@aeolus-fleet/gateway 0.32.2 → 0.34.0

package/dist/core/slack/answer-in-slack.js

@@ -0,0 +1,59 @@
+import { ANSWER_CONTENT_TYPE, questionSchema } from '@aeolus-fleet/common';
+import { err, ok } from '../shared/result.js';
+import { isSignedBy } from './slack-request.js';
+import { STORED_REACTION } from './send-slack-events.js';
+/** The question's id in a delivery's payload; none when it is no question. */
+function questionIdOf(payload) {
+    try {
+        const parsed = JSON.parse(payload);
+        return questionSchema.safeParse(parsed).data?.id;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Use case: the person presses an option's button under a question the
+ * gateway posted to them in Slack (gateway scopes 9.5 step 2). Signed as an
+ * event is, by the person the question was posted to, the press sends the
+ * answer as their person ship, to the question's sender in reply to it,
+ * keyed as an answer on the gateway's page is; then the delivery is handled
+ * and the question reacted to, as a message core stored is. Core's refusal
+ * is said in the question's thread. The press names the question's fleet
+ * message, as its button carries it, so a press that comes before the
+ * gateway kept the post's Slack message is answered too; the delivery not
+ * acknowledged yet, the press, the person's own act, acknowledges it.
+ */
+export function createAnswerInSlack(deps) {
+    return async ({ appId, teamId, userId, channel, messageTs, messageId, option, body, timestamp, signature }) => {
+        const app = await deps.apps.findByAppId(appId);
+        if (!isSignedBy(app, { request: { body, timestamp, signature }, signatures: deps.signatures, clock: deps.clock })) {
+            return err({ kind: 'notSigned' });
+        }
+        const link = await deps.links.find(app.fleetId, { teamId, userId });
+        const kept = link?.stoppedAt === null ? await deps.posts.ofMessage(app.fleetId, { personShipId: link.personShipId, messageId }) : undefined;
+        const post = kept?.appId === appId && kept.channel === channel ? kept : undefined;
+        const crew = post === undefined ? undefined : await deps.crews.find(app.fleetId, post.personShipId);
+        if (post === undefined || post.deliveryId === null || post.senderShipId === null || crew === undefined || app.bot === null) {
+            return ok({ kind: 'ignored' });
+        }
+        if (post.ackedAt === null) {
+            // Core reads a delivery again only once acknowledged; a refusal leaves it unread, and the press ignored.
+            await deps.door.ack(crew.crewToken, post.deliveryId);
+        }
+        const delivery = await deps.door.delivery(crew.crewToken, post.deliveryId);
+        const questionId = delivery.isOk ? questionIdOf(delivery.value.payload) : undefined;
+        if (!delivery.isOk || questionId === undefined) {
+            return ok({ kind: 'ignored' });
+        }
+        const replied = await deps.door.reply(crew.crewToken, { to: post.senderShipId, inReplyTo: post.messageId, contentType: ANSWER_CONTENT_TYPE, payload: JSON.stringify({ questionId, option }), idempotencyKey: `answer-${post.deliveryId}` });
+        if (!replied.isOk) {
+            await deps.slack.postInThread(app.bot.token, { channel, threadTs: messageTs, text: `${delivery.value.senderName} did not take your answer: ${replied.error.message}` });
+            return ok({ kind: 'refused' });
+        }
+        await deps.door.handled(crew.crewToken, post.deliveryId);
+        await deps.slack.react(app.bot.token, { channel, ts: messageTs, name: STORED_REACTION });
+        return ok({ kind: 'answered' });
+    };
+}
+//# sourceMappingURL=answer-in-slack.js.map

package/dist/core/slack/answer-in-slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer-in-slack.js","sourceRoot":"","sources":["../../../src/core/slack/answer-in-slack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAkB,MAAM,sBAAsB,CAAC;AAI3F,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,UAAU,EAAsB,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAIzD,8EAA8E;AAC9E,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,IASnC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QAC5G,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAClH,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5I,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACpG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC3H,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,yGAAyG;YACzG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,UAAU,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5O,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,8BAA8B,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxK,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/complete-install.d.ts

@@ -0,0 +1,27 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { InstallStates, SlackApps, SlackTooling, SlackWorkspaces } from './ports.js';
+export type CompleteInstallRefusal = DomainError<'INSTALL_REFUSED' | 'SLACK_NOT_CONNECTED' | 'OTHER_WORKSPACE' | 'SLACK_UNAVAILABLE'>;
+export type CompleteInstall = (input: {
+    code: string;
+    state: string;
+}) => Promise<Result<{
+    fleetId: FleetId;
+}, CompleteInstallRefusal>>;
+/**
+ * Use case: Slack's install screen sends the person back with a code and
+ * the state the gateway sealed (gateway scopes 9.1). Within its ten minutes,
+ * the code is turned into the app's bot token, kept in the vault, and the
+ * workspace's name kept as Slack says it. An install into another workspace
+ * than the fleet's keeps nothing.
+ */
+export declare function createCompleteInstall(deps: {
+    slack: Pick<SlackTooling, 'completeInstall'>;
+    apps: Pick<SlackApps, 'find' | 'save'>;
+    workspaces: Pick<SlackWorkspaces, 'find' | 'change'>;
+    states: InstallStates;
+    clock: Clock;
+    installRedirectUrl: string;
+}): CompleteInstall;

package/dist/core/slack/complete-install.js

@@ -0,0 +1,36 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/**
+ * Use case: Slack's install screen sends the person back with a code and
+ * the state the gateway sealed (gateway scopes 9.1). Within its ten minutes,
+ * the code is turned into the app's bot token, kept in the vault, and the
+ * workspace's name kept as Slack says it. An install into another workspace
+ * than the fleet's keeps nothing.
+ */
+export function createCompleteInstall(deps) {
+    return async ({ code, state }) => {
+        const opened = deps.states.open(state);
+        const app = opened !== undefined && opened.expiresAt > deps.clock.now() ? await deps.apps.find(opened.fleetId, opened.appId) : undefined;
+        if (opened === undefined || app === undefined) {
+            return refuse('INSTALL_REFUSED', 'This install did not start at the gateway, or took longer than ten minutes: press Install again');
+        }
+        const workspace = await deps.workspaces.find(opened.fleetId);
+        if (workspace === undefined) {
+            return refuse('SLACK_NOT_CONNECTED', 'The fleet is connected to no Slack workspace');
+        }
+        const installed = await deps.slack.completeInstall({ clientId: app.clientId, clientSecret: app.clientSecret, code, redirectUrl: deps.installRedirectUrl });
+        if (!installed.isOk) {
+            return installed.error.kind === 'refused' ? refuse('INSTALL_REFUSED', `Slack refused the install (${installed.error.error}): press Install again`) : refuse('SLACK_UNAVAILABLE', slackUnavailableMessage(installed.error));
+        }
+        const { teamId, teamName, botToken, botUserId } = installed.value;
+        if (teamId !== workspace.teamId) {
+            return refuse('OTHER_WORKSPACE', `The fleet is connected to ${workspace.teamName ?? workspace.teamId}: install into that workspace`);
+        }
+        await deps.apps.save({ ...app, bot: { token: botToken, userId: botUserId }, installStartedAt: null, removedInSlackAt: null });
+        // Held, so a configuration token rotated meanwhile is kept.
+        await deps.workspaces.change(opened.fleetId, (current) => Promise.resolve({ ...current, teamName }));
+        return ok({ fleetId: opened.fleetId });
+    };
+}
+//# sourceMappingURL=complete-install.js.map

package/dist/core/slack/complete-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-install.js","sourceRoot":"","sources":["../../../src/core/slack/complete-install.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAMjE;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAOrC;IACC,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzI,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,iBAAiB,EAAE,iGAAiG,CAAC,CAAC;QACtI,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC3J,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,8BAA8B,SAAS,CAAC,KAAK,CAAC,KAAK,wBAAwB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7N,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAClE,IAAI,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,+BAA+B,CAAC,CAAC;QACvI,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9H,4DAA4D;QAC5D,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACrG,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/complete-link.d.ts

@@ -0,0 +1,41 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { AccountOfSignIn } from '../account-sign-in/account-of-sign-in.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { LinkStates, ShipNames, SlackApps, SlackLinks, SlackSignIn, SlackWorkspaces } from './ports.js';
+/** Why no link was kept; a link refused for one kept already names the fleet, and the first link's account or Slack name. */
+export type CompleteLinkRefusal = DomainError<'LINK_REFUSED' | 'SLACK_NOT_CONNECTED' | 'NO_SUCH_BOT' | 'OTHER_WORKSPACE' | 'SLACK_UNAVAILABLE'> | (DomainError<'SLACK_USER_LINKED' | 'ACCOUNT_LINKED'> & {
+    readonly fleetId: FleetId;
+    readonly name: string;
+});
+export type CompleteLink = (input: {
+    code: string;
+    state: string;
+    signIn: string | undefined;
+}) => Promise<Result<{
+    fleetId: FleetId;
+}, CompleteLinkRefusal>>;
+/**
+ * Use case: Sign in with Slack sends the person back with a code and the
+ * link's state the gateway sealed (gateway scopes 9.3). Within its ten
+ * minutes, the code names the Slack workspace and user, and the link is kept
+ * by fleet, workspace and user, and person ship. One Slack user links to one
+ * account per fleet: a second link is refused, naming the first. An account
+ * keeps one link, so linking another Slack user waits until it is unlinked.
+ * The same user linking the same account again links it anew, as after a
+ * disabled account's link stopped. The link completes only in a browser
+ * whose shared sign-in names the account that started it, so a followed
+ * link never attaches the follower's Slack user to the starter's account.
+ */
+export declare function createCompleteLink(deps: {
+    workspaces: Pick<SlackWorkspaces, 'find'>;
+    apps: Pick<SlackApps, 'gatewayBot'>;
+    links: SlackLinks;
+    signIn: Pick<SlackSignIn, 'complete'>;
+    states: LinkStates;
+    accountOf: (asked: Parameters<AccountOfSignIn>[0]) => ReturnType<AccountOfSignIn>;
+    shipNames: ShipNames;
+    clock: Clock;
+    linkRedirectUrl: string;
+}): CompleteLink;

package/dist/core/slack/complete-link.js

@@ -0,0 +1,64 @@
+import { refuse } from '../shared/errors.js';
+import { err, ok } from '../shared/result.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/**
+ * Use case: Sign in with Slack sends the person back with a code and the
+ * link's state the gateway sealed (gateway scopes 9.3). Within its ten
+ * minutes, the code names the Slack workspace and user, and the link is kept
+ * by fleet, workspace and user, and person ship. One Slack user links to one
+ * account per fleet: a second link is refused, naming the first. An account
+ * keeps one link, so linking another Slack user waits until it is unlinked.
+ * The same user linking the same account again links it anew, as after a
+ * disabled account's link stopped. The link completes only in a browser
+ * whose shared sign-in names the account that started it, so a followed
+ * link never attaches the follower's Slack user to the starter's account.
+ */
+export function createCompleteLink(deps) {
+    return async ({ code, state, signIn }) => {
+        const now = deps.clock.now();
+        const opened = deps.states.open(state);
+        if (opened === undefined || opened.expiresAt <= now) {
+            return refuse('LINK_REFUSED', 'This link did not start at the gateway, or took longer than ten minutes: press Link Slack again');
+        }
+        const { fleetId, accountId, personShipId } = opened;
+        const signedIn = signIn === undefined ? undefined : await deps.accountOf({ signIn, fleetId });
+        if (signedIn === undefined || !signedIn.isOk || signedIn.value.accountId !== accountId) {
+            return refuse('LINK_REFUSED', 'This link was started by another account or browser: sign in and press Link Slack again');
+        }
+        const workspace = await deps.workspaces.find(fleetId);
+        if (workspace === undefined) {
+            return refuse('SLACK_NOT_CONNECTED', 'The fleet is connected to no Slack workspace');
+        }
+        const bot = await deps.apps.gatewayBot(fleetId);
+        if (bot === undefined) {
+            return refuse('NO_SUCH_BOT', "The fleet's own Slack bot is not made");
+        }
+        const slackSignIn = await deps.signIn.complete({ clientId: bot.clientId, clientSecret: bot.clientSecret, code, redirectUrl: deps.linkRedirectUrl });
+        if (!slackSignIn.isOk) {
+            return slackSignIn.error.kind === 'refused' ? refuse('LINK_REFUSED', `Slack refused the sign-in (${slackSignIn.error.error}): press Link Slack again`) : refuse('SLACK_UNAVAILABLE', slackUnavailableMessage(slackSignIn.error));
+        }
+        const { teamId, userId, name } = slackSignIn.value;
+        if (teamId !== workspace.teamId) {
+            return refuse('OTHER_WORKSPACE', `The fleet is connected to ${workspace.teamName ?? workspace.teamId}: sign in with Slack there`);
+        }
+        const first = await deps.links.find(fleetId, { teamId, userId });
+        if (first !== undefined && first.accountId !== accountId) {
+            const firstName = (await deps.shipNames.nameOf(fleetId, first.personShipId)) ?? 'another account';
+            return err({ kind: 'SLACK_USER_LINKED', message: `This Slack account is linked to ${firstName} in this fleet already`, fleetId, name: firstName });
+        }
+        const own = await deps.links.ofAccount(fleetId, accountId);
+        if (own !== undefined && own.slackUserId !== userId) {
+            return err({ kind: 'ACCOUNT_LINKED', message: `Your account is linked to Slack as @${own.slackName} already: unlink it on the Overview first`, fleetId, name: own.slackName });
+        }
+        if (own !== undefined) {
+            await deps.links.remove(fleetId, accountId);
+        }
+        const added = await deps.links.add({ fleetId, teamId, slackUserId: userId, slackName: name, accountId, personShipId, linkedAt: now, stoppedAt: null, isShowingAll: false });
+        if (added === 'taken') {
+            // Another link of the Slack user or the account was kept meanwhile.
+            return refuse('LINK_REFUSED', 'This Slack account or your account was linked meanwhile: reload the Overview');
+        }
+        return ok({ fleetId });
+    };
+}
+//# sourceMappingURL=complete-link.js.map

package/dist/core/slack/complete-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-link.js","sourceRoot":"","sources":["../../../src/core/slack/complete-link.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AASjE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAUlC;IACC,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACpD,OAAO,MAAM,CAAC,cAAc,EAAE,iGAAiG,CAAC,CAAC;QACnI,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9F,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACvF,OAAO,MAAM,CAAC,cAAc,EAAE,yFAAyF,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,MAAM,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACpJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,8BAA8B,WAAW,CAAC,KAAK,CAAC,KAAK,2BAA2B,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QACnO,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,MAAM,4BAA4B,CAAC,CAAC;QACpI,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClG,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,mCAAmC,SAAS,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACrJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,uCAAuC,GAAG,CAAC,SAAS,2CAA2C,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QACjL,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5K,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,oEAAoE;YACpE,OAAO,MAAM,CAAC,cAAc,EAAE,8EAA8E,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/connect-slack.d.ts

@@ -0,0 +1,34 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { ShipNames, SlackApps, SlackTooling, SlackWorkspaces } from './ports.js';
+import type { SlackAddresses } from './slack-app.js';
+/** The scope that connects Slack and exposes ships as bots (gateway scopes B6). */
+export declare const SLACK_SCOPE = "gateway:slack";
+export type ConnectSlackRefusal = DomainError<'SLACK_SCOPE_NOT_HELD' | 'NOT_AN_ACCOUNT' | 'ALREADY_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE' | 'OTHER_WORKSPACE'>;
+export type ConnectSlack = (input: {
+    actor: Actor;
+    refreshToken: string;
+    fleetName: string;
+}) => Promise<Result<{
+    isGatewayBotMade: boolean;
+}, ConnectSlackRefusal>>;
+/**
+ * Use case: an actor holding gateway:slack connects the fleet to one Slack
+ * workspace by pasting an app configuration refresh token (gateway scopes
+ * 9.1), signed in with their account: the token is a Slack user's own.
+ * The token is rotated at once, which proves it and names the workspace,
+ * and the new pair kept. Then the gateway makes its own bot (B5); when Slack
+ * does not make it now, the fleet stays connected and Install makes it.
+ * After Slack refused the kept token, a new token of the same workspace
+ * connects again, keeping every app made.
+ */
+export declare function createConnectSlack(deps: {
+    slack: Pick<SlackTooling, 'rotateConfigurationToken' | 'makeApp'>;
+    workspaces: Pick<SlackWorkspaces, 'find' | 'save'>;
+    apps: Pick<SlackApps, 'gatewayBot' | 'save'>;
+    shipNames: ShipNames;
+    clock: Clock;
+    addresses: SlackAddresses;
+}): ConnectSlack;

package/dist/core/slack/connect-slack.js

@@ -0,0 +1,54 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { gatewayBotOf } from './gateway-bot.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/** The scope that connects Slack and exposes ships as bots (gateway scopes B6). */
+export const SLACK_SCOPE = 'gateway:slack';
+/**
+ * Use case: an actor holding gateway:slack connects the fleet to one Slack
+ * workspace by pasting an app configuration refresh token (gateway scopes
+ * 9.1), signed in with their account: the token is a Slack user's own.
+ * The token is rotated at once, which proves it and names the workspace,
+ * and the new pair kept. Then the gateway makes its own bot (B5); when Slack
+ * does not make it now, the fleet stays connected and Install makes it.
+ * After Slack refused the kept token, a new token of the same workspace
+ * connects again, keeping every app made.
+ */
+export function createConnectSlack(deps) {
+    return async ({ actor, refreshToken, fleetName }) => {
+        if (!actor.scopes.includes(SLACK_SCOPE)) {
+            return refuse('SLACK_SCOPE_NOT_HELD', `Connecting Slack needs ${SLACK_SCOPE}`);
+        }
+        if (actor.kind !== 'account' || actor.personShipId === null) {
+            return refuse('NOT_AN_ACCOUNT', "Connect Slack on the gateway's pages, signed in with your account: a configuration token is a Slack user's own");
+        }
+        const kept = await deps.workspaces.find(actor.fleetId);
+        if (kept !== undefined && !kept.isTokenRefused) {
+            return refuse('ALREADY_CONNECTED', 'The fleet is connected to a Slack workspace already');
+        }
+        const rotated = await deps.slack.rotateConfigurationToken(refreshToken);
+        if (!rotated.isOk) {
+            return rotated.error.kind === 'refused'
+                ? refuse('SLACK_TOKEN_REFUSED', `Slack refused the configuration token (${rotated.error.error}): copy a new one from your Slack app management page`)
+                : refuse('SLACK_UNAVAILABLE', slackUnavailableMessage(rotated.error));
+        }
+        const { token, teamId } = rotated.value;
+        if (kept !== undefined && kept.teamId !== teamId) {
+            return refuse('OTHER_WORKSPACE', `The fleet is connected to ${kept.teamName ?? kept.teamId}: connect with a configuration token of that workspace`);
+        }
+        const now = deps.clock.now();
+        const name = (await deps.shipNames.nameOf(actor.fleetId, actor.personShipId)) ?? actor.personShipId;
+        await deps.workspaces.save({
+            fleetId: actor.fleetId,
+            teamId,
+            teamName: kept?.teamName ?? null,
+            connectedBy: { shipId: actor.personShipId, name },
+            connectedAt: now,
+            token,
+            isTokenRefused: false,
+        });
+        const bot = await gatewayBotOf(deps, { fleetId: actor.fleetId, fleetName, accessToken: token.accessToken });
+        return ok({ isGatewayBotMade: bot.isOk });
+    };
+}
+//# sourceMappingURL=connect-slack.js.map

package/dist/core/slack/connect-slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-slack.js","sourceRoot":"","sources":["../../../src/core/slack/connect-slack.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAM3C;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAOlC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,sBAAsB,EAAE,0BAA0B,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,gBAAgB,EAAE,gHAAgH,CAAC,CAAC;QACpJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,OAAO,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;gBACrC,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,OAAO,CAAC,KAAK,CAAC,KAAK,uDAAuD,CAAC;gBACrJ,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,wDAAwD,CAAC,CAAC;QACtJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC;QACpG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACzB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM;YACN,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI;YAChC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE;YACjD,WAAW,EAAE,GAAG;YAChB,KAAK;YACL,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5G,OAAO,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/disconnect-slack.d.ts

@@ -0,0 +1,21 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { SlackApps, SlackTooling, SlackWorkspaces } from './ports.js';
+import { type TakeAccessToken } from './take-access-token.js';
+export type DisconnectSlack = (input: {
+    actor: Actor;
+}) => Promise<Result<undefined, DomainError<'SLACK_SCOPE_NOT_HELD' | 'SLACK_NOT_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE'>>>;
+/**
+ * Use case: an actor holding gateway:slack disconnects the fleet's
+ * workspace (gateway scopes 9.1, after the page's confirm): every bot the
+ * gateway made is removed in Slack, then the workspace and its apps are
+ * forgotten. An app Slack refuses to remove is one it no longer knows. When
+ * Slack does not answer, everything is kept, to disconnect again.
+ */
+export declare function createDisconnectSlack(deps: {
+    slack: Pick<SlackTooling, 'removeApp'>;
+    workspaces: Pick<SlackWorkspaces, 'remove'>;
+    apps: Pick<SlackApps, 'all'>;
+    takeAccessToken: TakeAccessToken;
+}): DisconnectSlack;

package/dist/core/slack/disconnect-slack.js

@@ -0,0 +1,31 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { SLACK_SCOPE } from './connect-slack.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/**
+ * Use case: an actor holding gateway:slack disconnects the fleet's
+ * workspace (gateway scopes 9.1, after the page's confirm): every bot the
+ * gateway made is removed in Slack, then the workspace and its apps are
+ * forgotten. An app Slack refuses to remove is one it no longer knows. When
+ * Slack does not answer, everything is kept, to disconnect again.
+ */
+export function createDisconnectSlack(deps) {
+    return async ({ actor }) => {
+        if (!actor.scopes.includes(SLACK_SCOPE)) {
+            return refuse('SLACK_SCOPE_NOT_HELD', `Disconnecting Slack needs ${SLACK_SCOPE}`);
+        }
+        const accessToken = await deps.takeAccessToken(actor.fleetId);
+        if (!accessToken.isOk) {
+            return accessToken;
+        }
+        for (const app of await deps.apps.all(actor.fleetId)) {
+            const removed = await deps.slack.removeApp(accessToken.value, app.appId);
+            if (!removed.isOk && removed.error.kind !== 'refused') {
+                return refuse('SLACK_UNAVAILABLE', slackUnavailableMessage(removed.error));
+            }
+        }
+        await deps.workspaces.remove(actor.fleetId);
+        return ok(undefined);
+    };
+}
+//# sourceMappingURL=disconnect-slack.js.map

package/dist/core/slack/disconnect-slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disconnect-slack.js","sourceRoot":"","sources":["../../../src/core/slack/disconnect-slack.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,uBAAuB,EAAwB,MAAM,wBAAwB,CAAC;AAIvF;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA6J;IACjM,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACtD,OAAO,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/expose-ship.d.ts

@@ -0,0 +1,35 @@
+import type { ShipId } from '@aeolus-fleet/common';
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { ActorCredential, CredentialOf } from '../actors/credential-of.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { ProxyShipKinds, SlackApps, SlackShips, SlackTooling } from './ports.js';
+import { type SlackAddresses } from './slack-app.js';
+import { type TakeAccessToken } from './take-access-token.js';
+export type ExposeShipRefusal = DomainError<'SLACK_SCOPE_NOT_HELD' | 'SLACK_NOT_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE' | 'CONFLICT' | 'NOT_EXPOSABLE' | 'NOT_REACHABLE' | 'FLEET_UNAVAILABLE'>;
+export type ExposeShip = (input: {
+    actor: Actor;
+    as: ActorCredential;
+    shipId: ShipId;
+}) => Promise<Result<{
+    appId: string;
+}, ExposeShipRefusal>>;
+/**
+ * Use case: an actor holding gateway:slack, within manage reach of the ship
+ * (B6), exposes it as a Slack bot (gateway scopes 9.2): an agent ship or an
+ * outside A2A agent's proxy ship, which take a message and answer (P-B3).
+ * The gateway makes the ship's app from a manifest, named after the ship,
+ * its statement's summary as the description, and keeps it by the ship's
+ * id, never its name (L20). Install follows.
+ */
+export declare function createExposeShip(deps: {
+    slack: Pick<SlackTooling, 'makeApp'>;
+    apps: Pick<SlackApps, 'ofShip' | 'save'>;
+    ships: SlackShips;
+    proxyShips: ProxyShipKinds;
+    takeAccessToken: TakeAccessToken;
+    credentialOf: CredentialOf;
+    clock: Clock;
+    addresses: SlackAddresses;
+}): ExposeShip;

package/dist/core/slack/expose-ship.js

@@ -0,0 +1,59 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { SLACK_SCOPE } from './connect-slack.js';
+import { shipBotDescription } from './slack-app.js';
+import { slackUnavailableMessage } from './take-access-token.js';
+/**
+ * Use case: an actor holding gateway:slack, within manage reach of the ship
+ * (B6), exposes it as a Slack bot (gateway scopes 9.2): an agent ship or an
+ * outside A2A agent's proxy ship, which take a message and answer (P-B3).
+ * The gateway makes the ship's app from a manifest, named after the ship,
+ * its statement's summary as the description, and keeps it by the ship's
+ * id, never its name (L20). Install follows.
+ */
+export function createExposeShip(deps) {
+    return async ({ actor, as, shipId }) => {
+        if (!actor.scopes.includes(SLACK_SCOPE)) {
+            return refuse('SLACK_SCOPE_NOT_HELD', `Exposing a ship as a Slack bot needs ${SLACK_SCOPE}`);
+        }
+        const { fleetId } = actor;
+        const ship = await deps.ships.read(fleetId, shipId);
+        if (!ship.isOk) {
+            return ship.error.code === 'UNAVAILABLE' ? refuse('FLEET_UNAVAILABLE', `The fleet did not answer: ${ship.error.message}`) : refuse('NOT_EXPOSABLE', `The fleet has no ship ${shipId}`);
+        }
+        const { name } = ship.value;
+        if ((await deps.apps.ofShip(fleetId, shipId)) !== undefined) {
+            return refuse('CONFLICT', `${name} is a Slack bot already`);
+        }
+        if (ship.value.status === 'retired') {
+            return refuse('NOT_EXPOSABLE', `${name} was retired`);
+        }
+        const proxyKind = await deps.proxyShips.kindOf(fleetId, shipId);
+        if (proxyKind === 'mcpServer') {
+            return refuse('NOT_EXPOSABLE', `${name} is an outside MCP server's proxy ship: it takes tool calls, not a person's words. Expose an agent ship that uses its tools`);
+        }
+        if (ship.value.kind !== 'agent' && proxyKind !== 'a2aAgent') {
+            return refuse('NOT_EXPOSABLE', `${name} is no agent ship nor an outside A2A agent's proxy ship`);
+        }
+        const credential = await deps.credentialOf(actor, as);
+        if (!credential.isOk) {
+            return credential;
+        }
+        const managed = await deps.ships.checkManage(credential.value, shipId);
+        if (!managed.isOk) {
+            return managed.error.code === 'UNAVAILABLE' ? refuse('FLEET_UNAVAILABLE', `The fleet did not say whether you manage ${name}: ${managed.error.message}`) : refuse('NOT_REACHABLE', managed.error.message);
+        }
+        const accessToken = await deps.takeAccessToken(fleetId);
+        if (!accessToken.isOk) {
+            return accessToken;
+        }
+        const description = shipBotDescription(ship.value, deps.addresses);
+        const made = await deps.slack.makeApp(accessToken.value, description);
+        if (!made.isOk) {
+            return refuse('SLACK_UNAVAILABLE', made.error.kind === 'refused' ? `Slack did not make ${name}'s bot (${made.error.error})` : slackUnavailableMessage(made.error));
+        }
+        await deps.apps.save({ fleetId, shipId, ...made.value, name: description.name, madeAt: deps.clock.now(), installStartedAt: null, bot: null, removedInSlackAt: null });
+        return ok({ appId: made.value.appId });
+    };
+}
+//# sourceMappingURL=expose-ship.js.map

package/dist/core/slack/expose-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expose-ship.js","sourceRoot":"","sources":["../../../src/core/slack/expose-ship.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAuB,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAwB,MAAM,wBAAwB,CAAC;AAQvF;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAShC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,sBAAsB,EAAE,wCAAwC,WAAW,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,yBAAyB,MAAM,EAAE,CAAC,CAAC;QACzL,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,yBAAyB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,IAAI,6HAA6H,CAAC,CAAC;QACvK,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,IAAI,yDAAyD,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3M,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACrK,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACtK,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/follow-exposed-ships.d.ts

@@ -0,0 +1,20 @@
+import type { SlackApps, SlackShips, SlackTooling, SlackWorkspaces } from './ports.js';
+import { type SlackAddresses } from './slack-app.js';
+import type { TakeAccessToken } from './take-access-token.js';
+export type FollowExposedShips = () => Promise<void>;
+/**
+ * Use case: one pass of the gateway reading each exposed ship by its id
+ * (gateway scopes 9.2, L20), in every fleet whose configuration token Slack
+ * has not refused. A renamed ship's bot is given its whole manifest anew,
+ * the new name kept once Slack took it; a retired ship's bot is deleted in
+ * Slack and forgotten. What the fleet or Slack does not answer now is
+ * followed at the next pass.
+ */
+export declare function createFollowExposedShips(deps: {
+    workspaces: Pick<SlackWorkspaces, 'rotatable'>;
+    apps: Pick<SlackApps, 'all' | 'save' | 'remove'>;
+    ships: Pick<SlackShips, 'read'>;
+    slack: Pick<SlackTooling, 'renameApp' | 'removeApp'>;
+    takeAccessToken: TakeAccessToken;
+    addresses: SlackAddresses;
+}): FollowExposedShips;

package/dist/core/slack/follow-exposed-ships.js

@@ -0,0 +1,43 @@
+import { shipBotDescription } from './slack-app.js';
+/**
+ * Use case: one pass of the gateway reading each exposed ship by its id
+ * (gateway scopes 9.2, L20), in every fleet whose configuration token Slack
+ * has not refused. A renamed ship's bot is given its whole manifest anew,
+ * the new name kept once Slack took it; a retired ship's bot is deleted in
+ * Slack and forgotten. What the fleet or Slack does not answer now is
+ * followed at the next pass.
+ */
+export function createFollowExposedShips(deps) {
+    return async () => {
+        for (const fleetId of await deps.workspaces.rotatable()) {
+            for (const app of await deps.apps.all(fleetId)) {
+                if (app.shipId === null) {
+                    continue;
+                }
+                const ship = await deps.ships.read(fleetId, app.shipId);
+                if (!ship.isOk) {
+                    continue;
+                }
+                const description = shipBotDescription(ship.value, deps.addresses);
+                const isRetired = ship.value.status === 'retired';
+                if (!isRetired && description.name === app.name) {
+                    continue;
+                }
+                const accessToken = await deps.takeAccessToken(fleetId);
+                if (!accessToken.isOk) {
+                    break;
+                }
+                if (isRetired) {
+                    const removed = await deps.slack.removeApp(accessToken.value, app.appId);
+                    if (removed.isOk || removed.error.kind === 'refused') {
+                        await deps.apps.remove(fleetId, app.appId);
+                    }
+                }
+                else if ((await deps.slack.renameApp(accessToken.value, { appId: app.appId, description })).isOk) {
+                    await deps.apps.save({ ...app, name: description.name });
+                }
+            }
+        }
+    };
+}
+//# sourceMappingURL=follow-exposed-ships.js.map

package/dist/core/slack/follow-exposed-ships.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"follow-exposed-ships.js","sourceRoot":"","sources":["../../../src/core/slack/follow-exposed-ships.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAuB,MAAM,gBAAgB,CAAC;AAKzE;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,OAAO,KAAK,IAAI,EAAE;QAChB,KAAK,MAAM,OAAO,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;YACxD,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,SAAS;gBACX,CAAC;gBACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;gBAClD,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;oBAChD,SAAS;gBACX,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;oBACtB,MAAM;gBACR,CAAC;gBACD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBACzE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACrD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACnG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/gateway-bot.d.ts

@@ -0,0 +1,20 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type Result } from '../shared/result.js';
+import type { SlackApps, SlackRefusal, SlackTooling } from './ports.js';
+import { type SlackAddresses, type SlackApp } from './slack-app.js';
+/**
+ * The fleet's own bot (B5): the one kept, or made now from its manifest and
+ * kept, with the configuration access token given. Slack's refusal is
+ * answered as is, and nothing is kept.
+ */
+export declare function gatewayBotOf(deps: {
+    slack: Pick<SlackTooling, 'makeApp'>;
+    apps: Pick<SlackApps, 'gatewayBot' | 'save'>;
+    clock: Clock;
+    addresses: SlackAddresses;
+}, made: {
+    fleetId: FleetId;
+    fleetName: string;
+    accessToken: string;
+}): Promise<Result<SlackApp, SlackRefusal>>;