@openrig/cli 0.5.4 → 0.5.6

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-api.js

@@ -0,0 +1,236 @@
+// Slice-11 slack-connector — Slack HTTP client.
+//
+// `fetch`-based (http/https agnostic + injectable) matching the daemon's
+// WebhookNotificationAdapter + its fake-fetch test pattern; every call is
+// bounded by an explicit timeout with a structured failure result (never
+// throws past the boundary, never hangs) — the remote-daemon-http discipline.
+//
+// Item 5 (the setup-scope trap): Slack's "Add New Webhook" grants ONLY the
+// webhook scope; configured bot scopes are NOT granted until a full reinstall,
+// with no warning. The ONLY proof of granted scopes is the `x-oauth-scopes`
+// RESPONSE HEADER on a real API call — configured != granted. getGrantedScopes()
+// reads exactly that header. Channel membership is likewise verified live
+// (conversations.info.is_member) before declaring inbound ready.
+const defaultFetch = (url, init) => fetch(url, init);
+const DEFAULT_TIMEOUT_MS = 15000;
+async function withTimeout(timeoutMs, run) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+    try {
+        return await run(ctrl.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Post to a Slack incoming webhook. Fail-VISIBLE (item 3): any non-2xx or
+ * transport error returns ok:false with a bounded error string — the caller
+ * logs loudly and does NOT mark the alert seen (so it retries, never a silent drop).
+ *
+ * S10: RETIRED from the production path — outbound posts via postChatMessage on the in-daemon
+ * subsystem (a webhook cannot carry thread_ts). Kept as a tested generic client; no production
+ * caller remains.
+ */
+export async function postWebhook(url, payload, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, {
+                method: "POST",
+                headers: { "content-type": "application/json" },
+                body: JSON.stringify(payload),
+                signal,
+            });
+            if (!res.ok) {
+                const text = await res.text().catch(() => "");
+                return { ok: false, status: res.status, error: `slack ${res.status}: ${text.slice(0, 160)}` };
+            }
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `webhook transport: ${e.message}` };
+    }
+}
+/** Call a Slack Web API method (Bearer token) and surface the granted-scope header. */
+export async function callWebApi(method, token, body, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS, shape = "json-post") {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            let res;
+            if (shape === "get-query") {
+                // The read shape: args in the query string, Authorization only — no body, no
+                // content-type (a body or JSON content-type is exactly what the endpoint rejects).
+                const url = new URL(`https://slack.com/api/${method}`);
+                for (const [k, v] of Object.entries(body)) {
+                    if (v !== undefined && v !== null)
+                        url.searchParams.set(k, String(v));
+                }
+                res = await fetchImpl(url.toString(), {
+                    method: "GET",
+                    headers: { authorization: `Bearer ${token}` },
+                    signal,
+                });
+            }
+            else {
+                res = await fetchImpl(`https://slack.com/api/${method}`, {
+                    method: "POST",
+                    headers: { authorization: `Bearer ${token}`, "content-type": "application/json; charset=utf-8" },
+                    body: JSON.stringify(body),
+                    signal,
+                });
+            }
+            const scopeHeader = res.headers.get("x-oauth-scopes") ?? "";
+            const grantedScopes = scopeHeader
+                .split(",")
+                .map((s) => s.trim())
+                .filter(Boolean);
+            let json = {};
+            try {
+                json = (await res.json());
+            }
+            catch {
+                /* non-JSON */
+            }
+            const ok = res.ok && json.ok === true;
+            return { ok, status: res.status, grantedScopes, json, error: ok ? undefined : String(json.error ?? `http ${res.status}`) };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, grantedScopes: [], json: {}, error: `web-api transport: ${e.message}` };
+    }
+}
+/** Item 5: read the ACTUAL granted scopes from the response header (configured != granted). */
+export async function getGrantedScopes(token, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("auth.test", token, {}, fetchImpl, timeoutMs);
+    return { ok: r.ok, granted: r.grantedScopes, error: r.error };
+}
+/** OPR.0.5.6.2 — authenticated private-file download (`url_private` + Bearer,
+ *  the verified inbound mechanic from the human-layer design §4.1). Bounded:
+ *  a body over `maxBytes` is refused, never truncated-and-stored. Slack's
+ *  classic auth-failure mode returns an HTML login page with status 200 —
+ *  detected by content-type and named, so garbage is never stored as the file.
+ *  Errors are MESSAGES, not exceptions: the caller's failure-honesty contract
+ *  needs a name per file, never a thrown loss of the whole event. */
+export const INBOUND_FILE_MAX_BYTES = 26_214_400; // 25 MiB — bounded write per product limits
+export async function downloadPrivateFile(url, token, fetchImpl = fetch, timeoutMs = 30_000, maxBytes = INBOUND_FILE_MAX_BYTES) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(url, { headers: { authorization: `Bearer ${token}` }, signal });
+            if (!res.ok)
+                return { ok: false, error: `http ${res.status}` };
+            const contentType = res.headers.get("content-type") ?? "";
+            if (contentType.includes("text/html")) {
+                return { ok: false, error: "auth failure (Slack served an HTML page instead of the file)" };
+            }
+            const buf = new Uint8Array(await res.arrayBuffer());
+            if (buf.byteLength > maxBytes)
+                return { ok: false, error: `exceeds size bound (${buf.byteLength} > ${maxBytes})` };
+            return { ok: true, bytes: buf };
+        });
+    }
+    catch (e) {
+        return { ok: false, error: e.message || "download failed" };
+    }
+}
+/** Item 5: verify the token actually HAS the required scopes (from the header, not config). */
+export async function verifyScopes(token, required, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const g = await getGrantedScopes(token, fetchImpl, timeoutMs);
+    if (!g.ok)
+        return { ok: false, granted: g.granted, missing: required, error: g.error };
+    const grantedSet = new Set(g.granted);
+    const missing = required.filter((s) => !grantedSet.has(s));
+    return { ok: missing.length === 0, granted: g.granted, missing };
+}
+/** Item 5: verify the bot is actually a MEMBER of the channel before inbound-ready. */
+export async function verifyChannelMembership(token, channel, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("conversations.info", token, { channel }, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, isMember: false, error: r.error };
+    const ch = (r.json.channel ?? {});
+    return { ok: true, isMember: ch.is_member === true, name: ch.name };
+}
+/** Inbound Socket Mode: open a WebSocket URL via apps.connections.open (app-level xapp token). */
+export async function openSocketConnection(appToken, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("apps.connections.open", appToken, {}, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, url: r.json.url };
+}
+// ── S10 outbound images — the EXTERNAL-UPLOAD flow (the only living upload path) ────────────
+// `files.upload` was sunset 2025-11-12 and no longer functions (affordance-verified). The flow:
+//   1. files.getUploadURLExternal (filename, length)  → { upload_url, file_id }
+//   2. POST the raw bytes to upload_url (octet-stream)
+//   3. files.completeUploadExternal ({ files, channel_id, thread_ts?, initial_comment? })
+// Scope: files:write. thread_ts attaches the file INTO the conversation thread.
+export async function getUploadURLExternal(token, filename, length, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const r = await callWebApi("files.getUploadURLExternal", token, { filename, length }, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, error: r.error };
+    return { ok: true, uploadUrl: r.json.upload_url, fileId: r.json.file_id };
+}
+/** Leg 2: POST the raw bytes to the pre-signed upload URL (octet-stream, no auth header). */
+export async function uploadBytesExternal(uploadUrl, bytes, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        return await withTimeout(timeoutMs, async (signal) => {
+            const res = await fetchImpl(uploadUrl, {
+                method: "POST",
+                headers: { "content-type": "application/octet-stream" },
+                body: bytes,
+                signal,
+            });
+            if (!res.ok)
+                return { ok: false, status: res.status, error: `upload ${res.status}` };
+            return { ok: true, status: res.status };
+        });
+    }
+    catch (e) {
+        return { ok: false, status: 0, error: `upload transport: ${e.message}` };
+    }
+}
+export async function completeUploadExternal(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { files: input.files, channel_id: input.channelId };
+    if (input.threadTs)
+        body.thread_ts = input.threadTs;
+    if (input.initialComment)
+        body.initial_comment = input.initialComment;
+    const r = await callWebApi("files.completeUploadExternal", token, body, fetchImpl, timeoutMs);
+    return { ok: r.ok, error: r.error };
+}
+/** S10 (H) — read recent message TEXTS for reconcile-by-marker: a timeout is an AMBIGUOUS
+ *  outcome (the post may have landed), so before any resend the sender searches for the
+ *  embedded row-id marker. threadTs set → conversations.replies (a threaded reply lives in its
+ *  thread, not channel history); absent → conversations.history. Read-only; bounded. */
+export async function fetchRecentMessageTexts(token, channel, threadTs, fetchImpl = defaultFetch, limit = 100, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const method = threadTs ? "conversations.replies" : "conversations.history";
+    const body = threadTs ? { channel, ts: threadTs, limit } : { channel, limit };
+    const r = await callWebApi(method, token, body, fetchImpl, timeoutMs, "get-query");
+    if (!r.ok)
+        return { ok: false, texts: [], messages: [], error: r.error };
+    const messages = (r.json.messages ?? []);
+    // S14 repair: retain each message's REAL Slack ts alongside its text — the
+    // reconcile-by-marker path needs the matched message's ts to open the thread
+    // map and stamp receipts with the real anchor, not a synthetic value.
+    const shaped = messages.map((m) => ({ text: String(m.text ?? ""), ts: String(m.ts ?? "") }));
+    return { ok: true, texts: shaped.map((m) => m.text), messages: shaped };
+}
+/** S10 — outbound posting via the Web API (`chat.postMessage`). The R2 native shape needs
+ *  thread_ts, which an incoming webhook cannot carry — the webhook path retires with the relay.
+ *  A1.2 identity rail: this function NEVER accepts per-message `username`/`icon_*` overrides —
+ *  the app's own identity is the only outbound identity (the customize-absence proof leg).
+ *  Returns the posted message's ts (the thread anchor for a NEW conversation root). */
+export async function postChatMessage(token, input, fetchImpl = defaultFetch, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    const body = { channel: input.channel, text: input.text };
+    if (input.blocks?.length)
+        body.blocks = input.blocks;
+    if (input.thread_ts)
+        body.thread_ts = input.thread_ts;
+    const r = await callWebApi("chat.postMessage", token, body, fetchImpl, timeoutMs);
+    if (!r.ok)
+        return { ok: false, status: r.status, error: r.error };
+    const ts = typeof r.json.ts === "string" ? r.json.ts.trim() : "";
+    if (!ts) {
+        return { ok: false, status: r.status, error: "chat.postMessage returned ok without a message ts" };
+    }
+    return { ok: true, status: r.status, ts };
+}
+//# sourceMappingURL=slack-api.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-api.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8EAA8E;AAC9E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,0EAA0E;AAC1E,iEAAiE;AAIjE,MAAM,YAAY,GAAc,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAChE,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAQjC,KAAK,UAAU,WAAW,CAAI,SAAiB,EAAE,GAAwC;IACvF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAW,EACX,OAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;AACH,CAAC;AAiBD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,KAAa,EACb,IAA6B,EAC7B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB,EAC9B,QAA4B,WAAW;IAEvC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,IAAI,GAAa,CAAC;YAClB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC1B,6EAA6E;gBAC7E,mFAAmF;gBACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;wBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxE,CAAC;gBACD,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBAC7C,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,SAAS,CAAC,yBAAyB,MAAM,EAAE,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE;oBAChG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,aAAa,GAAG,WAAW;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,IAAI,GAA4B,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7H,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAuB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpH,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;qEAMqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC,CAAC,4CAA4C;AAE9F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,KAAa,EACb,YAAuB,KAAK,EAC5B,SAAS,GAAG,MAAM,EAClB,QAAQ,GAAG,sBAAsB;IAEjC,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAiB,CAAC,CAAC;YAC3G,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACxE,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,IAAI,GAAG,CAAC,UAAU,GAAG,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,uBAAuB,GAAG,CAAC,UAAU,MAAM,QAAQ,GAAG,EAAE,CAAC;YAC5H,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AASD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,QAAkB,EAClB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAA2C,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,uBAAuB,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,GAAa,EAAE,CAAC;AACjD,CAAC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,gFAAgF;AAChF,uDAAuD;AACvD,0FAA0F;AAC1F,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAa,EACb,QAAgB,EAChB,MAAc,EACd,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,4BAA4B,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,UAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAiB,EAAE,CAAC;AAChG,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,KAAiB,EACjB,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACvD,IAAI,EAAE,KAAuC;gBAC7C,MAAM;aACP,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAsB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAAiH,EACjH,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC1F,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;IACpD,IAAI,KAAK,CAAC,cAAc;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC;IACtE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,8BAA8B,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;wFAGwF;AACxF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa,EACb,OAAe,EACf,QAA4B,EAC5B,YAAuB,YAAY,EACnC,KAAK,GAAG,GAAG,EACX,SAAS,GAAG,kBAAkB;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC5E,MAAM,IAAI,GAA4B,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACzE,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAqC,CAAC;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC1E,CAAC;AAcD;;;;uFAIuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,KAA2B,EAC3B,YAAuB,YAAY,EACnC,SAAS,GAAG,kBAAkB;IAE9B,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACrD,IAAI,KAAK,CAAC,SAAS;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACrG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;AAC5C,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-delivery.d.ts

@@ -0,0 +1,53 @@
+import { type FetchImpl } from "./slack-api.js";
+import type { SeenStore } from "./state-store.js";
+import type { SubsystemDeliverFn } from "../gateway-subsystem.js";
+import type { OutboundPostPayload } from "./outbound-driver.js";
+export interface SubsystemSlackDeliveryOpts {
+    botToken: string;
+    channel: string;
+    sourceLabel: string;
+    bodyExcerpt?: number;
+    fetchImpl?: FetchImpl;
+    /** decisionId-keyed delivered-store (idempotent redelivery: replay re-acks, never re-posts). */
+    delivered: SeenStore;
+    /** H — decisionId-keyed ATTEMPTED-store, marked BEFORE the HTTP post. A retry of an attempted
+     *  decision has an AMBIGUOUS prior outcome (a timeout may have landed), so it RECONCILES by
+     *  marker before any resend — never a blind repost. Distinct from `delivered` (proven 2xx). */
+    attempted: SeenStore;
+    /** Episode-keyed outbound seen-state (marked ONLY after a successful post). */
+    outboundSeen: SeenStore;
+    /** Release the outbound driver's in-flight guard once an episode is durably seen. */
+    release?: (notificationKey: string) => void;
+    /** E (thread routing): resolve the thread anchor for this payload; undefined = new root.
+     *  Wired by the thread-seat map; absent in the pre-routing composition. */
+    resolveThreadTs?: (payload: OutboundPostPayload) => string | undefined;
+    /** E: record a NEW root's ts so the conversation threads from here on. */
+    onPostedRoot?: (payload: OutboundPostPayload, ts: string) => void;
+    /** Receipt hook for every successful post, root or threaded. */
+    onPosted?: (payload: OutboundPostPayload, messageTs: string, threadTs?: string) => void;
+    /** OPR.0.5.6.14 — the transport-failure receipt hook: a failed post writes
+     *  the row's transport-failed ledger transition (class + API error), so a
+     *  delivery failure is as legible on the row as a success. */
+    onTransportFailed?: (payload: OutboundPostPayload, failureClass: string, detail: string) => void;
+    /** F (interim loudness rule): return the Slack USER ID to mention for an ESCALATION payload,
+     *  undefined for everything else (quiet-threaded). The composition wires the registry lookup
+     *  + the escalation predicate; delivery just renders what it is told. */
+    resolveMentionUserId?: (payload: OutboundPostPayload) => string | undefined;
+    /** G — read a LOCAL image the evidenceRef points at (the founder screenshot class: a seat's
+     *  file has no public URL, so it rides the EXTERNAL-UPLOAD flow into the thread). Injectable
+     *  for hermetic tests; default reads the filesystem, image extensions only. Return null =
+     *  not an uploadable local image. */
+    readLocalImage?: (refPath: string) => {
+        bytes: Uint8Array;
+        filename: string;
+    } | null;
+    log?: (msg: string) => void;
+}
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export declare function defaultReadLocalImage(refPath: string): {
+    bytes: Uint8Array;
+    filename: string;
+} | null;
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export declare function subsystemSlackDeliver(opts: SubsystemSlackDeliveryOpts): SubsystemDeliverFn;
+//# sourceMappingURL=slack-delivery.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.d.ts","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAiBA,OAAO,EAA+G,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE7J,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAA4B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,gGAAgG;IAChG,SAAS,EAAE,SAAS,CAAC;IACrB;;mGAE+F;IAC/F,SAAS,EAAE,SAAS,CAAC;IACrB,+EAA+E;IAC/E,YAAY,EAAE,SAAS,CAAC;IACxB,qFAAqF;IACrF,OAAO,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C;+EAC2E;IAC3E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,gEAAgE;IAChE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxF;;kEAE8D;IAC9D,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACjG;;6EAEyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IAC5E;;;yCAGqC;IACrC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,KAAK,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrF,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAgCD,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASrG;AAED,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,0BAA0B,GAAG,kBAAkB,CAuN1F"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-delivery.js

@@ -0,0 +1,267 @@
+// S10 — the subsystem's Slack DELIVERY path (successor to the retired connector-server's
+// slackDeliverFn; the proof-1 semantics carry over unchanged): render the OutboundDecision to a
+// hygienic payload (slice-11 item 7 redaction + Block Kit via message.ts) and post it. A 2xx →
+// ok (the in-process ack drains the durable buffer); any failure → a bounded failure class (the
+// wire retains + replays — fail-visible, never a silent drop).
+//
+// Changes from the retired path, each contract-driven:
+//   - postWebhook → postChatMessage: the R2 thread shape needs thread_ts, which a webhook
+//     cannot carry. The webhook retires with the relay.
+//   - decisionId idempotent redelivery moved HERE from the connector: an already-delivered
+//     decisionId is re-acked WITHOUT re-posting (the delivered-store is the same SeenStore
+//     pattern, keyed by decisionId — distinct from the qitemId outbound seen-state).
+//   - delivered-ok additionally marks the qitemId seen (slice-11: seen ONLY after success) and
+//     releases the driver's in-flight guard.
+import fs from "node:fs";
+import path from "node:path";
+import { postChatMessage, getUploadURLExternal, uploadBytesExternal, completeUploadExternal, fetchRecentMessageTexts } from "./slack-api.js";
+import { buildOutboundMessage, attributionFromSession, reconcileToken } from "./message.js";
+const LOCAL_IMAGE_EXT = new Set([".png", ".jpg", ".jpeg", ".gif", ".webp"]);
+const TRANSPORT_FAILURE_RECEIPT_PREFIX = "::transport-failure-receipt::";
+const TRANSPORT_FAILURE_RECEIPT_REPAIRED = "::repaired";
+function transportFailureReceiptKey(decisionId, failureClass, detail) {
+    const encoded = Buffer.from(JSON.stringify([failureClass, detail]), "utf8").toString("base64url");
+    return `${decisionId}${TRANSPORT_FAILURE_RECEIPT_PREFIX}${encoded}`;
+}
+function pendingTransportFailureReceipt(attempted, decisionId) {
+    const prefix = `${decisionId}${TRANSPORT_FAILURE_RECEIPT_PREFIX}`;
+    const key = [...attempted.keys()].find((candidate) => candidate.startsWith(prefix)
+        && !candidate.endsWith(TRANSPORT_FAILURE_RECEIPT_REPAIRED)
+        && !attempted.has(`${candidate}${TRANSPORT_FAILURE_RECEIPT_REPAIRED}`));
+    if (!key)
+        return null;
+    try {
+        const parsed = JSON.parse(Buffer.from(key.slice(prefix.length), "base64url").toString("utf8"));
+        if (!Array.isArray(parsed) || typeof parsed[0] !== "string" || typeof parsed[1] !== "string") {
+            return { key, error: "pending transport-failure receipt is malformed" };
+        }
+        return { key, failureClass: parsed[0], detail: parsed[1] };
+    }
+    catch (e) {
+        return { key, error: `pending transport-failure receipt is unreadable: ${e.message}` };
+    }
+}
+/** Default local-image reader: absolute path, image extension, readable — else null. */
+export function defaultReadLocalImage(refPath) {
+    try {
+        if (!path.isAbsolute(refPath))
+            return null;
+        if (!LOCAL_IMAGE_EXT.has(path.extname(refPath).toLowerCase()))
+            return null;
+        const bytes = fs.readFileSync(refPath);
+        return { bytes: new Uint8Array(bytes), filename: path.basename(refPath) };
+    }
+    catch {
+        return null;
+    }
+}
+/** Build the subsystem DeliverFn. Contract mirrors the retired connector handleDecision. */
+export function subsystemSlackDeliver(opts) {
+    const log = opts.log ?? (() => { });
+    return async (decision) => {
+        // Idempotent redelivery: an already-delivered decisionId is re-acked without re-posting.
+        if (opts.delivered.load().has(decision.decisionId)) {
+            log(`delivery: decision ${decision.decisionId} already delivered — re-ack, no re-post`);
+            return { ok: true };
+        }
+        const q = (decision.payload ?? {});
+        // M1 A5b (carried over from the retired sweep): an alert's evidenceRef IS the artifact the
+        // human judges — an https image URL rides as a Block Kit image. buildImageBlocks stays the
+        // single hygiene gate (drops non-https / secret-bearing), so the predicate lives in ONE place.
+        const mediaRefs = Array.isArray(q.media)
+            ? q.media
+            : q.evidenceRef
+                ? [{ imageUrl: String(q.evidenceRef), altText: q.summary ?? "attachment" }]
+                : undefined;
+        const payload = buildOutboundMessage({
+            qitemId: q.qitemId ?? decision.decisionId,
+            summary: q.summary,
+            body: q.body,
+            destinationSession: q.destinationSession ?? decision.entityBindingRef,
+        }, {
+            sourceLabel: opts.sourceLabel,
+            bodyExcerpt: opts.bodyExcerpt,
+            mediaRefs,
+            // A1.2 — attribution rides every post; identity stays the app's own (postChatMessage
+            // structurally cannot carry username/icon overrides — the customize-absence rail).
+            attribution: attributionFromSession(q.sourceSession),
+            mentionUserId: opts.resolveMentionUserId?.(q),
+            // fix-r3 — the reconcile identity, reserved outside the clamp budget (same function
+            // the scan below matches: one identity, same bytes, both sides).
+            reconcileMarker: reconcileToken(decision.decisionId),
+        });
+        const threadTs = opts.resolveThreadTs?.(q);
+        // A failed HTTP outcome whose row-receipt write failed is held in the
+        // existing restart-surviving attempted store. Repair that authoritative
+        // transition before reconciliation can progress to a later post.
+        const attempted = opts.attempted.load();
+        const pendingFailure = pendingTransportFailureReceipt(attempted, decision.decisionId);
+        if (pendingFailure) {
+            if ("error" in pendingFailure) {
+                log(`${pendingFailure.error} for ${decision.decisionId} — retained, no resend`);
+                return { ok: false, class: "receipt-failed", detail: pendingFailure.error };
+            }
+            try {
+                if (!opts.onTransportFailed)
+                    throw new Error("transport-failure receipt hook is unavailable");
+                opts.onTransportFailed(q, pendingFailure.failureClass, pendingFailure.detail);
+                opts.attempted.mark(`${pendingFailure.key}${TRANSPORT_FAILURE_RECEIPT_REPAIRED}`, "transport-failure-receipt-repaired");
+            }
+            catch (e) {
+                log(`transport-failed receipt repair FAILED for ${q.qitemId ?? decision.decisionId}: ${e.message} — retained, no resend`);
+                return { ok: false, class: "receipt-failed", detail: e.message };
+            }
+        }
+        // H — RECONCILE-BY-MARKER before any RESEND: if this decision was attempted before, the
+        // prior outcome is ambiguous (a timeout may have posted). Search where the message would
+        // live (the thread, else channel history) for the message's STRUCTURAL identity; FOUND →
+        // already delivered, record + ack, never repost. Search failure = stay ambiguous = retain
+        // for the next replay (never a blind repost on an unreadable channel — a duplicate human
+        // notification is the red; a delay is not).
+        // fix-r3 (R2 exactly-once): the identity is reconcileToken(decisionId) — a bounded,
+        // decision-scoped token the renderer reserves OUTSIDE the clamp budget, so it is
+        // GUARANTEED present in the scanned top-level text at any ordinary length, and ordinary
+        // prose quoting a qitem id can never reproduce it (it embeds the daemon-minted
+        // decisionId in a delimited form). Producer and scanner call the same function: one
+        // identity, same bytes, both sides.
+        const marker = reconcileToken(decision.decisionId);
+        if (attempted.has(decision.decisionId)) {
+            const scan = await fetchRecentMessageTexts(opts.botToken, opts.channel, threadTs, opts.fetchImpl);
+            if (!scan.ok) {
+                log(`reconcile scan failed for ${decision.decisionId} (${scan.error}) — retained, no blind repost`);
+                return { ok: false, class: "reconcile-unreadable", detail: scan.error };
+            }
+            const matched = scan.messages.find((m) => m.text.includes(marker));
+            if (matched) {
+                log(`reconcile: marker "${marker}" FOUND at ts=${matched.ts || "(missing)"} — prior ambiguous post landed; ack without repost`);
+                // S14 repair (R2 HOLD): the matched message's REAL Slack ts is the thread
+                // anchor. Mirror the normal-post order exactly — root-open (ThreadSeatMap +
+                // rebuild stamp) first, then the same-row receipt, only then durable
+                // delivered/seen/release — so a reply to the REAL root routes to the row
+                // owner instead of generically. A synthetic ts here was the defect.
+                if (matched.ts) {
+                    // OPR.0.5.6.14 — same retain-and-repair contract as the normal-post
+                    // receipt: a throwing receipt write retains the decision for the next
+                    // replay (the marker stays findable; no repost can occur).
+                    try {
+                        if (threadTs === undefined)
+                            opts.onPostedRoot?.(q, matched.ts);
+                        opts.onPosted?.(q, matched.ts, threadTs);
+                    }
+                    catch (e) {
+                        log(`receipt write FAILED on reconcile for ${q.qitemId ?? decision.decisionId}: ${e.message} — retained for the next replay`);
+                        return { ok: false, class: "receipt-failed", detail: e.message };
+                    }
+                }
+                else {
+                    // Degraded, stated: a matched message without ts cannot anchor a thread;
+                    // keep the ack (never repost) but say loudly that routing stays generic.
+                    log(`reconcile: matched message carries NO ts — receipt degraded to synthetic; thread routing unavailable for ${q.qitemId ?? decision.decisionId}`);
+                    opts.onPosted?.(q, "reconciled", threadTs);
+                }
+                opts.delivered.mark(decision.decisionId, "reconciled-delivered");
+                if (q.qitemId) {
+                    const key = q.notificationKey ?? q.qitemId;
+                    opts.outboundSeen.mark(key, "posted");
+                    opts.release?.(key);
+                }
+                return { ok: true };
+            }
+            log(`reconcile: marker "${marker}" absent — safe to send`);
+        }
+        // Marked ATTEMPTED durably BEFORE the post: from here any outcome is ambiguous until 2xx.
+        opts.attempted.mark(decision.decisionId, "attempted");
+        const res = await postChatMessage(opts.botToken, { channel: opts.channel, text: payload.text, blocks: payload.blocks, thread_ts: threadTs }, opts.fetchImpl);
+        if (!res.ok) {
+            const failureClass = res.status === 0 ? "transport" : `http-${res.status}`;
+            // Persist the receipt input before the row write. A throwing row write
+            // stays repairable across restart and blocks any later resend until the
+            // authoritative transition lands.
+            if (opts.onTransportFailed) {
+                const receiptKey = transportFailureReceiptKey(decision.decisionId, failureClass, res.error ?? "");
+                let receiptRetained = false;
+                let retentionError;
+                try {
+                    opts.attempted.mark(receiptKey, "transport-failure-receipt-pending");
+                    receiptRetained = true;
+                }
+                catch (e) {
+                    retentionError = e.message;
+                    log(`transport-failed receipt backup FAILED for ${q.qitemId ?? decision.decisionId}: ${retentionError} — authoritative row write still attempted`);
+                }
+                try {
+                    opts.onTransportFailed(q, failureClass, res.error ?? "");
+                }
+                catch (e) {
+                    const disposition = receiptRetained
+                        ? "retained for repair before resend"
+                        : `NOT retained; backup failed first: ${retentionError}`;
+                    log(`transport-failed receipt write FAILED for ${q.qitemId ?? decision.decisionId}: ${e.message} — ${disposition}`);
+                    return { ok: false, class: "receipt-failed", detail: e.message };
+                }
+                if (receiptRetained) {
+                    try {
+                        opts.attempted.mark(`${receiptKey}${TRANSPORT_FAILURE_RECEIPT_REPAIRED}`, "transport-failure-receipt-repaired");
+                    }
+                    catch (e) {
+                        log(`transport-failed receipt repair marker FAILED for ${q.qitemId ?? decision.decisionId}: ${e.message} — authoritative receipt landed; pending marker retained for idempotent repair`);
+                        return { ok: false, class: "receipt-failed", detail: e.message };
+                    }
+                }
+            }
+            return { ok: false, class: failureClass, detail: res.error };
+        }
+        // OPR.0.5.6.14 — the 8f291c37 shape dies by RETAIN-AND-REPAIR: a receipt
+        // write that throws after a successful post is a clean retained outcome
+        // (never an escaped throw); the replay reconciles by marker — the message
+        // IS in the channel — and retries the idempotent receipt without reposting.
+        try {
+            if (threadTs === undefined)
+                opts.onPostedRoot?.(q, res.ts);
+            opts.onPosted?.(q, res.ts, threadTs);
+        }
+        catch (e) {
+            log(`receipt write FAILED after successful post for ${q.qitemId ?? decision.decisionId}: ${e.message} — retained; replay reconciles by marker and retries the idempotent receipt`);
+            return { ok: false, class: "receipt-failed", detail: e.message };
+        }
+        // Delivered is complete only after the authoritative row receipt succeeds. A receipt
+        // failure retains the decision; replay reconciles by marker and retries the idempotent receipt.
+        opts.delivered.mark(decision.decisionId, "delivered");
+        if (q.qitemId) {
+            const key = q.notificationKey ?? q.qitemId;
+            opts.outboundSeen.mark(key, "posted");
+            opts.release?.(key);
+        }
+        // G — a LOCAL image evidenceRef (the founder screenshot) rides the EXTERNAL-UPLOAD flow
+        // into the conversation thread (files.upload is sunset). Upload failure is fail-VISIBLE
+        // but does NOT fail the decision: the text delivered; failing here would replay the whole
+        // post and duplicate the human notification (the H red). https refs already rode as Block
+        // Kit image blocks above; non-image/non-existent refs are a clean skip.
+        const local = q.evidenceRef && !/^https:\/\//.test(String(q.evidenceRef))
+            ? (opts.readLocalImage ?? defaultReadLocalImage)(String(q.evidenceRef))
+            : null;
+        if (local) {
+            const intoThread = threadTs ?? res.ts;
+            const up = await getUploadURLExternal(opts.botToken, local.filename, local.bytes.length, opts.fetchImpl);
+            if (up.ok && up.uploadUrl && up.fileId) {
+                const put = await uploadBytesExternal(up.uploadUrl, local.bytes, opts.fetchImpl);
+                if (put.ok) {
+                    const done = await completeUploadExternal(opts.botToken, { files: [{ id: up.fileId, title: q.summary ?? local.filename }], channelId: opts.channel, threadTs: intoThread }, opts.fetchImpl);
+                    if (done.ok)
+                        log(`uploaded ${local.filename} into thread ${intoThread ?? "(root)"} for ${q.qitemId ?? decision.decisionId}`);
+                    else
+                        log(`ATTACHMENT upload complete FAILED for ${q.qitemId ?? decision.decisionId}: ${done.error} (text delivered; attachment missing)`);
+                }
+                else {
+                    log(`ATTACHMENT byte upload FAILED for ${q.qitemId ?? decision.decisionId}: ${put.error} (text delivered; attachment missing)`);
+                }
+            }
+            else {
+                log(`ATTACHMENT upload-url FAILED for ${q.qitemId ?? decision.decisionId}: ${up.error} (text delivered; attachment missing)`);
+            }
+        }
+        log(`delivered ${decision.decisionId}${q.qitemId ? ` (qitem ${q.qitemId})` : ""}`);
+        return { ok: true };
+    };
+}
+//# sourceMappingURL=slack-delivery.js.map

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-delivery.js","sourceRoot":"","sources":["../../../../src/domain/gateway/slack/slack-delivery.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,gGAAgG;AAChG,+FAA+F;AAC/F,gGAAgG;AAChG,+DAA+D;AAC/D,EAAE;AACF,uDAAuD;AACvD,0FAA0F;AAC1F,wDAAwD;AACxD,2FAA2F;AAC3F,2FAA2F;AAC3F,qFAAqF;AACrF,+FAA+F;AAC/F,6CAA6C;AAE7C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,uBAAuB,EAAkB,MAAM,gBAAgB,CAAC;AAC7J,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AA6ChH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5E,MAAM,gCAAgC,GAAG,+BAA+B,CAAC;AACzE,MAAM,kCAAkC,GAAG,YAAY,CAAC;AAExD,SAAS,0BAA0B,CAAC,UAAkB,EAAE,YAAoB,EAAE,MAAc;IAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClG,OAAO,GAAG,UAAU,GAAG,gCAAgC,GAAG,OAAO,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAsB,EACtB,UAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,gCAAgC,EAAE,CAAC;IAClE,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACnD,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;WACvB,CAAC,SAAS,CAAC,QAAQ,CAAC,kCAAkC,CAAC;WACvD,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,kCAAkC,EAAE,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QAC1G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7F,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,oDAAqD,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACpG,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3E,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAgC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,EAAE,QAA0B,EAAqC,EAAE;QAC7E,yFAAyF;QACzF,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,sBAAsB,QAAQ,CAAC,UAAU,yCAAyC,CAAC,CAAC;YACxF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAsD,CAAC;QACxF,2FAA2F;QAC3F,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,SAAS,GAAgC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YACnE,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;gBAC3E,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,oBAAoB,CAClC;YACE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU;YACzC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,QAAQ,CAAC,gBAAgB;SACtE,EACD;YACE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS;YACT,qFAAqF;YACrF,mFAAmF;YACnF,WAAW,EAAE,sBAAsB,CAAC,CAAC,CAAC,aAAa,CAAC;YACpD,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;YAC7C,oFAAoF;YACpF,iEAAiE;YACjE,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;SACrD,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;QAE3C,sEAAsE;QACtE,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,cAAc,GAAG,8BAA8B,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;gBAC9B,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,QAAQ,QAAQ,CAAC,UAAU,wBAAwB,CAAC,CAAC;gBAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,iBAAiB;oBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAC9F,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC9E,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,cAAc,CAAC,GAAG,GAAG,kCAAkC,EAAE,EAC5D,oCAAoC,CACrC,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,8CAA8C,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAM,CAAW,CAAC,OAAO,wBAAwB,CAAC,CAAC;gBACrI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,yFAAyF;QACzF,4CAA4C;QAC5C,oFAAoF;QACpF,iFAAiF;QACjF,wFAAwF;QACxF,+EAA+E;QAC/E,oFAAoF;QACpF,oCAAoC;QACpC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,6BAA6B,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,+BAA+B,CAAC,CAAC;gBACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACnE,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,sBAAsB,MAAM,iBAAiB,OAAO,CAAC,EAAE,IAAI,WAAW,oDAAoD,CAAC,CAAC;gBAChI,0EAA0E;gBAC1E,4EAA4E;gBAC5E,qEAAqE;gBACrE,yEAAyE;gBACzE,oEAAoE;gBACpE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACf,oEAAoE;oBACpE,sEAAsE;oBACtE,2DAA2D;oBAC3D,IAAI,CAAC;wBACH,IAAI,QAAQ,KAAK,SAAS;4BAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;oBAC3C,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,CAAC,yCAAyC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAM,CAAW,CAAC,OAAO,iCAAiC,CAAC,CAAC;wBACzI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;oBAC9E,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,yEAAyE;oBACzE,yEAAyE;oBACzE,GAAG,CAAC,4GAA4G,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;oBACpJ,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;gBACjE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;oBAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACtC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;gBACtB,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,GAAG,CAAC,sBAAsB,MAAM,yBAAyB,CAAC,CAAC;QAC7D,CAAC;QAED,0FAA0F;QAC1F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,eAAe,CAC/B,IAAI,CAAC,QAAQ,EACb,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC1F,IAAI,CAAC,SAAS,CACf,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3E,uEAAuE;YACvE,wEAAwE;YACxE,kCAAkC;YAClC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,MAAM,UAAU,GAAG,0BAA0B,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAClG,IAAI,eAAe,GAAG,KAAK,CAAC;gBAC5B,IAAI,cAAkC,CAAC;gBACvC,IAAI,CAAC;oBACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;oBACrE,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,cAAc,GAAI,CAAW,CAAC,OAAO,CAAC;oBACtC,GAAG,CAAC,8CAA8C,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,cAAc,4CAA4C,CAAC,CAAC;gBACrJ,CAAC;gBACD,IAAI,CAAC;oBACH,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,WAAW,GAAG,eAAe;wBACjC,CAAC,CAAC,mCAAmC;wBACrC,CAAC,CAAC,sCAAsC,cAAc,EAAE,CAAC;oBAC3D,GAAG,CAAC,6CAA6C,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAM,CAAW,CAAC,OAAO,MAAM,WAAW,EAAE,CAAC,CAAC;oBAC/H,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;gBAC9E,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,GAAG,UAAU,GAAG,kCAAkC,EAAE,EACpD,oCAAoC,CACrC,CAAC;oBACJ,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,CAAC,qDAAqD,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAM,CAAW,CAAC,OAAO,gFAAgF,CAAC,CAAC;wBACpM,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;oBAC9E,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QAC/D,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,SAAS;gBAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,kDAAkD,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAM,CAAW,CAAC,OAAO,6EAA6E,CAAC,CAAC;YAC9L,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;QAC9E,CAAC;QACD,qFAAqF;QACrF,gGAAgG;QAChG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,OAAO,CAAC;YAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAED,wFAAwF;QACxF,wFAAwF;QACxF,0FAA0F;QAC1F,0FAA0F;QAC1F,wEAAwE;QACxE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,GAAG,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACzG,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACjF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,MAAM,sBAAsB,CACvC,IAAI,CAAC,QAAQ,EACb,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,EACjH,IAAI,CAAC,SAAS,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,EAAE;wBAAE,GAAG,CAAC,YAAY,KAAK,CAAC,QAAQ,gBAAgB,UAAU,IAAI,QAAQ,QAAQ,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;;wBACxH,GAAG,CAAC,yCAAyC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAC5I,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,qCAAqC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,GAAG,CAAC,KAAK,uCAAuC,CAAC,CAAC;gBAClI,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,oCAAoC,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC,KAAK,uCAAuC,CAAC,CAAC;YAChI,CAAC;QACH,CAAC;QAED,GAAG,CAAC,aAAa,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/gateway/slack/slack-subsystem.d.ts

@@ -0,0 +1,31 @@
+import { type GatewayWire } from "../gateway-subsystem.js";
+import { type InboundFilePort } from "./inbound.js";
+import { type RegistrySurface } from "./inbound-admission.js";
+import { type WsLike } from "./socket-inbound.js";
+import type { QueueRepository } from "../../queue-repository.js";
+import type { FetchImpl } from "./slack-api.js";
+export interface SlackWireOpts {
+    home: string;
+    queueRepo: QueueRepository;
+    log?: (msg: string) => void;
+    /** Injectable seams (tests): fetch, websocket factory, sweep cadence, registry surface. */
+    fetchImpl?: FetchImpl;
+    wsFactory?: (url: string) => WsLike;
+    outboundIntervalMs?: number;
+    inboundRetryIntervalMs?: number;
+    inboundMaxConnects?: number;
+    registry?: RegistrySurface;
+}
+export declare function makeInboundFilePort(opts: {
+    token: string;
+    mediaDir: string;
+    fetchImpl?: FetchImpl;
+    mkdirp?: (dir: string) => void;
+    writeFile?: (p: string, bytes: Uint8Array) => void;
+    log?: (msg: string) => void;
+    maxBytes?: number;
+}): InboundFilePort;
+/** Build the production Slack gateway wire from config + secrets. Never throws on a missing
+ *  configuration — that is an honest inert wire, not a boot failure. */
+export declare function buildSlackGatewayWire(opts: SlackWireOpts): GatewayWire;
+//# sourceMappingURL=slack-subsystem.d.ts.map