agor-live 0.22.0 → 0.23.2

package/dist/daemon/services/gateway.d.ts

@@ -5,8 +5,9 @@
  * messaging platforms and Agor sessions. Custom service (not DrizzleService)
  * since it orchestrates across multiple repositories and services.
  */
-import { type Database } from '@agor/core/db';
+import { type TenantScopeAwareDatabase } from '@agor/core/db';
 import type { Application } from '@agor/core/feathers';
+import type { GatewayChannel, SessionID, TenantID, UserID } from '@agor/core/types';
 /**
  * Inbound message data (platform → session)
  */
@@ -40,6 +41,33 @@ interface RouteMessageResult {
     routed: boolean;
     channelType?: string;
 }
+interface EmitGatewayMessageData {
+    gatewayChannelId: string;
+    message: string;
+    target?: string;
+    purpose?: string;
+    emittedByUserId: UserID;
+    /**
+     * Trust contract: must be sourced from verified auth context (MCP
+     * ctx.sessionId), never from tool/user input. When set, the outbound emit is
+     * hard-bound to the session's branch — it is denied unless the session's
+     * branch matches the channel's target branch, regardless of user role.
+     */
+    emittedBySessionId?: SessionID;
+    emittedByTaskId?: string;
+    emittedByScheduleId?: string;
+    userRole?: string;
+}
+interface EmitGatewayMessageResult {
+    success: true;
+    gateway_outbound_message_id: string;
+    gateway_channel_id: string;
+    channel_type: 'slack';
+    platform_channel_id: string;
+    platform_message_id: string;
+    platform_thread_id: string;
+    platform_permalink?: string | null;
+}
 export type GatewayProgressState = 'queued' | 'working' | 'done' | 'failed';
 export interface GatewayProgressData {
     session_id: string;
@@ -50,12 +78,17 @@ export interface GatewayProgressData {
     queue_position?: number;
     error_message?: string;
 }
+export declare function tenantIdFromGatewayChannel(channel: GatewayChannel): TenantID | string | undefined;
 /**
  * Gateway routing service
  */
 export declare class GatewayService {
+    private db;
     private channelRepo;
     private threadMapRepo;
+    private outboundRepo;
+    private branchRepo;
+    private sessionRepo;
     private usersRepo;
     private mcpServerRepo;
     private userTokenRepo;
@@ -92,7 +125,7 @@ export declare class GatewayService {
     private static SLACK_PROGRESS_MIN_UPDATE_MS;
     private static SLACK_STREAM_STATUS_REFRESH_MS;
     private static SLACK_STREAMED_MESSAGE_CACHE_MAX;
-    constructor(db: Database, app: Application);
+    constructor(db: TenantScopeAwareDatabase, app: Application);
     /**
      * Refresh the in-memory hasActiveChannels flag.
      * Called at startup and should be called when channels are created/deleted.
@@ -106,6 +139,7 @@ export declare class GatewayService {
     private truncateSlackInline;
     private formatSlackLoadingMessage;
     private makeSlackThreadIdForMessage;
+    private isSlackChannelLikeThreadId;
     private addSlackThreadAlias;
     private getActiveSlackThreadId;
     private pickSlackRoutingMetadata;
@@ -126,6 +160,13 @@ export declare class GatewayService {
      * transcript; Slack receives only a compact truncated preview.
      */
     updateProgress(data: GatewayProgressData): Promise<void>;
+    /**
+     * Schedule Slack assistant progress/status updates after the current
+     * tenant-scoped database work commits, then update inside a fresh tenant
+     * scope. Presence/status updates are often emitted from hooks and streaming
+     * routes whose enclosing transaction is about to close.
+     */
+    updateProgressAfterCommit(data: GatewayProgressData, params?: unknown): void;
     wasMessageStreamedToSlack(messageId: string): boolean;
     wasTaskStreamedToSlack(taskId?: string): boolean;
     private markMessageStreamedToSlack;
@@ -133,6 +174,16 @@ export declare class GatewayService {
     private stopSlackTaskStream;
     private updateProgressNow;
     handleMessageStreamingEvent(event: 'streaming:start' | 'streaming:chunk' | 'streaming:end' | 'streaming:error', data: Record<string, unknown>): Promise<void>;
+    /**
+     * Session-context emits are hard-bound to the session's branch, with no
+     * admin-role bypass — agent sessions run as admin users, so a role bypass
+     * would let any session impersonate another assistant's channel. The error
+     * deliberately never echoes the channel's target branch, so a denied emit
+     * cannot be used to enumerate which branch a foreign channel serves.
+     */
+    private ensureSessionBranchBoundToChannel;
+    private ensureCanEmitFromChannel;
+    emitMessage(data: EmitGatewayMessageData): Promise<EmitGatewayMessageResult>;
     private fetchExistingSessionUrlForGatewayUser;
     /**
      * Inbound routing: platform → session
@@ -148,6 +199,14 @@ export declare class GatewayService {
      * returns a cheap no-op. Uses platform connectors to send messages.
      */
     routeMessage(data: RouteMessageData): Promise<RouteMessageResult>;
+    /**
+     * Schedule outbound routing after the current tenant-scoped database work
+     * commits, then route inside a fresh tenant scope. Message after-hooks fire
+     * while the newly-created row may still be transactional; routing immediately
+     * can inherit a stale transaction object or query before the session/message
+     * graph is visible on a new scoped connection.
+     */
+    routeMessageAfterCommit(data: RouteMessageData, params?: unknown): void;
     /**
      * Flush the GitHub message buffer for a session.
      *
@@ -175,6 +234,7 @@ export declare class GatewayService {
      * Start a Socket Mode listener for a single channel
      */
     private startChannelListener;
+    private handleListenerInboundMessage;
     /**
      * Stop all active listeners (called on shutdown)
      */
@@ -183,6 +243,6 @@ export declare class GatewayService {
 /**
  * Service factory function
  */
-export declare function createGatewayService(db: Database, app: Application): GatewayService;
+export declare function createGatewayService(db: TenantScopeAwareDatabase, app: Application): GatewayService;
 export {};
 //# sourceMappingURL=gateway.d.ts.map

package/dist/daemon/services/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/services/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EACL,KAAK,QAAQ,EAOd,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AA6BvD;;GAEG;AACH,UAAU,eAAe;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,UAAU,gBAAgB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAmLD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,SAAS,CAAkB;IAEnC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,GAAG,CAAc;IAEzB,uDAAuD;IACvD,OAAO,CAAC,eAAe,CAAuC;IAE9D;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAS;IAElC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAA6B;IAExD;;;;OAIG;IACH,OAAO,CAAC,uBAAuB,CAA6B;IAC5D,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,kBAAkB,CAAuC;IACjE,OAAO,CAAC,4BAA4B,CAA6B;IACjE,OAAO,CAAC,uBAAuB,CAAqB;IACpD,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,wBAAwB,CAA6B;IAC7D,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAQ;IACnD,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAO;IACpD,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAAO;gBAE1C,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW;IAU1C;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,yBAAyB;IAKjC,OAAO,CAAC,2BAA2B;YAQrB,mBAAmB;IAyBjC,OAAO,CAAC,sBAAsB;IAU9B,OAAO,CAAC,wBAAwB;YAclB,2BAA2B;IAqBzC,OAAO,CAAC,iBAAiB;IA4CzB,OAAO,CAAC,sBAAsB;IAkE9B,OAAO,CAAC,yBAAyB;IAsBjC,OAAO,CAAC,iCAAiC;IAgCzC,OAAO,CAAC,0BAA0B;IAclC,OAAO,CAAC,iCAAiC;YAO3B,2CAA2C;YA2B3C,4CAA4C;IAqB1D;;;;;;OAMG;IACG,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9D,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIrD,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhD,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,uBAAuB;YASjB,mBAAmB;YA6BnB,iBAAiB;IA6GzB,2BAA2B,CAC/B,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,EAClF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC;YA2IF,qCAAqC;IA6BnD;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA4iB/D;;;;;OAKG;IACG,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiFvE;;;;;;OAMG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DzD;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBrC;;;OAGG;IACG,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2C/D;;OAEG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3D;;OAEG;YACW,oBAAoB;IAmClC;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAarC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,GAAG,cAAc,CAEnF"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/services/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAWL,KAAK,wBAAwB,EAI9B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAmBvD,OAAO,KAAK,EAIV,cAAc,EAMd,SAAS,EAET,QAAQ,EAGR,MAAM,EACP,MAAM,kBAAkB,CAAC;AAM1B;;GAEG;AACH,UAAU,eAAe;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,UAAU,iBAAiB;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,UAAU,gBAAgB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,sBAAsB;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,SAAS,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,wBAAwB;IAChC,OAAO,EAAE,IAAI,CAAC;IACd,2BAA2B,EAAE,MAAM,CAAC;IACpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAyBD,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAuCD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAEjG;AAoVD;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,EAAE,CAA2B;IACrC,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,aAAa,CAA6B;IAClD,OAAO,CAAC,YAAY,CAAmC;IACvD,OAAO,CAAC,UAAU,CAAmB;IACrC,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,SAAS,CAAkB;IAEnC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,GAAG,CAAc;IAEzB,uDAAuD;IACvD,OAAO,CAAC,eAAe,CAAuC;IAE9D;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB,CAAS;IAElC;;;;;;OAMG;IACH,OAAO,CAAC,mBAAmB,CAA6B;IAExD;;;;OAIG;IACH,OAAO,CAAC,uBAAuB,CAA6B;IAC5D,OAAO,CAAC,mBAAmB,CAAoC;IAC/D,OAAO,CAAC,kBAAkB,CAAuC;IACjE,OAAO,CAAC,4BAA4B,CAA6B;IACjE,OAAO,CAAC,uBAAuB,CAAqB;IACpD,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,wBAAwB,CAA6B;IAC7D,OAAO,CAAC,MAAM,CAAC,4BAA4B,CAAQ;IACnD,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAO;IACpD,OAAO,CAAC,MAAM,CAAC,gCAAgC,CAAO;gBAE1C,EAAE,EAAE,wBAAwB,EAAE,GAAG,EAAE,WAAW;IAc1D;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,yBAAyB;IAKjC,OAAO,CAAC,2BAA2B;IAQnC,OAAO,CAAC,0BAA0B;YAUpB,mBAAmB;IAyBjC,OAAO,CAAC,sBAAsB;IAU9B,OAAO,CAAC,wBAAwB;YAclB,2BAA2B;IAqBzC,OAAO,CAAC,iBAAiB;IA4CzB,OAAO,CAAC,sBAAsB;IAkE9B,OAAO,CAAC,yBAAyB;IAsBjC,OAAO,CAAC,iCAAiC;IAgCzC,OAAO,CAAC,0BAA0B;IAclC,OAAO,CAAC,iCAAiC;YAO3B,2CAA2C;YA2B3C,4CAA4C;IAqB1D;;;;;;OAMG;IACG,cAAc,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc9D;;;;;OAKG;IACH,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAa5E,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAIrD,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAIhD,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,uBAAuB;YASjB,mBAAmB;YA6BnB,iBAAiB;IA6GzB,2BAA2B,CAC/B,KAAK,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,eAAe,GAAG,iBAAiB,EAClF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC;IAiJhB;;;;;;OAMG;YACW,iCAAiC;YAejC,wBAAwB;IA+BhC,WAAW,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC;YA+HpE,qCAAqC;IA6BnD;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAytB/D;;;;;OAKG;IACG,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyFvE;;;;;;OAMG;IACH,uBAAuB,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAavE;;;;;;OAMG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA+DzD;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAgBrC;;;OAGG;IACG,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2C/D;;OAEG;IACG,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3D;;OAEG;YACW,oBAAoB;YAiCpB,4BAA4B;IAoB1C;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAarC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,wBAAwB,EAC5B,GAAG,EAAE,WAAW,GACf,cAAc,CAEhB"}