instar 1.3.783 → 1.3.784

package/dist/core/SpendAlertEmitters.d.ts

@@ -0,0 +1,118 @@
+/**
+ * SpendAlertEmitters — the Increment-C trigger set of the Routing Control Room
+ * (docs/specs/routing-control-room-spend-alerts.md, §Surface 2 Alerts —
+ * Triggers, "Self-Heal Before Notify").
+ *
+ * Every emitter is a SIGNAL consumer feeding the SpendAlertDispatcher: it
+ * blocks nothing, gates nothing, and throw-swallows so a notifier failure can
+ * never disturb the gate/router path it observes.
+ *
+ * Kinds produced here:
+ *  - cap-approach — 50%/80% on BOTH daily AND lifetime (G4), edge-triggered per
+ *    (capKind, threshold, window); coalesced into the digest.
+ *  - cap-hit — ONE edge-triggered money-critical alert, worded honestly
+ *    ("a reservation would exceed key X's daily cap", actual vs reserved —
+ *    A-Min13). Protective; the adjust action is the operator's.
+ *  - door-dark — downstream of swap-tail self-heal; escalates only on
+ *    whole-chain exhaustion (RouterFailClosedError plans). P19 brakes:
+ *    max-attempts = chain length per episode bucket, widening backoff, a
+ *    flapping breaker (N exhaustions/window → critical wording, bypasses
+ *    coalescing via the money-critical lane), scrubbed jsonl (the dispatcher's).
+ *  - fallback-spike — routine self-healed fallback churn is NOT an operator
+ *    event (Near-Silent): every fallback is counted; a digest line fires ONLY
+ *    when the hourly rate crosses an absolute ceiling (code constant).
+ *  - holder-dead — the ONE named exception to holder-single-voice (A2-2): a
+ *    SURVIVING machine emits when the pool observes the metered-lease holder
+ *    offline past the mesh-death threshold while any door is live. Stable
+ *    pool-wide dedupe key `spend-holder-dead:<keyEpoch>`. Single-machine:
+ *    strict no-op (there is no surviving other voice).
+ *  - recon-drift — the emit surface for the Layer-1c provider-reconciliation
+ *    sweep (lands next PR); wording per Amendment 1.
+ */
+import type { SpendAlertDispatcher } from './SpendAlertDispatcher.js';
+/** Cap-approach thresholds (G4) — code-defined, both cap kinds. */
+export declare const CAP_APPROACH_THRESHOLDS: readonly [0.5, 0.8];
+/** Fallback-spike absolute per-hour ceiling (code constant — Near-Silent default). */
+export declare const FALLBACK_SPIKE_PER_HOUR_CEILING = 60;
+/** Door-dark flapping breaker: N exhaustions inside the window escalate the wording. */
+export declare const DOOR_DARK_FLAP_THRESHOLD = 5;
+export declare const DOOR_DARK_FLAP_WINDOW_MS: number;
+/** Door-dark per-episode widening backoff base + episode bucket size. */
+export declare const DOOR_DARK_BACKOFF_BASE_MS: number;
+export declare const DOOR_DARK_EPISODE_BUCKET_MS: number;
+export interface GateAdmitEvent {
+    type: 'admit';
+    keyRef: string;
+    door: string;
+    committedLifetimeUsd: number;
+    committedDayUsd: number;
+    lifetimeCapUsd: number;
+    dailyCapUsd: number;
+}
+export interface GateRefusalEvent {
+    type: 'refusal';
+    reason: string;
+    keyRef?: string;
+    door?: string;
+    detail: string;
+}
+export type GateEvent = GateAdmitEvent | GateRefusalEvent;
+export interface NatureRoutePlanEvent {
+    component?: string;
+    dryRun: boolean;
+    failClosed?: boolean;
+    resolution?: {
+        outcome?: string;
+        resolvedChain?: string;
+        swapTail?: unknown[];
+        primary?: {
+            door?: string;
+        };
+    };
+    /** True when the served position was NOT the chain primary (a fallback served). */
+    servedFallback?: boolean;
+}
+export interface SpendAlertEmittersOptions {
+    dispatcher: SpendAlertDispatcher;
+    machineId: string;
+    now?: () => number;
+}
+export declare class SpendAlertEmitters {
+    private readonly dispatcher;
+    private readonly machineId;
+    private readonly now;
+    /** door-dark per-episode state: chain → { bucket, attempts, nextAllowedAtMs, exhaustionsWindow } */
+    private doorDark;
+    /** fallback counter: hour-bucket → count (bounded: only the current bucket is kept). */
+    private fallbackBucket;
+    constructor(opts: SpendAlertEmittersOptions);
+    /**
+     * Observer-isolated dispatch: the real dispatcher never throws/rejects, but
+     * the observer CONTRACT must hold against any implementation — a sync throw
+     * OR an async rejection here can never reach the gate/router path, and can
+     * never surface as an unhandled rejection.
+     */
+    private fire;
+    /** The MeteredSpendGate observer (onGateEvent). NEVER throws into the gate path. */
+    onGateEvent(ev: GateEvent): void;
+    private checkCapApproach;
+    /**
+     * The router-signal consumer (fed by the onNatureRoutePlan fan-out, I-9).
+     * Counts every served fallback (Near-Silent: jsonl only via the dispatcher's
+     * audit); emits a digest line ONLY on a rate spike; escalates door-dark on
+     * whole-chain exhaustion with P19 brakes.
+     */
+    onNatureRoutePlan(plan: NatureRoutePlanEvent): void;
+    private onChainExhausted;
+    private onFallbackServed;
+    /**
+     * holder-dead (A2-2): call from pool observation when the metered-lease
+     * holder is offline past the mesh-death threshold while any door is live.
+     * The caller (a SURVIVING machine) supplies the keyEpoch for the stable
+     * pool-wide dedupe key. Single-machine installs never call this.
+     */
+    onMeteredLeaseHolderDead(holderNickname: string, keyEpoch: number): void;
+    /** recon-drift emit surface (Layer 1c feeds this next PR — Amendment 1 wording). */
+    onReconciliationDrift(keyRef: string, door: string, driftPct: number): void;
+}
+//# sourceMappingURL=SpendAlertEmitters.d.ts.map

package/dist/core/SpendAlertEmitters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpendAlertEmitters.d.ts","sourceRoot":"","sources":["../../src/core/SpendAlertEmitters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,qBAAsB,CAAC;AAE3D,sFAAsF;AACtF,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAElD,wFAAwF;AACxF,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,wBAAwB,QAAiB,CAAC;AACvD,yEAAyE;AACzE,eAAO,MAAM,yBAAyB,QAAgB,CAAC;AACvD,eAAO,MAAM,2BAA2B,QAAqB,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAC7G,mFAAmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAMD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuB;IAClD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,oGAAoG;IACpG,OAAO,CAAC,QAAQ,CAA2G;IAC3H,wFAAwF;IACxF,OAAO,CAAC,cAAc,CAA0B;gBAEpC,IAAI,EAAE,yBAAyB;IAM3C;;;;;OAKG;IACH,OAAO,CAAC,IAAI;IASZ,oFAAoF;IACpF,WAAW,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI;IAmBhC,OAAO,CAAC,gBAAgB;IAuBxB;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI;IAanD,OAAO,CAAC,gBAAgB;IAiCxB,OAAO,CAAC,gBAAgB;IAiBxB;;;;;OAKG;IACH,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAgBxE,oFAAoF;IACpF,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;CAc5E"}

package/dist/core/SpendAlertEmitters.js

@@ -0,0 +1,220 @@
+/**
+ * SpendAlertEmitters — the Increment-C trigger set of the Routing Control Room
+ * (docs/specs/routing-control-room-spend-alerts.md, §Surface 2 Alerts —
+ * Triggers, "Self-Heal Before Notify").
+ *
+ * Every emitter is a SIGNAL consumer feeding the SpendAlertDispatcher: it
+ * blocks nothing, gates nothing, and throw-swallows so a notifier failure can
+ * never disturb the gate/router path it observes.
+ *
+ * Kinds produced here:
+ *  - cap-approach — 50%/80% on BOTH daily AND lifetime (G4), edge-triggered per
+ *    (capKind, threshold, window); coalesced into the digest.
+ *  - cap-hit — ONE edge-triggered money-critical alert, worded honestly
+ *    ("a reservation would exceed key X's daily cap", actual vs reserved —
+ *    A-Min13). Protective; the adjust action is the operator's.
+ *  - door-dark — downstream of swap-tail self-heal; escalates only on
+ *    whole-chain exhaustion (RouterFailClosedError plans). P19 brakes:
+ *    max-attempts = chain length per episode bucket, widening backoff, a
+ *    flapping breaker (N exhaustions/window → critical wording, bypasses
+ *    coalescing via the money-critical lane), scrubbed jsonl (the dispatcher's).
+ *  - fallback-spike — routine self-healed fallback churn is NOT an operator
+ *    event (Near-Silent): every fallback is counted; a digest line fires ONLY
+ *    when the hourly rate crosses an absolute ceiling (code constant).
+ *  - holder-dead — the ONE named exception to holder-single-voice (A2-2): a
+ *    SURVIVING machine emits when the pool observes the metered-lease holder
+ *    offline past the mesh-death threshold while any door is live. Stable
+ *    pool-wide dedupe key `spend-holder-dead:<keyEpoch>`. Single-machine:
+ *    strict no-op (there is no surviving other voice).
+ *  - recon-drift — the emit surface for the Layer-1c provider-reconciliation
+ *    sweep (lands next PR); wording per Amendment 1.
+ */
+/** Cap-approach thresholds (G4) — code-defined, both cap kinds. */
+export const CAP_APPROACH_THRESHOLDS = [0.5, 0.8];
+/** Fallback-spike absolute per-hour ceiling (code constant — Near-Silent default). */
+export const FALLBACK_SPIKE_PER_HOUR_CEILING = 60;
+/** Door-dark flapping breaker: N exhaustions inside the window escalate the wording. */
+export const DOOR_DARK_FLAP_THRESHOLD = 5;
+export const DOOR_DARK_FLAP_WINDOW_MS = 60 * 60 * 1000;
+/** Door-dark per-episode widening backoff base + episode bucket size. */
+export const DOOR_DARK_BACKOFF_BASE_MS = 5 * 60 * 1000;
+export const DOOR_DARK_EPISODE_BUCKET_MS = 6 * 60 * 60 * 1000;
+function utcDay(ms) {
+    return new Date(ms).toISOString().slice(0, 10);
+}
+export class SpendAlertEmitters {
+    dispatcher;
+    machineId;
+    now;
+    /** door-dark per-episode state: chain → { bucket, attempts, nextAllowedAtMs, exhaustionsWindow } */
+    doorDark = new Map();
+    /** fallback counter: hour-bucket → count (bounded: only the current bucket is kept). */
+    fallbackBucket = { hour: -1, count: 0 };
+    constructor(opts) {
+        this.dispatcher = opts.dispatcher;
+        this.machineId = opts.machineId;
+        this.now = opts.now ?? (() => Date.now());
+    }
+    /**
+     * Observer-isolated dispatch: the real dispatcher never throws/rejects, but
+     * the observer CONTRACT must hold against any implementation — a sync throw
+     * OR an async rejection here can never reach the gate/router path, and can
+     * never surface as an unhandled rejection.
+     */
+    fire(alert) {
+        try {
+            void Promise.resolve(this.dispatcher.dispatch(alert)).catch(() => { });
+        }
+        catch {
+            // @silent-fallback-ok: observer isolation — a throwing dispatcher is the
+            // notifier's failure, never the observed path's.
+        }
+    }
+    /** The MeteredSpendGate observer (onGateEvent). NEVER throws into the gate path. */
+    onGateEvent(ev) {
+        try {
+            if (ev.type === 'admit') {
+                this.checkCapApproach(ev);
+            }
+            else if (ev.reason === 'cap-exceeded') {
+                this.fire({
+                    kind: 'cap-hit',
+                    dedupeKey: `spend-cap-hit:${ev.keyRef ?? 'unknown'}:${utcDay(this.now())}`,
+                    text: `🛑 Spending cap hit: a reservation would exceed key '${ev.keyRef ?? 'unknown'}'s cap — ${ev.detail}. ` +
+                        `The call fell to a free door (paid routing on this key is refusing new spend). ` +
+                        `Raising the cap is your PIN action on the Spend tab; the freeze/disarm levers are one tap.`,
+                });
+            }
+        }
+        catch {
+            // @silent-fallback-ok: a notifier failure must never disturb the gate path.
+        }
+    }
+    checkCapApproach(ev) {
+        const checks = [
+            { capKind: 'daily', committed: ev.committedDayUsd, cap: ev.dailyCapUsd, window: utcDay(this.now()) },
+            { capKind: 'lifetime', committed: ev.committedLifetimeUsd, cap: ev.lifetimeCapUsd, window: 'lifetime' },
+        ];
+        for (const c of checks) {
+            if (!(c.cap > 0))
+                continue;
+            const frac = c.committed / c.cap;
+            for (const threshold of CAP_APPROACH_THRESHOLDS) {
+                if (frac >= threshold) {
+                    // Edge per (capKind, threshold, window) — the dispatcher's latch dedupes.
+                    this.fire({
+                        kind: 'cap-approach',
+                        dedupeKey: `spend-approach:${ev.keyRef}:${c.capKind}:${threshold}:${c.window}`,
+                        text: `📊 Key '${ev.keyRef}' is at ${Math.round(frac * 100)}% of its ${c.capKind} cap ` +
+                            `($${c.committed.toFixed(2)} of $${c.cap.toFixed(2)} committed).`,
+                    });
+                }
+            }
+        }
+    }
+    /**
+     * The router-signal consumer (fed by the onNatureRoutePlan fan-out, I-9).
+     * Counts every served fallback (Near-Silent: jsonl only via the dispatcher's
+     * audit); emits a digest line ONLY on a rate spike; escalates door-dark on
+     * whole-chain exhaustion with P19 brakes.
+     */
+    onNatureRoutePlan(plan) {
+        try {
+            if (plan.failClosed) {
+                this.onChainExhausted(plan.resolution?.resolvedChain ?? 'unknown', Array.isArray(plan.resolution?.swapTail) ? plan.resolution.swapTail.length + 1 : 3);
+                return;
+            }
+            if (plan.servedFallback)
+                this.onFallbackServed();
+        }
+        catch {
+            // @silent-fallback-ok: observer isolation (I-9) — a notifier failure never
+            // breaks the LLM call path or the sibling fan-out subscribers.
+        }
+    }
+    onChainExhausted(chain, chainLength) {
+        const nowMs = this.now();
+        const bucket = Math.floor(nowMs / DOOR_DARK_EPISODE_BUCKET_MS);
+        let st = this.doorDark.get(chain);
+        if (!st || st.bucket !== bucket) {
+            st = { bucket, attempts: 0, nextAllowedAtMs: 0, exhaustions: st?.exhaustions ?? [] };
+            this.doorDark.set(chain, st);
+        }
+        // Flapping breaker window bookkeeping (kept small: prune outside the window).
+        st.exhaustions.push(nowMs);
+        st.exhaustions = st.exhaustions.filter((t) => nowMs - t <= DOOR_DARK_FLAP_WINDOW_MS);
+        const flapping = st.exhaustions.length >= DOOR_DARK_FLAP_THRESHOLD;
+        // P19 brakes: max-attempts = chain length per episode bucket + widening backoff.
+        if (st.attempts >= chainLength)
+            return; // episode budget spent — the bucket rolling re-arms
+        if (nowMs < st.nextAllowedAtMs)
+            return; // inside the widening backoff window
+        st.attempts += 1;
+        st.nextAllowedAtMs = nowMs + DOOR_DARK_BACKOFF_BASE_MS * Math.pow(2, st.attempts - 1);
+        this.fire({
+            kind: 'door-dark',
+            dedupeKey: `spend-door-dark:${this.machineId}:${chain}:${bucket}:${st.attempts}`,
+            text: flapping
+                ? `🚨 Routing chain '${chain}' is FLAPPING dark (${st.exhaustions.length} full exhaustions in the last hour) — ` +
+                    `every door including the free tails failed repeatedly. Gated work on this chain is failing closed.`
+                : `⚠️ Routing chain '${chain}' went dark — every door including the free tails was unavailable ` +
+                    `(attempt ${st.attempts}/${chainLength} this episode). Self-heal continues; this is the whole-chain escalation.`,
+            // The flapping escalation must not sit in a digest: shorten its re-arm instead
+            // of switching lanes (kinds keep their lane — S-F8).
+            ...(flapping ? { reArmMs: 30 * 60 * 1000 } : {}),
+        });
+    }
+    onFallbackServed() {
+        const hour = Math.floor(this.now() / 3_600_000);
+        if (this.fallbackBucket.hour !== hour)
+            this.fallbackBucket = { hour, count: 0 };
+        this.fallbackBucket.count += 1;
+        if (this.fallbackBucket.count === FALLBACK_SPIKE_PER_HOUR_CEILING) {
+            // Edge exactly at the ceiling crossing — once per hour bucket by construction.
+            this.fire({
+                kind: 'fallback-spike',
+                dedupeKey: `spend-fallback-spike:${this.machineId}:${hour}`,
+                text: `📈 Routing fallback rate spiked: ${this.fallbackBucket.count} fallback-served calls this hour ` +
+                    `(ceiling ${FALLBACK_SPIKE_PER_HOUR_CEILING}). Primaries are degrading — the chains are self-healing, ` +
+                    `but persistent churn is worth a look at the Routing Map.`,
+            });
+        }
+    }
+    /**
+     * holder-dead (A2-2): call from pool observation when the metered-lease
+     * holder is offline past the mesh-death threshold while any door is live.
+     * The caller (a SURVIVING machine) supplies the keyEpoch for the stable
+     * pool-wide dedupe key. Single-machine installs never call this.
+     */
+    onMeteredLeaseHolderDead(holderNickname, keyEpoch) {
+        try {
+            this.fire({
+                kind: 'holder-dead',
+                dedupeKey: `spend-holder-dead:${keyEpoch}`,
+                text: `🚨 Paid routing is frozen — the metered-lease machine '${holderNickname}' is offline past the ` +
+                    `mesh-death threshold while paid doors are live. Free doors still serve. Reclaim/re-designate from ` +
+                    `the dashboard Spend tab (PIN) when you've confirmed the machine is really gone.`,
+            });
+        }
+        catch {
+            // @silent-fallback-ok: the surviving-voice alert is best-effort — pool
+            // observation re-fires it on its next tick if this dispatch failed.
+        }
+    }
+    /** recon-drift emit surface (Layer 1c feeds this next PR — Amendment 1 wording). */
+    onReconciliationDrift(keyRef, door, driftPct) {
+        try {
+            const bucket = driftPct >= 0 ? Math.floor(driftPct / 10) : Math.ceil(driftPct / 10);
+            this.fire({
+                kind: 'recon-drift',
+                dedupeKey: `spend-recon-drift:${keyRef}:${door}:${bucket}`,
+                text: `🧾 ${door} reports ~${Math.abs(Math.round(driftPct))}% ${driftPct > 0 ? 'more' : 'less'} than we booked ` +
+                    `for key '${keyRef}' — your reviewed price may be stale; consider promoting the observed price (PIN).`,
+            });
+        }
+        catch {
+            // @silent-fallback-ok: reporting-side observability; the sweep re-fires next pass.
+        }
+    }
+}
+//# sourceMappingURL=SpendAlertEmitters.js.map

package/dist/core/SpendAlertEmitters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SpendAlertEmitters.js","sourceRoot":"","sources":["../../src/core/SpendAlertEmitters.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAIH,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAC;AAE3D,sFAAsF;AACtF,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,yEAAyE;AACzE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAqC9D,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,UAAU,CAAuB;IACjC,SAAS,CAAS;IAClB,GAAG,CAAe;IAEnC,oGAAoG;IAC5F,QAAQ,GAAG,IAAI,GAAG,EAAgG,CAAC;IAC3H,wFAAwF;IAChF,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAEhD,YAAY,IAA+B;QACzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACK,IAAI,CAAC,KAAsD;QACjE,IAAI,CAAC;YACH,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,WAAW,CAAC,EAAa;QACvB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,iBAAiB,EAAE,CAAC,MAAM,IAAI,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE;oBAC1E,IAAI,EACF,wDAAwD,EAAE,CAAC,MAAM,IAAI,SAAS,YAAY,EAAE,CAAC,MAAM,IAAI;wBACvG,iFAAiF;wBACjF,4FAA4F;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,EAAkB;QACzC,MAAM,MAAM,GAA6F;YACvG,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE;YACpG,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE;SACxG,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC;YACjC,KAAK,MAAM,SAAS,IAAI,uBAAuB,EAAE,CAAC;gBAChD,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;oBACtB,0EAA0E;oBAC1E,IAAI,CAAC,IAAI,CAAC;wBACR,IAAI,EAAE,cAAc;wBACpB,SAAS,EAAE,kBAAkB,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE;wBAC9E,IAAI,EACF,WAAW,EAAE,CAAC,MAAM,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,OAAO;4BACjF,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;qBACpE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,IAA0B;QAC1C,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvJ,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,cAAc;gBAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,+DAA+D;QACjE,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAa,EAAE,WAAmB;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,2BAA2B,CAAC,CAAC;QAC/D,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAChC,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC;YACrF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,8EAA8E;QAC9E,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,EAAE,CAAC,WAAW,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,wBAAwB,CAAC;QAEnE,iFAAiF;QACjF,IAAI,EAAE,CAAC,QAAQ,IAAI,WAAW;YAAE,OAAO,CAAC,oDAAoD;QAC5F,IAAI,KAAK,GAAG,EAAE,CAAC,eAAe;YAAE,OAAO,CAAC,qCAAqC;QAC7E,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC;QACjB,EAAE,CAAC,eAAe,GAAG,KAAK,GAAG,yBAAyB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAEtF,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,mBAAmB,IAAI,CAAC,SAAS,IAAI,KAAK,IAAI,MAAM,IAAI,EAAE,CAAC,QAAQ,EAAE;YAChF,IAAI,EAAE,QAAQ;gBACZ,CAAC,CAAC,qBAAqB,KAAK,uBAAuB,EAAE,CAAC,WAAW,CAAC,MAAM,wCAAwC;oBAC9G,oGAAoG;gBACtG,CAAC,CAAC,qBAAqB,KAAK,oEAAoE;oBAC9F,YAAY,EAAE,CAAC,QAAQ,IAAI,WAAW,0EAA0E;YACpH,+EAA+E;YAC/E,qDAAqD;YACrD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,KAAK,+BAA+B,EAAE,CAAC;YAClE,+EAA+E;YAC/E,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,gBAAgB;gBACtB,SAAS,EAAE,wBAAwB,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;gBAC3D,IAAI,EACF,oCAAoC,IAAI,CAAC,cAAc,CAAC,KAAK,mCAAmC;oBAChG,YAAY,+BAA+B,4DAA4D;oBACvG,0DAA0D;aAC7D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CAAC,cAAsB,EAAE,QAAgB;QAC/D,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,qBAAqB,QAAQ,EAAE;gBAC1C,IAAI,EACF,0DAA0D,cAAc,wBAAwB;oBAChG,oGAAoG;oBACpG,iFAAiF;aACpF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,oFAAoF;IACpF,qBAAqB,CAAC,MAAc,EAAE,IAAY,EAAE,QAAgB;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,qBAAqB,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE;gBAC1D,IAAI,EACF,MAAM,IAAI,aAAa,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB;oBAC1G,YAAY,MAAM,oFAAoF;aACzG,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;IACH,CAAC;CACF"}

package/dist/core/SpendAlertResolver.d.ts

@@ -36,6 +36,16 @@ export interface SpendAlertResolverDeps {
     /** Rung 2 (machine-local half): read/persist the auto-created id. */
     readPersistedTopicId: () => number | undefined;
     persistTopicId: (topicId: number) => void;
+    /**
+     * Rung 2 (POOL-PUBLISHED half, Increment C — FD-6): read the id any pool
+     * machine published on the replicated machine registry, and publish this
+     * machine's created id there — so a FUTURE serving-lease holder INHERITS the
+     * id instead of re-creating (Telegram mints a fresh id per createForumTopic,
+     * so last-writer-wins can never merge two creations). Optional: absent on
+     * single-machine installs (the machine-local record suffices there).
+     */
+    readPoolPublishedTopicId?: () => number | undefined;
+    publishTopicId?: (topicId: number) => void;
     /** Rung 3 gate: ms since the serving lease was POSITIVELY re-confirmed (null = not holder / unconfirmed). */
     servingLeaseConfirmedAgoMs: () => number | null;
     /** Create the bounded create-once system topic; returns its id. */
@@ -58,6 +68,8 @@ export declare class SpendAlertResolver {
     /** In-process single-flight for topic creation. */
     private creating;
     constructor(deps: SpendAlertResolverDeps);
+    /** Rung-1 accessor for the channel's repoint detection (G5) — never resolves/creates. */
+    configuredTopicIdForRepointCheck(): number | undefined;
     /** Resolve the dedicated topic id via the ladder — or undefined (caller falls back to lifeline). */
     resolveTopicId(): Promise<number | undefined>;
     /**

package/dist/core/SpendAlertResolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SpendAlertResolver.d.ts","sourceRoot":"","sources":["../../src/core/SpendAlertResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,WAAW,UAAU;IACzB,8FAA8F;IAC9F,IAAI,EAAE,aAAa,GAAG,gBAAgB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC5C,qEAAqE;IACrE,oBAAoB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC/C,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,6GAA6G;IAC7G,0BAA0B,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChD,mEAAmE;IACnE,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,yEAAyE;IACzE,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oFAAoF;IACpF,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC1C,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAA6B;IAC5C,mDAAmD;IACnD,OAAO,CAAC,QAAQ,CAA4C;gBAEhD,IAAI,EAAE,sBAAsB;IAKxC,oGAAoG;IAC9F,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA+BnD;;;;;OAKG;IACG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,SAAsB,GAAG,OAAO,CAAC,MAAM,GAAG,eAAe,GAAG,YAAY,GAAG,QAAQ,CAAC;CAmC1H;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAS/F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CASnG"}
+{"version":3,"file":"SpendAlertResolver.d.ts","sourceRoot":"","sources":["../../src/core/SpendAlertResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,WAAW,UAAU;IACzB,8FAA8F;IAC9F,IAAI,EAAE,aAAa,GAAG,gBAAgB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC5C,qEAAqE;IACrE,oBAAoB,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC/C,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpD,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,6GAA6G;IAC7G,0BAA0B,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChD,mEAAmE;IACnE,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,yEAAyE;IACzE,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oFAAoF;IACpF,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC1C,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,kEAAkE;IAClE,OAAO,CAAC,OAAO,CAA6B;IAC5C,mDAAmD;IACnD,OAAO,CAAC,QAAQ,CAA4C;gBAEhD,IAAI,EAAE,sBAAsB;IAKxC,yFAAyF;IACzF,gCAAgC,IAAI,MAAM,GAAG,SAAS;IAKtD,oGAAoG;IAC9F,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAyDnD;;;;;OAKG;IACG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,SAAsB,GAAG,OAAO,CAAC,MAAM,GAAG,eAAe,GAAG,YAAY,GAAG,QAAQ,CAAC;CAmC1H;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAS/F;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CASnG"}

package/dist/core/SpendAlertResolver.js

@@ -37,6 +37,11 @@ export class SpendAlertResolver {
         this.d = deps;
         this.now = deps.now ?? (() => Date.now());
     }
+    /** Rung-1 accessor for the channel's repoint detection (G5) — never resolves/creates. */
+    configuredTopicIdForRepointCheck() {
+        const configured = this.d.configuredTopicId();
+        return typeof configured === 'number' && Number.isFinite(configured) ? configured : undefined;
+    }
     /** Resolve the dedicated topic id via the ladder — or undefined (caller falls back to lifeline). */
     async resolveTopicId() {
         const configured = this.d.configuredTopicId();
@@ -45,6 +50,27 @@ export class SpendAlertResolver {
         const persisted = this.d.readPersistedTopicId();
         if (typeof persisted === 'number' && Number.isFinite(persisted))
             return persisted;
+        // Rung 2 pool half (FD-6): an id ANY pool machine published — a new serving
+        // holder inherits instead of re-creating. Adopted locally so the next
+        // resolve is disk-fast even if the registry read degrades later.
+        try {
+            const pooled = this.d.readPoolPublishedTopicId?.();
+            if (typeof pooled === 'number' && Number.isFinite(pooled)) {
+                try {
+                    this.d.persistTopicId(pooled);
+                }
+                catch {
+                    // @silent-fallback-ok: local adoption is an optimization; the pool
+                    // read stays the source next resolve.
+                }
+                this.d.audit?.({ decision: 'adopted-pool-published', topicId: pooled });
+                return pooled;
+            }
+        }
+        catch {
+            // @silent-fallback-ok: a degraded registry read falls through the ladder —
+            // creation stays fenced below, so a miss can never mint a duplicate.
+        }
         // Rung 3: create once — serving-lease-holder-only, fenced, single-flight.
         const confirmedAgo = this.d.servingLeaseConfirmedAgoMs();
         if (confirmedAgo === null || confirmedAgo > SERVING_LEASE_WINDOW_MS) {
@@ -56,6 +82,14 @@ export class SpendAlertResolver {
                 try {
                     const id = await this.d.createTopic();
                     this.d.persistTopicId(id);
+                    try {
+                        this.d.publishTopicId?.(id); // rung-2 pool half: peers + future holders inherit
+                    }
+                    catch {
+                        // @silent-fallback-ok: a failed publish leaves the machine-local
+                        // record authoritative; the next holder falls back to the lifeline
+                        // rather than duplicating (creation is lease-fenced).
+                    }
                     this.d.audit?.({ decision: 'created', topicId: id });
                     return id;
                 }

package/dist/core/SpendAlertResolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"SpendAlertResolver.js","sourceRoot":"","sources":["../../src/core/SpendAlertResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AA4BH,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,OAAO,kBAAkB;IACZ,CAAC,CAAyB;IAC1B,GAAG,CAAe;IACnC,kEAAkE;IAC1D,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,mDAAmD;IAC3C,QAAQ,GAAuC,IAAI,CAAC;IAE5D,YAAY,IAA4B;QACtC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,cAAc;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;QACzD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,uBAAuB,EAAE,CAAC;YACpE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,oCAAoC,EAAE,YAAY,EAAE,CAAC,CAAC;YACtG,OAAO,SAAS,CAAC,CAAC,8DAA8D;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;oBAC1B,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,yEAAyE;oBACzE,8EAA8E;oBAC9E,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAClE,OAAO,SAAS,CAAC;gBACnB,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5F,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;gBACzE,0EAA0E;gBAC1E,6EAA6E;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5F,OAAO,eAAe,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,CAAC,iDAAiD;IACpE,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe;IACjF,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qBAAqB,IAAI,EAAE;QACtC,IAAI,EACF,sDAAsD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY;YAChG,QAAQ,OAAO,mFAAmF;YAClG,sCAAsC;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;IACrF,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,wBAAwB,IAAI,IAAI,OAAO,EAAE;QACpD,IAAI,EACF,4BAA4B,IAAI,IAAI,OAAO,uCAAuC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;YACpH,GAAG,GAAG,sFAAsF;KAC/F,CAAC;AACJ,CAAC"}
+{"version":3,"file":"SpendAlertResolver.js","sourceRoot":"","sources":["../../src/core/SpendAlertResolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAsCH,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,OAAO,kBAAkB;IACZ,CAAC,CAAyB;IAC1B,GAAG,CAAe;IACnC,kEAAkE;IAC1D,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,mDAAmD;IAC3C,QAAQ,GAAuC,IAAI,CAAC;IAE5D,YAAY,IAA4B;QACtC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,yFAAyF;IACzF,gCAAgC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC9C,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,cAAc;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QAC9C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClF,4EAA4E;QAC5E,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACnD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1D,IAAI,CAAC;oBACH,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;oBACnE,sCAAsC;gBACxC,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,qEAAqE;QACvE,CAAC;QACD,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC;QACzD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,GAAG,uBAAuB,EAAE,CAAC;YACpE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,oCAAoC,EAAE,YAAY,EAAE,CAAC,CAAC;YACtG,OAAO,SAAS,CAAC,CAAC,8DAA8D;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;oBAC1B,IAAI,CAAC;wBACH,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,mDAAmD;oBAClF,CAAC;oBAAC,MAAM,CAAC;wBACP,iEAAiE;wBACjE,mEAAmE;wBACnE,sDAAsD;oBACxD,CAAC;oBACD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrD,OAAO,EAAE,CAAC;gBACZ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,yEAAyE;oBACzE,8EAA8E;oBAC9E,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAClE,OAAO,SAAS,CAAC;gBACnB,CAAC;wBAAS,CAAC;oBACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,OAAO,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5F,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yEAAyE;gBACzE,0EAA0E;gBAC1E,6EAA6E;YAC/E,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5F,OAAO,eAAe,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,CAAC,iDAAiD;IACpE,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe;IACjF,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,qBAAqB,IAAI,EAAE;QACtC,IAAI,EACF,sDAAsD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY;YAChG,QAAQ,OAAO,mFAAmF;YAClG,sCAAsC;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;IACrF,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,wBAAwB,IAAI,IAAI,OAAO,EAAE;QACpD,IAAI,EACF,4BAA4B,IAAI,IAAI,OAAO,uCAAuC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI;YACpH,GAAG,GAAG,sFAAsF;KAC/F,CAAC;AACJ,CAAC"}

package/dist/core/TelegramSpendTopicChannel.d.ts

@@ -0,0 +1,50 @@
+/**
+ * TelegramSpendTopicChannel — the Increment-C concrete AlertChannel (FD-6):
+ * delivers each already-deduped/coalesced spend alert as a MESSAGE into the
+ * ONE dedicated "💰 Routing & Spend Alerts" topic, resolved through the
+ * SpendAlertResolver ladder (operator-configured id → pool-published/persisted
+ * record → fenced serving-lease-holder-only create-once), with the LIFELINE as
+ * the single named emergency fallback.
+ *
+ * Money-critical deliveries (G5 hardened) prefer the DURABLE relay
+ * (PendingRelayStore + DeliveryFailureSentinel — delivery-robustness Layers
+ * 2/3) via the injected enqueue: retry-until-delivered instead of
+ * fire-and-forget, and the dispatcher's edge latch only sets on a CONFIRMED /
+ * durably-queued outcome. When no durable enqueue is wired (single-process
+ * tests, lean installs) it degrades to direct send + lifeline fallback.
+ *
+ * Repoint audibility (G5): when the operator-configured topic id CHANGES, the
+ * channel posts a one-line "spend alerts now route to <topic>" confirmation
+ * into BOTH the old topic (if still resolvable) and the new one, and audits the
+ * repoint — a Bearer-level actor cannot SILENTLY redirect the operator's money
+ * alerts (the knob still cannot touch money admission).
+ */
+import type { AlertChannel } from './SpendAlertDispatcher.js';
+import type { SpendAlertResolver } from './SpendAlertResolver.js';
+export interface TelegramSpendTopicChannelDeps {
+    resolver: SpendAlertResolver;
+    /** Direct Telegram send; resolves true on confirmed delivery. */
+    sendToTopic: (topicId: number, text: string) => Promise<boolean>;
+    /** The always-existing system topic (emergency fallback). */
+    lifelineTopicId: () => number | undefined;
+    /**
+     * OPTIONAL durable-relay enqueue (PendingRelayStore). Returns true when the
+     * message is durably queued (retry-until-delivered — counts as handled).
+     */
+    enqueueDurable?: (topicId: number, text: string) => boolean;
+    /** Scrubbed observability sink (shares the dispatcher's jsonl). */
+    audit?: (entry: Record<string, unknown>) => void;
+}
+export declare class TelegramSpendTopicChannel implements AlertChannel {
+    readonly id = "telegram";
+    private readonly d;
+    /** The configured id seen last delivery — repoint detection (G5). */
+    private lastConfiguredId;
+    constructor(deps: TelegramSpendTopicChannelDeps);
+    deliver(text: string, moneyCritical: boolean): Promise<'sent' | 'sent-lifeline' | 'queued-durable' | 'failed'>;
+    /** G5: a changed operator-configured id is made AUDIBLE, never silent. */
+    private announceRepointIfChanged;
+}
+/** Deterministic delivery id for the durable relay (idempotent enqueue). */
+export declare function spendAlertDeliveryId(topicId: number, text: string): string;
+//# sourceMappingURL=TelegramSpendTopicChannel.d.ts.map

package/dist/core/TelegramSpendTopicChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelegramSpendTopicChannel.d.ts","sourceRoot":"","sources":["../../src/core/TelegramSpendTopicChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,iEAAiE;IACjE,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,6DAA6D;IAC7D,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5D,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAClD;AAED,qBAAa,yBAA0B,YAAW,YAAY;IAC5D,QAAQ,CAAC,EAAE,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAgC;IAClD,qEAAqE;IACrE,OAAO,CAAC,gBAAgB,CAAqB;gBAEjC,IAAI,EAAE,6BAA6B;IAIzC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,eAAe,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IA4CpH,0EAA0E;YAC5D,wBAAwB;CAgBvC;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1E"}

package/dist/core/TelegramSpendTopicChannel.js

@@ -0,0 +1,106 @@
+/**
+ * TelegramSpendTopicChannel — the Increment-C concrete AlertChannel (FD-6):
+ * delivers each already-deduped/coalesced spend alert as a MESSAGE into the
+ * ONE dedicated "💰 Routing & Spend Alerts" topic, resolved through the
+ * SpendAlertResolver ladder (operator-configured id → pool-published/persisted
+ * record → fenced serving-lease-holder-only create-once), with the LIFELINE as
+ * the single named emergency fallback.
+ *
+ * Money-critical deliveries (G5 hardened) prefer the DURABLE relay
+ * (PendingRelayStore + DeliveryFailureSentinel — delivery-robustness Layers
+ * 2/3) via the injected enqueue: retry-until-delivered instead of
+ * fire-and-forget, and the dispatcher's edge latch only sets on a CONFIRMED /
+ * durably-queued outcome. When no durable enqueue is wired (single-process
+ * tests, lean installs) it degrades to direct send + lifeline fallback.
+ *
+ * Repoint audibility (G5): when the operator-configured topic id CHANGES, the
+ * channel posts a one-line "spend alerts now route to <topic>" confirmation
+ * into BOTH the old topic (if still resolvable) and the new one, and audits the
+ * repoint — a Bearer-level actor cannot SILENTLY redirect the operator's money
+ * alerts (the knob still cannot touch money admission).
+ */
+import crypto from 'node:crypto';
+export class TelegramSpendTopicChannel {
+    id = 'telegram';
+    d;
+    /** The configured id seen last delivery — repoint detection (G5). */
+    lastConfiguredId;
+    constructor(deps) {
+        this.d = deps;
+    }
+    async deliver(text, moneyCritical) {
+        await this.announceRepointIfChanged();
+        const topicId = await this.d.resolver.resolveTopicId();
+        if (topicId !== undefined) {
+            // Money-critical: durable relay FIRST (retry-until-delivered).
+            if (moneyCritical && this.d.enqueueDurable) {
+                try {
+                    if (this.d.enqueueDurable(topicId, text)) {
+                        this.d.audit?.({ channel: this.id, outcome: 'queued-durable', topicId });
+                        return 'queued-durable';
+                    }
+                }
+                catch {
+                    // @silent-fallback-ok: a relay enqueue failure falls through to the
+                    // direct send + lifeline ladder below — delivery degrades, never dies.
+                }
+            }
+            try {
+                if (await this.d.sendToTopic(topicId, text))
+                    return 'sent';
+            }
+            catch {
+                // @silent-fallback-ok: a set-but-wrong/deleted topic id is a FALLBACK
+                // case, not a black hole — the lifeline path below is the designed
+                // continuation (G5), and the terminal outcome is audited by the caller.
+            }
+        }
+        const lifeline = this.d.lifelineTopicId();
+        if (lifeline !== undefined) {
+            // Money-critical: even the lifeline leg prefers the durable relay.
+            if (moneyCritical && this.d.enqueueDurable) {
+                try {
+                    if (this.d.enqueueDurable(lifeline, text))
+                        return 'queued-durable';
+                }
+                catch {
+                    // @silent-fallback-ok: same degradation ladder as above.
+                }
+            }
+            try {
+                if (await this.d.sendToTopic(lifeline, text))
+                    return 'sent-lifeline';
+            }
+            catch {
+                // @silent-fallback-ok: terminal 'failed' is returned below and the
+                // dispatcher leaves the alert UN-latched (eligible for re-send).
+            }
+        }
+        return 'failed';
+    }
+    /** G5: a changed operator-configured id is made AUDIBLE, never silent. */
+    async announceRepointIfChanged() {
+        let configured;
+        try {
+            configured = this.d.resolver.configuredTopicIdForRepointCheck();
+        }
+        catch {
+            return; // @silent-fallback-ok: repoint detection is best-effort observability
+        }
+        if (configured === this.lastConfiguredId)
+            return;
+        const old = this.lastConfiguredId;
+        this.lastConfiguredId = configured;
+        if (old === undefined || configured === undefined)
+            return; // first observation / unset — nothing to announce
+        const note = `🔀 Spend alerts now route to topic ${configured} (was ${old}). If you didn't change routingSpend.alerts.telegramTopicId, check your config.`;
+        this.d.audit?.({ channel: this.id, outcome: 'repoint', from: old, to: configured });
+        // Both topics, best-effort — the announcement must never block a delivery.
+        await Promise.allSettled([this.d.sendToTopic(old, note), this.d.sendToTopic(configured, note)]);
+    }
+}
+/** Deterministic delivery id for the durable relay (idempotent enqueue). */
+export function spendAlertDeliveryId(topicId, text) {
+    return 'spend-alert:' + crypto.createHash('sha256').update(`${topicId}|${text}`).digest('hex').slice(0, 24);
+}
+//# sourceMappingURL=TelegramSpendTopicChannel.js.map

package/dist/core/TelegramSpendTopicChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelegramSpendTopicChannel.js","sourceRoot":"","sources":["../../src/core/TelegramSpendTopicChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAmBjC,MAAM,OAAO,yBAAyB;IAC3B,EAAE,GAAG,UAAU,CAAC;IACR,CAAC,CAAgC;IAClD,qEAAqE;IAC7D,gBAAgB,CAAqB;IAE7C,YAAY,IAAmC;QAC7C,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,aAAsB;QAChD,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,+DAA+D;YAC/D,IAAI,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;wBACzC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;wBACzE,OAAO,gBAAgB,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;oBACpE,uEAAuE;gBACzE,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC;oBAAE,OAAO,MAAM,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;gBACtE,mEAAmE;gBACnE,wEAAwE;YAC1E,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,mEAAmE;YACnE,IAAI,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC;wBAAE,OAAO,gBAAgB,CAAC;gBACrE,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO,eAAe,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,wBAAwB;QACpC,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,gCAAgC,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,sEAAsE;QAChF,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,CAAC,gBAAgB;YAAE,OAAO;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAClC,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,kDAAkD;QAC7G,MAAM,IAAI,GAAG,sCAAsC,UAAU,SAAS,GAAG,iFAAiF,CAAC;QAC3J,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACpF,2EAA2E;QAC3E,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAY;IAChE,OAAO,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9G,CAAC"}