@openrig/cli 0.5.4 → 0.5.6

package/daemon/dist/domain/gateway/slack/inbound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/inbound.ts"],"names":[],"mappings":"AAkDA,MAAM,UAAU,cAAc,CAAC,EAAc;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,EAAE,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,sCAAsC;IACjG,kFAAkF;IAClF,0EAA0E;IAC1E,IAAI,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,KAAK,YAAY,IAAI,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1G,IAAI,CAAC,EAAE,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1D,kFAAkF;IAClF,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC/F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAUD,MAAM,UAAU,YAAY,CAAC,EAAc;IACzC,OAAO,cAAc,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACnC,CAAC;AA8BD,MAAM,OAAO,aAAa;IAEK;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,yCAAyC;IACxF,YAA6B,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAE1C,SAAS,CAAC,EAAc,EAAE,QAAmC;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC,OAAO,SAAS,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,QAAQ,GAAa,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBACrG,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,OAAO;YACL,OAAO,EAAE,sBAAsB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACtD,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,kGAAkG;SACrL,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,WAAW,CAAC,EAAc;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3G,0FAA0F;QAC1F,4FAA4F;QAC5F,iGAAiG;QACjG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yCAAyC,EAAE,CAAC,IAAI,QAAQ,EAAE,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChG,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,2EAA2E;YAC3E,0EAA0E;YAC1E,+CAA+C;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,IAAI,QAAQ,GAA6B,IAAI,CAAC;YAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAqB,EAAE,CAAC,CAAC;oBACtD,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAmC,CAAC;wBACtD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;oBACpE,CAAC,CAAC;iBACH,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,QAAQ,GAAG,QAAQ,CAAC,gDAAgD,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,uEAAuE;oBACvE,iEAAiE;oBACjE,uEAAuE;oBACvE,6CAA6C;oBAC7C,IAAI,CAAC;wBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gCAAgC,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC/E,QAAQ,GAAG,QAAQ,CAAC,0BAA2B,CAAW,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACvD,mFAAmF;YACnF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrF,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;oBAC1C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,8EAA8E;oBAClG,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;oBAChD,OAAO;oBACP,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,0BAA0B,EAAE,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,sCAAsC;YACzE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,WAAW,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,EAAc,EAAE,QAAQ,GAAG,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC,EAAE,aAAa,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,OAAO,CAAC,MAAM,iBAAiB,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAkC,EAAE,CAAC;QACvD,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,4CAA4C;YACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,EAAE,CAAC;iBAClB,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3G,iEAAiE;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,qCAAqC;QACpF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;CACF;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB,EAAE,GAAe,EAAE,MAAqB,EAAE,GAAyB;IACzH,IAAI,GAAG,CAAC,WAAW;QAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;IAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,8FAA8F;QAC9F,sFAAsF;QACtF,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACZ,GAAG,EAAE,CACH,qCAAqC,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE;gBACxG,YAAY,EAAE,CAAC,OAAO,IAAI,GAAG,WAAW,QAAQ,CAAC,MAAM,EAAE,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC"}

package/daemon/dist/domain/gateway/slack/message.d.ts

@@ -0,0 +1,80 @@
+export declare const SLACK_TEXT_CAP = 3900;
+export declare const DEFAULT_BODY_EXCERPT = 800;
+export interface QitemLike {
+    qitemId: string;
+    summary?: string | null;
+    body?: string | null;
+    destinationSession?: string | null;
+}
+/** M1 A5b — an outbound image attachment. A media-bearing OutboundDecision carries these;
+ *  the connector renders each as a Slack Block Kit `image` block on the SHIPPED outbound path.
+ *  This is the T1076 seam finally wired (Slice-12's image relay), not a redesign. */
+export interface SlackMediaRef {
+    imageUrl: string;
+    altText: string;
+}
+export interface OutboundMessageOpts {
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    /** T1076 extension point: extra Block Kit blocks (e.g. future media). v1 unused. */
+    extraBlocks?: unknown[];
+    /** M1 A5b: outbound image attachments, rendered as Block Kit `image` blocks (the wired seam). */
+    mediaRefs?: SlackMediaRef[];
+    /** S10 / A1.2 — the structured seat-attribution header (rig/host/seat/session), rendered as
+     *  the LEADING context block in ONE honest bot identity. Authorship lives in OUR record;
+     *  Slack's transport actor stays the app. NEVER a per-message username/icon override. */
+    attribution?: SeatAttribution;
+    /** S10 interim loudness rule: an escalation MENTIONS its human (`<@Uxxx>`); everything else
+     *  stays quiet-threaded. The value is the Slack USER ID (mention semantics require the id,
+     *  never a display name). */
+    mentionUserId?: string;
+    /** S10 fix-r3 — the reconciliation token (reconcileToken(decisionId)), reserved OUTSIDE the
+     *  truncatable content budget: content clamps to CAP minus the token's exact reserve, then
+     *  the token appends, so it survives in top-level fallback text at ANY ordinary message
+     *  length — the exact surface the history scan reads. */
+    reconcileMarker?: string;
+}
+/** A1.2 — the four attribution fields. */
+export interface SeatAttribution {
+    seat: string;
+    rig?: string;
+    host?: string;
+    session: string;
+}
+/** Parse the stamped session triple (`member@rig[@host]`, the 51-09 stored form) into the
+ *  attribution fields. A bare/unparseable ref degrades to seat=session (never a throw). */
+export declare function attributionFromSession(sourceSession: string | null | undefined): SeatAttribution | undefined;
+/** M1 A5b — turn media refs into Block Kit `image` blocks. Item-7 hygiene: a secret-bearing
+ *  image_url (e.g. a webhook URL smuggled as an image) is REFUSED, never forwarded. Alt text is
+ *  redacted + clamped. Returns only the well-formed, secret-free image blocks. */
+export declare function buildImageBlocks(mediaRefs: readonly SlackMediaRef[] | undefined): unknown[];
+export declare function containsSecret(text: string): boolean;
+export declare function redactSecrets(text: string): string;
+/** S10 fix-r1 (R2 B1) — STRUCTURAL neutralization of queue-controlled content. Slack's
+ *  formatting contract parses control sequences (<@U…>, <!here>, <!channel>, <!subteam^…>,
+ *  <url|label>) only from a literal "<"; its documented rule for displaying user-generated
+ *  text is to escape exactly &, <, > (docs.slack.dev/messaging/formatting-message-text).
+ *  Escaping these three makes EVERY control form inert BY CONSTRUCTION — present and past
+ *  forms alike — never a blocklist of known spellings. Ordinary mrkdwn styling (*bold*,
+ *  _italic_, bare URLs) uses none of the three and survives untouched. Order matters: "&"
+ *  first, or the escapes themselves would be re-escaped. */
+export declare function escapeSlackText(text: string): string;
+/** S10 fix-r3 (R2 exactly-once) — the STRUCTURAL reconciliation identity: a bounded,
+ *  decision-scoped token. decisionId is daemon-minted per decision (never settable through
+ *  queue rows) and stable across retries of the same decision, so ONLY the target posted
+ *  message carries this exact delimited token — ordinary prose quoting a qitem id (or even a
+ *  lookalike built from the qitem id) cannot reproduce it. ONE producer function; the
+ *  reconcile scanner matches exactly this function's output — producer and scanner share
+ *  identity bytes by construction. Parentheses/colon only: no &,<,> so the token is
+ *  escape-stable and never parses as Slack control syntax. */
+export declare function reconcileToken(decisionId: string): string;
+export interface SlackMessagePayload {
+    text: string;
+    blocks: unknown[];
+}
+/**
+ * Build the Slack payload for a human-destined qitem. Pure + deterministic
+ * (no clock, no io) so it is trivially testable and safe to snapshot.
+ */
+export declare function buildOutboundMessage(q: QitemLike, opts: OutboundMessageOpts): SlackMessagePayload;
+//# sourceMappingURL=message.d.ts.map

package/daemon/dist/domain/gateway/slack/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/message.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;qFAEqF;AACrF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,iGAAiG;IACjG,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B;;6FAEyF;IACzF,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;iCAE6B;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;6DAGyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,0CAA0C;AAC1C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;2FAC2F;AAC3F,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAS5G;AAID;;kFAEkF;AAClF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAe3F;AAWD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAKpD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;;;;;4DAO4D;AAC5D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAOD;;;;;;;8DAO8D;AAC9D,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,CA2DjG"}

package/daemon/dist/domain/gateway/slack/message.js

@@ -0,0 +1,164 @@
+// Slice-11 slack-connector — outbound message construction.
+//
+// Locked item 7 (content hygiene): a posted message carries summary + qitem id
+// + source + a BOUNDED body excerpt, and NEVER a token/secret/secret-bearing
+// path. We never add our own credentials (we only render qitem fields), and as
+// defense-in-depth we redact anything that looks like a Slack/bearer secret
+// leaking through a qitem body before it goes out.
+//
+// T1076 (don't preclude Slice-12): construction is BLOCKS/ATTACHMENTS-capable —
+// we always emit Block Kit `blocks` PLUS a plain-text fallback, and accept
+// optional extra blocks / media refs so image relay can extend this later
+// WITHOUT redefining the shape here. v1 ships text only.
+export const SLACK_TEXT_CAP = 3900; // Slack hard-limits ~4000; stay under.
+export const DEFAULT_BODY_EXCERPT = 800;
+/** Parse the stamped session triple (`member@rig[@host]`, the 51-09 stored form) into the
+ *  attribution fields. A bare/unparseable ref degrades to seat=session (never a throw). */
+export function attributionFromSession(sourceSession) {
+    if (!sourceSession)
+        return undefined;
+    const parts = sourceSession.split("@");
+    if (parts.length >= 2) {
+        const a = { seat: `${parts[0]}@${parts[1]}`, rig: parts[1], session: sourceSession };
+        if (parts.length >= 3)
+            a.host = parts.slice(2).join("@");
+        return a;
+    }
+    return { seat: sourceSession, session: sourceSession };
+}
+const SLACK_ALT_TEXT_CAP = 2000; // Slack image alt_text hard limit.
+/** M1 A5b — turn media refs into Block Kit `image` blocks. Item-7 hygiene: a secret-bearing
+ *  image_url (e.g. a webhook URL smuggled as an image) is REFUSED, never forwarded. Alt text is
+ *  redacted + clamped. Returns only the well-formed, secret-free image blocks. */
+export function buildImageBlocks(mediaRefs) {
+    if (!mediaRefs?.length)
+        return [];
+    const blocks = [];
+    for (const m of mediaRefs) {
+        const url = String(m.imageUrl || "");
+        // Only forward a clean https URL that carries no secret (defense-in-depth, item 7).
+        if (!/^https:\/\/\S+$/.test(url) || containsSecret(url))
+            continue;
+        blocks.push({
+            type: "image",
+            image_url: url,
+            // R2 B1: alt text is row-carried → the same inert pipeline (redact + neutralize).
+            alt_text: clamp(inert(String(m.altText || "attachment")), SLACK_ALT_TEXT_CAP),
+        });
+    }
+    return blocks;
+}
+// Secret-looking patterns we refuse to forward (item 7 defense-in-depth).
+const SECRET_PATTERNS = [
+    /xox[baprs]-[A-Za-z0-9-]+/g, // Slack bot/user/app/refresh tokens
+    /xapp-[A-Za-z0-9-]+/g, // Slack app-level (Socket Mode) token
+    /https:\/\/hooks\.slack\.com\/services\/[A-Za-z0-9/_-]+/g, // incoming webhook URL
+    /\bBearer\s+[A-Za-z0-9._-]{12,}/gi, // bearer tokens
+    /xoxe\.xox[bp]-[A-Za-z0-9-]+/g, // rotation tokens
+];
+export function containsSecret(text) {
+    return SECRET_PATTERNS.some((p) => {
+        p.lastIndex = 0;
+        return p.test(text);
+    });
+}
+export function redactSecrets(text) {
+    let out = text;
+    for (const p of SECRET_PATTERNS) {
+        out = out.replace(p, "[redacted-secret]");
+    }
+    return out;
+}
+/** S10 fix-r1 (R2 B1) — STRUCTURAL neutralization of queue-controlled content. Slack's
+ *  formatting contract parses control sequences (<@U…>, <!here>, <!channel>, <!subteam^…>,
+ *  <url|label>) only from a literal "<"; its documented rule for displaying user-generated
+ *  text is to escape exactly &, <, > (docs.slack.dev/messaging/formatting-message-text).
+ *  Escaping these three makes EVERY control form inert BY CONSTRUCTION — present and past
+ *  forms alike — never a blocklist of known spellings. Ordinary mrkdwn styling (*bold*,
+ *  _italic_, bare URLs) uses none of the three and survives untouched. Order matters: "&"
+ *  first, or the escapes themselves would be re-escaped. */
+export function escapeSlackText(text) {
+    return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+}
+/** The untrusted-field pipeline: secrets redacted, then Slack control syntax neutralized. */
+function inert(text) {
+    return escapeSlackText(redactSecrets(text));
+}
+/** S10 fix-r3 (R2 exactly-once) — the STRUCTURAL reconciliation identity: a bounded,
+ *  decision-scoped token. decisionId is daemon-minted per decision (never settable through
+ *  queue rows) and stable across retries of the same decision, so ONLY the target posted
+ *  message carries this exact delimited token — ordinary prose quoting a qitem id (or even a
+ *  lookalike built from the qitem id) cannot reproduce it. ONE producer function; the
+ *  reconcile scanner matches exactly this function's output — producer and scanner share
+ *  identity bytes by construction. Parentheses/colon only: no &,<,> so the token is
+ *  escape-stable and never parses as Slack control syntax. */
+export function reconcileToken(decisionId) {
+    return `(or-mark:${escapeSlackText(String(decisionId))})`;
+}
+function clamp(s, max) {
+    return s.length > max ? s.slice(0, max) : s;
+}
+/**
+ * Build the Slack payload for a human-destined qitem. Pure + deterministic
+ * (no clock, no io) so it is trivially testable and safe to snapshot.
+ */
+export function buildOutboundMessage(q, opts) {
+    // R2 B1 boundary rule, UNIFORM (fix-r2 / R1 F-B1r): EVERY queue-controlled field — the
+    // qitemId included — goes through the structural neutralization BEFORE placement in text or
+    // mrkdwn. No exemption, no minted-only premise: the create route accepts caller-supplied
+    // ids without charset validation, so "no specials by construction" is not enforced anywhere.
+    // Control syntax arriving through a row cannot survive, and content stays honestly readable
+    // escaped. The H reconcile marker compares the SAME escaped bytes on both sides (the scan in
+    // slack-delivery searches escapeSlackText(qitemId)); for minted ids escaped == raw.
+    const summary = inert(String(q.summary || "(no summary)"));
+    const bodyRaw = inert(String(q.body || ""));
+    const body = clamp(bodyRaw, opts.bodyExcerpt ?? DEFAULT_BODY_EXCERPT);
+    const dest = escapeSlackText(q.destinationSession || "(unknown destination)");
+    const footer = `qitem ${escapeSlackText(String(q.qitemId))} → ${dest} on ${opts.sourceLabel}`;
+    // S10 interim loudness rule: only an escalation carries a mention (the sole force-notify
+    // lever Slack offers); everything else stays quiet-threaded. Composed HERE, AFTER the
+    // untrusted fields were neutralized above — the renderer's mention is the only path to an
+    // active control sequence, and its id comes from the registry's HANDLE_PATTERN-validated
+    // binding, never from row content.
+    const mention = opts.mentionUserId ? `<@${opts.mentionUserId}> ` : "";
+    const loudness = opts.mentionUserId ? ":rotating_light: " : "";
+    const headline = `${mention}${loudness}*${summary}*`;
+    // A1.2 — the attribution header line (rig/host/seat/session), one honest bot identity.
+    // Session strings are row-carried → same inert pipeline.
+    const attr = opts.attribution
+        ? [
+            `from *${inert(opts.attribution.seat)}*`,
+            opts.attribution.rig ? `rig ${inert(opts.attribution.rig)}` : null,
+            opts.attribution.host ? `host ${inert(opts.attribution.host)}` : null,
+            `session ${inert(opts.attribution.session)}`,
+        ].filter(Boolean).join(" · ")
+        : null;
+    // fix-r3: the reconcile token is reserved OUTSIDE the clamp budget — ordinary content of any
+    // length clamps first, the token appends after, so the scanned surface ALWAYS carries it.
+    const tokenReserve = opts.reconcileMarker ? opts.reconcileMarker.length + 1 : 0;
+    const assemble = (content) => {
+        const clamped = clamp(content, SLACK_TEXT_CAP - tokenReserve);
+        return opts.reconcileMarker ? `${clamped}\n${opts.reconcileMarker}` : clamped;
+    };
+    const text = assemble(`${headline}${attr ? `\n_${attr}_` : ""}\n${body}\n_${footer}_`);
+    const blocks = [];
+    if (attr)
+        blocks.push({ type: "context", elements: [{ type: "mrkdwn", text: clamp(attr, 2000) }] });
+    blocks.push({ type: "section", text: { type: "mrkdwn", text: clamp(headline, 3000) } });
+    if (body.trim())
+        blocks.push({ type: "section", text: { type: "mrkdwn", text: clamp(body, 3000) } });
+    // M1 A5b — outbound image attachments (the wired T1076 seam). Secret-bearing URLs are dropped.
+    const imageBlocks = buildImageBlocks(opts.mediaRefs);
+    blocks.push(...imageBlocks);
+    blocks.push({ type: "context", elements: [{ type: "mrkdwn", text: footer }] });
+    if (opts.extraBlocks?.length)
+        blocks.push(...opts.extraBlocks);
+    // Note the attachment count in the notification fallback so a text-only client still signals
+    // it. Re-assembled through the same token-reserving path so the media note never evicts the
+    // reconcile identity from the scanned surface.
+    const textWithMedia = imageBlocks.length > 0
+        ? assemble(`${headline}${attr ? `\n_${attr}_` : ""}\n${body}\n_${footer}_\n_(${imageBlocks.length} image attachment${imageBlocks.length === 1 ? "" : "s"})_`)
+        : text;
+    return { text: textWithMedia, blocks };
+}
+//# sourceMappingURL=message.js.map

package/daemon/dist/domain/gateway/slack/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/message.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,mDAAmD;AACnD,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,yDAAyD;AAEzD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,CAAC,uCAAuC;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AA+CxC;2FAC2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,aAAwC;IAC7E,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,GAAoB,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QACtG,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;YAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,CAAC,mCAAmC;AAEpE;;kFAEkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,SAA+C;IAC9E,IAAI,CAAC,SAAS,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrC,oFAAoF;QACpF,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,SAAS;QAClE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,GAAG;YACd,kFAAkF;YAClF,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,EAAE,kBAAkB,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,eAAe,GAAa;IAChC,2BAA2B,EAAE,oCAAoC;IACjE,qBAAqB,EAAE,sCAAsC;IAC7D,yDAAyD,EAAE,uBAAuB;IAClF,kCAAkC,EAAE,gBAAgB;IACpD,8BAA8B,EAAE,kBAAkB;CACnD,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;QAChC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;4DAO4D;AAC5D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,6FAA6F;AAC7F,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;8DAO8D;AAC9D,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,YAAY,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC;AAC5D,CAAC;AAOD,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW;IACnC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAY,EAAE,IAAyB;IAC1E,uFAAuF;IACvF,4FAA4F;IAC5F,yFAAyF;IACzF,6FAA6F;IAC7F,4FAA4F;IAC5F,6FAA6F;IAC7F,oFAAoF;IACpF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,kBAAkB,IAAI,uBAAuB,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,SAAS,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAE9F,yFAAyF;IACzF,sFAAsF;IACtF,0FAA0F;IAC1F,yFAAyF;IACzF,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAG,GAAG,OAAO,GAAG,QAAQ,IAAI,OAAO,GAAG,CAAC;IACrD,uFAAuF;IACvF,yDAAyD;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW;QAC3B,CAAC,CAAC;YACE,SAAS,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG;YACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YAClE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YACrE,WAAW,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE;SAC7C,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC;IAET,6FAA6F;IAC7F,0FAA0F;IAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAU,EAAE;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAChF,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,MAAM,GAAG,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,+FAA+F;IAC/F,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAE/D,6FAA6F;IAC7F,4FAA4F;IAC5F,+CAA+C;IAC/C,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;QAC1C,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,MAAM,QAAQ,WAAW,CAAC,MAAM,oBAAoB,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7J,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC"}

package/daemon/dist/domain/gateway/slack/outbound-driver.d.ts

@@ -0,0 +1,57 @@
+import type { SeenStore } from "./state-store.js";
+import type { AlertFilterOpts, OutboundQueuePort } from "./queue-access.js";
+import type { DispatchResult } from "../dispatcher.js";
+export declare const OUTBOUND_OP = "post_message";
+/** The decision payload for op=post_message: the queue content the delivery layer renders.
+ *  qitemId rides along as the idempotency anchor (seen-state key + the H reconcile marker). */
+export interface OutboundPostPayload {
+    qitemId: string;
+    notificationKey?: string | null;
+    ownerNotificationKind?: string | null;
+    ownerNotificationLevel?: import("../../queue-transition-log.js").OwnerNotificationLevel | null;
+    summary?: string | null;
+    body?: string | null;
+    destinationSession?: string | null;
+    sourceSession?: string | null;
+    evidenceRef?: string | null;
+    /** F: the loudness discriminators (interim rule: escalations mention, all else quiet). */
+    tier?: string | null;
+    tags?: string[] | null;
+}
+export interface OutboundDriverDeps {
+    home: string;
+    queue: OutboundQueuePort;
+    seen: SeenStore;
+    filter: AlertFilterOpts;
+    /** Dispatch into the subsystem wire (durable-first). Injected: the driver never posts itself. */
+    dispatch: (op: string, entityBindingRef: string, payload: unknown) => DispatchResult;
+    /** Called by the delivery layer's ack path? No — the WIRE acks; the driver learns success by
+     *  the seen-store the delivery layer marks. This callback seam is for tests observing sweeps. */
+    onSweep?: (result: SweepResult) => void;
+    intervalMs?: number;
+    log?: (msg: string) => void;
+}
+export interface SweepResult {
+    alerts: number;
+    fresh: number;
+    dispatched: string[];
+    refused: {
+        qitemId: string;
+        error: string;
+    }[];
+}
+export declare class SlackOutboundDriver {
+    private readonly deps;
+    private readonly inflight;
+    private timer;
+    private sweeping;
+    constructor(deps: OutboundDriverDeps);
+    /** Seed inflight from the durable buffer (restart no-double-dispatch), then start the poll. */
+    start(): void;
+    /** One sweep: fresh = active human alerts minus seen minus inflight. Dispatch each. */
+    sweepOnce(): Promise<SweepResult>;
+    /** The delivery layer marked a qitem seen (delivered) — release the in-memory guard. */
+    release(qitemId: string): void;
+    stop(): void;
+}
+//# sourceMappingURL=outbound-driver.d.ts.map

package/daemon/dist/domain/gateway/slack/outbound-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-driver.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/outbound-driver.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAa,MAAM,mBAAmB,CAAC;AACvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,eAAO,MAAM,WAAW,iBAAiB,CAAC;AAE1C;+FAC+F;AAC/F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,OAAO,+BAA+B,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC/F,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,iGAAiG;IACjG,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,cAAc,CAAC;IACrF;qGACiG;IACjG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C;AAED,qBAAa,mBAAmB;IAKlB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,kBAAkB;IAErD,+FAA+F;IAC/F,KAAK,IAAI,IAAI;IAeb,uFAAuF;IACjF,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC;IA6BvC,wFAAwF;IACxF,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI9B,IAAI,IAAI,IAAI;CAIb"}

package/daemon/dist/domain/gateway/slack/outbound-driver.js

@@ -0,0 +1,103 @@
+// S10 — the OUTBOUND driver: the gateway subsystem owns the outbound decision (the shape the
+// M1 reconciliation named — queue poll + admission — now in-process). Each sweep selects the
+// FRESH human alerts (slice-11 semantics preserved verbatim: qitemId-keyed durable seen-state,
+// marked ONLY after delivered) and dispatches each through the subsystem wire, which persists
+// the decision durably BEFORE delivery and retains it on failure (replay owns the retry).
+//
+// Duplicate-absence design (proof item: durability through failure):
+//   - seen(qitemId): marked only after delivered-ok — the slice-11 at-least-once contract.
+//   - inflight(qitemId), in-memory: a dispatched-but-unresolved qitem is not re-dispatched by
+//     a later sweep — the durable buffer owns its retry (replay), never a second decision.
+//   - at start(), inflight SEEDS from the durable buffer's pending decisions (payload carries
+//     qitemId): after a daemon restart the replay path owns those qitems, so a sweep cannot
+//     mint a second decisionId for the same alert — the restart double-dispatch window is
+//     closed by construction. The only remaining duplicate is the locked contract's accepted
+//     rare crash window (delivered but crashed before seen-mark/ack): byte-identical, never a drop.
+import { DispatchBuffer } from "../dispatch-buffer.js";
+export const OUTBOUND_OP = "post_message";
+export class SlackOutboundDriver {
+    deps;
+    inflight = new Set();
+    timer;
+    sweeping = false;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Seed inflight from the durable buffer (restart no-double-dispatch), then start the poll. */
+    start() {
+        try {
+            for (const d of new DispatchBuffer(this.deps.home).pending()) {
+                const payload = d.payload;
+                const key = payload?.notificationKey ?? payload?.qitemId;
+                if (key)
+                    this.inflight.add(key);
+            }
+        }
+        catch { /* unreadable buffer: replay still dedups by decisionId at delivery */ }
+        const interval = this.deps.intervalMs ?? 30000;
+        this.timer = setInterval(() => void this.sweepOnce(), interval);
+        if (typeof this.timer.unref === "function") {
+            this.timer.unref();
+        }
+    }
+    /** One sweep: fresh = active human alerts minus seen minus inflight. Dispatch each. */
+    async sweepOnce() {
+        if (this.sweeping)
+            return { alerts: 0, fresh: 0, dispatched: [], refused: [] };
+        this.sweeping = true;
+        try {
+            const alerts = await this.deps.queue.listHumanAlerts(this.deps.filter);
+            const seen = this.deps.seen.load();
+            const fresh = alerts.filter((q) => !seen.has(notificationKey(q)) && !this.inflight.has(notificationKey(q)));
+            const dispatched = [];
+            const refused = [];
+            for (const alert of fresh) {
+                const res = this.deps.dispatch(OUTBOUND_OP, alert.destinationSession ?? "(unknown)", toPayload(alert));
+                if (res.ok) {
+                    this.inflight.add(notificationKey(alert));
+                    dispatched.push(alert.qitemId);
+                }
+                else {
+                    // Refused (e.g. delivery layer unconfigured → op unadvertised): honest, retried next
+                    // sweep — nothing durable was minted, so this is not a retained decision.
+                    refused.push({ qitemId: alert.qitemId, error: res.error });
+                    this.deps.log?.(`outbound dispatch refused for ${alert.qitemId}: ${res.error}`);
+                }
+            }
+            const result = { alerts: alerts.length, fresh: fresh.length, dispatched, refused };
+            this.deps.onSweep?.(result);
+            return result;
+        }
+        finally {
+            this.sweeping = false;
+        }
+    }
+    /** The delivery layer marked a qitem seen (delivered) — release the in-memory guard. */
+    release(qitemId) {
+        this.inflight.delete(qitemId);
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = undefined;
+    }
+}
+function toPayload(q) {
+    return {
+        qitemId: q.qitemId,
+        notificationKey: q.notificationKey,
+        ownerNotificationKind: q.ownerNotificationKind,
+        ownerNotificationLevel: q.ownerNotificationLevel,
+        summary: q.summary,
+        body: q.body,
+        destinationSession: q.destinationSession,
+        sourceSession: q.sourceSession,
+        evidenceRef: q.evidenceRef,
+        tier: q.tier,
+        tags: q.tags,
+    };
+}
+function notificationKey(q) {
+    return q.notificationKey ?? q.qitemId;
+}
+//# sourceMappingURL=outbound-driver.js.map

package/daemon/dist/domain/gateway/slack/outbound-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-driver.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/outbound-driver.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,6FAA6F;AAC7F,+FAA+F;AAC/F,8FAA8F;AAC9F,0FAA0F;AAC1F,EAAE;AACF,qEAAqE;AACrE,2FAA2F;AAC3F,8FAA8F;AAC9F,2FAA2F;AAC3F,8FAA8F;AAC9F,4FAA4F;AAC5F,0FAA0F;AAC1F,6FAA6F;AAC7F,oGAAoG;AAKpG,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAG,cAAc,CAAC;AAwC1C,MAAM,OAAO,mBAAmB;IAKD;IAJZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,CAA6C;IAClD,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;IAAG,CAAC;IAEzD,+FAA+F;IAC/F,KAAK;QACH,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC7D,MAAM,OAAO,GAAG,CAAC,CAAC,OAA0C,CAAC;gBAC7D,MAAM,GAAG,GAAG,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,OAAO,CAAC;gBACzD,IAAI,GAAG;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,sEAAsE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,OAAQ,IAAI,CAAC,KAA2C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACjF,IAAI,CAAC,KAA0C,CAAC,KAAK,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5G,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,OAAO,GAAyC,EAAE,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,kBAAkB,IAAI,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvG,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,qFAAqF;oBACrF,0EAA0E;oBAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YACnF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,wFAAwF;IACxF,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAY;IAC7B,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB;QAC9C,sBAAsB,EAAE,CAAC,CAAC,sBAAsB;QAChD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,CAAY;IACnC,OAAO,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC"}

package/daemon/dist/domain/gateway/slack/queue-access.d.ts

@@ -0,0 +1,58 @@
+import type { QueueRepository } from "../../queue-repository.js";
+import { type LoadResult } from "../human-registry.js";
+import { type OwnerNotificationLevel } from "../../queue-transition-log.js";
+/** The narrow projection the slack path consumes (shape-compatible with the retired bridge's
+ *  QueueItem so message construction and tests carry over). */
+export interface QueueItem {
+    qitemId: string;
+    destinationSession?: string | null;
+    sourceSession?: string | null;
+    tags?: string[] | null;
+    state?: string | null;
+    tier?: string | null;
+    summary?: string | null;
+    body?: string | null;
+    evidenceRef?: string | null;
+    notificationKey?: string | null;
+    ownerNotificationKind?: string | null;
+    ownerNotificationLevel?: OwnerNotificationLevel | null;
+}
+export interface AlertFilterOpts {
+    minimumLevel?: OwnerNotificationLevel;
+}
+/** PURE: select active qitems whose transition carries a sufficient OWNER classification. */
+export declare function filterHumanAlerts(items: QueueItem[], opts: AlertFilterOpts): QueueItem[];
+export interface CreateQitemInput {
+    source: string;
+    destination: string;
+    summary: string;
+    body: string;
+    priority?: string;
+    tags?: string[];
+}
+/** What the inbound router needs: land a durable qitem, get its id (or throw). */
+export interface InboundQueuePort {
+    createQitem(input: CreateQitemInput): Promise<string>;
+}
+/** What the outbound driver needs: the current human-alert set, full items included. */
+export interface OutboundQueuePort {
+    listHumanAlerts(filter: AlertFilterOpts): Promise<QueueItem[]>;
+}
+/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
+ *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
+ *  never replays the backlog. Returns the honest online-status line marking the transition. */
+export declare function seedBacklogAsHistory(opts: {
+    queue: OutboundQueuePort;
+    seen: import("./state-store.js").SeenStore;
+    filter: AlertFilterOpts;
+    log?: (msg: string) => void;
+}): Promise<{
+    seeded: number;
+    onlineStatus: string;
+}>;
+/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
+ *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
+export declare function makeQueuePorts(queueRepo: QueueRepository, opts?: {
+    loadHumanRegistry?: () => LoadResult;
+}): InboundQueuePort & OutboundQueuePort;
+//# sourceMappingURL=queue-access.d.ts.map

package/daemon/dist/domain/gateway/slack/queue-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-access.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAA8B,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EAAoD,KAAK,UAAU,EAAsB,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAiC,KAAK,sBAAsB,EAAwB,MAAM,+BAA+B,CAAC;AAEjI;+DAC+D;AAC/D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,sBAAsB,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,SAAS,EAAE,CAQxF;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACvD;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CAChE;AAiCD;;+FAE+F;AAC/F,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,EAAE,OAAO,kBAAkB,EAAE,SAAS,CAAC;IAC3C,MAAM,EAAE,eAAe,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAQpD;AAED;oGACoG;AACpG,wBAAgB,cAAc,CAC5B,SAAS,EAAE,eAAe,EAC1B,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,UAAU,CAAA;CAAO,GAClD,gBAAgB,GAAG,iBAAiB,CA4BtC"}

package/daemon/dist/domain/gateway/slack/queue-access.js

@@ -0,0 +1,99 @@
+// S10 — the IN-PROCESS queue port for the gateway subsystem. Successor to the retired CLI
+// queue-bridge (which shelled out to `rig queue` from the relay's separate process): in-daemon
+// there is no process boundary, so fleet access is a direct QueueRepository read/write. The
+// SELECTION SEMANTICS consume the single structured OWNER classification written with the
+// queue transition. Tags and destination spellings are not a second alert classifier.
+//   - reads are unbounded (the B5 lesson: a default limit silently truncates a large backlog).
+import { loadHumanRegistry, resolveRegisteredHumanAddress } from "../human-registry.js";
+import { ownerNotificationLevelAtLeast } from "../../queue-transition-log.js";
+/** PURE: select active qitems whose transition carries a sufficient OWNER classification. */
+export function filterHumanAlerts(items, opts) {
+    const active = new Set(["pending", "in-progress", "blocked"]);
+    return items.filter((q) => {
+        if (q.state && !active.has(q.state))
+            return false;
+        return q.ownerNotificationLevel
+            ? ownerNotificationLevelAtLeast(q.ownerNotificationLevel, opts.minimumLevel ?? "NOTICE")
+            : false;
+    });
+}
+function project(q, transition, entities) {
+    const r = q;
+    let destinationSession = null;
+    let sourceSession = null;
+    if (transition.ownerNotificationKind === "human-decision-resolved") {
+        destinationSession = resolveRegisteredHumanAddress(transition.actorSession, entities);
+        sourceSession = q.destinationSession;
+    }
+    else if (q.state === "blocked") {
+        destinationSession = resolveRegisteredHumanAddress(q.blockedOn, entities);
+        sourceSession = q.destinationSession;
+    }
+    else {
+        destinationSession = resolveRegisteredHumanAddress(q.destinationSession, entities);
+        sourceSession = q.sourceSession;
+    }
+    if (!destinationSession)
+        return null;
+    return {
+        qitemId: String(r.qitemId),
+        destinationSession,
+        sourceSession,
+        tags: r.tags ?? null,
+        state: r.state ?? null,
+        tier: r.tier ?? null,
+        summary: r.summary ?? null,
+        body: r.body ?? null,
+        evidenceRef: r.evidenceRef ?? null,
+        notificationKey: `${q.qitemId}:${transition.transitionId}`,
+        ownerNotificationKind: transition.ownerNotificationKind,
+        ownerNotificationLevel: transition.ownerNotificationLevel,
+    };
+}
+/** Slice-11 item 9, carried over verbatim from the retired outbound.ts: on ENABLE, seed all
+ *  currently-active human alerts as history/seen WITHOUT posting, so turning the connector on
+ *  never replays the backlog. Returns the honest online-status line marking the transition. */
+export async function seedBacklogAsHistory(opts) {
+    const alerts = await opts.queue.listHumanAlerts(opts.filter);
+    const already = opts.seen.load();
+    const toSeed = alerts.map((a) => a.notificationKey ?? a.qitemId).filter((id) => !already.has(id));
+    const seeded = opts.seen.seed(toSeed, "seeded-at-enable");
+    const onlineStatus = `slack outbound ENABLED at enable-time: ${seeded} pre-existing alert(s) seeded as history (not reposted); only alerts created after this point will deliver.`;
+    opts.log?.(onlineStatus);
+    return { seeded, onlineStatus };
+}
+/** Build both ports over the daemon's own QueueRepository. In-process: no shell, no transport,
+ *  no `-A` scope trap (list() here is repository-wide), no bounded-body N+1 (rows carry bodies). */
+export function makeQueuePorts(queueRepo, opts = {}) {
+    return {
+        async createQitem(input) {
+            const created = await queueRepo.create({
+                sourceSession: input.source,
+                destinationSession: input.destination,
+                body: input.body,
+                summary: input.summary,
+                priority: (input.priority ?? "routine"),
+                tags: input.tags ?? ["founder-slack", "inbound"],
+            });
+            return created.qitemId;
+        },
+        async listHumanAlerts(filter) {
+            const registry = (opts.loadHumanRegistry ?? (() => loadHumanRegistry()))();
+            if (!registry.ok)
+                return [];
+            const rows = queueRepo.list({ activeOnly: true, limit: 1000000 });
+            const projected = rows.flatMap((row) => {
+                const transition = queueRepo.transitionLog.latestOwnerNotificationForQitem(row.qitemId);
+                if (!transition)
+                    return [];
+                const notificationKey = `${row.qitemId}:${transition.transitionId}`;
+                if (queueRepo.transitionLog.hasOwnerNotificationReceipt(row.qitemId, notificationKey))
+                    return [];
+                const item = project(row, transition, registry.entities);
+                return item ? [item] : [];
+            });
+            return filterHumanAlerts(projected, filter);
+        },
+    };
+}
+//# sourceMappingURL=queue-access.js.map

package/daemon/dist/domain/gateway/slack/queue-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"queue-access.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/queue-access.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,+FAA+F;AAC/F,4FAA4F;AAC5F,0FAA0F;AAC1F,sFAAsF;AACtF,+FAA+F;AAG/F,OAAO,EAAE,iBAAiB,EAAE,6BAA6B,EAAuC,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EAAE,6BAA6B,EAAqD,MAAM,+BAA+B,CAAC;AAuBjI,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,KAAkB,EAAE,IAAqB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,CAAC,CAAC,sBAAsB;YAC7B,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC;YACxF,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAqBD,SAAS,OAAO,CAAC,CAAgB,EAAE,UAA2B,EAAE,QAAkC;IAChG,MAAM,CAAC,GAAG,CAAuC,CAAC;IAClD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,UAAU,CAAC,qBAAqB,KAAK,yBAAyB,EAAE,CAAC;QACnE,kBAAkB,GAAG,6BAA6B,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACtF,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC;IACvC,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,kBAAkB,GAAG,6BAA6B,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,aAAa,GAAG,CAAC,CAAC,kBAAkB,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,kBAAkB,GAAG,6BAA6B,CAAC,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QACnF,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1B,kBAAkB;QAClB,aAAa;QACb,IAAI,EAAG,CAAC,CAAC,IAAwB,IAAI,IAAI;QACzC,KAAK,EAAG,CAAC,CAAC,KAAuB,IAAI,IAAI;QACzC,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,OAAO,EAAG,CAAC,CAAC,OAAyB,IAAI,IAAI;QAC7C,IAAI,EAAG,CAAC,CAAC,IAAsB,IAAI,IAAI;QACvC,WAAW,EAAG,CAAC,CAAC,WAA6B,IAAI,IAAI;QACrD,eAAe,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE;QAC1D,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;QACvD,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;KAC1D,CAAC;AACJ,CAAC;AAED;;+FAE+F;AAC/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAK1C;IACC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,0CAA0C,MAAM,6GAA6G,CAAC;IACnL,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAClC,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,cAAc,CAC5B,SAA0B,EAC1B,OAAiD,EAAE;IAEnD,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAuB;YACvC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;gBACrC,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,kBAAkB,EAAE,KAAK,CAAC,WAAW;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAU;gBAChD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;aACjD,CAAC,CAAC;YACH,OAAQ,OAA0C,CAAC,OAAO,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,MAAuB;YAC3C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBACrC,MAAM,UAAU,GAAG,SAAS,CAAC,aAAa,CAAC,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxF,IAAI,CAAC,UAAU;oBAAE,OAAO,EAAE,CAAC;gBAC3B,MAAM,eAAe,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;gBACpE,IAAI,SAAS,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC;oBAAE,OAAO,EAAE,CAAC;gBACjG,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/gateway/slack/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,eAAO,MAAM,YAAY,EAAE,WAS1B,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,WAA0B,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,MAAM,GAAG,IAAI,CAmBtF"}