@sensigo/realm-cli 0.1.0

package/dist/agent/slack-gate-notifier.js

@@ -0,0 +1,315 @@
+// slack-gate-notifier.ts — Slack gate notification logic.
+// Owns all Slack-specific gate notification: formatting, posting, reminder timers,
+// and bidirectional resolution via Events API or Socket Mode.
+// Internal to the CLI package — not exported from the package's public index.
+import { submitHumanResponse, } from '@sensigo/realm';
+import { startSlackGateServer } from './slack-gate-server.js';
+import { connectSocketMode } from './slack-socket-client.js';
+/**
+ * Formats a gate preview object as human-readable Slack mrkdwn text.
+ * Uses `headline` and `message` fields when present; falls back to indented JSON.
+ * Exported for testing.
+ */
+export function formatGatePreviewForSlack(preview) {
+    const headline = typeof preview['headline'] === 'string' ? preview['headline'] : undefined;
+    const message = typeof preview['message'] === 'string' ? preview['message'] : undefined;
+    if (headline !== undefined || message !== undefined) {
+        const parts = [];
+        if (headline !== undefined)
+            parts.push(`*${headline}*`);
+        if (message !== undefined)
+            parts.push(message);
+        return parts.join('\n\n');
+    }
+    if (Object.keys(preview).length === 0) {
+        return '_(no preview)_';
+    }
+    return '```\n' + JSON.stringify(preview, null, 2) + '\n```';
+}
+/**
+ * POSTs a gate-waiting notification to a Slack Incoming Webhook.
+ * Failure is warned but does not abort the workflow run.
+ * Exported for testing.
+ */
+export async function postGateNotificationToSlack(webhookUrl, gate, runId) {
+    const ownerLine = gate.owner !== undefined ? `\n*Owner:* ${gate.owner}` : '';
+    const previewText = gate.resolved_message ?? formatGatePreviewForSlack(gate.preview);
+    const gateId = gate.gate_id;
+    const cmdLines = gate.choices
+        .map((c) => `realm run respond ${runId} --gate ${gateId} --choice ${c}`)
+        .join('\n');
+    const blockText = `*Gate:* \`${gate.step_name}\`${ownerLine}\n\n${previewText}\n\n---\n` +
+        `*Gate requires a terminal response — open a terminal and run:*\n\`\`\`${cmdLines}\`\`\``;
+    const body = {
+        text: '⏸ Workflow gate waiting for approval',
+        blocks: [
+            {
+                type: 'section',
+                text: {
+                    type: 'mrkdwn',
+                    text: blockText,
+                },
+            },
+        ],
+    };
+    try {
+        await fetch(webhookUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+        });
+    }
+    catch (err) {
+        console.warn(`  ⚠  Slack notification failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Posts a gate notification to Slack via chat.postMessage (bot token path).
+ * Returns the message ts for use as a thread anchor, or undefined on failure.
+ * Exported for testing.
+ */
+export async function postGateViaApi(botToken, channelId, gate, runId) {
+    const ownerLine = gate.owner !== undefined ? `\n*Owner:* ${gate.owner}` : '';
+    const previewText = gate.resolved_message ?? formatGatePreviewForSlack(gate.preview);
+    const choiceList = gate.choices.map((c) => `\`${c}\``).join(' or ');
+    const gateId = gate.gate_id;
+    const cmdLines = gate.choices
+        .map((c) => `realm run respond ${runId} --gate ${gateId} --choice ${c}`)
+        .join('\n');
+    const blockText = `*Gate:* \`${gate.step_name}\`${ownerLine}\n\n${previewText}\n\n---\n` +
+        `*Reply in this thread with ${choiceList} to resolve, or run:*\n\`\`\`${cmdLines}\`\`\``;
+    try {
+        const response = await fetch('https://slack.com/api/chat.postMessage', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${botToken}`,
+            },
+            body: JSON.stringify({
+                channel: channelId,
+                text: '⏸ Workflow gate waiting for approval',
+                blocks: [{ type: 'section', text: { type: 'mrkdwn', text: blockText } }],
+            }),
+        });
+        const data = (await response.json());
+        return data.ok ? data.ts : undefined;
+    }
+    catch (err) {
+        console.warn(`Gate API notification failed: ${err instanceof Error ? err.message : String(err)}`);
+        return undefined;
+    }
+}
+/**
+ * Posts a reply to an existing Slack thread via chat.postMessage.
+ * Failures are warned but not thrown — best-effort.
+ * Exported for testing.
+ */
+export async function postSlackReply(botToken, channelId, threadTs, text) {
+    try {
+        await fetch('https://slack.com/api/chat.postMessage', {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${botToken}`,
+            },
+            body: JSON.stringify({ channel: channelId, thread_ts: threadTs, text }),
+        });
+    }
+    catch (err) {
+        console.warn(`Slack reply failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Starts reminder and escalation timers for an open gate.
+ * Returns a cleanup function that clears both timers — must be called when the gate resolves.
+ * Exported for testing.
+ */
+export function startGateReminderTimers(botToken, channelId, threadTs, gate, reminderIntervalMs, escalationThresholdMs) {
+    const reminderTimer = setTimeout(() => {
+        postSlackReply(botToken, channelId, threadTs, `⏰ Reminder: gate \`${gate.step_name}\` is still waiting for a response.`).catch((err) => {
+            console.warn(`Reminder post failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    }, reminderIntervalMs);
+    const escalationTimer = setTimeout(() => {
+        const elapsedMin = Math.round((Date.now() - new Date(gate.opened_at).getTime()) / 60_000);
+        const mention = gate.owner !== undefined ? `${gate.owner} — ` : '';
+        const text = `${mention}gate \`${gate.step_name}\` has been open for ${elapsedMin} minutes. Please respond.`;
+        postSlackReply(botToken, channelId, threadTs, text).catch((err) => {
+            console.warn(`Escalation post failed: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    }, escalationThresholdMs);
+    return () => {
+        clearTimeout(reminderTimer);
+        clearTimeout(escalationTimer);
+    };
+}
+/**
+ * Handles a gate using Slack bidirectional resolution:
+ * - Events API (when signing secret is present) or Socket Mode (when app token is present)
+ * - LLM intent interpretation of Slack replies
+ * - Reminder and escalation timers
+ * - Falls back to store polling for terminal-command gate resolution
+ * Exported for testing.
+ */
+export async function handleBidirectionalGate(params) {
+    const { gate, runId, definition, store, provider: _provider, slackBotToken, slackChannelId, gateThreadTs, slackSigningSecret, slackEventsPort, slackAppToken, gateReminderIntervalMs, gateEscalationThresholdMs, pollIntervalMs, } = params;
+    let clarificationCount = 0;
+    const abortController = new AbortController();
+    const processCandidate = async (text) => {
+        if (abortController.signal.aborted)
+            return;
+        // Gate choices must be exact (case-insensitive). No LLM interpretation — gate responses
+        // are irreversible writes and must reflect unambiguous intent.
+        const normalised = text.trim().toLowerCase();
+        const exactMatch = gate.choices.find((c) => c.toLowerCase() === normalised);
+        if (exactMatch !== undefined) {
+            try {
+                await submitHumanResponse(store, definition, {
+                    runId,
+                    gateId: gate.gate_id,
+                    choice: exactMatch,
+                });
+                if (gateThreadTs !== undefined) {
+                    const confirmationText = gate.resolution_messages?.[exactMatch] ??
+                        `✅ Gate resolved: \`${exactMatch}\` — run continuing.`;
+                    await postSlackReply(slackBotToken, slackChannelId, gateThreadTs, confirmationText);
+                }
+                abortController.abort();
+            }
+            catch (err) {
+                console.warn(`Gate response submission failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        else if (clarificationCount < 2 && gateThreadTs !== undefined) {
+            clarificationCount++;
+            await postSlackReply(slackBotToken, slackChannelId, gateThreadTs, `Please reply with one of: ${gate.choices.join(', ')}`);
+        }
+    };
+    // Set up candidate intake — Socket Mode (preferred), Events API, or none.
+    // Dedup set prevents duplicate onEvent calls. Socket Mode (preferred) and Events API both
+    // have at-least-once delivery — the same event can arrive more than once.
+    const seenEventIds = new Set();
+    let serverHandle;
+    if (slackAppToken !== undefined && gateThreadTs !== undefined) {
+        // Mode 2 — Socket Mode (WebSocket push, no public URL required)
+        serverHandle = connectSocketMode({
+            appToken: slackAppToken,
+            threadTs: gateThreadTs,
+            onEvent: (event) => {
+                if (seenEventIds.has(event.event_id))
+                    return;
+                seenEventIds.add(event.event_id);
+                processCandidate(event.text).catch((err) => {
+                    console.warn(`Candidate processing failed: ${err instanceof Error ? err.message : String(err)}`);
+                });
+            },
+            signal: abortController.signal,
+        });
+    }
+    else if (slackSigningSecret !== undefined && gateThreadTs !== undefined) {
+        // Mode 3 — Events API (HTTP push, requires public URL)
+        serverHandle = startSlackGateServer({
+            port: slackEventsPort,
+            signingSecret: slackSigningSecret,
+            onEvent: (event) => {
+                if (seenEventIds.has(event.event_id))
+                    return;
+                seenEventIds.add(event.event_id);
+                if (event.thread_ts !== gateThreadTs)
+                    return;
+                processCandidate(event.text).catch((err) => {
+                    console.warn(`Candidate processing failed: ${err instanceof Error ? err.message : String(err)}`);
+                });
+            },
+        });
+    }
+    else if (gateThreadTs !== undefined) {
+        // Gate notification posted but no listener configured.
+        console.log('  ℹ  Gate notification posted. Set SLACK_APP_TOKEN (Socket Mode) or SLACK_SIGNING_SECRET (Events API) to resolve via Slack. Using terminal command fallback.');
+    }
+    // Notify when neither Events nor polling can be used — no thread anchor available.
+    if (gateThreadTs === undefined) {
+        console.log('  ℹ  Bidirectional Slack resolution unavailable (no thread anchor). Use terminal command shown above.');
+    }
+    // Start reminder/escalation timers if we have a thread anchor.
+    const clearTimers = gateThreadTs !== undefined
+        ? startGateReminderTimers(slackBotToken, slackChannelId, gateThreadTs, gate, gateReminderIntervalMs, gateEscalationThresholdMs)
+        : () => { };
+    try {
+        // Poll the store as the unified done-detector — resolves when candidate processor
+        // calls submitHumanResponse OR when the terminal command is used.
+        await pollUntilGateResolved(store, runId, gate.gate_id, pollIntervalMs, abortController.signal);
+    }
+    finally {
+        abortController.abort();
+        clearTimers();
+        serverHandle?.close();
+    }
+}
+/** Polls the store until the gate is resolved or the run reaches a terminal state. */
+async function pollUntilGateResolved(store, runId, gateId, intervalMs, signal) {
+    console.log('   Waiting for approval...');
+    for (;;) {
+        if (signal?.aborted)
+            break;
+        await new Promise((resolve) => {
+            const timer = setTimeout(resolve, intervalMs);
+            if (signal !== undefined) {
+                signal.addEventListener('abort', () => {
+                    clearTimeout(timer);
+                    resolve();
+                }, { once: true });
+            }
+        });
+        if (signal?.aborted)
+            break;
+        const run = await store.get(runId);
+        if (run.terminal_state)
+            break;
+        if (run.pending_gate === undefined || run.pending_gate.gate_id !== gateId)
+            break;
+    }
+}
+/**
+ * Creates a gate handler that notifies via Slack and waits for resolution.
+ * Returns a function typed (runId, gate) => Promise<void>.
+ */
+export function createSlackGateHandler(config) {
+    return async (runId, gate) => {
+        // Bidirectional path (bot token + channel).
+        if (config.botToken !== undefined && config.channelId !== undefined) {
+            const gateThreadTs = await postGateViaApi(config.botToken, config.channelId, gate, runId);
+            await handleBidirectionalGate({
+                gate,
+                runId,
+                definition: config.definition,
+                store: config.store,
+                provider: config.provider,
+                slackBotToken: config.botToken,
+                slackChannelId: config.channelId,
+                gateThreadTs,
+                ...(config.signingSecret !== undefined ? { slackSigningSecret: config.signingSecret } : {}),
+                slackEventsPort: config.eventsPort ?? 3100,
+                ...(config.appToken !== undefined ? { slackAppToken: config.appToken } : {}),
+                gateReminderIntervalMs: config.reminderIntervalMs ?? 600_000,
+                gateEscalationThresholdMs: config.escalationThresholdMs ?? 1_800_000,
+                pollIntervalMs: config.pollIntervalMs ?? 3000,
+            });
+        }
+        else if (config.webhookUrl !== undefined) {
+            // One-way webhook + inline poll loop (avoids circular dependency with run-agent.ts).
+            await postGateNotificationToSlack(config.webhookUrl, gate, runId);
+            console.log('   Waiting for approval...');
+            const intervalMs = config.pollIntervalMs ?? 3000;
+            for (;;) {
+                await new Promise((resolve) => setTimeout(resolve, intervalMs));
+                const run = await config.store.get(runId);
+                if (run.terminal_state)
+                    break;
+                if (run.pending_gate === undefined || run.pending_gate.gate_id !== gate.gate_id)
+                    break;
+            }
+        }
+    };
+}
+//# sourceMappingURL=slack-gate-notifier.js.map

package/dist/agent/slack-gate-notifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-gate-notifier.js","sourceRoot":"","sources":["../../src/agent/slack-gate-notifier.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,mFAAmF;AACnF,8DAA8D;AAC9D,8EAA8E;AAC9E,OAAO,EACL,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgC;IACxE,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExF,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACxD,IAAI,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,UAAkB,EAClB,IAAiB,EACjB,KAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,KAAK,WAAW,MAAM,aAAa,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,SAAS,GACb,aAAa,IAAI,CAAC,SAAS,KAAK,SAAS,OAAO,WAAW,WAAW;QACtE,yEAAyE,QAAQ,QAAQ,CAAC;IAC5F,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,sCAAsC;QAC5C,MAAM,EAAE;YACN;gBACE,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,SAAS;iBAChB;aACF;SACF;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,EAAE;YACtB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,SAAiB,EACjB,IAAiB,EACjB,KAAa;IAEb,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,KAAK,WAAW,MAAM,aAAa,CAAC,EAAE,CAAC;SACvE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,SAAS,GACb,aAAa,IAAI,CAAC,SAAS,KAAK,SAAS,OAAO,WAAW,WAAW;QACtE,8BAA8B,UAAU,gCAAgC,QAAQ,QAAQ,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,wCAAwC,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,QAAQ,EAAE;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,SAAS;gBAClB,IAAI,EAAE,sCAAsC;gBAC5C,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;aACzE,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiC,CAAC;QACrE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,SAAiB,EACjB,QAAgB,EAChB,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,wCAAwC,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,QAAQ,EAAE;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACxE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,SAAiB,EACjB,QAAgB,EAChB,IAAiB,EACjB,kBAA0B,EAC1B,qBAA6B;IAE7B,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;QACpC,cAAc,CACZ,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,sBAAsB,IAAI,CAAC,SAAS,qCAAqC,CAC1E,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,OAAO,CAAC,IAAI,CAAC,yBAAyB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAEvB,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAC1F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,GAAG,OAAO,UAAU,IAAI,CAAC,SAAS,wBAAwB,UAAU,2BAA2B,CAAC;QAC7G,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAChE,OAAO,CAAC,IAAI,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAE1B,OAAO,GAAG,EAAE;QACV,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,YAAY,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC,CAAC;AACJ,CAAC;AAqBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAA+B;IAC3E,MAAM,EACJ,IAAI,EACJ,KAAK,EACL,UAAU,EACV,KAAK,EACL,QAAQ,EAAE,SAAS,EACnB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,sBAAsB,EACtB,yBAAyB,EACzB,cAAc,GACf,GAAG,MAAM,CAAC;IAEX,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAE9C,MAAM,gBAAgB,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QAC7D,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAE3C,wFAAwF;QACxF,+DAA+D;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;QAE5E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE;oBAC3C,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,OAAO;oBACpB,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;gBACH,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,gBAAgB,GACpB,IAAI,CAAC,mBAAmB,EAAE,CAAC,UAAU,CAAC;wBACtC,sBAAsB,UAAU,sBAAsB,CAAC;oBACzD,MAAM,cAAc,CAAC,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;gBACtF,CAAC;gBACD,eAAe,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CACV,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,kBAAkB,GAAG,CAAC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAChE,kBAAkB,EAAE,CAAC;YACrB,MAAM,cAAc,CAClB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,6BAA6B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,0FAA0F;IAC1F,0EAA0E;IAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,IAAI,YAA2C,CAAC;IAChD,IAAI,aAAa,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9D,gEAAgE;QAChE,YAAY,GAAG,iBAAiB,CAAC;YAC/B,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,YAAY;YACtB,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAC7C,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACzC,OAAO,CAAC,IAAI,CACV,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,EAAE,eAAe,CAAC,MAAM;SAC/B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,kBAAkB,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1E,uDAAuD;QACvD,YAAY,GAAG,oBAAoB,CAAC;YAClC,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,kBAAkB;YACjC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAAE,OAAO;gBAC7C,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY;oBAAE,OAAO;gBAC7C,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACzC,OAAO,CAAC,IAAI,CACV,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,uDAAuD;QACvD,OAAO,CAAC,GAAG,CACT,8JAA8J,CAC/J,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CACT,uGAAuG,CACxG,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GACf,YAAY,KAAK,SAAS;QACxB,CAAC,CAAC,uBAAuB,CACrB,aAAa,EACb,cAAc,EACd,YAAY,EACZ,IAAI,EACJ,sBAAsB,EACtB,yBAAyB,CAC1B;QACH,CAAC,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,kFAAkF;QAClF,kEAAkE;QAClE,MAAM,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IAClG,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,qBAAqB,CAClC,KAAe,EACf,KAAa,EACb,MAAc,EACd,UAAkB,EAClB,MAAoB;IAEpB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,SAAS,CAAC;QACR,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM;QAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;oBACH,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,EAAE,CAAC;gBACZ,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM;QAC3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,cAAc;YAAE,MAAM;QAC9B,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM;YAAE,MAAM;IACnF,CAAC;AACH,CAAC;AAkBD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA8B;IAE9B,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,4CAA4C;QAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpE,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1F,MAAM,uBAAuB,CAAC;gBAC5B,IAAI;gBACJ,KAAK;gBACL,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,aAAa,EAAE,MAAM,CAAC,QAAQ;gBAC9B,cAAc,EAAE,MAAM,CAAC,SAAS;gBAChC,YAAY;gBACZ,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3F,eAAe,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;gBAC1C,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,sBAAsB,EAAE,MAAM,CAAC,kBAAkB,IAAI,OAAO;gBAC5D,yBAAyB,EAAE,MAAM,CAAC,qBAAqB,IAAI,SAAS;gBACpE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;aAC9C,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3C,qFAAqF;YACrF,MAAM,2BAA2B,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;YACjD,SAAS,CAAC;gBACR,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBACtE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,GAAG,CAAC,cAAc;oBAAE,MAAM;gBAC9B,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;oBAAE,MAAM;YACzF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent/slack-gate-poller.d.ts

@@ -0,0 +1,28 @@
+export interface SlackPollConfig {
+    /** SLACK_BOT_TOKEN — used in Authorization header. */
+    botToken: string;
+    /** SLACK_CHANNEL_ID — channel containing the gate notification thread. */
+    channelId: string;
+    /** ts of the gate notification message — anchor for conversations.replies. */
+    threadTs: string;
+    /** Only process messages sent after this time. Set to gate opened_at. */
+    gateOpenedAt: Date;
+    /** Polling interval in milliseconds. Default: 10000. */
+    intervalMs: number;
+    /** Called with the text of each new human message. */
+    onCandidate: (text: string) => void;
+    /**
+     * Called once after the first successful poll that finds no human replies.
+     * Use to surface a hint reminding the user to reply in the thread, not the main channel.
+     */
+    onHint?: (message: string) => void;
+    /** When aborted, polling stops cleanly after the current interval. */
+    signal?: AbortSignal;
+}
+/**
+ * Begins polling a Slack thread for new human replies.
+ * Filters out bot messages, messages before `gateOpenedAt`, and duplicate messages.
+ * Calls `onCandidate` at most once per unique message ts.
+ */
+export declare function pollSlackThread(config: SlackPollConfig): void;
+//# sourceMappingURL=slack-gate-poller.d.ts.map

package/dist/agent/slack-gate-poller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-gate-poller.d.ts","sourceRoot":"","sources":["../../src/agent/slack-gate-poller.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,YAAY,EAAE,IAAI,CAAC;IACnB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,sEAAsE;IACtE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAmE7D"}

package/dist/agent/slack-gate-poller.js

@@ -0,0 +1,66 @@
+// slack-gate-poller.ts — Polls a Slack thread for human replies when Events API is not configured.
+// Used as a local CLI fallback when SLACK_BOT_TOKEN and SLACK_CHANNEL_ID are set
+// but no Events API endpoint (SLACK_SIGNING_SECRET) is available.
+/**
+ * Begins polling a Slack thread for new human replies.
+ * Filters out bot messages, messages before `gateOpenedAt`, and duplicate messages.
+ * Calls `onCandidate` at most once per unique message ts.
+ */
+export function pollSlackThread(config) {
+    const { botToken, channelId, threadTs, gateOpenedAt, intervalMs, onCandidate, onHint, signal } = config;
+    const processed = new Set();
+    // Convert gateOpenedAt to a Slack-style float timestamp string for comparison.
+    const gateOpenedSec = gateOpenedAt.getTime() / 1000;
+    let hintFired = false;
+    const poll = async () => {
+        if (signal?.aborted)
+            return;
+        try {
+            const url = `https://slack.com/api/conversations.replies` +
+                `?channel=${encodeURIComponent(channelId)}&ts=${encodeURIComponent(threadTs)}`;
+            const response = await fetch(url, {
+                headers: { Authorization: `Bearer ${botToken}` },
+            });
+            const data = (await response.json());
+            if (data.ok && Array.isArray(data.messages)) {
+                let foundHumanReply = false;
+                for (const msg of data.messages) {
+                    const msgTs = msg['ts'];
+                    if (!msgTs)
+                        continue;
+                    // Skip messages sent before or at gate opened time.
+                    if (parseFloat(msgTs) <= gateOpenedSec)
+                        continue;
+                    // Filter bot messages.
+                    if (msg['subtype'] === 'bot_message' || msg['bot_id'] !== undefined)
+                        continue;
+                    // Deduplicate by ts.
+                    if (processed.has(msgTs))
+                        continue;
+                    processed.add(msgTs);
+                    foundHumanReply = true;
+                    const text = msg['text'];
+                    if (text)
+                        onCandidate(text);
+                }
+                // Fire the hint once after the first successful poll with no human replies.
+                if (!foundHumanReply && !hintFired && onHint !== undefined) {
+                    hintFired = true;
+                    onHint('Waiting for a thread reply. To resolve this gate, click \u201cReply\u201d on the gate message in Slack — do not post in the main channel.');
+                }
+            }
+        }
+        catch {
+            // Polling failures are silent — gate remains open until a valid reply arrives.
+        }
+        if (!signal?.aborted) {
+            setTimeout(() => {
+                void poll();
+            }, intervalMs);
+        }
+    };
+    setTimeout(() => {
+        void poll();
+    }, intervalMs);
+}
+//# sourceMappingURL=slack-gate-poller.js.map

package/dist/agent/slack-gate-poller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-gate-poller.js","sourceRoot":"","sources":["../../src/agent/slack-gate-poller.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,iFAAiF;AACjF,kEAAkE;AAwBlE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAC5F,MAAM,CAAC;IAET,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,+EAA+E;IAC/E,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IACpD,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO;QAE5B,IAAI,CAAC;YACH,MAAM,GAAG,GACP,6CAA6C;gBAC7C,YAAY,kBAAkB,CAAC,SAAS,CAAC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,EAAE,EAAE;aACjD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAC;YAEF,IAAI,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,IAAI,eAAe,GAAG,KAAK,CAAC;gBAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAChC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAuB,CAAC;oBAC9C,IAAI,CAAC,KAAK;wBAAE,SAAS;oBAErB,oDAAoD;oBACpD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,aAAa;wBAAE,SAAS;oBAEjD,uBAAuB;oBACvB,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;wBAAE,SAAS;oBAE9E,qBAAqB;oBACrB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,SAAS;oBACnC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAErB,eAAe,GAAG,IAAI,CAAC;oBACvB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAuB,CAAC;oBAC/C,IAAI,IAAI;wBAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;gBAED,4EAA4E;gBAC5E,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC3D,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,CACJ,2IAA2I,CAC5I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,IAAI,EAAE,CAAC;YACd,CAAC,EAAE,UAAU,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,IAAI,EAAE,CAAC;IACd,CAAC,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC"}

package/dist/agent/slack-gate-server.d.ts

@@ -0,0 +1,30 @@
+/** A verified, filtered Slack message event from the gate thread. */
+export interface SlackGateEvent {
+    /** Dedupe key from the Slack event envelope. */
+    event_id: string;
+    /** Thread timestamp — must match the gate notification message ts. */
+    thread_ts: string;
+    /** Slack user ID of the message author. */
+    user: string;
+    /** Raw message text to be interpreted. */
+    text: string;
+    /** Slack event timestamp (format: '1234567890.123456'). */
+    ts: string;
+}
+export interface SlackGateServerOptions {
+    /** Local port to listen on. Default: 3100. Configurable via SLACK_EVENTS_PORT. */
+    port: number;
+    /** Slack signing secret for HMAC-SHA256 verification. Never logged. */
+    signingSecret: string;
+    /** Called for each valid, non-bot message event that passes verification. */
+    onEvent: (event: SlackGateEvent) => void;
+}
+/**
+ * Starts a local HTTP server that receives Slack Events API callbacks.
+ * Verifies request signatures before processing any payload.
+ * Returns a handle to close the server.
+ */
+export declare function startSlackGateServer(options: SlackGateServerOptions): {
+    close(): void;
+};
+//# sourceMappingURL=slack-gate-server.d.ts.map

package/dist/agent/slack-gate-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-gate-server.d.ts","sourceRoot":"","sources":["../../src/agent/slack-gate-server.ts"],"names":[],"mappings":"AAKA,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,sBAAsB;IACrC,kFAAkF;IAClF,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG;IAAE,KAAK,IAAI,IAAI,CAAA;CAAE,CAoGvF"}

package/dist/agent/slack-gate-server.js

@@ -0,0 +1,99 @@
+// slack-gate-server.ts — Minimal HTTP server for Slack Events API callbacks.
+// Handles POST /slack/events with HMAC-SHA256 signature verification.
+import { createServer } from 'node:http';
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Starts a local HTTP server that receives Slack Events API callbacks.
+ * Verifies request signatures before processing any payload.
+ * Returns a handle to close the server.
+ */
+export function startSlackGateServer(options) {
+    const { port, signingSecret, onEvent } = options;
+    const server = createServer((req, res) => {
+        if (req.method !== 'POST' || req.url !== '/slack/events') {
+            res.writeHead(404);
+            res.end();
+            return;
+        }
+        const chunks = [];
+        req.on('data', (chunk) => chunks.push(chunk));
+        req.on('end', () => {
+            const rawBody = Buffer.concat(chunks).toString('utf8');
+            const timestamp = req.headers['x-slack-request-timestamp'];
+            const signature = req.headers['x-slack-signature'];
+            if (typeof timestamp !== 'string' || typeof signature !== 'string') {
+                res.writeHead(403);
+                res.end('Missing Slack signature headers');
+                return;
+            }
+            // Reject stale requests before performing HMAC — prevents replay attacks.
+            const requestTime = parseInt(timestamp, 10);
+            if (isNaN(requestTime)) {
+                res.writeHead(400);
+                res.end('Invalid timestamp');
+                return;
+            }
+            const nowSec = Math.floor(Date.now() / 1000);
+            if (Math.abs(nowSec - requestTime) > 300) {
+                res.writeHead(403);
+                res.end('Stale request');
+                return;
+            }
+            // Verify HMAC-SHA256 signature using timing-safe comparison.
+            const baseString = `v0:${timestamp}:${rawBody}`;
+            const expected = 'v0=' + createHmac('sha256', signingSecret).update(baseString).digest('hex');
+            const expectedBuf = Buffer.from(expected, 'utf8');
+            const receivedBuf = Buffer.from(signature, 'utf8');
+            const signaturesMatch = expectedBuf.length === receivedBuf.length && timingSafeEqual(expectedBuf, receivedBuf);
+            if (!signaturesMatch) {
+                res.writeHead(403);
+                res.end('Invalid signature');
+                return;
+            }
+            // Parse the verified payload.
+            let payload;
+            try {
+                payload = JSON.parse(rawBody);
+            }
+            catch {
+                res.writeHead(400);
+                res.end('Invalid JSON');
+                return;
+            }
+            // Handle Slack URL verification challenge.
+            if (payload['type'] === 'url_verification') {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ challenge: payload['challenge'] }));
+                return;
+            }
+            // Acknowledge immediately — Slack requires a response within 3 seconds.
+            res.writeHead(200);
+            res.end();
+            if (payload['type'] !== 'event_callback')
+                return;
+            const event = payload['event'];
+            if (event === undefined)
+                return;
+            if (event['type'] !== 'message')
+                return;
+            // Filter bot messages — only route human replies.
+            if (event['subtype'] === 'bot_message' || event['bot_id'] !== undefined)
+                return;
+            const threadTs = event['thread_ts'];
+            const user = event['user'];
+            const text = event['text'];
+            const ts = event['ts'];
+            const eventId = payload['event_id'];
+            if (!threadTs || !user || !text || !ts || !eventId)
+                return;
+            onEvent({ event_id: eventId, thread_ts: threadTs, user, text, ts });
+        });
+    });
+    server.listen(port);
+    return {
+        close() {
+            server.close();
+        },
+    };
+}
+//# sourceMappingURL=slack-gate-server.js.map

package/dist/agent/slack-gate-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-gate-server.js","sourceRoot":"","sources":["../../src/agent/slack-gate-server.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,sEAAsE;AACtE,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAyB1D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA+B;IAClE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;YACzD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAEnD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACnE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,GAAG,EAAE,CAAC;gBACzC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,MAAM,UAAU,GAAG,MAAM,SAAS,IAAI,OAAO,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,eAAe,GACnB,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAEzF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,8BAA8B;YAC9B,IAAI,OAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YAED,wEAAwE;YACxE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YAEV,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,gBAAgB;gBAAE,OAAO;YAEjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAwC,CAAC;YACtE,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;gBAAE,OAAO;YAExC,kDAAkD;YAClD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,aAAa,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,OAAO;YAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAuB,CAAC;YAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAuB,CAAC;YACjD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAuB,CAAC;YACjD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAuB,CAAC;YAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAuB,CAAC;YAE1D,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO;gBAAE,OAAO;YAE3D,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO;QACL,KAAK;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/slack-socket-client.d.ts

@@ -0,0 +1,20 @@
+import type { SlackGateEvent } from './slack-gate-server.js';
+export interface SlackSocketConfig {
+    /** SLACK_APP_TOKEN — App-level token (starts with xapp-). */
+    appToken: string;
+    /** Gate thread timestamp — only events in this thread are forwarded to onEvent. */
+    threadTs: string;
+    /** Called for each valid human message in the gate thread. */
+    onEvent: (event: SlackGateEvent) => void;
+    /** When aborted, the connection is closed and no reconnects are attempted. */
+    signal?: AbortSignal;
+}
+/**
+ * Opens a Slack Socket Mode WebSocket connection and begins delivering gate thread events.
+ * Handles reconnection transparently on drops or Slack-requested refreshes.
+ * Returns a handle to close the connection immediately.
+ */
+export declare function connectSocketMode(config: SlackSocketConfig): {
+    close(): void;
+};
+//# sourceMappingURL=slack-socket-client.d.ts.map

package/dist/agent/slack-socket-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-socket-client.d.ts","sourceRoot":"","sources":["../../src/agent/slack-socket-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACzC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG;IAAE,KAAK,IAAI,IAAI,CAAA;CAAE,CAoJ9E"}