hippo-memory 1.44.0 → 1.46.0

package/dist/src/connectors/github/tenant-routing.js

@@ -1,69 +0,0 @@
-/**
- * Resolve the tenant_id for a GitHub webhook envelope.
- *
- * Returns:
- *   - mapped tenant_id when `github_installations` has a row for `installationId`
- *     (App-mode multi-tenant — primary path)
- *   - mapped tenant_id when `installation` is absent, `repository.full_name`
- *     matches a `github_repositories` row (PAT-mode multi-tenant)
- *   - the deployment's HIPPO_TENANT fallback (or 'default') when BOTH routing
- *     tables are empty (single-tenant deployment — env fallback is safe)
- *   - null when:
- *       - `installationId` is present but unknown AND `github_installations`
- *         is non-empty (multi-tenant install with foreign installation)
- *       - `installationId` is missing AND either routing table is non-empty
- *         AND no `repository.full_name` match (PAT-mode webhook from a foreign
- *         account — codex P0 #4 regression target)
- *
- * Escape hatch: `GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK=1` restores the
- * env fallback for emergency rollback only. Mirrors the Slack equivalent
- * (`SLACK_ALLOW_UNKNOWN_TEAM_FALLBACK`).
- *
- * The fail-closed contract lives here so every caller (route handler, CLI
- * replay, future MCP) gets identical protection.
- */
-export function resolveTenantForGitHub(db, args) {
-    const envFallback = () => process.env.HIPPO_TENANT?.trim() || 'default';
-    const escapeHatch = process.env.GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK === '1';
-    // SAFETY: the row comes from the SELECT above, which projects exactly one
-    // column, `c`, as a COUNT(*).
-    const instCount = db
-        .prepare(`SELECT COUNT(*) AS c FROM github_installations`)
-        .get().c;
-    // SAFETY: the row comes from the SELECT above, which projects exactly one
-    // column, `c`, as a COUNT(*).
-    const repoCount = db
-        .prepare(`SELECT COUNT(*) AS c FROM github_repositories`)
-        .get().c;
-    if (args.installationId) {
-        // SAFETY: the row comes from the SELECT above, which projects exactly
-        // the tenant_id column of github_installations.
-        const row = db
-            .prepare(`SELECT tenant_id FROM github_installations WHERE installation_id = ?`)
-            .get(args.installationId);
-        if (row?.tenant_id)
-            return row.tenant_id;
-        if (Number(instCount) === 0) {
-            // Single-tenant install (table empty); env fallback is safe.
-            return envFallback();
-        }
-        // Multi-tenant install with unknown installation_id — fail closed.
-        return escapeHatch ? envFallback() : null;
-    }
-    // No installation.id (PAT-mode webhook).
-    if (Number(instCount) === 0 && Number(repoCount) === 0) {
-        // Single-tenant deployment with no routing tables populated.
-        return envFallback();
-    }
-    if (args.repoFullName) {
-        // SAFETY: the row comes from the SELECT above, which projects exactly
-        // the tenant_id column of github_repositories.
-        const row = db
-            .prepare(`SELECT tenant_id FROM github_repositories WHERE repo_full_name = ? ORDER BY added_at, tenant_id LIMIT 1`)
-            .get(args.repoFullName);
-        if (row?.tenant_id)
-            return row.tenant_id;
-    }
-    return escapeHatch ? envFallback() : null;
-}
-//# sourceMappingURL=tenant-routing.js.map

package/dist/src/connectors/github/tenant-routing.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tenant-routing.js","sourceRoot":"","sources":["../../../../src/connectors/github/tenant-routing.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAoB,EACpB,IAAiB;IAEjB,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,GAAG,CAAC;IAEnF,0EAA0E;IAC1E,8BAA8B;IAC9B,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,gDAAgD,CAAC;SACzD,GAAG,EAA6B,CAAC,CAAC,CAAC;IACtC,0EAA0E;IAC1E,8BAA8B;IAC9B,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,+CAA+C,CAAC;SACxD,GAAG,EAA6B,CAAC,CAAC,CAAC;IAEtC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,IAAI,CAAC,cAAc,CAAuC,CAAC;QAClE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,6DAA6D;YAC7D,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,mEAAmE;QACnE,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,6DAA6D;QAC7D,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,yGAAyG,CAC1G;aACA,GAAG,CAAC,IAAI,CAAC,YAAY,CAAuC,CAAC;QAChE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}

package/dist/src/connectors/github/transform.js

@@ -1,103 +0,0 @@
-import { scopeFromRepository } from './scope.js';
-/**
- * Convert GitHub webhook events into RememberOpts for api.remember(). Each
- * function returns null when the event has no usable body so the webhook
- * caller can mark the delivery seen for idempotency and skip the insert.
- *
- * Contract (mirrors src/connectors/slack/transform.ts):
- * - kind is the literal 'raw' (E1.x connector boundary, see src/importers.ts).
- * - artifact_ref formats are stable; deletion paths look up by these strings.
- *   - issue:               github://<owner/repo>/issue/<number>
- *   - issue_comment:       github://<owner/repo>/issue/<number>/comment/<id>
- *   - pull_request:        github://<owner/repo>/pull/<number>
- *   - pr_review_comment:   github://<owner/repo>/pull/<number>/review_comment/<id>
- * - owner is `user:github:<login>`. Required by the v0.40.0 provenance gate.
- * - scope is derived from repository.private via scopeFromRepository (default
- *   private when undetermined).
- */
-const UNKNOWN_REPO = 'unknown/unknown';
-export function issueEventToRememberOpts(evt) {
-    const body = evt.issue.body?.trim();
-    const title = evt.issue.title?.trim();
-    const text = [title, body].filter(Boolean).join('\n\n');
-    if (!text)
-        return null;
-    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
-    const login = evt.issue.user.login;
-    return {
-        content: text,
-        kind: 'raw',
-        scope: scopeFromRepository(evt.repository),
-        artifactRef: `github://${repoFull}/issue/${evt.issue.number}`,
-        owner: `user:github:${login}`,
-        tags: [
-            'source:github',
-            `repo:${repoFull}`,
-            `event:issues.${evt.action}`,
-            `user:github:${login}`,
-        ],
-    };
-}
-export function issueCommentEventToRememberOpts(evt) {
-    const text = evt.comment.body?.trim();
-    if (!text)
-        return null;
-    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
-    const login = evt.comment.user.login;
-    return {
-        content: text,
-        kind: 'raw',
-        scope: scopeFromRepository(evt.repository),
-        artifactRef: `github://${repoFull}/issue/${evt.issue.number}/comment/${evt.comment.id}`,
-        owner: `user:github:${login}`,
-        tags: [
-            'source:github',
-            `repo:${repoFull}`,
-            `event:issue_comment.${evt.action}`,
-            `user:github:${login}`,
-        ],
-    };
-}
-export function pullRequestEventToRememberOpts(evt) {
-    const body = evt.pull_request.body?.trim();
-    const title = evt.pull_request.title?.trim();
-    const text = [title, body].filter(Boolean).join('\n\n');
-    if (!text)
-        return null;
-    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
-    const login = evt.pull_request.user.login;
-    return {
-        content: text,
-        kind: 'raw',
-        scope: scopeFromRepository(evt.repository),
-        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}`,
-        owner: `user:github:${login}`,
-        tags: [
-            'source:github',
-            `repo:${repoFull}`,
-            `event:pull_request.${evt.action}`,
-            `user:github:${login}`,
-        ],
-    };
-}
-export function prReviewCommentEventToRememberOpts(evt) {
-    const text = evt.comment.body?.trim();
-    if (!text)
-        return null;
-    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
-    const login = evt.comment.user.login;
-    return {
-        content: text,
-        kind: 'raw',
-        scope: scopeFromRepository(evt.repository),
-        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}/review_comment/${evt.comment.id}`,
-        owner: `user:github:${login}`,
-        tags: [
-            'source:github',
-            `repo:${repoFull}`,
-            `event:pull_request_review_comment.${evt.action}`,
-            `user:github:${login}`,
-        ],
-    };
-}
-//# sourceMappingURL=transform.js.map

package/dist/src/connectors/github/transform.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../../../src/connectors/github/transform.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAQjD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,UAAU,wBAAwB,CACtC,GAAqB;IAErB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;QAC7D,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,gBAAgB,GAAG,CAAC,MAAM,EAAE;YAC5B,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,GAA4B;IAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACvF,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,uBAAuB,GAAG,CAAC,MAAM,EAAE;YACnC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAA2B;IAE3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE;QACnE,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,sBAAsB,GAAG,CAAC,MAAM,EAAE;YAClC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,GAAwC;IAExC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACpG,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,qCAAqC,GAAG,CAAC,MAAM,EAAE;YACjD,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC"}

package/dist/src/connectors/github/types.js

@@ -1,100 +0,0 @@
-/**
- * GitHub webhook event shapes used by the ingestion connector.
- * Spec: https://docs.github.com/en/webhooks/webhook-events-and-payloads
- *
- * V1 cares about four event types: issues, issue_comment, pull_request,
- * pull_request_review_comment. Each guard is gated on the X-GitHub-Event
- * header value so a malicious or misrouted payload cannot satisfy a guard
- * for the wrong event type.
- */
-function isJsonObject(x) {
-    return x !== null && typeof x === 'object';
-}
-function isJsonString(x) {
-    return typeof x === 'string';
-}
-function isJsonNumber(x) {
-    return typeof x === 'number';
-}
-function isGitHubSender(x) {
-    if (!isJsonObject(x))
-        return false;
-    return isJsonString(x.login) && isJsonNumber(x.id);
-}
-export function isGitHubWebhookEnvelope(x) {
-    if (!isJsonObject(x))
-        return false;
-    // Duck-type: an envelope must at least carry an action OR a repository field.
-    return isJsonString(x.action) || isJsonObject(x.repository);
-}
-export function isGitHubIssueEvent(x, evtHeader) {
-    if (evtHeader !== 'issues')
-        return false;
-    if (!isJsonObject(x))
-        return false;
-    if (!isJsonString(x.action))
-        return false;
-    const issue = x.issue;
-    if (!isJsonObject(issue))
-        return false;
-    if (!isJsonNumber(issue.number))
-        return false;
-    if (!isGitHubSender(issue.user))
-        return false;
-    return true;
-}
-export function isGitHubIssueCommentEvent(x, evtHeader) {
-    if (evtHeader !== 'issue_comment')
-        return false;
-    if (!isJsonObject(x))
-        return false;
-    if (!isJsonString(x.action))
-        return false;
-    const issue = x.issue;
-    if (!isJsonObject(issue) || !isJsonNumber(issue.number))
-        return false;
-    const comment = x.comment;
-    if (!isJsonObject(comment))
-        return false;
-    if (!isJsonNumber(comment.id))
-        return false;
-    if (!isGitHubSender(comment.user))
-        return false;
-    return true;
-}
-export function isGitHubPullRequestEvent(x, evtHeader) {
-    if (evtHeader !== 'pull_request')
-        return false;
-    if (!isJsonObject(x))
-        return false;
-    if (!isJsonString(x.action))
-        return false;
-    const pr = x.pull_request;
-    if (!isJsonObject(pr))
-        return false;
-    if (!isJsonNumber(pr.number))
-        return false;
-    if (!isGitHubSender(pr.user))
-        return false;
-    return true;
-}
-export function isGitHubPullRequestReviewCommentEvent(x, evtHeader) {
-    if (evtHeader !== 'pull_request_review_comment')
-        return false;
-    if (!isJsonObject(x))
-        return false;
-    if (!isJsonString(x.action))
-        return false;
-    const pr = x.pull_request;
-    if (!isJsonObject(pr) || !isJsonNumber(pr.number))
-        return false;
-    const comment = x.comment;
-    if (!isJsonObject(comment))
-        return false;
-    if (!isJsonNumber(comment.id))
-        return false;
-    if (!isGitHubSender(comment.user))
-        return false;
-    return true;
-}
-//# sourceMappingURL=types.js.map

package/dist/src/connectors/github/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/connectors/github/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAgGH,SAAS,YAAY,CAAC,CAAY;IAChC,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC7C,CAAC;AAED,SAAS,YAAY,CAAC,CAAY;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,CAAY;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,CAAY;IAClC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAY;IAClD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,8EAA8E;IAC9E,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,CAAY,EACZ,SAAiB;IAEjB,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,CAAY,EACZ,SAAiB;IAEjB,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,CAAY,EACZ,SAAiB;IAEjB,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,CAAY,EACZ,SAAiB;IAEjB,IAAI,SAAS,KAAK,6BAA6B;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/connectors/slack/backfill.js

@@ -1,78 +0,0 @@
-import { openHippoDb, closeHippoDb } from '../../db.js';
-import { ingestMessage } from './ingest.js';
-function readCursor(root, tenantId, channelId) {
-    const db = openHippoDb(root);
-    try {
-        // SAFETY: row shape matches the single `latest_ts` column named in the
-        // SELECT above; sqlite returns undefined when no row matches.
-        const row = db
-            .prepare(`SELECT latest_ts FROM slack_cursors WHERE tenant_id=? AND channel_id=?`)
-            .get(tenantId, channelId);
-        return row?.latest_ts ?? null;
-    }
-    finally {
-        closeHippoDb(db);
-    }
-}
-function writeCursor(root, tenantId, channelId, latestTs) {
-    const db = openHippoDb(root);
-    try {
-        db.prepare(`INSERT INTO slack_cursors (tenant_id, channel_id, latest_ts, updated_at) VALUES (?,?,?,?)
-       ON CONFLICT(tenant_id, channel_id) DO UPDATE SET latest_ts = excluded.latest_ts, updated_at = excluded.updated_at`).run(tenantId, channelId, latestTs, new Date().toISOString());
-    }
-    finally {
-        closeHippoDb(db);
-    }
-}
-/**
- * Page through `conversations.history` via the injected fetcher and ingest each
- * message. The cursor is persisted to `slack_cursors` after every page so a
- * crash mid-backfill resumes near where it left off.
- *
- * Each ingested message uses a synthesized eventId of the form
- * `backfill:${teamId}:${channelId}:${ts}`. Reruns dedupe via the
- * `slack_event_log` PK so calling `backfillChannel` twice is safe.
- */
-export async function backfillChannel(ctx, opts) {
-    // Resume bound from previous run; passed as `oldest` (numeric ts) on the
-    // first page only. `cursor` starts null — Slack mints the next-page token
-    // and we feed it back. Mixing the two would feed a numeric ts as an opaque
-    // cursor and break against the live API on rerun.
-    const resumeFrom = readCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id);
-    let cursor = null;
-    let ingested = 0;
-    let pages = 0;
-    let latestTs = resumeFrom;
-    while (true) {
-        const page = await opts.fetcher({
-            channelId: opts.channel.id,
-            cursor,
-            oldest: pages === 0 && resumeFrom ? resumeFrom : undefined,
-        });
-        pages++;
-        for (const msg of page.messages) {
-            const r = ingestMessage(ctx, {
-                teamId: opts.teamId,
-                channel: opts.channel,
-                message: msg,
-                eventId: `backfill:${opts.teamId}:${opts.channel.id}:${msg.ts}`,
-            });
-            if (r.status === 'ingested')
-                ingested++;
-            if (!latestTs || msg.ts > latestTs)
-                latestTs = msg.ts;
-            if (opts.maxMessages && ingested >= opts.maxMessages) {
-                if (latestTs)
-                    writeCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id, latestTs);
-                return { ingested, pages };
-            }
-        }
-        if (latestTs)
-            writeCursor(ctx.hippoRoot, ctx.tenantId, opts.channel.id, latestTs);
-        if (!page.next_cursor)
-            break;
-        cursor = page.next_cursor;
-    }
-    return { ingested, pages };
-}
-//# sourceMappingURL=backfill.js.map

package/dist/src/connectors/slack/backfill.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"backfill.js","sourceRoot":"","sources":["../../../../src/connectors/slack/backfill.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgC5C,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB,EAAE,SAAiB;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAuC,CAAC;QAClE,OAAO,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,QAAgB,EAChB,SAAiB,EACjB,QAAgB;IAEhB,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;yHACmH,CACpH,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,IAAkB;IAElB,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,UAAU,GAAkB,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3F,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAkB,UAAU,CAAC;IACzC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YAC1B,MAAM;YACN,MAAM,EAAE,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAC3D,CAAC,CAAC;QACH,KAAK,EAAE,CAAC;QACR,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,YAAY,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE;aAChE,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,EAAE,GAAG,QAAQ;gBAAE,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,QAAQ;oBAAE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBAClF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,MAAM;QAC7B,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/src/connectors/slack/deletion.js

@@ -1,59 +0,0 @@
-import { archiveRaw } from '../../api.js';
-import { openHippoDb, closeHippoDb } from '../../db.js';
-import { markEventSeen, hasSeenEvent } from './idempotency.js';
-/**
- * Handle Slack `message_deleted`. v0.39 commit 3 closes the prior race where
- * the archive committed but `markEventSeen` ran on a second db handle — a
- * crash between them left the deletion event un-acked, and the next retry
- * hit a now-archived row and returned `not_found` instead of `duplicate`.
- *
- * Fix: pass `afterArchive` to `archiveRaw`, which runs inside the same
- * SAVEPOINT as the archive itself. The slack_event_log row commits with the
- * archive or not at all.
- */
-export function handleMessageDeleted(ctx, input) {
-    const db = openHippoDb(ctx.hippoRoot);
-    let memoryId = null;
-    try {
-        if (hasSeenEvent(db, input.eventId)) {
-            return { status: 'duplicate', memoryId: null };
-        }
-        const ref = `slack://${input.teamId}/${input.channelId}/${input.deletedTs}`;
-        // Tenant scope is load-bearing: without `tenant_id = ?` a deletion event
-        // from tenant A could archive tenant B's raw row sharing the same
-        // artifact_ref. The `kind = 'raw'` filter prevents accidentally targeting
-        // distilled rows.
-        // SAFETY: row comes from the SELECT above, which projects only the
-        // `id` column; `.get` returns undefined when no row matches.
-        const row = db
-            .prepare(`SELECT id FROM memories WHERE artifact_ref = ? AND tenant_id = ? AND kind = 'raw'`)
-            .get(ref, ctx.tenantId);
-        memoryId = row?.id ?? null;
-    }
-    finally {
-        closeHippoDb(db);
-    }
-    if (!memoryId) {
-        // No row to archive — still mark the deletion event seen so a retry returns
-        // 'duplicate'. There is nothing to roll back here, so the second-handle
-        // pattern is fine for this branch.
-        const db2 = openHippoDb(ctx.hippoRoot);
-        try {
-            markEventSeen(db2, input.eventId, null);
-        }
-        finally {
-            closeHippoDb(db2);
-        }
-        return { status: 'not_found', memoryId: null };
-    }
-    // Archive + event-log mark commit together via afterArchive. The hook
-    // receives the same db handle the archive is using, so the INSERT lives
-    // inside the SAVEPOINT.
-    archiveRaw(ctx, memoryId, `source_deleted:slack:${input.teamId}:${input.channelId}:${input.deletedTs}`, {
-        afterArchive: (sameDb, archivedId) => {
-            markEventSeen(sameDb, input.eventId, archivedId);
-        },
-    });
-    return { status: 'archived', memoryId };
-}
-//# sourceMappingURL=deletion.js.map

package/dist/src/connectors/slack/deletion.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deletion.js","sourceRoot":"","sources":["../../../../src/connectors/slack/deletion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAgB/D;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,KAAoB;IACrE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACjD,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC5E,yEAAyE;QACzE,kEAAkE;QAClE,0EAA0E;QAC1E,kBAAkB;QAClB,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,mFAAmF,CAAC;aAC5F,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAgC,CAAC;QACzD,QAAQ,GAAG,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,4EAA4E;QAC5E,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;gBACxC,CAAC;YAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,sEAAsE;IACtE,wEAAwE;IACxE,wBAAwB;IACxB,UAAU,CACR,GAAG,EACH,QAAQ,EACR,wBAAwB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,EAAE,EAC5E;QACE,YAAY,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE;YACnC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,CAAC;KACF,CACF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}

package/dist/src/connectors/slack/dlq.js

@@ -1,224 +0,0 @@
-import { adminActor } from '../../api.js';
-import { openHippoDb, closeHippoDb } from '../../db.js';
-import { ingestMessage } from './ingest.js';
-import { resolveTenantForTeam } from './tenant-routing.js';
-import { verifySlackSignature } from './signature.js';
-import { isSlackEventEnvelope, isSlackMessageEvent } from './types.js';
-import { handleMessageDeleted } from './deletion.js';
-export function writeToDlq(db, opts) {
-    const result = db
-        .prepare(`INSERT INTO slack_dlq
-        (tenant_id, team_id, raw_payload, error, received_at, bucket, signature, slack_timestamp)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`)
-        .run(opts.tenantId ?? '__unroutable__', opts.teamId ?? null, opts.rawPayload, opts.error, new Date().toISOString(), opts.bucket ?? 'parse_error', opts.signature ?? null, opts.slackTimestamp ?? null);
-    return Number(result.lastInsertRowid);
-}
-export function listDlq(db, opts) {
-    // SAFETY: row shape matches the columns named in the SELECT below.
-    const rows = db
-        .prepare(`SELECT id, tenant_id, team_id, raw_payload, error, received_at, retried_at,
-              bucket, retry_count, signature, slack_timestamp
-         FROM slack_dlq
-        WHERE tenant_id = ?
-        ORDER BY received_at ASC
-        LIMIT ?`)
-        .all(opts.tenantId, opts.limit ?? 100);
-    return rows.map(rowToItem);
-}
-export function getDlqEntry(db, id) {
-    // SAFETY: row shape matches the columns named in the SELECT below.
-    const row = db
-        .prepare(`SELECT id, tenant_id, team_id, raw_payload, error, received_at, retried_at,
-              bucket, retry_count, signature, slack_timestamp
-         FROM slack_dlq
-        WHERE id = ?`)
-        .get(id);
-    if (!row)
-        return null;
-    return rowToItem(row);
-}
-function rowToItem(r) {
-    return {
-        id: Number(r.id),
-        tenantId: String(r.tenant_id),
-        teamId: r.team_id == null ? null : String(r.team_id),
-        rawPayload: String(r.raw_payload),
-        error: String(r.error),
-        receivedAt: String(r.received_at),
-        retriedAt: r.retried_at == null ? null : String(r.retried_at),
-        bucket: r.bucket == null ? 'parse_error' : String(r.bucket),
-        retryCount: Number(r.retry_count ?? 0),
-        signature: r.signature == null ? null : String(r.signature),
-        slackTimestamp: r.slack_timestamp == null ? null : String(r.slack_timestamp),
-    };
-}
-export function markDlqRetried(db, id) {
-    db.prepare(`UPDATE slack_dlq SET retried_at = ?, retry_count = retry_count + 1 WHERE id = ?`)
-        .run(new Date().toISOString(), id);
-}
-/**
- * Replay a DLQ row through the normal ingest path. Used by `hippo slack dlq
- * replay <id> [--force]`.
- *
- * Behavior:
- *   1. SELECT the row.
- *   2. If signature + slack_timestamp are present and `signingSecret` is set,
- *      re-verify with the CURRENT secret (not previous). Failure → bail unless
- *      --force. Legacy rows from before v19 may have NULL signature; those
- *      require --force to replay safely.
- *   3. Re-parse the raw_payload and dispatch to ingestMessage / handleMessageDeleted.
- *   4. On success: mark retried_at, increment retry_count.
- *   5. On failure: increment retry_count only, leave the row.
- *
- * The replay always uses the routing the deployment has NOW (current
- * slack_workspaces table + env), not whatever was in effect when the original
- * envelope was DLQed. That is intentional: the DLQ exists to be drained after
- * the operator fixed the routing.
- */
-export function replayDlqEntry(ctx, id, opts = {}) {
-    const db = openHippoDb(ctx.hippoRoot);
-    let row;
-    try {
-        row = getDlqEntry(db, id);
-    }
-    finally {
-        closeHippoDb(db);
-    }
-    if (!row) {
-        return { ok: false, status: 'not_found', memoryId: null, retryCount: 0, reason: `dlq id ${id} not found` };
-    }
-    // Signature verification (current secret, not previous).
-    if (!opts.force) {
-        if (!row.signature || !row.slackTimestamp) {
-            return {
-                ok: false,
-                status: 'sig_missing',
-                memoryId: null,
-                retryCount: row.retryCount,
-                reason: 'legacy row without signature/timestamp; pass --force to replay',
-            };
-        }
-        if (opts.signingSecret) {
-            const ok = verifySlackSignature({
-                rawBody: row.rawPayload,
-                signature: row.signature,
-                timestamp: row.slackTimestamp,
-                signingSecret: opts.signingSecret,
-                now: opts.now,
-                // Replays happen long after the fact — give them a wider skew unless overridden.
-                skewSeconds: opts.skewSeconds ?? 60 * 60 * 24 * 365,
-            });
-            if (!ok) {
-                return {
-                    ok: false,
-                    status: 'sig_fail',
-                    memoryId: null,
-                    retryCount: row.retryCount,
-                    reason: 'signature did not verify against current SLACK_SIGNING_SECRET; pass --force to replay anyway',
-                };
-            }
-        }
-    }
-    // Parse + dispatch.
-    let parsed;
-    try {
-        parsed = JSON.parse(row.rawPayload);
-    }
-    catch (e) {
-        bumpRetryCount(ctx.hippoRoot, id);
-        return {
-            ok: false,
-            status: 'parse_error',
-            memoryId: null,
-            retryCount: row.retryCount + 1,
-            reason: `still unparseable: ${e instanceof Error ? e.message : String(e)}`,
-        };
-    }
-    if (!isSlackEventEnvelope(parsed)) {
-        bumpRetryCount(ctx.hippoRoot, id);
-        return {
-            ok: false,
-            status: 'unhandled',
-            memoryId: null,
-            retryCount: row.retryCount + 1,
-            reason: 'not an event_callback envelope',
-        };
-    }
-    // Resolve tenant against current state. If still unroutable, bail.
-    const db2 = openHippoDb(ctx.hippoRoot);
-    let tenant;
-    try {
-        tenant = resolveTenantForTeam(db2, parsed.team_id);
-    }
-    finally {
-        closeHippoDb(db2);
-    }
-    if (!tenant) {
-        bumpRetryCount(ctx.hippoRoot, id);
-        return {
-            ok: false,
-            status: 'unroutable',
-            memoryId: null,
-            retryCount: row.retryCount + 1,
-            reason: `team_id ${parsed.team_id} still unroutable`,
-        };
-    }
-    const replayCtx = {
-        hippoRoot: ctx.hippoRoot,
-        tenantId: tenant,
-        actor: adminActor('connector:slack:replay'),
-    };
-    const inner = parsed.event;
-    if (!isSlackMessageEvent(inner)) {
-        bumpRetryCount(ctx.hippoRoot, id);
-        return {
-            ok: false,
-            status: 'unhandled',
-            memoryId: null,
-            retryCount: row.retryCount + 1,
-            reason: `unhandled inner event type`,
-        };
-    }
-    if (inner.subtype === 'message_deleted' && inner.deleted_ts) {
-        const r = handleMessageDeleted(replayCtx, {
-            teamId: parsed.team_id,
-            channelId: inner.channel,
-            deletedTs: inner.deleted_ts,
-            eventId: parsed.event_id,
-        });
-        markRetried(ctx.hippoRoot, id);
-        return { ok: true, status: r.status, memoryId: r.memoryId, retryCount: row.retryCount + 1 };
-    }
-    const result = ingestMessage(replayCtx, {
-        teamId: parsed.team_id,
-        channel: {
-            id: inner.channel,
-            is_private: inner.channel_type !== 'channel',
-            is_im: inner.channel_type === 'im',
-            is_mpim: inner.channel_type === 'mpim',
-        },
-        message: inner,
-        eventId: parsed.event_id,
-    });
-    markRetried(ctx.hippoRoot, id);
-    return { ok: true, status: result.status, memoryId: result.memoryId, retryCount: row.retryCount + 1 };
-}
-function markRetried(hippoRoot, id) {
-    const db = openHippoDb(hippoRoot);
-    try {
-        markDlqRetried(db, id);
-    }
-    finally {
-        closeHippoDb(db);
-    }
-}
-function bumpRetryCount(hippoRoot, id) {
-    const db = openHippoDb(hippoRoot);
-    try {
-        db.prepare(`UPDATE slack_dlq SET retry_count = retry_count + 1 WHERE id = ?`).run(id);
-    }
-    finally {
-        closeHippoDb(db);
-    }
-}
-//# sourceMappingURL=dlq.js.map