@openrig/cli 0.5.4 → 0.5.6

package/daemon/dist/domain/gateway/slack/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/secrets.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,8CAA8C;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAOzB,MAAM,CAAC,MAAM,YAAY,GAAgB;IACvC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC;aAC1B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;aACZ,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,QAAqB,YAAY;IACxF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6CAA6C;IAC7E,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,mBAAmB,OAAO,YAAY,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,CAAC;IACvI,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyB,EAAE;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,2EAA2E;IAC3E,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAE,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-api.d.ts

@@ -0,0 +1,129 @@
+export type FetchImpl = (url: string, init?: RequestInit) => Promise<Response>;
+export interface HttpResult {
+    ok: boolean;
+    status: number;
+    error?: string;
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export declare function postWebhook(url: string, payload: unknown, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
+export interface WebApiResult {
+    ok: boolean;
+    status: number;
+    grantedScopes: string[];
+    json: Record<string, unknown>;
+    error?: string;
+}
+/** S10 shape-fix — the per-method REQUEST SHAPE. Slack's read methods (conversations.info /
+ *  history / replies) reject a JSON POST with `invalid_arguments` (operator-measured live);
+ *  their supported shape is GET with URL-query args. Write/JSON methods (auth.test,
+ *  apps.connections.open, chat.postMessage, files.completeUploadExternal) keep JSON POST
+ *  byte-identically — the default, so no existing caller changes shape implicitly. */
+export type WebApiRequestShape = "json-post" | "get-query";
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export declare function callWebApi(method: string, token: string, body: Record<string, unknown>, fetchImpl?: FetchImpl, timeoutMs?: number, shape?: WebApiRequestShape): Promise<WebApiResult>;
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export declare function getGrantedScopes(token: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    granted: string[];
+    error?: string;
+}>;
+/** OPR.0.5.6.2 — authenticated private-file download (`url_private` + Bearer,
+ *  the verified inbound mechanic from the human-layer design §4.1). Bounded:
+ *  a body over `maxBytes` is refused, never truncated-and-stored. Slack's
+ *  classic auth-failure mode returns an HTML login page with status 200 —
+ *  detected by content-type and named, so garbage is never stored as the file.
+ *  Errors are MESSAGES, not exceptions: the caller's failure-honesty contract
+ *  needs a name per file, never a thrown loss of the whole event. */
+export declare const INBOUND_FILE_MAX_BYTES = 26214400;
+export declare function downloadPrivateFile(url: string, token: string, fetchImpl?: FetchImpl, timeoutMs?: number, maxBytes?: number): Promise<{
+    ok: true;
+    bytes: Uint8Array;
+} | {
+    ok: false;
+    error: string;
+}>;
+export interface ScopeVerdict {
+    ok: boolean;
+    granted: string[];
+    missing: string[];
+    error?: string;
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export declare function verifyScopes(token: string, required: string[], fetchImpl?: FetchImpl, timeoutMs?: number): Promise<ScopeVerdict>;
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export declare function verifyChannelMembership(token: string, channel: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    isMember: boolean;
+    name?: string;
+    error?: string;
+}>;
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export declare function openSocketConnection(appToken: string, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    url?: string;
+    error?: string;
+}>;
+export declare function getUploadURLExternal(token: string, filename: string, length: number, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    uploadUrl?: string;
+    fileId?: string;
+    error?: string;
+}>;
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export declare function uploadBytesExternal(uploadUrl: string, bytes: Uint8Array, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<HttpResult>;
+export declare function completeUploadExternal(token: string, input: {
+    files: {
+        id: string;
+        title?: string;
+    }[];
+    channelId: string;
+    threadTs?: string;
+    initialComment?: string;
+}, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export declare function fetchRecentMessageTexts(token: string, channel: string, threadTs: string | undefined, fetchImpl?: FetchImpl, limit?: number, timeoutMs?: number): Promise<{
+    ok: boolean;
+    texts: string[];
+    messages: {
+        text: string;
+        ts: string;
+    }[];
+    error?: string;
+}>;
+export interface PostChatMessageInput {
+    channel: string;
+    text: string;
+    blocks?: unknown[];
+    /** Thread reply: the PARENT message's ts (never a reply's ts — the affordance discriminator). */
+    thread_ts?: string;
+}
+export type PostChatMessageResult = {
+    ok: true;
+    status: number;
+    ts: string;
+} | {
+    ok: false;
+    status: number;
+    error?: string;
+};
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export declare function postChatMessage(token: string, input: PostChatMessageInput, fetchImpl?: FetchImpl, timeoutMs?: number): Promise<PostChatMessageResult>;
+//# sourceMappingURL=slack-api.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAK/E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAYD;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;sFAIsF;AACtF,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3D,uFAAuF;AACvF,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,EAC9B,KAAK,GAAE,kBAAgC,GACtC,OAAO,CAAC,YAAY,CAAC,CAyCvB;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG7D;AAED;;;;;;qEAMqE;AACrE,eAAO,MAAM,sBAAsB,WAAa,CAAC;AAEjD,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,SAAiB,EAC5B,SAAS,SAAS,EAClB,QAAQ,SAAyB,GAChC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBzE;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAAE,EAClB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,uFAAuF;AACvF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAK5E;AAED,kGAAkG;AAClG,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAIxD;AASD,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAI/E;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,UAAU,EACjB,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAerB;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,KAAK,EAAE;IAAE,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,EACjH,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAM1C;AAED;;;wFAGwF;AACxF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,GAAE,SAAwB,EACnC,KAAK,SAAM,EACX,SAAS,SAAqB,GAC7B,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAWrG;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;;;;uFAIuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,oBAAoB,EAC3B,SAAS,GAAE,SAAwB,EACnC,SAAS,SAAqB,GAC7B,OAAO,CAAC,qBAAqB,CAAC,CAWhC"}

package/daemon/dist/domain/gateway/slack/slack-api.js

@@ -0,0 +1,236 @@
+// Slice-11 slack-connector — Slack HTTP client.
+//
+// `fetch`-based (http/https agnostic + injectable) matching the daemon's
+// WebhookNotificationAdapter + its fake-fetch test pattern; every call is
+// bounded by an explicit timeout with a structured failure result (never
+// throws past the boundary, never hangs) — the remote-daemon-http discipline.
+//
+// Item 5 (the setup-scope trap): Slack's "Add New Webhook" grants ONLY the
+// webhook scope; configured bot scopes are NOT granted until a full reinstall,
+// with no warning. The ONLY proof of granted scopes is the `x-oauth-scopes`
+// RESPONSE HEADER on a real API call — configured != granted. getGrantedScopes()
+// reads exactly that header. Channel membership is likewise verified live
+// (conversations.info.is_member) before declaring inbound ready.
+const defaultFetch = (url, init) => fetch(url, init);
+const DEFAULT_TIMEOUT_MS = 15000;
+async function withTimeout(timeoutMs, run) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+    try {
+        return await run(ctrl.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export async function postWebhook(url, payload, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+                signal,
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                return { ok: false, status: res.status, error: `slack ${res.status}: ${text.slice(0, 160)}` };
+            }
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `webhook transport: ${e.message}` };
+    }
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export async function callWebApi(method, token, body, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS, shape = "json-post") {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            let res;
+            if (shape === "get-query") {
+                // The read shape: args in the query string, Authorization only — no body, no
+                // content-type (a body or JSON content-type is exactly what the endpoint rejects).
+                const url = new URL(`https://slack.com/api/${method}`);
+                for (const [k, v] of Object.entries(body)) {
+                    if (v !== undefined && v !== null)
+                        url.searchParams.set(k, String(v));
+                }
+                res = await fetchImpl(url.toString(), {
+                    method: "GET",
+                    headers: { authorization: `Bearer ${token}` },
+                    signal,
+                });
+            }
+            else {
+                res = await fetchImpl(`https://slack.com/api/${method}`, {
+                    method: "POST",
+                    headers: { authorization: `Bearer ${token}`, "content-type": "application/json; charset=utf-8" },
+                    body: JSON.stringify(body),
+                    signal,
+                });
+            }
+            const scopeHeader = res.headers.get("x-oauth-scopes") ?? "";
+            const grantedScopes = scopeHeader
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean);
+            let json = {};
+            try {
+                json = (await res.json());
+            }
+            catch {
+                /* non-JSON */
+            }
+            const ok = res.ok && json.ok === true;
+            return { ok, status: res.status, grantedScopes, json, error: ok ? undefined : String(json.error ?? `http ${res.status}`) };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, grantedScopes: [], json: {}, error: `web-api transport: ${e.message}` };
+    }
+}
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export async function getGrantedScopes(token, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("auth.test", token, {}, fetchImpl, timeoutMs);
+    return { ok: r.ok, granted: r.grantedScopes, error: r.error };
+}
+/** OPR.0.5.6.2 — authenticated private-file download (`url_private` + Bearer,
+ *  the verified inbound mechanic from the human-layer design §4.1). Bounded:
+ *  a body over `maxBytes` is refused, never truncated-and-stored. Slack's
+ *  classic auth-failure mode returns an HTML login page with status 200 —
+ *  detected by content-type and named, so garbage is never stored as the file.
+ *  Errors are MESSAGES, not exceptions: the caller's failure-honesty contract
+ *  needs a name per file, never a thrown loss of the whole event. */
+export const INBOUND_FILE_MAX_BYTES = 26_214_400; // 25 MiB — bounded write per product limits
+export async function downloadPrivateFile(url, token, fetchImpl = fetch, timeoutMs = 30_000, maxBytes = INBOUND_FILE_MAX_BYTES) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, { headers: { authorization: `Bearer ${token}` }, signal });
+            if (!res.ok)
+                return { ok: false, error: `http ${res.status}` };
+            const contentType = res.headers.get("content-type") ?? "";
+            if (contentType.includes("text/html")) {
+                return { ok: false, error: "auth failure (Slack served an HTML page instead of the file)" };
+            }
+            const buf = new Uint8Array(await res.arrayBuffer());
+            if (buf.byteLength > maxBytes)
+                return { ok: false, error: `exceeds size bound (${buf.byteLength} > ${maxBytes})` };
+            return { ok: true, bytes: buf };
+        });
+    }
+    catch (e) {
+        return { ok: false, error: e.message || "download failed" };
+    }
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export async function verifyScopes(token, required, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const g = await getGrantedScopes(token, fetchImpl, timeoutMs);
+    if (!g.ok)
+        return { ok: false, granted: g.granted, missing: required, error: g.error };
+    const grantedSet = new Set(g.granted);
+    const missing = required.filter((s) => !grantedSet.has(s));
+    return { ok: missing.length === 0, granted: g.granted, missing };
+}
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export async function verifyChannelMembership(token, channel, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("conversations.info", token, { channel }, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, isMember: false, error: r.error };
+    const ch = (r.json.channel ?? {});
+    return { ok: true, isMember: ch.is_member === true, name: ch.name };
+}
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export async function openSocketConnection(appToken, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("apps.connections.open", appToken, {}, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, url: r.json.url };
+}
+// ── S10 outbound images — the EXTERNAL-UPLOAD flow (the only living upload path) ────────────
+// `files.upload` was sunset 2025-11-12 and no longer functions (affordance-verified). The flow:
+//   1. files.getUploadURLExternal (filename, length)  → { upload_url, file_id }
+//   2. POST the raw bytes to upload_url (octet-stream)
+//   3. files.completeUploadExternal ({ files, channel_id, thread_ts?, initial_comment? })
+// Scope: files:write. thread_ts attaches the file INTO the conversation thread.
+export async function getUploadURLExternal(token, filename, length, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("files.getUploadURLExternal", token, { filename, length }, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, uploadUrl: r.json.upload_url, fileId: r.json.file_id };
+}
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export async function uploadBytesExternal(uploadUrl, bytes, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(uploadUrl, {
+                method: "POST",
+                headers: { "content-type": "application/octet-stream" },
+                body: bytes,
+                signal,
+            });
+            if (!res.ok)
+                return { ok: false, status: res.status, error: `upload ${res.status}` };
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `upload transport: ${e.message}` };
+    }
+}
+export async function completeUploadExternal(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { files: input.files, channel_id: input.channelId };
+    if (input.threadTs)
+        body.thread_ts = input.threadTs;
+    if (input.initialComment)
+        body.initial_comment = input.initialComment;
+    const r = await callWebApi("files.completeUploadExternal", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, error: r.error };
+}
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export async function fetchRecentMessageTexts(token, channel, threadTs, fetchImpl = defaultFetch, limit = 100, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const method = threadTs ? "conversations.replies" : "conversations.history";
+    const body = threadTs ? { channel, ts: threadTs, limit } : { channel, limit };
+    const r = await callWebApi(method, token, body, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, texts: [], messages: [], error: r.error };
+    const messages = (r.json.messages ?? []);
+    // S14 repair: retain each message's REAL Slack ts alongside its text — the
+    // reconcile-by-marker path needs the matched message's ts to open the thread
+    // map and stamp receipts with the real anchor, not a synthetic value.
+    const shaped = messages.map((m) => ({ text: String(m.text ?? ""), ts: String(m.ts ?? "") }));
+    return { ok: true, texts: shaped.map((m) => m.text), messages: shaped };
+}
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export async function postChatMessage(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { channel: input.channel, text: input.text };
+    if (input.blocks?.length)
+        body.blocks = input.blocks;
+    if (input.thread_ts)
+        body.thread_ts = input.thread_ts;
+    const r = await callWebApi("chat.postMessage", token, body, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, status: r.status, error: r.error };
+    const ts = typeof r.json.ts === "string" ? r.json.ts.trim() : "";
+    if (!ts) {
+        return { ok: false, status: r.status, error: "chat.postMessage returned ok without a message ts" };
+    }
+    return { ok: true, status: r.status, ts };
+}
+//# sourceMappingURL=slack-api.js.map

package/daemon/dist/domain/gateway/slack/slack-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,iEAAiE;AAIjE,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC,KAAK,UAAU,WAAW,CAAI,SAAiB,EAAE,GAAwC;IACvF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAiBD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,IAA6B,EAC7B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB,EAC9B,QAA4B,WAAW;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,GAAa,CAAC;YAClB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,6EAA6E;gBAC7E,mFAAmF;gBACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;wBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBAC7C,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,SAAS,CAAC,yBAAyB,MAAM,EAAE,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;oBAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,IAAI,GAA4B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;qEAMqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC,CAAC,4CAA4C;AAE9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,KAAa,EACb,YAAuB,KAAK,EAC5B,SAAS,GAAG,MAAM,EAClB,QAAQ,GAAG,sBAAsB;IAEjC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAiB,CAAC,CAAC;YAC3G,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACxE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,IAAI,GAAG,CAAC,UAAU,GAAG,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,uBAAuB,GAAG,CAAC,UAAU,MAAM,QAAQ,GAAG,EAAE,CAAC;YAC5H,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AASD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,QAAkB,EAClB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2C,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC;AACjD,CAAC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,gFAAgF;AAChF,uDAAuD;AACvD,0FAA0F;AAC1F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,MAAc,EACd,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,UAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAiB,EAAE,CAAC;AAChG,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,KAAiB,EACjB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACvD,IAAI,EAAE,KAAuC;gBAC7C,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAAiH,EACjH,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IACpD,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;wFAGwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,QAA4B,EAC5B,YAAuB,YAAY,EACnC,KAAK,GAAG,GAAG,EACX,SAAS,GAAG,kBAAkB;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5E,MAAM,IAAI,GAA4B,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACzE,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAqC,CAAC;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC1E,CAAC;AAcD;;;;uFAIuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,KAA2B,EAC3B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACrD,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACrG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;AAC5C,CAAC"}

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts

@@ -0,0 +1,53 @@
+import { type FetchImpl } from "./slack-api.js";
+import type { SeenStore } from "./state-store.js";
+import type { SubsystemDeliverFn } from "../gateway-subsystem.js";
+import type { OutboundPostPayload } from "./outbound-driver.js";
+export interface SubsystemSlackDeliveryOpts {
+    botToken: string;
+    channel: string;
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    fetchImpl?: FetchImpl;
+    /** decisionId-keyed delivered-store (idempotent redelivery: replay re-acks, never re-posts). */
+    delivered: SeenStore;
+    /** H — decisionId-keyed ATTEMPTED-store, marked BEFORE the HTTP post. A retry of an attempted
+     *  decision has an AMBIGUOUS prior outcome (a timeout may have landed), so it RECONCILES by
+     *  marker before any resend — never a blind repost. Distinct from `delivered` (proven 2xx). */
+    attempted: SeenStore;
+    /** Episode-keyed outbound seen-state (marked ONLY after a successful post). */
+    outboundSeen: SeenStore;
+    /** Release the outbound driver's in-flight guard once an episode is durably seen. */
+    release?: (notificationKey: string) => void;
+    /** E (thread routing): resolve the thread anchor for this payload; undefined = new root.
+     *  Wired by the thread-seat map; absent in the pre-routing composition. */
+    resolveThreadTs?: (payload: OutboundPostPayload) => string | undefined;
+    /** E: record a NEW root's ts so the conversation threads from here on. */
+    onPostedRoot?: (payload: OutboundPostPayload, ts: string) => void;
+    /** Receipt hook for every successful post, root or threaded. */
+    onPosted?: (payload: OutboundPostPayload, messageTs: string, threadTs?: string) => void;
+    /** OPR.0.5.6.14 — the transport-failure receipt hook: a failed post writes
+     *  the row's transport-failed ledger transition (class + API error), so a
+     *  delivery failure is as legible on the row as a success. */
+    onTransportFailed?: (payload: OutboundPostPayload, failureClass: string, detail: string) => void;
+    /** F (interim loudness rule): return the Slack USER ID to mention for an ESCALATION payload,
+     *  undefined for everything else (quiet-threaded). The composition wires the registry lookup
+     *  + the escalation predicate; delivery just renders what it is told. */
+    resolveMentionUserId?: (payload: OutboundPostPayload) => string | undefined;
+    /** G — read a LOCAL image the evidenceRef points at (the founder screenshot class: a seat's
+     *  file has no public URL, so it rides the EXTERNAL-UPLOAD flow into the thread). Injectable
+     *  for hermetic tests; default reads the filesystem, image extensions only. Return null =
+     *  not an uploadable local image. */
+    readLocalImage?: (refPath: string) => {
+        bytes: Uint8Array;
+        filename: string;
+    } | null;
+    log?: (msg: string) => void;
+}
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export declare function defaultReadLocalImage(refPath: string): {
+    bytes: Uint8Array;
+    filename: string;
+} | null;
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export declare function subsystemSlackDeliver(opts: SubsystemSlackDeliveryOpts): SubsystemDeliverFn;
+//# sourceMappingURL=slack-delivery.d.ts.map

package/daemon/dist/domain/gateway/slack/slack-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA+G,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7J,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gGAAgG;IAChG,SAAS,EAAE,SAAS,CAAC;IACrB;;mGAE+F;IAC/F,SAAS,EAAE,SAAS,CAAC;IACrB,+EAA+E;IAC/E,YAAY,EAAE,SAAS,CAAC;IACxB,qFAAqF;IACrF,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C;+EAC2E;IAC3E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,gEAAgE;IAChE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxF;;kEAE8D;IAC9D,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACjG;;6EAEyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5E;;;yCAGqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAgCD,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrG;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,kBAAkB,CAuN1F"}