@aeolus-fleet/gateway 0.32.1 → 0.33.0

package/dist/core/slack/slack-markdown.d.ts

@@ -0,0 +1,13 @@
+import type { SlackFile } from './slack-event.js';
+/**
+ * A person's Slack message as the Markdown the gateway sends to the fleet
+ * (gateway scopes 9.4 step 5): the mention of the bot removed, Slack's bold
+ * and strike, links, people and channels turned into Markdown, Slack's
+ * escapes undone, and each shared file added as its Slack link. Italics and
+ * code read the same in both.
+ */
+export declare function markdownOf(message: {
+    text: string;
+    botUserId: string;
+    files: readonly SlackFile[];
+}): string;

package/dist/core/slack/slack-markdown.js

@@ -0,0 +1,27 @@
+/** Slack's escapes in a message's text, and what each stands for. */
+const ESCAPES = [['&lt;', '<'], ['&gt;', '>'], ['&amp;', '&']];
+/**
+ * A person's Slack message as the Markdown the gateway sends to the fleet
+ * (gateway scopes 9.4 step 5): the mention of the bot removed, Slack's bold
+ * and strike, links, people and channels turned into Markdown, Slack's
+ * escapes undone, and each shared file added as its Slack link. Italics and
+ * code read the same in both.
+ */
+export function markdownOf(message) {
+    const { text, botUserId, files } = message;
+    let markdown = text
+        .replaceAll(new RegExp(`<@${botUserId}(\\|[^>]*)?>`, 'g'), '')
+        .replaceAll(/<@[A-Z0-9]+\|([^>]+)>/g, '@$1')
+        .replaceAll(/<@([A-Z0-9]+)>/g, '@$1')
+        .replaceAll(/<#[A-Z0-9]+\|([^>]+)>/g, '#$1')
+        .replaceAll(/<(https?:[^|>]+)\|([^>]+)>/g, '[$2]($1)')
+        .replaceAll(/<(https?:[^>]+)>/g, '$1')
+        .replaceAll(/(^|[\s(])\*([^*\n]+)\*(?=$|[\s).,!?:;])/g, '$1**$2**')
+        .replaceAll(/(^|[\s(])~([^~\n]+)~(?=$|[\s).,!?:;])/g, '$1~~$2~~');
+    for (const [escape, character] of ESCAPES) {
+        markdown = markdown.replaceAll(escape, character);
+    }
+    const links = files.map(({ name, permalink }) => `[${name}](${permalink})`);
+    return [markdown.trim(), ...links].filter((part) => part !== '').join('\n\n');
+}
+//# sourceMappingURL=slack-markdown.js.map

package/dist/core/slack/slack-markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-markdown.js","sourceRoot":"","sources":["../../../src/core/slack/slack-markdown.ts"],"names":[],"mappings":"AAEA,qEAAqE;AACrE,MAAM,OAAO,GAA2C,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;AAEvG;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAAyE;IAClG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC3C,IAAI,QAAQ,GAAG,IAAI;SAChB,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,SAAS,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;SAC7D,UAAU,CAAC,wBAAwB,EAAE,KAAK,CAAC;SAC3C,UAAU,CAAC,iBAAiB,EAAE,KAAK,CAAC;SACpC,UAAU,CAAC,wBAAwB,EAAE,KAAK,CAAC;SAC3C,UAAU,CAAC,6BAA6B,EAAE,UAAU,CAAC;SACrD,UAAU,CAAC,mBAAmB,EAAE,IAAI,CAAC;SACrC,UAAU,CAAC,0CAA0C,EAAE,UAAU,CAAC;SAClE,UAAU,CAAC,wCAAwC,EAAE,UAAU,CAAC,CAAC;IACpE,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,SAAS,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChF,CAAC"}

package/dist/core/slack/slack-post-of.d.ts

@@ -0,0 +1,27 @@
+import type { PersonDelivery } from '../people/ports.js';
+import type { SlackButton } from './ports.js';
+/** The most a Slack message shows in full. */
+export declare const MESSAGE_MAX_LENGTH = 40000;
+/** The most one block of a Slack message shows. */
+export declare const BLOCK_MAX_LENGTH = 3000;
+/** What a delivery shows as in Slack: its text in Slack's markup and a button per option, or a link to the gateway for what Slack does not show in full. */
+export type SlackShown = {
+    readonly kind: 'shown';
+    readonly text: string;
+    readonly buttons: readonly SlackButton[];
+} | {
+    readonly kind: 'link';
+    readonly text: string;
+};
+/**
+ * What a delivery shows as in Slack (gateway scopes 9.5 step 2): text and
+ * Markdown as text, Markdown in Slack's markup; a question as its title and
+ * context, one button per option; JSON as a code block. Another content
+ * type, or more than Slack shows in full (40,000 characters, a block 3,000),
+ * goes as a link to the gateway's pages. The gateway's own bot heads it
+ * with the sender's name.
+ */
+export declare function slackPostOf(delivery: PersonDelivery, shown: {
+    overviewUrl: string;
+    isHeadedBySender: boolean;
+}): SlackShown;

package/dist/core/slack/slack-post-of.js

@@ -0,0 +1,71 @@
+import { QUESTION_CONTENT_TYPE, questionSchema } from '@aeolus-fleet/common';
+/** The most a Slack message shows in full. */
+export const MESSAGE_MAX_LENGTH = 40_000;
+/** The most one block of a Slack message shows. */
+export const BLOCK_MAX_LENGTH = 3_000;
+/** The content type's essence, its parameters gone. */
+function essenceOf(contentType) {
+    return (contentType.split(';')[0] ?? '').trim().toLowerCase();
+}
+/** Text as Slack shows it as it is: its control characters escaped. */
+function escaped(text) {
+    return text.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
+}
+/** Markdown in Slack's markup: bold, strike, links and headings; italics, code and lists read the same. */
+function slackMarkupOf(markdown) {
+    return escaped(markdown)
+        .replaceAll(/\[([^\]]+)\]\((https?:[^)\s]+)\)/g, '<$2|$1>')
+        .replaceAll(/\*\*([^*\n]+)\*\*/g, '*$1*')
+        .replaceAll(/__([^_\n]+)__/g, '*$1*')
+        .replaceAll(/~~([^~\n]+)~~/g, '~$1~')
+        .replaceAll(/^#{1,6} +(.+)$/gm, '*$1*');
+}
+/**
+ * What a delivery shows as in Slack (gateway scopes 9.5 step 2): text and
+ * Markdown as text, Markdown in Slack's markup; a question as its title and
+ * context, one button per option; JSON as a code block. Another content
+ * type, or more than Slack shows in full (40,000 characters, a block 3,000),
+ * goes as a link to the gateway's pages. The gateway's own bot heads it
+ * with the sender's name.
+ */
+export function slackPostOf(delivery, shown) {
+    const { senderName, contentType, payload } = delivery;
+    const link = { kind: 'link', text: `${escaped(senderName)} sent you a message Slack does not show in full: <${shown.overviewUrl}|open it in the gateway>` };
+    const headed = (text) => (shown.isHeadedBySender ? `*${escaped(senderName)}*\n${text}` : text);
+    const essence = essenceOf(contentType);
+    let text;
+    let buttons = [];
+    if (essence === 'text/plain') {
+        text = escaped(payload);
+    }
+    else if (essence === 'text/markdown') {
+        text = slackMarkupOf(payload);
+    }
+    else if (essence === 'application/json') {
+        text = `\`\`\`${payload}\`\`\``;
+    }
+    else if (essence === QUESTION_CONTENT_TYPE) {
+        let parsed;
+        try {
+            parsed = JSON.parse(payload);
+        }
+        catch {
+            return link;
+        }
+        const question = questionSchema.safeParse(parsed);
+        if (!question.success) {
+            return link;
+        }
+        text = `*${escaped(question.data.title)}*\n${escaped(question.data.context)}`;
+        buttons = question.data.options.map(({ key, label }) => ({ text: label, option: key }));
+        if (headed(text).length > BLOCK_MAX_LENGTH) {
+            return link;
+        }
+    }
+    else {
+        return link;
+    }
+    const full = headed(text);
+    return full.length > MESSAGE_MAX_LENGTH ? link : { kind: 'shown', text: full, buttons };
+}
+//# sourceMappingURL=slack-post-of.js.map

package/dist/core/slack/slack-post-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-post-of.js","sourceRoot":"","sources":["../../../src/core/slack/slack-post-of.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK7E,8CAA8C;AAC9C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,mDAAmD;AACnD,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAKtC,uDAAuD;AACvD,SAAS,SAAS,CAAC,WAAmB;IACpC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,2GAA2G;AAC3G,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,OAAO,CAAC,QAAQ,CAAC;SACrB,UAAU,CAAC,mCAAmC,EAAE,SAAS,CAAC;SAC1D,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC;SACxC,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACpC,UAAU,CAAC,gBAAgB,EAAE,MAAM,CAAC;SACpC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,QAAwB,EAAE,KAAyD;IAC7G,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAe,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,qDAAqD,KAAK,CAAC,WAAW,0BAA0B,EAAE,CAAC;IACxK,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,GAAkB,EAAE,CAAC;IAChC,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;QAC7B,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,KAAK,eAAe,EAAE,CAAC;QACvC,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,OAAO,KAAK,kBAAkB,EAAE,CAAC;QAC1C,IAAI,GAAG,SAAS,OAAO,QAAQ,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QAC7C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC1F,CAAC"}

package/dist/core/slack/slack-post.d.ts

@@ -0,0 +1,31 @@
+import type { DeliveryId, FleetId, MessageId, ShipId } from '@aeolus-fleet/common';
+/**
+ * A fleet message as it is in Slack, for a person ship (gateway scopes
+ * 9.5): a delivery the gateway posts there, or the person's own message
+ * sent from there. It keeps where it is, by the bot's app, the conversation
+ * and its Slack message, so a reply goes into that conversation or thread
+ * and an answer in a thread replies to it. A delivery's post is kept before
+ * it is handed, then given its Slack message once Slack accepted it, then
+ * acknowledged: a post the gateway did not finish is finished at the next
+ * wake.
+ */
+export interface SlackPost {
+    readonly fleetId: FleetId;
+    readonly personShipId: ShipId;
+    readonly messageId: MessageId;
+    /** The delivery posted; none for the person's own message. */
+    readonly deliveryId: DeliveryId | null;
+    /** The ship that sent the delivery; none for the person's own message. */
+    readonly senderShipId: ShipId | null;
+    readonly appId: string;
+    readonly channel: string;
+    /** The Slack message, once Slack accepted the post. */
+    readonly ts: string | null;
+    /** The thread it is in, if any. */
+    readonly threadTs: string | null;
+    /** A link posted for what Slack does not show in full: handed only, as a wake (B4). */
+    readonly isLinkOnly: boolean;
+    readonly ackedAt: Date | null;
+}
+/** Whether the post is a delivery the gateway did not finish: not yet in Slack, or not yet acknowledged. */
+export declare function isUnfinished(post: SlackPost): boolean;

package/dist/core/slack/slack-post.js

@@ -0,0 +1,5 @@
+/** Whether the post is a delivery the gateway did not finish: not yet in Slack, or not yet acknowledged. */
+export function isUnfinished(post) {
+    return post.deliveryId !== null && (post.ts === null || (!post.isLinkOnly && post.ackedAt === null));
+}
+//# sourceMappingURL=slack-post.js.map

package/dist/core/slack/slack-post.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-post.js","sourceRoot":"","sources":["../../../src/core/slack/slack-post.ts"],"names":[],"mappings":"AA+BA,4GAA4G;AAC5G,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC;AACvG,CAAC"}

package/dist/core/slack/slack-request.d.ts

@@ -0,0 +1,17 @@
+import type { Clock } from '../shared/clock.js';
+import type { SlackSignatures } from './ports.js';
+import type { SlackApp } from './slack-app.js';
+/** How far a request's timestamp may be from now (gateway scopes 9.4 step 1). */
+export declare const EVENT_SKEW_MS: number;
+/** A request Slack sends for one of the gateway's apps: its raw body as signed, its timestamp and its signature. */
+export interface SignedRequest {
+    readonly body: string;
+    readonly timestamp: string;
+    readonly signature: string;
+}
+/** Whether Slack signed the request with the app's signing secret, its timestamp within 5 minutes of now: an event, or a press of a button. */
+export declare function isSignedBy(app: SlackApp | undefined, signed: {
+    request: SignedRequest;
+    signatures: SlackSignatures;
+    clock: Clock;
+}): app is SlackApp;

package/dist/core/slack/slack-request.js

@@ -0,0 +1,10 @@
+/** How far a request's timestamp may be from now (gateway scopes 9.4 step 1). */
+export const EVENT_SKEW_MS = 5 * 60 * 1000;
+const SECOND_MS = 1000;
+/** Whether Slack signed the request with the app's signing secret, its timestamp within 5 minutes of now: an event, or a press of a button. */
+export function isSignedBy(app, signed) {
+    const { request } = signed;
+    const sentAt = Number(request.timestamp) * SECOND_MS;
+    return app !== undefined && Number.isFinite(sentAt) && Math.abs(signed.clock.now().getTime() - sentAt) <= EVENT_SKEW_MS && signed.signatures.isSigned({ secret: app.signingSecret, ...request });
+}
+//# sourceMappingURL=slack-request.js.map

package/dist/core/slack/slack-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-request.js","sourceRoot":"","sources":["../../../src/core/slack/slack-request.ts"],"names":[],"mappings":"AAIA,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,SAAS,GAAG,IAAI,CAAC;AASvB,+IAA+I;AAC/I,MAAM,UAAU,UAAU,CAAC,GAAyB,EAAE,MAA6E;IACjI,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACnM,CAAC"}

package/dist/core/slack/slack-workspace.d.ts

@@ -0,0 +1,36 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+/**
+ * Slack's app configuration token (gateway scopes 9.1): an access token that
+ * makes and removes apps, for 12 hours, and a single-use refresh token that
+ * turns into the next pair. It belongs to the Slack user who issued it, and
+ * changes only the apps it made.
+ */
+export interface ConfigurationToken {
+    readonly accessToken: string;
+    readonly refreshToken: string;
+    readonly expiresAt: Date;
+}
+/** How long before its access token ends the gateway rotates a configuration token, so a pass that runs late still finds it fresh. */
+export declare const ROTATION_MARGIN_MS: number;
+/** Whether the access token works for at least the rotation margin from now; else the gateway rotates it first. */
+export declare function isFresh(token: ConfigurationToken, now: Date): boolean;
+/**
+ * A fleet's Slack workspace, connected by an actor holding gateway:slack
+ * (one workspace per fleet; a workspace may serve several fleets, P-B4).
+ * Its name is known once Slack named it, at the gateway's bot's install.
+ * A refused configuration token stays refused until someone connects again:
+ * bots already installed keep working on their own bot tokens.
+ */
+export interface SlackWorkspace {
+    readonly fleetId: FleetId;
+    readonly teamId: string;
+    readonly teamName: string | null;
+    /** The person ship of the account that connected it, by its name then. */
+    readonly connectedBy: {
+        readonly shipId: ShipId;
+        readonly name: string;
+    };
+    readonly connectedAt: Date;
+    readonly token: ConfigurationToken;
+    readonly isTokenRefused: boolean;
+}

package/dist/core/slack/slack-workspace.js

@@ -0,0 +1,7 @@
+/** How long before its access token ends the gateway rotates a configuration token, so a pass that runs late still finds it fresh. */
+export const ROTATION_MARGIN_MS = 60 * 60 * 1000;
+/** Whether the access token works for at least the rotation margin from now; else the gateway rotates it first. */
+export function isFresh(token, now) {
+    return token.expiresAt.getTime() - now.getTime() > ROTATION_MARGIN_MS;
+}
+//# sourceMappingURL=slack-workspace.js.map

package/dist/core/slack/slack-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-workspace.js","sourceRoot":"","sources":["../../../src/core/slack/slack-workspace.ts"],"names":[],"mappings":"AAcA,sIAAsI;AACtI,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,mHAAmH;AACnH,MAAM,UAAU,OAAO,CAAC,KAAyB,EAAE,GAAS;IAC1D,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC;AACxE,CAAC"}

package/dist/core/slack/start-install.d.ts

@@ -0,0 +1,43 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { ActorCredential, CredentialOf } from '../actors/credential-of.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { InstallStates, SlackApps, SlackShips, SlackTooling, SlackWorkspaces } from './ports.js';
+import type { SlackAddresses } from './slack-app.js';
+import { type TakeAccessToken } from './take-access-token.js';
+/** How long an install the gateway started may take to come back. */
+export declare const INSTALL_MS: number;
+export type StartInstallRefusal = DomainError<'SLACK_SCOPE_NOT_HELD' | 'SLACK_NOT_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE' | 'NO_SUCH_BOT' | 'NOT_REACHABLE' | 'FLEET_UNAVAILABLE'>;
+/** Install for the gateway's own bot, named after the fleet if it is made now, or for a ship's bot by its app id. */
+export type StartInstall = (input: {
+    actor: Actor;
+    as: ActorCredential;
+    bot: {
+        kind: 'gateway';
+        fleetName: string;
+    } | {
+        kind: 'ship';
+        appId: string;
+    };
+}) => Promise<Result<{
+    url: string;
+}, StartInstallRefusal>>;
+/**
+ * Use case: an actor holding gateway:slack presses Install (gateway scopes
+ * 9.1, 9.2): Slack's install screen for the bot, with the install's state
+ * sealed for ten minutes, and the bot waits for its install. For the
+ * gateway's bot, one Slack did not make at connect is made first; a ship's
+ * bot needs the actor within manage reach of the ship.
+ */
+export declare function createStartInstall(deps: {
+    slack: Pick<SlackTooling, 'makeApp'>;
+    apps: Pick<SlackApps, 'gatewayBot' | 'find' | 'save'>;
+    workspaces: Pick<SlackWorkspaces, 'find'>;
+    takeAccessToken: TakeAccessToken;
+    states: InstallStates;
+    ships: Pick<SlackShips, 'read' | 'checkManage'>;
+    credentialOf: CredentialOf;
+    clock: Clock;
+    addresses: SlackAddresses;
+}): StartInstall;

package/dist/core/slack/start-install.js

@@ -0,0 +1,57 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { SLACK_SCOPE } from './connect-slack.js';
+import { gatewayBotOf } from './gateway-bot.js';
+import { managedShipBot } from './ship-bot.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/** How long an install the gateway started may take to come back. */
+export const INSTALL_MS = 10 * 60 * 1000;
+/**
+ * Use case: an actor holding gateway:slack presses Install (gateway scopes
+ * 9.1, 9.2): Slack's install screen for the bot, with the install's state
+ * sealed for ten minutes, and the bot waits for its install. For the
+ * gateway's bot, one Slack did not make at connect is made first; a ship's
+ * bot needs the actor within manage reach of the ship.
+ */
+export function createStartInstall(deps) {
+    return async ({ actor, as, bot: asked }) => {
+        if (!actor.scopes.includes(SLACK_SCOPE)) {
+            return refuse('SLACK_SCOPE_NOT_HELD', `Installing a Slack bot needs ${SLACK_SCOPE}`);
+        }
+        const { fleetId } = actor;
+        if ((await deps.workspaces.find(fleetId)) === undefined) {
+            return refuse('SLACK_NOT_CONNECTED', 'The fleet is connected to no Slack workspace');
+        }
+        let bot;
+        if (asked.kind === 'ship') {
+            const shipBot = await managedShipBot(deps, { actor, as, appId: asked.appId });
+            if (!shipBot.isOk) {
+                return shipBot;
+            }
+            bot = shipBot.value;
+        }
+        else {
+            bot = await deps.apps.gatewayBot(fleetId);
+        }
+        if (bot === undefined && asked.kind === 'gateway') {
+            const accessToken = await deps.takeAccessToken(fleetId);
+            if (!accessToken.isOk) {
+                return accessToken;
+            }
+            const made = await gatewayBotOf(deps, { fleetId, fleetName: asked.fleetName, accessToken: accessToken.value });
+            if (!made.isOk) {
+                return refuse('SLACK_UNAVAILABLE', made.error.kind === 'refused' ? `Slack did not make the gateway's bot (${made.error.error})` : slackUnavailableMessage(made.error));
+            }
+            bot = made.value;
+        }
+        if (bot === undefined) {
+            return refuse('NO_SUCH_BOT', "The gateway's bot is not made");
+        }
+        const now = deps.clock.now();
+        await deps.apps.save({ ...bot, installStartedAt: now });
+        const url = new URL(bot.installUrl);
+        url.searchParams.set('state', deps.states.seal({ fleetId, appId: bot.appId, expiresAt: new Date(now.getTime() + INSTALL_MS) }));
+        return ok({ url: url.toString() });
+    };
+}
+//# sourceMappingURL=start-install.js.map

package/dist/core/slack/start-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-install.js","sourceRoot":"","sources":["../../../src/core/slack/start-install.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,uBAAuB,EAAwB,MAAM,wBAAwB,CAAC;AAEvF,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAOzC;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAUlC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,sBAAsB,EAAE,gCAAgC,WAAW,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACxD,OAAO,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,GAAyB,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;gBACtB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/G,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,yCAAyC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACzK,CAAC;YACD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAChI,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/start-link.d.ts

@@ -0,0 +1,32 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { CrewPersonShip } from '../people/crew-person-ship.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { LinkStates, SlackApps, SlackSignIn, SlackWorkspaces } from './ports.js';
+/** How long a link the gateway started may take to come back from Slack. */
+export declare const LINK_MS: number;
+export type StartLinkRefusal = DomainError<'NOT_A_PERSON' | 'SLACK_NOT_CONNECTED' | 'NO_SUCH_BOT' | 'FLEET_UNAVAILABLE'>;
+export type StartLink = (input: {
+    actor: Actor;
+}) => Promise<Result<{
+    url: string;
+}, StartLinkRefusal>>;
+/**
+ * Use case: a person presses Link Slack, on the Overview or in the answer a
+ * bot gave them in Slack (gateway scopes 9.3): Sign in with Slack through
+ * the fleet's own bot's app, for the fleet's workspace, with the link's
+ * state sealed for ten minutes. Only an account with a person ship in the
+ * fleet links. The gateway crews that ship now, with the account's token it
+ * holds only while the person is here, so their messages from Slack can be
+ * sent as it later.
+ */
+export declare function createStartLink(deps: {
+    workspaces: Pick<SlackWorkspaces, 'find'>;
+    apps: Pick<SlackApps, 'gatewayBot'>;
+    signIn: Pick<SlackSignIn, 'authorizeUrl'>;
+    states: LinkStates;
+    crewPersonShip: CrewPersonShip;
+    clock: Clock;
+    linkRedirectUrl: string;
+}): StartLink;

package/dist/core/slack/start-link.js

@@ -0,0 +1,46 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** How long a link the gateway started may take to come back from Slack. */
+export const LINK_MS = 10 * 60 * 1000;
+const NO_PERSON_SHIP = 'Your account has no person ship in this fleet';
+/**
+ * Use case: a person presses Link Slack, on the Overview or in the answer a
+ * bot gave them in Slack (gateway scopes 9.3): Sign in with Slack through
+ * the fleet's own bot's app, for the fleet's workspace, with the link's
+ * state sealed for ten minutes. Only an account with a person ship in the
+ * fleet links. The gateway crews that ship now, with the account's token it
+ * holds only while the person is here, so their messages from Slack can be
+ * sent as it later.
+ */
+export function createStartLink(deps) {
+    return async ({ actor }) => {
+        if (actor.kind !== 'account' || actor.personShipId === null || actor.accountToken === null) {
+            return refuse('NOT_A_PERSON', NO_PERSON_SHIP);
+        }
+        const { fleetId, accountId, personShipId, accountToken } = actor;
+        const workspace = await deps.workspaces.find(fleetId);
+        if (workspace === undefined) {
+            return refuse('SLACK_NOT_CONNECTED', 'The fleet is connected to no Slack workspace');
+        }
+        const bot = await deps.apps.gatewayBot(fleetId);
+        if (bot === undefined) {
+            return refuse('NO_SUCH_BOT', "The fleet's own Slack bot is not made");
+        }
+        const crewed = await deps.crewPersonShip({ fleetId, signedIn: { accountToken, personShipId } });
+        if (!crewed.isOk) {
+            switch (crewed.error.kind) {
+                case 'noPersonShip':
+                    return refuse('NOT_A_PERSON', NO_PERSON_SHIP);
+                case 'fleetRefused':
+                    return refuse('FLEET_UNAVAILABLE', `The fleet did not crew your person ship: ${crewed.error.message}`);
+                case 'signedOut':
+                case 'pagasaeUnavailable':
+                case 'notConnected':
+                    return refuse('FLEET_UNAVAILABLE', 'The fleet did not crew your person ship: try again in a moment');
+            }
+        }
+        const state = deps.states.seal({ fleetId, accountId, personShipId, expiresAt: new Date(deps.clock.now().getTime() + LINK_MS) });
+        return ok({ url: deps.signIn.authorizeUrl({ clientId: bot.clientId, redirectUrl: deps.linkRedirectUrl, state, teamId: workspace.teamId }) });
+    };
+}
+//# sourceMappingURL=start-link.js.map

package/dist/core/slack/start-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-link.js","sourceRoot":"","sources":["../../../src/core/slack/start-link.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAM,cAAc,GAAG,+CAA+C,CAAC;AAMvE;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,IAQ/B;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC3F,OAAO,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC1B,KAAK,cAAc;oBACjB,OAAO,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;gBAChD,KAAK,cAAc;oBACjB,OAAO,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzG,KAAK,WAAW,CAAC;gBACjB,KAAK,oBAAoB,CAAC;gBAC1B,KAAK,cAAc;oBACjB,OAAO,MAAM,CAAC,mBAAmB,EAAE,gEAAgE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QAChI,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/I,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/stop-slack-link.d.ts

@@ -0,0 +1,16 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import type { SlackLinks } from './ports.js';
+export type StopSlackLink = (account: {
+    fleetId: FleetId;
+    accountId: string;
+}) => Promise<void>;
+/**
+ * Use case: pagasae disabled the account (0055), so its Slack link stops
+ * (gateway scopes 9.3). It is kept, stopped from when it first stopped, so
+ * its Slack user is answered that the account cannot message the fleet now.
+ */
+export declare function createStopSlackLink(deps: {
+    links: Pick<SlackLinks, 'stop'>;
+    clock: Clock;
+}): StopSlackLink;

package/dist/core/slack/stop-slack-link.js

@@ -0,0 +1,9 @@
+/**
+ * Use case: pagasae disabled the account (0055), so its Slack link stops
+ * (gateway scopes 9.3). It is kept, stopped from when it first stopped, so
+ * its Slack user is answered that the account cannot message the fleet now.
+ */
+export function createStopSlackLink(deps) {
+    return ({ fleetId, accountId }) => deps.links.stop(fleetId, { accountId, at: deps.clock.now() });
+}
+//# sourceMappingURL=stop-slack-link.js.map

package/dist/core/slack/stop-slack-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-slack-link.js","sourceRoot":"","sources":["../../../src/core/slack/stop-slack-link.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAuD;IACzF,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC"}

package/dist/core/slack/take-access-token.d.ts

@@ -0,0 +1,25 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { SlackRefusal, SlackTooling, SlackWorkspaces } from './ports.js';
+export type TakeAccessTokenRefusal = DomainError<'SLACK_NOT_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE'>;
+export type TakeAccessToken = (fleetId: FleetId) => Promise<Result<string, TakeAccessTokenRefusal>>;
+/** What a page says of a configuration token Slack refused (gateway scopes 9.1). */
+export declare const TOKEN_REFUSED_MESSAGE = "Slack refused the configuration token. Connect again to make or change bots; bots already installed keep working";
+/** What a page says when Slack did not do what was asked for now: rate limited, or no answer. */
+export declare function slackUnavailableMessage(refusal: Exclude<SlackRefusal, {
+    kind: 'refused';
+}>): string;
+/**
+ * Use case: the fleet's configuration access token, to make or remove an app
+ * with. Fresh, it is used as kept; within its last hour it is rotated first,
+ * holding the workspace, so its single-use refresh token is spent once.
+ * Slack refusing the refresh token marks it refused until someone connects
+ * again; Slack not answering keeps the old pair, to rotate again later.
+ */
+export declare function createTakeAccessToken(deps: {
+    slack: Pick<SlackTooling, 'rotateConfigurationToken'>;
+    workspaces: Pick<SlackWorkspaces, 'change'>;
+    clock: Clock;
+}): TakeAccessToken;

package/dist/core/slack/take-access-token.js

@@ -0,0 +1,45 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { isFresh } from './slack-workspace.js';
+/** What a page says of a configuration token Slack refused (gateway scopes 9.1). */
+export const TOKEN_REFUSED_MESSAGE = 'Slack refused the configuration token. Connect again to make or change bots; bots already installed keep working';
+/** What a page says when Slack did not do what was asked for now: rate limited, or no answer. */
+export function slackUnavailableMessage(refusal) {
+    return refusal.kind === 'rateLimited' ? `Slack asks to wait ${String(refusal.retryAfterSeconds)} seconds: try again then` : 'Slack did not answer: try again';
+}
+/**
+ * Use case: the fleet's configuration access token, to make or remove an app
+ * with. Fresh, it is used as kept; within its last hour it is rotated first,
+ * holding the workspace, so its single-use refresh token is spent once.
+ * Slack refusing the refresh token marks it refused until someone connects
+ * again; Slack not answering keeps the old pair, to rotate again later.
+ */
+export function createTakeAccessToken(deps) {
+    return async (fleetId) => {
+        let outcome;
+        const rotate = async (workspace) => {
+            if (workspace.isTokenRefused) {
+                outcome = refuse('SLACK_TOKEN_REFUSED', TOKEN_REFUSED_MESSAGE);
+                return workspace;
+            }
+            if (isFresh(workspace.token, deps.clock.now())) {
+                outcome = ok(workspace.token.accessToken);
+                return workspace;
+            }
+            const rotated = await deps.slack.rotateConfigurationToken(workspace.token.refreshToken);
+            if (rotated.isOk) {
+                outcome = ok(rotated.value.token.accessToken);
+                return { ...workspace, token: rotated.value.token };
+            }
+            if (rotated.error.kind === 'refused') {
+                outcome = refuse('SLACK_TOKEN_REFUSED', TOKEN_REFUSED_MESSAGE);
+                return { ...workspace, isTokenRefused: true };
+            }
+            outcome = refuse('SLACK_UNAVAILABLE', slackUnavailableMessage(rotated.error));
+            return workspace;
+        };
+        await deps.workspaces.change(fleetId, rotate);
+        return outcome ?? refuse('SLACK_NOT_CONNECTED', 'The fleet is connected to no Slack workspace');
+    };
+}
+//# sourceMappingURL=take-access-token.js.map

package/dist/core/slack/take-access-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"take-access-token.js","sourceRoot":"","sources":["../../../src/core/slack/take-access-token.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAuB,MAAM,sBAAsB,CAAC;AAMpE,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,kHAAkH,CAAC;AAExJ,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,OAAmD;IACzF,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC,CAAC,iCAAiC,CAAC;AAChK,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA0H;IAC9J,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAA2D,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,EAAE,SAAyB,EAA2B,EAAE;YAC1E,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;gBAC/D,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;gBAC/C,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC1C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC9C,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,GAAG,MAAM,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;gBAC/D,OAAO,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAChD,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,OAAO,IAAI,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;IAClG,CAAC,CAAC;AACJ,CAAC"}