@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/routing/bindings.js

@@ -0,0 +1,22 @@
+/**
+ * Bindings accessor — single entry point that reads `cfg.bindings.entries[]`.
+ *
+ * Brand-scrubbed analogue of the upstream `src/routing/bindings.ts`'s
+ * `listBindings(cfg)`. The fuller upstream module also exports
+ * `listBoundAccountIds`, `resolveDefaultAgentBoundAccountId`,
+ * `buildChannelAccountBindings`, `resolvePreferredAccountId` — those
+ * helpers land later as channel-manager fan-out consumers arrive.
+ *
+ * For now the 8-tier route resolver only needs the raw list, so we
+ * ship a single function. The shape consumed:
+ *
+ *   `BindingEntry = { agentId, match?: { channel?, accountId?, peer?, guildId?, teamId?, roles? } }`
+ *
+ * Missing / non-array `cfg.bindings.entries` returns `[]` (every tier
+ * predicate's `enabled` flag handles the empty case naturally).
+ */
+export function listBindings(cfg) {
+    const entries = cfg?.bindings?.entries;
+    return Array.isArray(entries) ? entries : [];
+}
+//# sourceMappingURL=bindings.js.map

package/dist/agents/routing/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../../src/agents/routing/bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,UAAU,YAAY,CAAC,GAAqC;IACjE,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC"}

package/dist/agents/routing/dm-scope-warning.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Boot-time `dmScope` default-collapse warning.
+ *
+ * Brigade preserves the upstream reference codebase's runtime fallback of
+ * `dmScope: "main"` for back-compat — every DM on every channel collapses
+ * into the agent's single `agent:<id>:main` session, sharing transcript +
+ * memory. That's the right default for a one-peer install, but silently
+ * the wrong choice the moment the operator has two distinct peers on the
+ * same channel: their conversations cross-pollinate.
+ *
+ * `brigade onboard` (since Wave N3) seeds `session.dmScope =
+ * "per-channel-peer"` automatically. This helper warns operators who skipped
+ * onboarding or upgraded from a pre-default install. Three trip points:
+ *
+ *   1. Multi-peer collapse (high signal): `cfg.session.dmScope` unset AND
+ *      at least one channel has >= 2 distinct peer bindings.
+ *   2. Configured-channel collapse (medium signal — Wave N3, bug #5): unset
+ *      AND any channel binding exists at all. Catches the "user just wired
+ *      WhatsApp, hasn't sent a second peer yet, but every future DM will
+ *      land in `main`" scenario before the data crosses streams.
+ *   3. Explicit-main with DM bindings: operator opted into "main" but has
+ *      DM-capable channel bindings present. Same risk as above; surface
+ *      the remediation now rather than letting transcripts merge silently.
+ */
+import type { BrigadeConfig } from "../../config/types.js";
+export type DmScopeWarningKind = "unset-multi-peer" | "unset-with-channel-bindings" | "explicit-main-with-channel-bindings";
+export interface DmScopeWarning {
+    channel: string;
+    peerCount: number;
+    samplePeers: string[];
+    kind: DmScopeWarningKind;
+}
+/** Scan bindings; return warning records (one per channel that trips the heuristic). */
+export declare function detectDmScopeCollapseRisk(cfg: BrigadeConfig | undefined | null): DmScopeWarning[];
+/** Format a single warning record into a one-line operator-facing string. */
+export declare function formatDmScopeWarning(w: DmScopeWarning): string;
+//# sourceMappingURL=dm-scope-warning.d.ts.map

package/dist/agents/routing/dm-scope-warning.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-scope-warning.d.ts","sourceRoot":"","sources":["../../../src/agents/routing/dm-scope-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAG3D,MAAM,MAAM,kBAAkB,GAC3B,kBAAkB,GAClB,6BAA6B,GAC7B,qCAAqC,CAAC;AAEzC,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,kBAAkB,CAAC;CACzB;AAED,wFAAwF;AACxF,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,aAAa,GAAG,SAAS,GAAG,IAAI,GAAG,cAAc,EAAE,CA0DjG;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAyB9D"}

package/dist/agents/routing/dm-scope-warning.js

@@ -0,0 +1,110 @@
+/**
+ * Boot-time `dmScope` default-collapse warning.
+ *
+ * Brigade preserves the upstream reference codebase's runtime fallback of
+ * `dmScope: "main"` for back-compat — every DM on every channel collapses
+ * into the agent's single `agent:<id>:main` session, sharing transcript +
+ * memory. That's the right default for a one-peer install, but silently
+ * the wrong choice the moment the operator has two distinct peers on the
+ * same channel: their conversations cross-pollinate.
+ *
+ * `brigade onboard` (since Wave N3) seeds `session.dmScope =
+ * "per-channel-peer"` automatically. This helper warns operators who skipped
+ * onboarding or upgraded from a pre-default install. Three trip points:
+ *
+ *   1. Multi-peer collapse (high signal): `cfg.session.dmScope` unset AND
+ *      at least one channel has >= 2 distinct peer bindings.
+ *   2. Configured-channel collapse (medium signal — Wave N3, bug #5): unset
+ *      AND any channel binding exists at all. Catches the "user just wired
+ *      WhatsApp, hasn't sent a second peer yet, but every future DM will
+ *      land in `main`" scenario before the data crosses streams.
+ *   3. Explicit-main with DM bindings: operator opted into "main" but has
+ *      DM-capable channel bindings present. Same risk as above; surface
+ *      the remediation now rather than letting transcripts merge silently.
+ */
+import { listBindings } from "./bindings.js";
+/** Scan bindings; return warning records (one per channel that trips the heuristic). */
+export function detectDmScopeCollapseRisk(cfg) {
+    const rawDmScope = cfg?.session?.dmScope;
+    const dmScope = typeof rawDmScope === "string" ? rawDmScope.trim() : "";
+    const isUnset = dmScope.length === 0;
+    const isExplicitMain = dmScope === "main";
+    if (!isUnset && !isExplicitMain) {
+        // Operator already picked a safe explicit scope — no warning needed.
+        return [];
+    }
+    const bindings = listBindings(cfg ?? null);
+    if (bindings.length === 0)
+        return [];
+    const peersByChannel = new Map();
+    for (const entry of bindings) {
+        const channel = (entry.match?.channel ?? "").trim().toLowerCase();
+        if (!channel)
+            continue;
+        const peerId = (entry.match?.peer?.id ?? "")
+            .toString()
+            .trim();
+        let set = peersByChannel.get(channel);
+        if (!set) {
+            set = new Set();
+            peersByChannel.set(channel, set);
+        }
+        // Wildcards count toward "channel is wired" but not toward unique-peer counts.
+        if (peerId && peerId !== "*")
+            set.add(peerId);
+    }
+    if (peersByChannel.size === 0)
+        return [];
+    const warnings = [];
+    for (const [channel, peers] of peersByChannel.entries()) {
+        const distinctPeers = peers.size;
+        if (isUnset && distinctPeers >= 2) {
+            warnings.push({
+                channel,
+                peerCount: distinctPeers,
+                samplePeers: [...peers].slice(0, 3),
+                kind: "unset-multi-peer",
+            });
+            continue;
+        }
+        if (isUnset) {
+            warnings.push({
+                channel,
+                peerCount: distinctPeers,
+                samplePeers: [...peers].slice(0, 3),
+                kind: "unset-with-channel-bindings",
+            });
+            continue;
+        }
+        if (isExplicitMain) {
+            warnings.push({
+                channel,
+                peerCount: distinctPeers,
+                samplePeers: [...peers].slice(0, 3),
+                kind: "explicit-main-with-channel-bindings",
+            });
+        }
+    }
+    return warnings;
+}
+/** Format a single warning record into a one-line operator-facing string. */
+export function formatDmScopeWarning(w) {
+    const peerList = w.samplePeers.join(", ");
+    const tail = `Set session.dmScope to "per-peer" (cross-channel collapse via identityLinks), ` +
+        `"per-channel-peer", or "per-account-channel-peer" in brigade.json ` +
+        `(or run \`brigade onboard\` to seed the secure default) to isolate sessions.`;
+    switch (w.kind) {
+        case "unset-multi-peer":
+            return (`channel "${w.channel}" has ${w.peerCount} peer bindings (e.g. ${peerList}) but ` +
+                `session.dmScope is unset — every DM will collapse into the agent's main session, ` +
+                `sharing transcript + memory across peers. ${tail}`);
+        case "unset-with-channel-bindings":
+            return (`channel "${w.channel}" is configured but session.dmScope is unset — every DM on ` +
+                `this channel will collapse into the agent's main session, sharing transcript + ` +
+                `memory across peers as soon as a second peer messages. ${tail}`);
+        case "explicit-main-with-channel-bindings":
+            return (`session.dmScope="main" with channel "${w.channel}" bindings present — every DM ` +
+                `on this channel shares one session/transcript/memory across peers. ${tail}`);
+    }
+}
+//# sourceMappingURL=dm-scope-warning.js.map

package/dist/agents/routing/dm-scope-warning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-scope-warning.js","sourceRoot":"","sources":["../../../src/agents/routing/dm-scope-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAc7C,wFAAwF;AACxF,MAAM,UAAU,yBAAyB,CAAC,GAAqC;IAC9E,MAAM,UAAU,GAAI,GAAG,EAAE,OAA6C,EAAE,OAAO,CAAC;IAChF,MAAM,OAAO,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,OAAO,KAAK,MAAM,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,qEAAqE;QACrE,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,MAAM,GAAG,CAAE,KAAK,CAAC,KAAK,EAAE,IAAqC,EAAE,EAAE,IAAI,EAAE,CAAC;aAC5E,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;QACT,IAAI,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;YACxB,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QACD,+EAA+E;QAC/E,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QACzD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,OAAO,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACb,OAAO;gBACP,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,kBAAkB;aACxB,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACb,OAAO;gBACP,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,6BAA6B;aACnC,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACb,OAAO;gBACP,SAAS,EAAE,aAAa;gBACxB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,IAAI,EAAE,qCAAqC;aAC3C,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,CAAiB;IACrD,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GACT,gFAAgF;QAChF,oEAAoE;QACpE,8EAA8E,CAAC;IAChF,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,kBAAkB;YACtB,OAAO,CACN,YAAY,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,SAAS,wBAAwB,QAAQ,QAAQ;gBACjF,mFAAmF;gBACnF,6CAA6C,IAAI,EAAE,CACnD,CAAC;QACH,KAAK,6BAA6B;YACjC,OAAO,CACN,YAAY,CAAC,CAAC,OAAO,6DAA6D;gBAClF,iFAAiF;gBACjF,0DAA0D,IAAI,EAAE,CAChE,CAAC;QACH,KAAK,qCAAqC;YACzC,OAAO,CACN,wCAAwC,CAAC,CAAC,OAAO,gCAAgC;gBACjF,sEAAsE,IAAI,EAAE,CAC5E,CAAC;IACJ,CAAC;AACF,CAAC"}

package/dist/agents/routing/identity-links.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Cross-channel canonical-peer resolver.
+ *
+ * Brand-scrubbed lift of the upstream reference codebase's private
+ * `resolveLinkedPeerId` (in `src/routing/session-key.ts:178-222`),
+ * promoted to its own module so:
+ *   - the session-key builder + the channel manager + the cross-session
+ *     send tool all share ONE implementation,
+ *   - tests can exercise the resolver in isolation,
+ *   - future consumers (UI session-router, analytics) import without
+ *     dragging the whole session-key module.
+ *
+ * The algorithm is verbatim. For each `{canonical: [aliases]}` entry in
+ * `identityLinks`, the resolver checks if the inbound peer id matches
+ * (or, scoped by channel, `channel:peerId` matches) any of the aliases.
+ * First canonical match wins. Returns `null` when no match — callers
+ * fall back to the raw peer id.
+ *
+ * Use case: an operator chats with the same human via WhatsApp
+ * (`+1 555 010 0001`) and via Telegram (`@alex`). Config maps both
+ * aliases to canonical `"alex"`. With `dmScope: "per-peer"`, both
+ * inbounds route to `agent:main:direct:alex` — one session, two
+ * surfaces. Without identity-links, they'd be two separate sessions.
+ */
+/**
+ * Resolve a cross-channel canonical peer id from an `identityLinks` map.
+ *
+ * Algorithm (verbatim from upstream):
+ *   1. Build a candidate set with two normalised forms:
+ *      a. The raw peer id alone (`+1 555 010 0001` → `+1 555 010 0001`)
+ *      b. The channel-scoped form (`whatsapp:+1 555 010 0001`)
+ *   2. For each canonical name in `identityLinks`, scan its alias array.
+ *   3. If any alias normalises into the candidate set, return the canonical.
+ *   4. No match → return `null` (caller uses raw peer id as-is).
+ *
+ * Returns the canonical name UNTRIMMED apart from leading/trailing
+ * whitespace — preserves the operator's chosen casing (so display layers
+ * can render `Alex` not `alex`).
+ */
+export declare function resolveLinkedPeerId(params: {
+    identityLinks?: Record<string, string[]>;
+    channel: string;
+    peerId: string;
+}): string | null;
+//# sourceMappingURL=identity-links.d.ts.map

package/dist/agents/routing/identity-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-links.d.ts","sourceRoot":"","sources":["../../../src/agents/routing/identity-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAQH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,GAAG,IAAI,CAwChB"}

package/dist/agents/routing/identity-links.js

@@ -0,0 +1,85 @@
+/**
+ * Cross-channel canonical-peer resolver.
+ *
+ * Brand-scrubbed lift of the upstream reference codebase's private
+ * `resolveLinkedPeerId` (in `src/routing/session-key.ts:178-222`),
+ * promoted to its own module so:
+ *   - the session-key builder + the channel manager + the cross-session
+ *     send tool all share ONE implementation,
+ *   - tests can exercise the resolver in isolation,
+ *   - future consumers (UI session-router, analytics) import without
+ *     dragging the whole session-key module.
+ *
+ * The algorithm is verbatim. For each `{canonical: [aliases]}` entry in
+ * `identityLinks`, the resolver checks if the inbound peer id matches
+ * (or, scoped by channel, `channel:peerId` matches) any of the aliases.
+ * First canonical match wins. Returns `null` when no match — callers
+ * fall back to the raw peer id.
+ *
+ * Use case: an operator chats with the same human via WhatsApp
+ * (`+1 555 010 0001`) and via Telegram (`@alex`). Config maps both
+ * aliases to canonical `"alex"`. With `dmScope: "per-peer"`, both
+ * inbounds route to `agent:main:direct:alex` — one session, two
+ * surfaces. Without identity-links, they'd be two separate sessions.
+ */
+import { normalizeLowercaseStringOrEmpty } from "../../shared/string-coerce.js";
+function normalizeToken(value) {
+    return normalizeLowercaseStringOrEmpty(value);
+}
+/**
+ * Resolve a cross-channel canonical peer id from an `identityLinks` map.
+ *
+ * Algorithm (verbatim from upstream):
+ *   1. Build a candidate set with two normalised forms:
+ *      a. The raw peer id alone (`+1 555 010 0001` → `+1 555 010 0001`)
+ *      b. The channel-scoped form (`whatsapp:+1 555 010 0001`)
+ *   2. For each canonical name in `identityLinks`, scan its alias array.
+ *   3. If any alias normalises into the candidate set, return the canonical.
+ *   4. No match → return `null` (caller uses raw peer id as-is).
+ *
+ * Returns the canonical name UNTRIMMED apart from leading/trailing
+ * whitespace — preserves the operator's chosen casing (so display layers
+ * can render `Alex` not `alex`).
+ */
+export function resolveLinkedPeerId(params) {
+    const identityLinks = params.identityLinks;
+    if (!identityLinks) {
+        return null;
+    }
+    const peerId = params.peerId.trim();
+    if (!peerId) {
+        return null;
+    }
+    const candidates = new Set();
+    const rawCandidate = normalizeToken(peerId);
+    if (rawCandidate) {
+        candidates.add(rawCandidate);
+    }
+    const channel = normalizeToken(params.channel);
+    if (channel) {
+        const scopedCandidate = normalizeToken(`${channel}:${peerId}`);
+        if (scopedCandidate) {
+            candidates.add(scopedCandidate);
+        }
+    }
+    if (candidates.size === 0) {
+        return null;
+    }
+    for (const [canonical, ids] of Object.entries(identityLinks)) {
+        const canonicalName = canonical.trim();
+        if (!canonicalName) {
+            continue;
+        }
+        if (!Array.isArray(ids)) {
+            continue;
+        }
+        for (const id of ids) {
+            const normalized = normalizeToken(id);
+            if (normalized && candidates.has(normalized)) {
+                return canonicalName;
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=identity-links.js.map

package/dist/agents/routing/identity-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-links.js","sourceRoot":"","sources":["../../../src/agents/routing/identity-links.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAEhF,SAAS,cAAc,CAAC,KAAgC;IACvD,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAInC;IACA,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,YAAY,EAAE,CAAC;QAClB,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,eAAe,EAAE,CAAC;YACrB,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,SAAS;QACV,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS;QACV,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,UAAU,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,UAAU,IAAI,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9C,OAAO,aAAa,CAAC;YACtB,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/agents/routing/resolve-route.d.ts

@@ -0,0 +1,91 @@
+/**
+ * 8-tier agent route resolver.
+ *
+ * Brand-scrubbed lift of the upstream reference codebase's
+ * `src/routing/resolve-route.ts`. Every algorithm — the 8-tier waterfall
+ * cascade, the per-config WeakMap caches (agent lookup, evaluated
+ * bindings, resolved routes), the binding-index builder, the
+ * peer/account/guild/team scope matcher — is preserved verbatim. Only
+ * adjustments:
+ *
+ *   - upstream `Config` type → `BrigadeConfig` (Brigade's type)
+ *   - `buildAgentMainSessionKey` → `buildBrigadeMainSessionKey` (R2 Leak #2)
+ *   - `shouldLogVerbose()` reads `BRIGADE_LOG_ROUTING` env var (Brigade-native verbose flag)
+ *   - `logDebug(msg)` routes through `createSubsystemLogger("routing").info(msg)`
+ *
+ * Cache architecture (preserved verbatim):
+ *   - `agentLookupCacheByCfg` — keyed on `cfg.agents` reference identity;
+ *     maps normalized agent ids back to their canonical casing
+ *   - `evaluatedBindingsCacheByCfg` — keyed on `cfg.bindings` reference;
+ *     stores per-channel + per-(channel, account) pre-normalized binding
+ *     records + index structures (peer / wildcard / guild+roles / guild /
+ *     team / account / channel lookup maps)
+ *   - `resolvedRouteCacheByCfg` — keyed on (cfg.bindings, cfg.agents,
+ *     cfg.session) triple; stores fully resolved routes by
+ *     channel+account+peer+parentPeer+guildId+teamId+roleIds+dmScope key
+ *
+ * The 8 tiers, in waterfall order (first match wins):
+ *   1. binding.peer           — exact peer match (peer kind + id)
+ *   2. binding.peer.parent    — thread inheritance from parent peer
+ *   3. binding.peer.wildcard  — peer kind matches, id is `"*"`
+ *   4. binding.guild+roles    — guild + member role allowlist (Discord)
+ *   5. binding.guild          — guild only (no roles constraint)
+ *   6. binding.team           — Slack team
+ *   7. binding.account        — explicit account constraint
+ *   8. binding.channel        — channel-wildcard (`accountId === "*"`)
+ *   default → `resolveDefaultAgentId(cfg)`
+ */
+import type { ChatType } from "../channels/chat-type.js";
+import type { BrigadeConfig } from "../../config/types.js";
+/** @deprecated Use ChatType from channels/chat-type.js */
+export type RoutePeerKind = ChatType;
+export type RoutePeer = {
+    kind: ChatType;
+    id: string;
+};
+export type ResolveAgentRouteInput = {
+    cfg: BrigadeConfig;
+    channel: string;
+    accountId?: string | null;
+    peer?: RoutePeer | null;
+    /** Parent peer for threads — used for binding inheritance when peer doesn't match directly. */
+    parentPeer?: RoutePeer | null;
+    guildId?: string | null;
+    teamId?: string | null;
+    /** Discord member role IDs — used for role-based agent routing. */
+    memberRoleIds?: string[];
+};
+export type ResolvedAgentRoute = {
+    agentId: string;
+    channel: string;
+    accountId: string;
+    /** Internal session key used for persistence + concurrency. */
+    sessionKey: string;
+    /** Convenience alias for direct-chat collapse. */
+    mainSessionKey: string;
+    /** Which session should receive inbound last-route updates. */
+    lastRoutePolicy: "main" | "session";
+    /** Match description for debugging/logging. */
+    matchedBy: "binding.peer" | "binding.peer.parent" | "binding.peer.wildcard" | "binding.guild+roles" | "binding.guild" | "binding.team" | "binding.account" | "binding.channel" | "default";
+};
+export { DEFAULT_ACCOUNT_ID, DEFAULT_AGENT_ID } from "./session-key.js";
+export declare function deriveLastRoutePolicy(params: {
+    sessionKey: string;
+    mainSessionKey: string;
+}): ResolvedAgentRoute["lastRoutePolicy"];
+export declare function resolveInboundLastRouteSessionKey(params: {
+    route: Pick<ResolvedAgentRoute, "lastRoutePolicy" | "mainSessionKey">;
+    sessionKey: string;
+}): string;
+export declare function buildAgentSessionKey(params: {
+    agentId: string;
+    channel: string;
+    accountId?: string | null;
+    peer?: RoutePeer | null;
+    /** DM session scope. */
+    dmScope?: "main" | "per-peer" | "per-channel-peer" | "per-account-channel-peer";
+    identityLinks?: Record<string, string[]>;
+}): string;
+export declare function pickFirstExistingAgentId(cfg: BrigadeConfig, agentId: string): string;
+export declare function resolveAgentRoute(input: ResolveAgentRouteInput): ResolvedAgentRoute;
+//# sourceMappingURL=resolve-route.d.ts.map

package/dist/agents/routing/resolve-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-route.d.ts","sourceRoot":"","sources":["../../../src/agents/routing/resolve-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,uBAAuB,CAAC;AA2BzE,0DAA0D;AAC1D,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;AAErC,MAAM,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACpC,GAAG,EAAE,aAAa,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,+FAA+F;IAC/F,UAAU,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,+CAA+C;IAC/C,SAAS,EACN,cAAc,GACd,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,SAAS,CAAC;CACb,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAExE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACvB,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAExC;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACzD,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,CAAC;IACtE,UAAU,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAET;AAgBD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,kBAAkB,GAAG,0BAA0B,CAAC;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACzC,GAAG,MAAM,CAaT;AAuCD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAepF;AAkdD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,kBAAkB,CA4NnF"}