return { ok: true };
+    };
+}
+//# sourceMappingURL=slack-delivery.js.map

package/daemon/dist/domain/gateway/slack/slack-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,gGAAgG;AAChG,+FAA+F;AAC/F,gGAAgG;AAChG,+DAA+D;AAC/D,EAAE;AACF,uDAAuD;AACvD,0FAA0F;AAC1F,wDAAwD;AACxD,2FAA2F;AAC3F,2FAA2F;AAC3F,qFAAqF;AACrF,+FAA+F;AAC/F,6CAA6C;AAE7C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EAAkB,MAAM,gBAAgB,CAAC;AAC7J,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAuChH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE5E,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAgC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,EAAE,QAA0B,EAAqC,EAAE;QAC7E,yFAAyF;QACzF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,sBAAsB,QAAQ,CAAC,UAAU,yCAAyC,CAAC,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAsD,CAAC;QACxF,2FAA2F;QAC3F,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,SAAS,GAAgC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;gBAC3E,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,oBAAoB,CAClC;YACE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU;YACzC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,QAAQ,CAAC,gBAAgB;SACtE,EACD;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS;YACT,qFAAqF;YACrF,mFAAmF;YACnF,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YAC7C,oFAAoF;YACpF,iEAAiE;YACjE,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;SACrD,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3C,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,yFAAyF;QACzF,4CAA4C;QAC5C,oFAAoF;QACpF,iFAAiF;QACjF,wFAAwF;QACxF,+EAA+E;QAC/E,oFAAoF;QACpF,oCAAoC;QACpC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,6BAA6B,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,+BAA+B,CAAC,CAAC;gBACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,sBAAsB,MAAM,2DAA2D,CAAC,CAAC;gBAC7F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAC5C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,GAAG,CAAC,sBAAsB,MAAM,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,0FAA0F;QAC1F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,eAAe,CAC/B,IAAI,CAAC,QAAQ,EACb,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC1F,IAAI,CAAC,SAAS,CACf,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QACxG,CAAC;QACD,yFAAyF;QACzF,gGAAgG;QAChG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,oCAAoC;YACjF,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAErE,wFAAwF;QACxF,wFAAwF;QACxF,0FAA0F;QAC1F,0FAA0F;QAC1F,wEAAwE;QACxE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,GAAG,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzG,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,MAAM,sBAAsB,CACvC,IAAI,CAAC,QAAQ,EACb,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EACjH,IAAI,CAAC,SAAS,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,EAAE;wBAAE,GAAG,CAAC,YAAY,KAAK,CAAC,QAAQ,gBAAgB,UAAU,IAAI,QAAQ,QAAQ,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;;wBACxH,GAAG,CAAC,yCAAyC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAC5I,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,qCAAqC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAClI,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,oCAAoC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC,KAAK,uCAAuC,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-subsystem.d.ts

@@ -0,0 +1,21 @@
+import { type GatewayWire } from "../gateway-subsystem.js";
+import { type RegistrySurface } from "./inbound-admission.js";
+import { type WsLike } from "./socket-inbound.js";
+import type { QueueRepository } from "../../queue-repository.js";
+import type { FetchImpl } from "./slack-api.js";
+export interface SlackWireOpts {
+    home: string;
+    queueRepo: QueueRepository;
+    log?: (msg: string) => void;
+    /** Injectable seams (tests): fetch, websocket factory, sweep cadence, registry surface. */
+    fetchImpl?: FetchImpl;
+    wsFactory?: (url: string) => WsLike;
+    outboundIntervalMs?: number;
+    inboundRetryIntervalMs?: number;
+    inboundMaxConnects?: number;
+    registry?: RegistrySurface;
+}
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export declare function buildSlackGatewayWire(opts: SlackWireOpts): GatewayWire;
+//# sourceMappingURL=slack-subsystem.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-subsystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-subsystem.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-subsystem.ts"],"names":[],"mappings":"AAeA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAQ/E,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EAAgD,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEhG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,2FAA2F;IAC3F,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAMD;wEACwE;AACxE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,WAAW,CAiKtE"}