crewly 1.20.143 → 1.20.145

package/dist/backend/backend/src/services/harness/owner-login-request.js

@@ -0,0 +1,191 @@
+/**
+ * Owner login requests — recognising "log harness X in" in plain words.
+ *
+ * Two consumers:
+ * - {@link parseOwnerLoginRequest}: the Slack DM interceptor. An owner who
+ *   writes 「重新登录 claude」, 「换个账号登录 claude」 or "relogin codex" in the
+ *   orchestrator's DM gets the login flow directly, without the LLM. The
+ *   match is deliberately strict — the whole message must be the request —
+ *   so a sentence that merely mentions a login still goes to the orc.
+ * - {@link isOwnerLoginRequestEvidence}: the orchestrator's `harness-login`
+ *   skill. The orc may start a login only when a real owner message asked for
+ *   one; this is the evidence check over the owner's recent messages.
+ *
+ * Incident 2026-09-26: the orc ran `claude setup-token` in its one-shot bash
+ * tool (the process died with the call, every pasted code went stale) and
+ * then claimed several times that it had sent a new link. The broker-backed
+ * flow started from here keeps the login alive in its own PTY.
+ *
+ * @module services/harness/owner-login-request
+ */
+import { HARNESS_CONSTANTS } from '../../constants.js';
+/** Harness names and aliases → id, longest first so "claude code" wins over "claude". */
+const HARNESS_NAME_PATTERNS = [
+    { re: /^claude[\s_-]*code$/, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /^claude$/, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /^codex(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.CODEX_CLI },
+    { re: /^antigravity(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /^agy$/, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /^gemini(?:[\s_-]*cli)?$/, id: HARNESS_CONSTANTS.IDS.GEMINI_CLI },
+];
+/** Any harness mention inside a longer message (evidence check). */
+const HARNESS_MENTIONS = [
+    { re: /claude/i, id: HARNESS_CONSTANTS.IDS.CLAUDE_CODE },
+    { re: /codex/i, id: HARNESS_CONSTANTS.IDS.CODEX_CLI },
+    { re: /antigravity|\bagy\b/i, id: HARNESS_CONSTANTS.IDS.ANTIGRAVITY_CLI },
+    { re: /gemini/i, id: HARNESS_CONSTANTS.IDS.GEMINI_CLI },
+];
+/**
+ * Names that are coding assistants Crewly does not run. "登录 cursor" is
+ * answered with the supported list; any other unknown word after a login
+ * verb ("登录 gmail") is not a harness request and goes to the orc.
+ */
+const OTHER_CODING_TOOLS = /^(?:cursor|copilot|github\s*copilot|aider|opencode|cline|windsurf|kimi(?:\s*cli)?|qwen(?:\s*code)?|amp|goose|kiro|trae)$/;
+/** Generic words for "the coding assistant" — a request for a harness without naming one. */
+const GENERIC_HARNESS_WORDS = /^(?:harness|编程助手|编码助手|代码助手|ai\s*harness|cli)$/;
+/** Chinese login verbs. The account-switch forms come first so they win. */
+const ZH_VERB = '(?:换(?:一)?个(?:新)?账号(?:重新)?登[录陆]|换(?:一)?个号(?:重新)?登[录陆]|换账号(?:重新)?登[录陆]|换号(?:重新)?登[录陆]|用(?:另|别)(?:一)?个账号(?:重新)?登[录陆]|切换账号|换(?:一)?个(?:新)?账号|换账号|换号|重新登[录陆入]|重登[录陆]?|再登[录陆]|登[录陆入])';
+/** English login verbs. */
+const EN_VERB = '(?:re-?log\\s*in(?:\\s+to)?|re-?login(?:\\s+to)?|log\\s*in(?:\\s+to)?|login(?:\\s+to)?|sign\\s*in(?:\\s+to)?|re-?auth(?:enticate)?|switch\\s+(?:the\\s+)?accounts?(?:\\s+(?:for|of|on))?)';
+/** Polite lead-ins that do not change the request. */
+const PREFIX = '(?:(?:please|pls|can\\s+you|could\\s+you)\\s+)?(?:帮我|帮忙|麻烦(?:你)?|请(?:你)?|给我|你)?\\s*(?:(?:把|给|帮)\\s*)?';
+/** Harmless endings. No 吗/了: "登录 claude 了吗" asks about a login, it does not request one. */
+const SUFFIX = '\\s*(?:一下|下|吧)?\\s*[.。!！~～]*';
+/** A name after or before the verb: up to three ASCII words, fewest first ("claude code", not "claude account"). */
+const NAME = '([a-z][a-z0-9_-]*(?:\\s+[a-z][a-z0-9_-]*){0,2}?|编程助手|编码助手|代码助手)';
+/** Optional "account" noun after the name ("claude 的账号", "claude account"). */
+const ACCOUNT_NOUN = '(?:\\s*(?:的)?(?:账号|帐号|account))?';
+/** "登录 claude" / "relogin to codex" / "换个账号登录 claude code". */
+const VERB_FIRST = new RegExp(`^${PREFIX}(${ZH_VERB}|${EN_VERB})\\s*(?:到\\s*)?${NAME}${ACCOUNT_NOUN}${SUFFIX}$`, 'i');
+/** "claude 重新登录" / "codex login" / "把 claude 换个账号登录". */
+const NAME_FIRST = new RegExp(`^${PREFIX}${NAME}${ACCOUNT_NOUN}\\s*(?:重新)?(${ZH_VERB}|${EN_VERB})${SUFFIX}$`, 'i');
+/** "给 claude 换个账号" / "switch claude account" / "switch claude to another account". */
+const SWITCH_NAME = new RegExp(`^${PREFIX}(?:switch|change)\\s+${NAME}\\s+(?:to\\s+(?:another|a\\s+different|a\\s+new)\\s+)?accounts?${SUFFIX}$`, 'i');
+/** A bare verb ("重新登录", "login") — a request with no harness named. */
+const BARE_VERB = new RegExp(`^${PREFIX}(${ZH_VERB}|${EN_VERB})${SUFFIX}$`, 'i');
+/** Words that mark an account switch. */
+const SWITCH_WORDS = /换|切换|switch|another\s+account|different\s+account|other\s+account|另一个账号|别的账号|其他账号/i;
+/**
+ * Normalise a DM for matching: drop Slack mention/link markup, collapse
+ * whitespace, lower-case, trim.
+ *
+ * @param text - Raw message text
+ * @returns Normalised text
+ */
+export function normaliseLoginText(text) {
+    return text
+        .replace(/<@[A-Z0-9]+>/g, ' ')
+        .replace(/<([^|>]+)\|([^>]+)>/g, '$2')
+        .replace(/[「」“”"'`]/g, ' ')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .toLowerCase();
+}
+/**
+ * Resolve a harness name or alias as written by a person.
+ *
+ * @param name - e.g. "claude code", "Claude", "agy", "codex cli"
+ * @returns The harness id, or null
+ *
+ * @example
+ * ```ts
+ * resolveHarnessName('claude code'); // 'claude-code'
+ * ```
+ */
+export function resolveHarnessName(name) {
+    const key = name.trim().toLowerCase().replace(/\s+/g, ' ');
+    for (const { re, id } of HARNESS_NAME_PATTERNS) {
+        if (re.test(key))
+            return id;
+    }
+    return null;
+}
+/**
+ * Turn a matched name into a request, or null when the name is not about a
+ * coding assistant at all ("登录 gmail" is for the orc, not for us).
+ *
+ * @param rawName - Name as matched
+ * @param switchAccount - Whether the owner asked for a different account
+ * @returns The request or null
+ */
+function requestForName(rawName, switchAccount) {
+    const name = rawName.trim();
+    const harnessId = resolveHarnessName(name);
+    if (harnessId)
+        return { kind: 'harness', harnessId, switchAccount };
+    if (GENERIC_HARNESS_WORDS.test(name))
+        return { kind: 'unknown', name: null, switchAccount };
+    if (OTHER_CODING_TOOLS.test(name))
+        return { kind: 'unknown', name, switchAccount };
+    return null;
+}
+/**
+ * Recognise an owner's DM that asks Crewly to log a harness in (or switch
+ * its account). The whole message must be the request; anything longer or
+ * different returns null and is handled by the orchestrator as usual.
+ *
+ * @param text - Owner DM text
+ * @returns The request, or null when the message is not a login request
+ *
+ * @example
+ * ```ts
+ * parseOwnerLoginRequest('换个账号登录 claude');
+ * // { kind: 'harness', harnessId: 'claude-code', switchAccount: true }
+ * parseOwnerLoginRequest('重新登录');
+ * // { kind: 'unknown', name: null, switchAccount: false }
+ * ```
+ */
+export function parseOwnerLoginRequest(text) {
+    if (typeof text !== 'string')
+        return null;
+    const normalised = normaliseLoginText(text);
+    if (!normalised || normalised.length > HARNESS_CONSTANTS.OWNER_LOGIN.MAX_TRIGGER_LENGTH)
+        return null;
+    const switchAccount = SWITCH_WORDS.test(normalised);
+    // Each form in turn; a form whose "name" is not a harness ("relogin" read
+    // as name "re" + verb "login") does not end the search.
+    const verbFirst = VERB_FIRST.exec(normalised);
+    const fromVerbFirst = verbFirst ? requestForName(verbFirst[2], switchAccount) : null;
+    if (fromVerbFirst)
+        return fromVerbFirst;
+    const nameFirst = NAME_FIRST.exec(normalised);
+    const fromNameFirst = nameFirst ? requestForName(nameFirst[1], switchAccount) : null;
+    if (fromNameFirst)
+        return fromNameFirst;
+    const switchName = SWITCH_NAME.exec(normalised);
+    const fromSwitch = switchName ? requestForName(switchName[1], true) : null;
+    if (fromSwitch)
+        return fromSwitch;
+    if (BARE_VERB.test(normalised))
+        return { kind: 'unknown', name: null, switchAccount };
+    return null;
+}
+/** A login verb anywhere in a message (evidence check; broader than the trigger). */
+const LOGIN_MENTION = /登[录陆入]|重登|换(?:一)?个?账号|切换账号|换号|re-?log\s*in|re-?login|\blog\s*in\b|\blog\s+(?:\S+\s+){1,2}in\b|\blogin\b|sign\s*in|setup-token|\/login|switch\s+(?:the\s+)?accounts?|login\s+link|登[录陆]链接/i;
+/** Status questions — asking whether it is logged in is not asking to log in. */
+const STATUS_QUESTION = /登[录陆]了吗|登[录陆]状态|是否(?:已经)?登[录陆]|有没有登[录陆]|登[录陆]过期了吗|(?:is|are)\s+\S+\s+logged\s+in|login\s+status|still\s+logged\s+in/i;
+/**
+ * Whether one owner message asks for a (re-)login of a harness. Mirrors the
+ * install-skill approval check: the orchestrator's claim is not trusted, the
+ * owner's own words are.
+ *
+ * Counts a message with a login verb that either names this harness or names
+ * none (「不 我要重新登陆一个账号」 in a conversation about Claude). A message
+ * naming only other harnesses, or a status question, does not count.
+ *
+ * @param message - Owner message text
+ * @param harnessId - Harness the orchestrator wants to log in
+ * @returns True when the message is evidence for that login
+ */
+export function isOwnerLoginRequestEvidence(message, harnessId) {
+    if (typeof message !== 'string' || !message.trim())
+        return false;
+    const parsed = parseOwnerLoginRequest(message);
+    if (parsed?.kind === 'harness')
+        return parsed.harnessId === harnessId;
+    if (!LOGIN_MENTION.test(message) || STATUS_QUESTION.test(message))
+        return false;
+    const named = HARNESS_MENTIONS.filter(({ re }) => re.test(message)).map(({ id }) => id);
+    return named.length === 0 || named.includes(harnessId);
+}
+//# sourceMappingURL=owner-login-request.js.map

package/dist/backend/backend/src/services/harness/owner-login-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-login-request.js","sourceRoot":"","sources":["../../../../../../backend/src/services/harness/owner-login-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAUvD,yFAAyF;AACzF,MAAM,qBAAqB,GAAiD;IAC3E,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACpE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACzD,EAAE,EAAE,EAAE,wBAAwB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;IACrE,EAAE,EAAE,EAAE,8BAA8B,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IACjF,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IAC1D,EAAE,EAAE,EAAE,yBAAyB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE;CACvE,CAAC;AAEF,oEAAoE;AACpE,MAAM,gBAAgB,GAAiD;IACtE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE;IACxD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE;IACrD,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,eAAe,EAAE;IACzE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE;CACvD,CAAC;AAEF;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,0HAA0H,CAAC;AAEtJ,6FAA6F;AAC7F,MAAM,qBAAqB,GAAG,+CAA+C,CAAC;AAE9E,4EAA4E;AAC5E,MAAM,OAAO,GACZ,iLAAiL,CAAC;AAEnL,2BAA2B;AAC3B,MAAM,OAAO,GACZ,2LAA2L,CAAC;AAE7L,sDAAsD;AACtD,MAAM,MAAM,GAAG,uGAAuG,CAAC;AAEvH,4FAA4F;AAC5F,MAAM,MAAM,GAAG,8BAA8B,CAAC;AAE9C,oHAAoH;AACpH,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,YAAY,GAAG,kCAAkC,CAAC;AAExD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,kBAAkB,IAAI,GAAG,YAAY,GAAG,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEtH,yDAAyD;AACzD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,GAAG,YAAY,eAAe,OAAO,IAAI,OAAO,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEnH,sFAAsF;AACtF,MAAM,WAAW,GAAG,IAAI,MAAM,CAC7B,IAAI,MAAM,wBAAwB,IAAI,kEAAkE,MAAM,GAAG,EACjH,GAAG,CACH,CAAC;AAEF,uEAAuE;AACvE,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,IAAI,OAAO,IAAI,OAAO,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAEjF,yCAAyC;AACzC,MAAM,YAAY,GAAG,oFAAoF,CAAC;AAE1G;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,IAAI;SACT,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC;SACrC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3D,KAAK,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,qBAAqB,EAAE,CAAC;QAChD,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,aAAsB;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IACpE,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC5F,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACnF,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrG,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,wDAAwD;IACxD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACtF,OAAO,IAAI,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,MAAM,aAAa,GAClB,2LAA2L,CAAC;AAE7L,iFAAiF;AACjF,MAAM,eAAe,GACpB,sHAAsH,CAAC;AAExH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAe,EAAE,SAAoB;IAChF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;IACtE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxD,CAAC"}

package/dist/backend/backend/src/services/orc/orc-reply-route.service.d.ts

@@ -0,0 +1,217 @@
+/**
+ * Orchestrator reply routing — "answer where you were asked".
+ *
+ * Tracks, per agent session, the conversation its latest user-originated
+ * message came from (the *turn origin*), and decides where a reply the
+ * orchestrator posts during or right after that turn should land.
+ *
+ * Incident 2026-09-26 03:23–03:34 UTC: the owner was talking to the orc in a
+ * Slack DM (D0C381XPD3L → chat-v2 channel a721f48d). A reconciler WorkItem
+ * redispatch then started a system turn with no `[CHAT:…]` prefix. In it the
+ * orc:
+ *   - filed `report-status [BLOCKED]` and `reply-chat` without a
+ *     conversationId; `/api/chat/agent-response` fell back to
+ *     `ChatService.getCurrentConversation()`, which only sees system-owned
+ *     channels — never the owner's orchestrator DM — and returned #think-tank
+ *     (b79a6e4d), so the summary was mirrored into Slack #pro-think-tank;
+ *   - called `reply-slack` on D0AC7NF5N7L, the owner's DM with the *master*
+ *     Crewly bot, not the orc-bot DM the conversation was in.
+ * The question in that summary ("reply start Ella") never reached the owner.
+ *
+ * What counts as "the reply": anything the orchestrator posts to a
+ * user-facing conversation through `/api/chat/agent-response` (reply-chat,
+ * report-status) or to a Slack DM through `/api/slack/send` (reply-slack).
+ * It is re-routed to the turn origin when it targets a conversation the orc
+ * has not received a user message from recently, unless the caller marked it
+ * as a deliberate cross-post. Posts to Slack channels (team notifications,
+ * delegation) and `reply-channel` writes are not replies and are untouched.
+ *
+ * @module services/orc/orc-reply-route.service
+ */
+/** Where an agent's current turn came from. */
+export interface TurnOrigin {
+    /** chat-v2 channel / conversation id the user message was recorded in. */
+    conversationId: string;
+    /** Slack channel, when the delivered message carried a `[SLACK:…]` marker. */
+    slackChannelId?: string;
+    /** Slack thread, when the marker named one. */
+    slackThreadTs?: string;
+    /** Epoch ms the message was delivered to the agent. */
+    receivedAt: number;
+}
+/** Parsed routing header of a delivered message. */
+export type InboundOrigin = Omit<TurnOrigin, 'receivedAt'>;
+/** How {@link OrcReplyRouteService.resolveConversationReply} decided. */
+export type ReplyRouteAction = 
+/** Post where the caller asked. */
+'as-requested'
+/** Caller named no conversation; the turn origin was used. */
+ | 'defaulted-to-origin'
+/** Caller named a stale conversation; the turn origin was used instead. */
+ | 'rerouted-to-origin'
+/** Caller named nothing and no origin is known; caller keeps its fallback. */
+ | 'no-origin';
+/** Result of a reply-target decision. */
+export interface ReplyRouteDecision {
+    action: ReplyRouteAction;
+    /** Target to use; undefined only for `no-origin`. */
+    conversationId?: string;
+    /** Why, for logs. */
+    reason: string;
+    /** The origin consulted, if any. */
+    origin?: TurnOrigin;
+}
+/** Result of a Slack reply-target decision. */
+export interface SlackReplyRouteDecision {
+    action: 'as-requested' | 'rerouted-to-origin';
+    reason: string;
+    origin?: TurnOrigin;
+}
+/** Where a Slack post should actually go. */
+export type SlackReplyPlan = {
+    kind: 'slack';
+    channelId: string;
+    threadTs?: string;
+} | {
+    kind: 'conversation';
+    conversationId: string;
+};
+/** Options shared by the resolve methods. */
+export interface ResolveOptions {
+    /** Caller explicitly marked the post as a deliberate cross-post. */
+    crossPost?: boolean;
+    /** Clock override for tests. */
+    now?: number;
+}
+/**
+ * Parses the routing header of a message delivered to an agent.
+ *
+ * @param message - The exact text delivered to the agent
+ * @returns The origin, or null for system-originated deliveries
+ *
+ * @example
+ * ```typescript
+ * parseInboundOrigin('[CHAT:a721f48d] <owner@Orchestrator>\n\nhi');
+ * // → { conversationId: 'a721f48d' }
+ * ```
+ */
+export declare function parseInboundOrigin(message: string): InboundOrigin | null;
+/**
+ * Whether a Slack channel id is a direct-message conversation.
+ *
+ * @param slackChannelId - Slack channel id
+ * @returns True for `D…` ids
+ */
+export declare function isSlackDm(slackChannelId: string): boolean;
+/**
+ * Tracks turn origins and decides reply targets. Process-wide singleton; all
+ * state is in memory (a restart starts every agent on a fresh turn anyway).
+ */
+export declare class OrcReplyRouteService {
+    private static instance;
+    private readonly sessions;
+    /**
+     * @returns The shared instance
+     */
+    static getInstance(): OrcReplyRouteService;
+    /** Drops the shared instance (tests). */
+    static resetInstance(): void;
+    /**
+     * Records a message delivered to an agent. User-originated messages (those
+     * with a `[CHAT:…]` header) become the session's turn origin; system
+     * deliveries leave the origin alone, so a system turn that follows a user
+     * turn still answers the user where they asked.
+     *
+     * @param sessionName - Receiving agent session
+     * @param message - Exact delivered text
+     * @param now - Clock override for tests
+     * @returns The new origin, or null when the message was system-originated
+     */
+    noteDelivery(sessionName: string, message: string, now?: number): TurnOrigin | null;
+    /**
+     * The session's turn origin, however old.
+     *
+     * @param sessionName - Agent session
+     * @returns The last user-originated origin, or undefined
+     */
+    getLastOrigin(sessionName: string): TurnOrigin | undefined;
+    /**
+     * The session's turn origin if it is still fresh.
+     *
+     * @param sessionName - Agent session
+     * @param now - Clock override for tests
+     * @returns The origin within {@link ORC_REPLY_ROUTE_CONSTANTS.ORIGIN_TTL_MS}
+     */
+    getFreshOrigin(sessionName: string, now?: number): TurnOrigin | undefined;
+    /**
+     * Decides which conversation a chat reply (reply-chat, report-status)
+     * belongs in.
+     *
+     * - No conversation named → the turn origin (any age: it is still a better
+     *   guess than "the newest channel in the system"); none known → caller's
+     *   own fallback.
+     * - A conversation named → kept when it is the origin, when the session
+     *   received a user message there recently, when the caller marked a
+     *   cross-post, or when there is no fresh origin to prefer. Otherwise the
+     *   reply goes to the origin.
+     *
+     * @param sessionName - Replying agent session
+     * @param requested - Conversation the caller named, if any
+     * @param options - Cross-post flag and clock
+     * @returns The decision
+     */
+    resolveConversationReply(sessionName: string, requested: string | undefined, options?: ResolveOptions): ReplyRouteDecision;
+    /**
+     * Decides whether a Slack post is a misdirected reply. Only DMs are
+     * candidates — posting in a channel is how the orchestrator notifies teams
+     * and delegates, so channel posts are always sent as asked.
+     *
+     * @param sessionName - Posting agent session
+     * @param slackChannelId - Slack channel the caller named
+     * @param options - Cross-post flag, clock, and the Slack DM the origin
+     *   conversation is bridged to (when the delivered message had no marker)
+     * @returns The decision
+     */
+    resolveSlackReply(sessionName: string, slackChannelId: string, options?: ResolveOptions & {
+        originSlackChannelId?: string;
+    }): SlackReplyRouteDecision;
+    /**
+     * Plans where a Slack post by `sessionName` should go.
+     *
+     * When {@link resolveSlackReply} re-routes, the destination is the origin's
+     * own Slack conversation if the delivered message carried a `[SLACK:…]`
+     * marker (the master-bot bridge), else the origin chat-v2 conversation —
+     * which the Slack DM bridge mirrors into the agent-bot DM the owner wrote
+     * in, under the right bot.
+     *
+     * @param sessionName - Posting agent session
+     * @param target - Slack channel/thread the caller named, and its cross-post flag
+     * @param findDmSlackChannel - Maps a chat-v2 conversation to the Slack DM it
+     *   is bridged to, when it is
+     * @param now - Clock override for tests
+     * @returns The plan and the decision behind it
+     */
+    planSlackReply(sessionName: string, target: {
+        channelId: string;
+        threadTs?: string;
+        crossPost?: boolean;
+    }, findDmSlackChannel: (conversationId: string) => string | undefined, now?: number): {
+        plan: SlackReplyPlan;
+        decision: SlackReplyRouteDecision;
+    };
+    /**
+     * Whether an inbound map saw `key` within the recent-inbound window.
+     *
+     * @param seen - Inbound map
+     * @param key - Conversation or Slack channel id
+     * @param now - Epoch ms
+     * @returns True when recent
+     */
+    private receivedRecently;
+    /**
+     * @param sessionName - Agent session
+     * @returns Its state, created on first use
+     */
+    private stateFor;
+}
+//# sourceMappingURL=orc-reply-route.service.d.ts.map

package/dist/backend/backend/src/services/orc/orc-reply-route.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orc-reply-route.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/orc/orc-reply-route.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,cAAc,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,oDAAoD;AACpD,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAE3D,yEAAyE;AACzE,MAAM,MAAM,gBAAgB;AAC1B,mCAAmC;AACjC,cAAc;AAChB,8DAA8D;GAC5D,qBAAqB;AACvB,2EAA2E;GACzE,oBAAoB;AACtB,8EAA8E;GAC5E,WAAW,CAAC;AAEhB,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,gBAAgB,CAAC;IACzB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,cAAc,GAAG,oBAAoB,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,6CAA6C;AAC7C,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAmBD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAYxE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAEzD;AAWD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAqC;IAE5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IAEjE;;OAEG;IACH,MAAM,CAAC,WAAW,IAAI,oBAAoB;IAK1C,yCAAyC;IACzC,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B;;;;;;;;;;OAUG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,UAAU,GAAG,IAAI;IAW/F;;;;;OAKG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI1D;;;;;;OAMG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,UAAU,GAAG,SAAS;IAMrF;;;;;;;;;;;;;;;;OAgBG;IACH,wBAAwB,CACtB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,GAAE,cAAmB,GAC3B,kBAAkB;IA2BrB;;;;;;;;;;OAUG;IACH,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,cAAc,GAAG;QAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAO,GAC/D,uBAAuB;IAsB1B;;;;;;;;;;;;;;;OAeG;IACH,cAAc,CACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EACrE,kBAAkB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,EAClE,GAAG,GAAE,MAAmB,GACvB;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,uBAAuB,CAAA;KAAE;IAmB9D;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAKxB;;;OAGG;IACH,OAAO,CAAC,QAAQ;CAQjB"}