agim-cli 1.1.1 → 1.1.3

package/dist/core/job-recovery.js

@@ -0,0 +1,185 @@
+// Job recovery — Phase 3 lifecycle hook.
+//
+// On startup, after messengers + sink worker are wired, this module walks
+// the jobs table looking for `kind='inline' status='interrupted'` rows
+// whose interruption happened inside the recovery window (default 10 min).
+// For each such row it:
+//
+//   1. Sends a one-shot retry prompt to the originating thread via sink.
+//      Falls back to outbox queue if the IM platform is still warming up.
+//   2. Registers the row in an in-memory per-thread map keyed by
+//      `${platform}:${channelId}:${threadId}`. The map entry expires after
+//      the window so a forgotten interruption doesn't hijack the user's
+//      next message forever.
+//   3. The cli message handler calls `tryHandleRecoveryReply()` at the
+//      top of every inbound message; if the thread has a pending
+//      interrupted-job and the message looks like "1" / "重发" / "2" /
+//      "取消", we resolve the choice + clear the entry.
+//
+// Older interrupted rows (past the window) get swept to 'abandoned' so the
+// table stays bounded.
+//
+// Module-level state:
+//   - `pending` is in-memory only. Process restarts wipe it. That's
+//     intentional: each restart re-runs scanInterruptedAndNotify() and
+//     re-derives the state from SQLite. We don't ever want a recovery
+//     entry that outlives the row it points at.
+import { logger as rootLogger } from './logger.js';
+import { createInlineJob, findRecoverableInterrupted, getRecoveryWindowMs, markInterruptedCancelled, markJobReplacedBy, sweepAbandonedInterrupted, } from './job-board.js';
+import { sink } from './message-sink.js';
+const log = rootLogger.child({ component: 'job-recovery' });
+/** Thread-keyed pending entries. One per thread — if a thread happens to
+ *  have multiple interrupted rows (rare), we surface the most recent only
+ *  and the rest get swept to 'abandoned' next sweep. */
+const pending = new Map();
+/** Test hook — wipe the in-memory state. */
+export function _resetPendingForTests() {
+    pending.clear();
+}
+/** Test hook — inspect current state. */
+export function _peekPendingForTests() {
+    return new Map(pending);
+}
+function buildThreadKey(j) {
+    // Inline jobs always carry thread_key; if some legacy row doesn't, we skip
+    // (caller filters that out, but defense-in-depth).
+    return j.thread_key;
+}
+function parseThreadKey(key) {
+    // Composite is `${platform}:${channelId}:${threadId}` but threadId itself
+    // may contain ':' (Discord, some web clients). Split off the first two
+    // segments and treat the rest as threadId.
+    const parts = key.split(':');
+    if (parts.length < 3)
+        return null;
+    return { platform: parts[0], channelId: parts[1], threadId: parts.slice(2).join(':') };
+}
+function previewPrompt(p, max = 40) {
+    const flat = p.replace(/\s+/g, ' ').trim();
+    return flat.length > max ? `${flat.slice(0, max)}…` : flat;
+}
+function formatNotice(j, windowMin) {
+    return [
+        '⚠️ 上次的消息被服务重启中断了：',
+        `「${previewPrompt(j.prompt)}」`,
+        '',
+        `回复 \`1\` 重发 / \`2\` 取消（${windowMin} 分钟内有效）`,
+    ].join('\n');
+}
+/** Run once on agim startup, after messengers + sink are up. */
+export async function scanInterruptedAndNotify() {
+    const windowMs = getRecoveryWindowMs();
+    const windowMin = Math.round(windowMs / 60_000);
+    // First sweep stale rows so the notify pass doesn't waste cycles on them.
+    const abandoned = sweepAbandonedInterrupted(windowMs);
+    const rows = findRecoverableInterrupted(windowMs);
+    let notified = 0;
+    for (const j of rows) {
+        const key = buildThreadKey(j);
+        const parsed = parseThreadKey(key);
+        if (!parsed) {
+            log.warn({ event: 'recovery.bad_thread_key', jobId: j.id, threadKey: key }, 'skipping row with malformed thread_key');
+            continue;
+        }
+        // Only the most recent per-thread row goes into the pending map. Older
+        // ones get swept to 'cancelled' so the user isn't asked to retry two
+        // overlapping interruptions on the same thread.
+        if (pending.has(key)) {
+            markInterruptedCancelled(j.id);
+            continue;
+        }
+        const interruptedAtMs = j.completed_at
+            ? Date.parse(`${j.completed_at}Z`)
+            : Date.now();
+        pending.set(key, {
+            jobId: j.id,
+            agent: j.agent,
+            prompt: j.prompt,
+            threadKey: key,
+            platform: parsed.platform,
+            channelId: parsed.channelId,
+            threadId: parsed.threadId,
+            creatorId: j.creator_id,
+            expiresAt: interruptedAtMs + windowMs,
+        });
+        try {
+            await sink.deliver({
+                platform: parsed.platform,
+                channelId: parsed.channelId,
+                threadId: parsed.threadId,
+                payload: formatNotice(j, windowMin),
+                kind: 'text',
+                priority: 'normal',
+            });
+            notified++;
+        }
+        catch (err) {
+            log.warn({
+                event: 'recovery.notify_failed', jobId: j.id, threadKey: key,
+                err: err instanceof Error ? err.message : String(err),
+            }, 'recovery notice send threw — sink already enqueues, this is best-effort');
+        }
+    }
+    if (notified > 0 || abandoned > 0) {
+        log.info({ event: 'recovery.scan_done', notified, abandoned, windowMs }, `Recovery scan: notified ${notified}, abandoned ${abandoned}`);
+    }
+    return { notified, abandoned };
+}
+/** Periodic in-memory expiry sweep. Removes entries whose `expiresAt` has
+ *  passed without a user reply. Called from cli.ts on a setInterval. */
+export function sweepExpiredPending(now = Date.now()) {
+    let n = 0;
+    for (const [key, entry] of pending.entries()) {
+        if (entry.expiresAt <= now) {
+            pending.delete(key);
+            // Row in DB stays 'interrupted' until the next startup scan re-sweeps
+            // it to 'abandoned'. That's fine — abandoned-at-DB and expired-in-memory
+            // converge eventually.
+            n++;
+        }
+    }
+    return n;
+}
+/** Try to interpret a user's reply as a recovery decision. Returns an
+ *  outcome the caller can render. Side-effect: on a recognized decision,
+ *  the pending entry is removed and the DB row transitions. */
+export function tryHandleRecoveryReply(threadKey, text) {
+    const entry = pending.get(threadKey);
+    if (!entry)
+        return { kind: 'not-pending' };
+    const trimmed = text.trim();
+    const isRetry = /^(1|重发|重试|retry|y|yes)$/i.test(trimmed);
+    const isCancel = /^(2|取消|算了|cancel|n|no)$/i.test(trimmed);
+    if (!isRetry && !isCancel)
+        return { kind: 'not-recovery-reply' };
+    pending.delete(threadKey);
+    if (isCancel) {
+        markInterruptedCancelled(entry.jobId);
+        return { kind: 'cancelled', oldJobId: entry.jobId };
+    }
+    // Retry: spawn a new inline job with the same prompt + thread coordinates
+    // so the cli main loop's onAgentResolved hook (which won't run here —
+    // recovery is outside the message handler) won't update the agent. We
+    // use the agent that was recorded on the original row. The new row goes
+    // straight to 'pending' for whatever picks it up next; recovery itself
+    // doesn't run the agent — it relies on the cli main loop seeing this
+    // row's prompt re-injected. The caller (router intercept) decides how
+    // to actually run it (typically: synthesize an inbound message with
+    // entry.prompt and let handleMessage do its normal thing).
+    const newJobId = createInlineJob({
+        agent: entry.agent,
+        prompt: entry.prompt,
+        threadKey: entry.threadKey,
+        creatorId: entry.creatorId,
+    });
+    if (newJobId > 0)
+        markJobReplacedBy(entry.jobId, newJobId);
+    return { kind: 'retried', newJobId, oldJobId: entry.jobId, entry };
+}
+/** Convenience for cli.ts: was the thread expecting a recovery reply just
+ *  before we routed this message? Used to skip approval / reminder
+ *  interceptors when the user is replying to a recovery prompt. */
+export function hasPendingRecovery(threadKey) {
+    return pending.has(threadKey);
+}
+//# sourceMappingURL=job-recovery.js.map

package/dist/core/job-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-recovery.js","sourceRoot":"","sources":["../../src/core/job-recovery.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,2EAA2E;AAC3E,wBAAwB;AACxB,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,iEAAiE;AACjE,2EAA2E;AAC3E,wEAAwE;AACxE,6BAA6B;AAC7B,uEAAuE;AACvE,iEAAiE;AACjE,qEAAqE;AACrE,sDAAsD;AACtD,EAAE;AACF,2EAA2E;AAC3E,uBAAuB;AACvB,EAAE;AACF,sBAAsB;AACtB,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,gDAAgD;AAEhD,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAEL,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAExC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;AAe3D;;wDAEwD;AACxD,MAAM,OAAO,GAA8B,IAAI,GAAG,EAAE,CAAA;AAEpD,4CAA4C;AAC5C,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,CAAM;IAC5B,2EAA2E;IAC3E,mDAAmD;IACnD,OAAO,CAAC,CAAC,UAAU,CAAA;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,0EAA0E;IAC1E,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,CAAS,EAAE,MAAc,EAAE;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,CAAM,EAAE,SAAiB;IAC7C,OAAO;QACL,mBAAmB;QACnB,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG;QAC9B,EAAE;QACF,0BAA0B,SAAS,SAAS;KAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAA;IAE/C,0EAA0E;IAC1E,MAAM,SAAS,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IAErD,MAAM,IAAI,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAA;IACjD,IAAI,QAAQ,GAAG,CAAC,CAAA;IAEhB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EACxE,wCAAwC,CAAC,CAAA;YAC3C,SAAQ;QACV,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,gDAAgD;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY;YACpC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,YAAY,GAAG,CAAC;YAClC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACf,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,SAAS,EAAE,eAAe,GAAG,QAAQ;SACtC,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC;gBACnC,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAA;YACF,QAAQ,EAAE,CAAA;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG;gBAC5D,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,EAAE,yEAAyE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,EACrE,2BAA2B,QAAQ,eAAe,SAAS,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC1D,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnB,sEAAsE;YACtE,yEAAyE;YACzE,uBAAuB;YACvB,CAAC,EAAE,CAAA;QACL,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AASD;;+DAE+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAY;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;IAE1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAEzD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAA;IAEhE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAEzB,IAAI,QAAQ,EAAE,CAAC;QACb,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACrC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IACrD,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;IACF,IAAI,QAAQ,GAAG,CAAC;QAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC1D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAA;AACpE,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AAC/B,CAAC"}

package/dist/core/message-sink.d.ts

@@ -0,0 +1,63 @@
+import type { MessengerAdapter } from './types.js';
+import { type OutboxKind, type OutboxPriority } from './outbox.js';
+export type SinkKind = OutboxKind;
+export type SinkPriority = OutboxPriority;
+export interface SinkPayload {
+    threadId: string;
+    platform: string;
+    channelId: string;
+    /** For 'text': the message body (string).
+     *  For 'card': the card object (will be JSON-encoded for storage).
+     *  For 'typing': 'start' or 'stop'. */
+    payload: string | object;
+    kind: SinkKind;
+    /** Default 'normal'. 'high' tries a synchronous send first and falls
+     *  back to the queue only on failure — use for approval / restart
+     *  notices where 1s+ worker latency matters. */
+    priority?: SinkPriority;
+    /** Link this delivery back to a jobs row (inline job / scheduled job).
+     *  Phase 2 will use this to mark jobs.status='delivered' when the row
+     *  reaches the IM. */
+    jobId?: number | null;
+    /** Optional explicit thread key. Default is
+     *  `${platform}:${channelId}:${threadId}` (matches session.ts). */
+    threadKey?: string;
+    /** Optional already-resolved adapter. When provided, sink uses it
+     *  directly for the sync attempt instead of consulting the global
+     *  registry. Required by callers that maintain their own resolution
+     *  indirection (e.g. approval-router.install accepts a custom
+     *  resolveMessenger hook used by tests + multi-tenant setups). The
+     *  outbox row is still recorded with platform=<name>; if the sync
+     *  attempt fails, the worker re-resolves via registry the normal way. */
+    adapter?: MessengerAdapter;
+}
+export interface SinkResult {
+    /** Row id in the outbox table. -1 if persistence is unavailable AND the
+     *  sync fallback also failed (the rare double-failure case — caller has
+     *  no recourse beyond logging). */
+    outboxId: number;
+    /** True = the message was sent inline before this call returned (only
+     *  possible when priority='high' and the sync attempt succeeded).
+     *  False = queued for the worker. */
+    immediate: boolean;
+}
+/** Resolve a platform name (e.g. 'wechat' / 'wechat-ilink' / 'feishu') to
+ *  the actual MessengerAdapter. Exact match first, then a fuzzy `${name}-*`
+ *  / `${name}_*` prefix walk so reminders.ts / scheduler / web callers can
+ *  pass the generic platform ('wechat') and still hit 'wechat-ilink'. Mirrors
+ *  the helper that already exists in reminders.ts:873 — kept in sink so the
+ *  rest of the codebase can stop caring about adapter naming.
+ *
+ *  Exported for tests; production callers go through deliver(). */
+export declare function resolveMessenger(platform: string): MessengerAdapter | undefined;
+export declare function deliver(p: SinkPayload): Promise<SinkResult>;
+export declare function startWorker(): void;
+export declare function stopWorker(): void;
+/** Test hook — run one tick synchronously. */
+export declare function _tickWorkerForTests(): Promise<void>;
+export declare const sink: {
+    deliver: typeof deliver;
+    startWorker: typeof startWorker;
+    stopWorker: typeof stopWorker;
+};
+//# sourceMappingURL=message-sink.d.ts.map

package/dist/core/message-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-sink.d.ts","sourceRoot":"","sources":["../../src/core/message-sink.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGlD,OAAO,EAEL,KAAK,UAAU,EAAE,KAAK,cAAc,EACrC,MAAM,aAAa,CAAA;AAKpB,MAAM,MAAM,QAAQ,GAAG,UAAU,CAAA;AACjC,MAAM,MAAM,YAAY,GAAG,cAAc,CAAA;AAEzC,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB;;2CAEuC;IACvC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACxB,IAAI,EAAE,QAAQ,CAAA;IACd;;oDAEgD;IAChD,QAAQ,CAAC,EAAE,YAAY,CAAA;IACvB;;0BAEsB;IACtB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB;uEACmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;6EAMyE;IACzE,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB;;uCAEmC;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB;;yCAEqC;IACrC,SAAS,EAAE,OAAO,CAAA;CACnB;AAUD;;;;;;;mEAOmE;AACnE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAS/E;AAoDD,wBAAsB,OAAO,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAqFjE;AAwED,wBAAgB,WAAW,IAAI,IAAI,CAgBlC;AAED,wBAAgB,UAAU,IAAI,IAAI,CAOjC;AAED,8CAA8C;AAC9C,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEzD;AAGD,eAAO,MAAM,IAAI;;;;CAIhB,CAAA"}

package/dist/core/message-sink.js

@@ -0,0 +1,296 @@
+// Message Sink — single chokepoint for all outbound IM messages.
+//
+// Why exist:
+//   - Previously, sendMessage was called directly from 5 sites (cli main
+//     loop, reminders, approval-router x2, restart-completion). Any of
+//     these losing a reply due to messenger error / brief disconnect /
+//     adapter crash dropped the message irrecoverably.
+//   - Sink writes every outbound to the persistent outbox table first
+//     (or tries a sync send for priority=high then falls back to the
+//     queue on failure). A background worker drains the queue with
+//     exponential backoff. Replies survive crashes and reconnects.
+//
+// Design constraints (per docs/task-recovery-plan.md):
+//   - Reminder polish, memo polish, and any other content-shaping logic
+//     happens *upstream* of sink — sink only receives plain payload + IM
+//     coordinates. Don't add transformations here.
+//   - Worker is single-threaded to preserve per-thread ordering. If
+//     throughput becomes a bottleneck, partition by thread_key.
+//   - Approval cards with messageId return paths (sendApprovalCard /
+//     editApprovalCard) do NOT go through sink — they need the synchronous
+//     messageId for the card-edit flow. Only plain text fallbacks from
+//     approval-router migrate to sink.
+//   - Don't bring up the worker until messengers have finished start()
+//     (cli.ts calls sink.startWorker() after registry.start()). Otherwise
+//     the very first tick after restart hits "messenger not registered"
+//     for every queued row.
+import { registry } from './registry.js';
+import { logger as rootLogger } from './logger.js';
+import { enqueue, pickPending, markDelivered, markFailed, } from './outbox.js';
+import { markJobDelivered, markJobFailed } from './job-board.js';
+const log = rootLogger.child({ component: 'message-sink' });
+function defaultThreadKey(p) {
+    return p.threadKey ?? `${p.platform}:${p.channelId}:${p.threadId}`;
+}
+function payloadToString(payload) {
+    return typeof payload === 'string' ? payload : JSON.stringify(payload);
+}
+/** Resolve a platform name (e.g. 'wechat' / 'wechat-ilink' / 'feishu') to
+ *  the actual MessengerAdapter. Exact match first, then a fuzzy `${name}-*`
+ *  / `${name}_*` prefix walk so reminders.ts / scheduler / web callers can
+ *  pass the generic platform ('wechat') and still hit 'wechat-ilink'. Mirrors
+ *  the helper that already exists in reminders.ts:873 — kept in sink so the
+ *  rest of the codebase can stop caring about adapter naming.
+ *
+ *  Exported for tests; production callers go through deliver(). */
+export function resolveMessenger(platform) {
+    const exact = registry.getMessenger(platform);
+    if (exact)
+        return exact;
+    for (const name of registry.listMessengers()) {
+        if (name === platform || name.startsWith(`${platform}-`) || name.startsWith(`${platform}_`)) {
+            return registry.getMessenger(name);
+        }
+    }
+    return undefined;
+}
+/** Attempt the actual messenger send. Throws on failure so the worker
+ *  loop can record it via markFailed(). For 'card' on adapters without
+ *  sendCard, we fall back to a JSON-stringified text body so the message
+ *  is still surfaced (better than dropping silently).
+ *
+ *  If `overrideAdapter` is provided the sync path uses it directly (the
+ *  caller has already done resolution); the worker tick never passes
+ *  one and always re-resolves via registry. */
+async function doSend(row, overrideAdapter) {
+    const adapter = overrideAdapter ?? resolveMessenger(row.platform);
+    if (!adapter) {
+        throw new Error(`messenger not registered: ${row.platform}`);
+    }
+    if (row.kind === 'text') {
+        await adapter.sendMessage(row.thread_id, row.payload);
+        return;
+    }
+    if (row.kind === 'card') {
+        if (adapter.sendCard) {
+            let cardObj;
+            try {
+                cardObj = JSON.parse(row.payload);
+            }
+            catch {
+                throw new Error('card payload is not valid JSON');
+            }
+            await adapter.sendCard(row.thread_id, cardObj);
+            return;
+        }
+        // No native card support → degrade to text. The adapter's sendMessage
+        // path is required by the type contract so this is always safe.
+        await adapter.sendMessage(row.thread_id, row.payload);
+        return;
+    }
+    if (row.kind === 'typing') {
+        if (adapter.sendTyping) {
+            const isTyping = row.payload === 'start';
+            await adapter.sendTyping(row.thread_id, isTyping);
+        }
+        // Adapter lacks typing → silently no-op. Typing indicators are
+        // best-effort; never re-queue.
+        return;
+    }
+    throw new Error(`unknown outbox kind: ${row.kind}`);
+}
+// ---------------------------------------------------------------------------
+// Public API: deliver()
+// ---------------------------------------------------------------------------
+export async function deliver(p) {
+    const priority = p.priority ?? 'normal';
+    const threadKey = defaultThreadKey(p);
+    const payloadStr = payloadToString(p.payload);
+    // Typing indicators are pure UX hints — never persist them. If the worker
+    // delivered a "start typing" row two minutes later it would be ridiculous.
+    // We fire-and-forget directly; failure is ignored.
+    if (p.kind === 'typing') {
+        const adapter = p.adapter ?? resolveMessenger(p.platform);
+        if (adapter?.sendTyping) {
+            try {
+                await adapter.sendTyping(p.threadId, payloadStr === 'start');
+            }
+            catch (err) {
+                log.debug({ event: 'sink.typing_failed', err: err instanceof Error ? err.message : String(err) }, 'typing send failed (ignored)');
+            }
+        }
+        return { outboxId: -1, immediate: true };
+    }
+    if (priority === 'high') {
+        // Try sync first. Build a synthetic row so doSend() works against the
+        // same code path the worker uses. attempts=0 — we haven't recorded
+        // anything yet.
+        const synthetic = {
+            id: -1, job_id: p.jobId ?? null, thread_key: threadKey,
+            platform: p.platform, channel_id: p.channelId, thread_id: p.threadId,
+            payload: payloadStr, kind: p.kind, priority,
+            status: 'pending', attempts: 0,
+            last_attempt_at: null, last_error: null, delivered_at: null,
+            next_attempt_at: null, created_at: new Date().toISOString(),
+        };
+        try {
+            await doSend(synthetic, p.adapter);
+            // Sync win — record a delivered row for audit + Phase 2 jobs.delivered_at hook.
+            const id = enqueue({
+                threadKey, platform: p.platform, channelId: p.channelId, threadId: p.threadId,
+                payload: payloadStr, kind: p.kind, priority, jobId: p.jobId ?? null,
+            });
+            if (id > 0)
+                markDelivered(id);
+            // Phase 2: cascade delivery confirmation to the linked inline job
+            // so its row transitions completed → delivered alongside the outbox row.
+            if (p.jobId && p.jobId > 0)
+                markJobDelivered(p.jobId);
+            return { outboxId: id, immediate: true };
+        }
+        catch (err) {
+            log.warn({
+                event: 'sink.high_priority_sync_failed',
+                platform: p.platform,
+                threadId: p.threadId,
+                err: err instanceof Error ? err.message : String(err),
+            }, 'high-priority sync send failed; falling back to outbox queue');
+            // Fall through to enqueue + worker tries again later.
+        }
+    }
+    // priority='normal' (or 'high' fallback): enqueue and let the worker drain.
+    const id = enqueue({
+        threadKey, platform: p.platform, channelId: p.channelId, threadId: p.threadId,
+        payload: payloadStr, kind: p.kind, priority, jobId: p.jobId ?? null,
+    });
+    if (id < 0) {
+        // Outbox itself is broken (sqlite disabled, e.g. on bun without the
+        // native module). Last-ditch: send directly so the user still gets
+        // a reply on this happy path. Failure here is logged and dropped —
+        // there is no remaining mechanism to recover.
+        log.error({ event: 'sink.outbox_unavailable', platform: p.platform, threadId: p.threadId }, 'outbox enqueue returned -1; attempting last-ditch direct send');
+        try {
+            await doSend({
+                id: -1, job_id: p.jobId ?? null, thread_key: threadKey,
+                platform: p.platform, channel_id: p.channelId, thread_id: p.threadId,
+                payload: payloadStr, kind: p.kind, priority,
+                status: 'pending', attempts: 0,
+                last_attempt_at: null, last_error: null, delivered_at: null,
+                next_attempt_at: null, created_at: new Date().toISOString(),
+            }, p.adapter);
+            return { outboxId: -1, immediate: true };
+        }
+        catch (err) {
+            log.error({ event: 'sink.last_ditch_failed', err: err instanceof Error ? err.message : String(err) }, 'last-ditch send failed; message is lost');
+            return { outboxId: -1, immediate: false };
+        }
+    }
+    return { outboxId: id, immediate: false };
+}
+// ---------------------------------------------------------------------------
+// Worker
+// ---------------------------------------------------------------------------
+/** How often the worker pulls pending rows. Override with IMHUB_OUTBOX_TICK_MS. */
+function resolveTickMs() {
+    const raw = process.env.IMHUB_OUTBOX_TICK_MS;
+    if (raw) {
+        const n = parseInt(raw, 10);
+        if (Number.isFinite(n) && n > 0)
+            return n;
+    }
+    return 1000;
+}
+/** Max rows pulled per tick. Worker is single-threaded so this caps how
+ *  long one tick can take before it self-yields. */
+function resolveBatchSize() {
+    const raw = process.env.IMHUB_OUTBOX_BATCH;
+    if (raw) {
+        const n = parseInt(raw, 10);
+        if (Number.isFinite(n) && n > 0)
+            return n;
+    }
+    return 10;
+}
+let workerTimer = null;
+let workerBusy = false;
+let workerStopRequested = false;
+async function workerTick() {
+    if (workerBusy)
+        return; // previous tick still running
+    workerBusy = true;
+    try {
+        const batch = pickPending(resolveBatchSize());
+        for (const row of batch) {
+            if (workerStopRequested)
+                break;
+            try {
+                await doSend(row);
+                markDelivered(row.id);
+                // Phase 2: cascade delivery → linked inline job. row.job_id is
+                // populated when sink.deliver was called with a SinkPayload.jobId.
+                // markJobDelivered no-ops on id<=0 / non-'completed' rows so this
+                // is safe even when the job was cancelled mid-flight.
+                if (row.job_id && row.job_id > 0)
+                    markJobDelivered(row.job_id);
+                log.debug({ event: 'sink.delivered', id: row.id, platform: row.platform, kind: row.kind, jobId: row.job_id }, 'outbox row delivered');
+            }
+            catch (err) {
+                const errMsg = err instanceof Error ? err.message : String(err);
+                const { gaveUp, attempts } = markFailed(row.id, errMsg);
+                log.warn({
+                    event: gaveUp ? 'sink.giving_up' : 'sink.retry_scheduled',
+                    id: row.id, platform: row.platform, kind: row.kind,
+                    attempts, err: errMsg,
+                }, gaveUp
+                    ? `outbox row ${row.id} gave up after ${attempts} attempts: ${errMsg}`
+                    : `outbox row ${row.id} failed (attempt ${attempts}), will retry`);
+                // Phase 2: when outbox gives up, the linked job's reply will never
+                // reach the user. Mark the job 'failed' so /jobs accurately reflects
+                // the terminal state. Non-giving-up failures stay 'completed' — the
+                // worker will retry soon and we don't want to flicker the status.
+                if (gaveUp && row.job_id && row.job_id > 0) {
+                    markJobFailed(row.job_id, `outbox gave up: ${errMsg}`);
+                }
+            }
+        }
+    }
+    finally {
+        workerBusy = false;
+    }
+}
+export function startWorker() {
+    if (workerTimer !== null)
+        return;
+    workerStopRequested = false;
+    const ms = resolveTickMs();
+    workerTimer = setInterval(() => {
+        void workerTick().catch((err) => {
+            log.error({ event: 'sink.worker_unhandled', err: err instanceof Error ? err.message : String(err) }, 'worker tick threw unhandled');
+        });
+    }, ms);
+    // Don't keep the process alive just for the worker — let SIGTERM / SIGINT
+    // shut things down naturally.
+    if (typeof workerTimer === 'object' && workerTimer && 'unref' in workerTimer) {
+        workerTimer.unref();
+    }
+    log.info({ event: 'sink.worker_started', tickMs: ms }, 'outbox worker started');
+}
+export function stopWorker() {
+    workerStopRequested = true;
+    if (workerTimer) {
+        clearInterval(workerTimer);
+        workerTimer = null;
+        log.info({ event: 'sink.worker_stopped' }, 'outbox worker stopped');
+    }
+}
+/** Test hook — run one tick synchronously. */
+export async function _tickWorkerForTests() {
+    await workerTick();
+}
+// Convenience namespace export so call sites read `sink.deliver(...)`.
+export const sink = {
+    deliver,
+    startWorker,
+    stopWorker,
+};
+//# sourceMappingURL=message-sink.js.map

package/dist/core/message-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-sink.js","sourceRoot":"","sources":["../../src/core/message-sink.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,aAAa;AACb,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,uDAAuD;AACvD,sEAAsE;AACtE,qEAAqE;AACrE,mEAAmE;AACnE,mEAAmE;AACnE,EAAE;AACF,uDAAuD;AACvD,wEAAwE;AACxE,yEAAyE;AACzE,mDAAmD;AACnD,oEAAoE;AACpE,gEAAgE;AAChE,qEAAqE;AACrE,2EAA2E;AAC3E,uEAAuE;AACvE,uCAAuC;AACvC,uEAAuE;AACvE,0EAA0E;AAC1E,wEAAwE;AACxE,4BAA4B;AAG5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EACL,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,GAEhD,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEhE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;AA8C3D,SAAS,gBAAgB,CAAC,CAAc;IACtC,OAAO,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,OAA+B;IACtD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;AACxE,CAAC;AAED;;;;;;;mEAOmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC5F,OAAO,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;+CAO+C;AAC/C,KAAK,UAAU,MAAM,CAAC,GAAc,EAAE,eAAkC;IACtE,MAAM,OAAO,GAAiC,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC/F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,IAAI,OAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACnD,CAAC;YACD,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAC9C,OAAM;QACR,CAAC;QACD,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QACrD,OAAM;IACR,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,KAAK,OAAO,CAAA;YACxC,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACnD,CAAC;QACD,+DAA+D;QAC/D,+BAA+B;QAC/B,OAAM;IACR,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,CAAc;IAC1C,MAAM,QAAQ,GAAiB,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAA;IACrD,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAE7C,0EAA0E;IAC1E,2EAA2E;IAC3E,mDAAmD;IACnD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QACzD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC9F,8BAA8B,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;IAC1C,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,sEAAsE;QACtE,mEAAmE;QACnE,gBAAgB;QAChB,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,SAAS;YACtD,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ;YACpE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ;YAC3C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YAC9B,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;YAC3D,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC5D,CAAA;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;YAClC,gFAAgF;YAChF,MAAM,EAAE,GAAG,OAAO,CAAC;gBACjB,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBAC7E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;aACpE,CAAC,CAAA;YACF,IAAI,EAAE,GAAG,CAAC;gBAAE,aAAa,CAAC,EAAE,CAAC,CAAA;YAC7B,kEAAkE;YAClE,yEAAyE;YACzE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;gBAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACrD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC;gBACP,KAAK,EAAE,gCAAgC;gBACvC,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,EAAE,8DAA8D,CAAC,CAAA;YAClE,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,EAAE,GAAG,OAAO,CAAC;QACjB,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;QAC7E,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;KACpE,CAAC,CAAA;IACF,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACX,oEAAoE;QACpE,mEAAmE;QACnE,mEAAmE;QACnE,8CAA8C;QAC9C,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EACxF,+DAA+D,CAAC,CAAA;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC;gBACX,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,UAAU,EAAE,SAAS;gBACtD,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACpE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ;gBAC3C,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;gBAC9B,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;gBAC3D,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC5D,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;YACb,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAClG,yCAAyC,CAAC,CAAA;YAC5C,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AAC3C,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,mFAAmF;AACnF,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAA;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;oDACoD;AACpD,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAA;IAC1C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,IAAI,WAAW,GAA0C,IAAI,CAAA;AAC7D,IAAI,UAAU,GAAG,KAAK,CAAA;AACtB,IAAI,mBAAmB,GAAG,KAAK,CAAA;AAE/B,KAAK,UAAU,UAAU;IACvB,IAAI,UAAU;QAAE,OAAM,CAAE,8BAA8B;IACtD,UAAU,GAAG,IAAI,CAAA;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAC7C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,mBAAmB;gBAAE,MAAK;YAC9B,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,GAAG,CAAC,CAAA;gBACjB,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACrB,+DAA+D;gBAC/D,mEAAmE;gBACnE,kEAAkE;gBAClE,sDAAsD;gBACtD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;gBAC9D,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,EAC1G,sBAAsB,CAAC,CAAA;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;gBACvD,GAAG,CAAC,IAAI,CAAC;oBACP,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,sBAAsB;oBACzD,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI;oBAClD,QAAQ,EAAE,GAAG,EAAE,MAAM;iBACtB,EAAE,MAAM;oBACP,CAAC,CAAC,cAAc,GAAG,CAAC,EAAE,kBAAkB,QAAQ,cAAc,MAAM,EAAE;oBACtE,CAAC,CAAC,cAAc,GAAG,CAAC,EAAE,oBAAoB,QAAQ,eAAe,CAAC,CAAA;gBACpE,mEAAmE;gBACnE,qEAAqE;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC3C,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,MAAM,EAAE,CAAC,CAAA;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAA;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,WAAW,KAAK,IAAI;QAAE,OAAM;IAChC,mBAAmB,GAAG,KAAK,CAAA;IAC3B,MAAM,EAAE,GAAG,aAAa,EAAE,CAAA;IAC1B,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACjG,6BAA6B,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;IACJ,CAAC,EAAE,EAAE,CAAC,CAAA;IACN,0EAA0E;IAC1E,8BAA8B;IAC9B,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;QAC5E,WAAqC,CAAC,KAAK,EAAE,CAAA;IAChD,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,mBAAmB,GAAG,IAAI,CAAA;IAC1B,IAAI,WAAW,EAAE,CAAC;QAChB,aAAa,CAAC,WAAW,CAAC,CAAA;QAC1B,WAAW,GAAG,IAAI,CAAA;QAClB,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACrE,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,UAAU,EAAE,CAAA;AACpB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO;IACP,WAAW;IACX,UAAU;CACX,CAAA"}

package/dist/core/outbox.d.ts

@@ -0,0 +1,71 @@
+import type Database from 'better-sqlite3';
+export type OutboxStatus = 'pending' | 'delivered' | 'giving_up';
+export type OutboxKind = 'text' | 'card' | 'typing';
+export type OutboxPriority = 'high' | 'normal';
+export interface OutboxRow {
+    id: number;
+    job_id: number | null;
+    thread_key: string;
+    platform: string;
+    channel_id: string;
+    thread_id: string;
+    payload: string;
+    kind: OutboxKind;
+    priority: OutboxPriority;
+    status: OutboxStatus;
+    attempts: number;
+    last_attempt_at: string | null;
+    last_error: string | null;
+    delivered_at: string | null;
+    next_attempt_at: string | null;
+    created_at: string;
+}
+export interface EnqueueOpts {
+    threadKey: string;
+    platform: string;
+    channelId: string;
+    threadId: string;
+    /** For text/card: serialized payload (text body or JSON of card). For typing: unused, pass ''. */
+    payload: string;
+    kind: OutboxKind;
+    priority?: OutboxPriority;
+    jobId?: number | null;
+}
+export declare const MAX_ATTEMPTS: 6;
+/** Stop the retention sweep (graceful shutdown / tests). */
+export declare function stopOutboxRetentionSweep(): void;
+/** Close the underlying SQLite handle. Called by cli.ts on graceful shutdown. */
+export declare function closeOutboxDb(): void;
+/** Insert a new pending row. Returns the row id, or -1 if the DB is broken
+ *  (caller should fall back to direct send). */
+export declare function enqueue(opts: EnqueueOpts): number;
+/** Pick up to `limit` pending rows whose next_attempt_at is now-or-past,
+ *  highest priority first. Worker calls this on each tick. */
+export declare function pickPending(limit?: number): OutboxRow[];
+/** Mark a row delivered. */
+export declare function markDelivered(id: number): void;
+/** Record a failed attempt. If attempts have exhausted the backoff schedule
+ *  the row transitions to 'giving_up' (and no longer drains). Otherwise it
+ *  stays 'pending' with next_attempt_at = now + backoff. */
+export declare function markFailed(id: number, error: string): {
+    gaveUp: boolean;
+    attempts: number;
+};
+/** Get one row by id. */
+export declare function getOutbox(id: number): OutboxRow | null;
+/** List rows in 'giving_up' or 'pending' state for /outbox command. */
+export declare function listOutbox(opts?: {
+    status?: OutboxStatus;
+    limit?: number;
+    threadKey?: string;
+}): OutboxRow[];
+/** Aggregate counts for /outbox status. */
+export declare function getOutboxStats(): Record<OutboxStatus, number>;
+/** Resurrect a 'giving_up' row back to 'pending' so the worker tries again.
+ *  Resets attempts to 0 so the full backoff ladder applies again. */
+export declare function retryGivingUp(id: number): boolean;
+/** Prune delivered + giving_up rows older than the retention window. */
+export declare function pruneOldOutbox(d?: Database.Database): number;
+/** Test hook: wipe everything. Only safe in unit tests. */
+export declare function _resetOutboxForTests(): void;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/core/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../src/core/outbox.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAQ1C,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAA;AAChE,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAA;AACnD,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,QAAQ,CAAA;AAE9C,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,cAAc,CAAA;IACxB,MAAM,EAAE,YAAY,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,kGAAkG;IAClG,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAMD,eAAO,MAAM,YAAY,GAAyB,CAAA;AA6DlD,4DAA4D;AAC5D,wBAAgB,wBAAwB,IAAI,IAAI,CAK/C;AAED,iFAAiF;AACjF,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAMD;gDACgD;AAChD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CA2BjD;AAED;8DAC8D;AAC9D,wBAAgB,WAAW,CAAC,KAAK,GAAE,MAAW,GAAG,SAAS,EAAE,CAqB3D;AAED,4BAA4B;AAC5B,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAoB9C;AAED;;4DAE4D;AAC5D,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAwC3F;AAED,yBAAyB;AACzB,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAStD;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,SAAS,EAAE,CA0BhH;AAED,2CAA2C;AAC3C,wBAAgB,cAAc,IAAI,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAY7D;AAED;qEACqE;AACrE,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAgBjD;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAyB5D;AAED,2DAA2D;AAC3D,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C"}