@cat-factory/contracts 0.6.0

package/dist/services.d.ts

@@ -0,0 +1,81 @@
+import * as v from 'valibot';
+/**
+ * The canonical, account-owned service record. Owns exactly one service frame
+ * block (`frameBlockId`) and, when connected, the GitHub repo the frame's tasks
+ * target (`installationId` + `repoGithubId`). Shared across the workspaces that
+ * mount it.
+ */
+export declare const serviceSchema: v.ObjectSchema<{
+    /** Globally unique service id (stable; survives re-mounting). */
+    readonly id: v.StringSchema<undefined>;
+    /** The owning account (org/personal), or null for a legacy/unscoped board. */
+    readonly accountId: v.NullableSchema<v.StringSchema<undefined>, undefined>;
+    /** The root service-frame block this service owns (its subtree is the service). */
+    readonly frameBlockId: v.StringSchema<undefined>;
+    /** The GitHub App installation backing the linked repo, when connected. */
+    readonly installationId: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    /** The GitHub numeric id of the linked repo, when connected. */
+    readonly repoGithubId: v.NullableSchema<v.NumberSchema<undefined>, undefined>;
+    /**
+     * The subdirectory within the linked repo this service lives in, relative to the
+     * repo root (e.g. `packages/api`). Set only for services in a monorepo (a repo
+     * flagged {@link GitHubRepo.isMonorepo}); null means the service is the whole repo.
+     * When the repo is a monorepo this path is fed to every agent working on the
+     * service so it operates within (and is told about) the right subtree.
+     */
+    readonly directory: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** Epoch ms the service was created. */
+    readonly createdAt: v.NumberSchema<undefined>;
+    /**
+     * How many workspaces currently mount this service. Derived (not persisted); set only on
+     * the org catalog so the board can badge a frame mounted on >1 board as "Shared". Absent
+     * means "not computed".
+     */
+    readonly mountCount: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+}, undefined>;
+export type Service = v.InferOutput<typeof serviceSchema>;
+/**
+ * A *mount*: a service placed onto a workspace's board. The primary key is
+ * `(workspaceId, serviceId)`. The position/size are the per-workspace LAYOUT
+ * OVERRIDE for the service's frame — each board can position the shared frame
+ * independently, while the task/module positions inside it stay shared.
+ */
+export declare const workspaceMountSchema: v.ObjectSchema<{
+    readonly workspaceId: v.StringSchema<undefined>;
+    readonly serviceId: v.StringSchema<undefined>;
+    /** Per-workspace board position of the service's frame. */
+    readonly position: v.ObjectSchema<{
+        readonly x: v.NumberSchema<undefined>;
+        readonly y: v.NumberSchema<undefined>;
+    }, undefined>;
+    /** Per-workspace dragged frame size; absent => auto-size from contents. */
+    readonly size: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+        readonly w: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+        readonly h: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+    }, undefined>, undefined>, undefined>;
+    /** Epoch ms the service was mounted onto this workspace. */
+    readonly createdAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type WorkspaceMount = v.InferOutput<typeof workspaceMountSchema>;
+/** Body for mounting an existing org service onto a workspace board. */
+export declare const mountServiceInputSchema: v.ObjectSchema<{
+    /** Where to place the frame on this board; defaults applied server-side when absent. */
+    readonly position: v.OptionalSchema<v.ObjectSchema<{
+        readonly x: v.NumberSchema<undefined>;
+        readonly y: v.NumberSchema<undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type MountServiceInput = v.InferOutput<typeof mountServiceInputSchema>;
+/** Body for updating a mount's per-workspace layout override. */
+export declare const updateMountInputSchema: v.ObjectSchema<{
+    readonly position: v.OptionalSchema<v.ObjectSchema<{
+        readonly x: v.NumberSchema<undefined>;
+        readonly y: v.NumberSchema<undefined>;
+    }, undefined>, undefined>;
+    readonly size: v.OptionalSchema<v.NullableSchema<v.ObjectSchema<{
+        readonly w: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+        readonly h: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.MinValueAction<number, 1, undefined>]>;
+    }, undefined>, undefined>, undefined>;
+}, undefined>;
+export type UpdateMountInput = v.InferOutput<typeof updateMountInputSchema>;
+//# sourceMappingURL=services.d.ts.map

package/dist/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAkB5B;;;;;GAKG;AACH,eAAO,MAAM,aAAa;IACxB,iEAAiE;;IAEjE,8EAA8E;;IAE9E,mFAAmF;;IAEnF,2EAA2E;;IAE3E,gEAAgE;;IAEhE;;;;;;OAMG;;IAEH,wCAAwC;;IAExC;;;;OAIG;;aAEH,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,aAAa,CAAC,CAAA;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;IAG/B,2DAA2D;;;;;IAE3D,2EAA2E;;;;;IAE3E,4DAA4D;;aAE5D,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEvE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB;IAClC,wFAAwF;;;;;aAExF,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAE7E,iEAAiE;AACjE,eAAO,MAAM,sBAAsB;;;;;;;;;aAGjC,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAA"}

package/dist/services.js

@@ -0,0 +1,77 @@
+import * as v from 'valibot';
+import { positionSchema, sizeSchema } from './primitives.js';
+// ---------------------------------------------------------------------------
+// In-org shared services.
+//
+// A *service* is the canonical, account-owned unit of work on the board: the
+// service frame plus its modules + tasks, its linked GitHub repo, its
+// executions and its sync. It is owned by an *account* (org), not a single
+// workspace. A *workspace* is a curated VIEW that *mounts* a subset of the
+// org's services; the same service can be mounted onto several teams' boards,
+// where its state and task list are one shared set (only the frame's board
+// position/size is per-workspace, carried on the mount).
+//
+// This is the deduplication seam: a service is synced once per org, and a state
+// change to it is relevant to every workspace that mounts it.
+// ---------------------------------------------------------------------------
+/**
+ * The canonical, account-owned service record. Owns exactly one service frame
+ * block (`frameBlockId`) and, when connected, the GitHub repo the frame's tasks
+ * target (`installationId` + `repoGithubId`). Shared across the workspaces that
+ * mount it.
+ */
+export const serviceSchema = v.object({
+    /** Globally unique service id (stable; survives re-mounting). */
+    id: v.string(),
+    /** The owning account (org/personal), or null for a legacy/unscoped board. */
+    accountId: v.nullable(v.string()),
+    /** The root service-frame block this service owns (its subtree is the service). */
+    frameBlockId: v.string(),
+    /** The GitHub App installation backing the linked repo, when connected. */
+    installationId: v.nullable(v.number()),
+    /** The GitHub numeric id of the linked repo, when connected. */
+    repoGithubId: v.nullable(v.number()),
+    /**
+     * The subdirectory within the linked repo this service lives in, relative to the
+     * repo root (e.g. `packages/api`). Set only for services in a monorepo (a repo
+     * flagged {@link GitHubRepo.isMonorepo}); null means the service is the whole repo.
+     * When the repo is a monorepo this path is fed to every agent working on the
+     * service so it operates within (and is told about) the right subtree.
+     */
+    directory: v.optional(v.nullable(v.string())),
+    /** Epoch ms the service was created. */
+    createdAt: v.number(),
+    /**
+     * How many workspaces currently mount this service. Derived (not persisted); set only on
+     * the org catalog so the board can badge a frame mounted on >1 board as "Shared". Absent
+     * means "not computed".
+     */
+    mountCount: v.optional(v.number()),
+});
+/**
+ * A *mount*: a service placed onto a workspace's board. The primary key is
+ * `(workspaceId, serviceId)`. The position/size are the per-workspace LAYOUT
+ * OVERRIDE for the service's frame — each board can position the shared frame
+ * independently, while the task/module positions inside it stay shared.
+ */
+export const workspaceMountSchema = v.object({
+    workspaceId: v.string(),
+    serviceId: v.string(),
+    /** Per-workspace board position of the service's frame. */
+    position: positionSchema,
+    /** Per-workspace dragged frame size; absent => auto-size from contents. */
+    size: v.optional(v.nullable(sizeSchema)),
+    /** Epoch ms the service was mounted onto this workspace. */
+    createdAt: v.number(),
+});
+/** Body for mounting an existing org service onto a workspace board. */
+export const mountServiceInputSchema = v.object({
+    /** Where to place the frame on this board; defaults applied server-side when absent. */
+    position: v.optional(positionSchema),
+});
+/** Body for updating a mount's per-workspace layout override. */
+export const updateMountInputSchema = v.object({
+    position: v.optional(positionSchema),
+    size: v.optional(v.nullable(sizeSchema)),
+});
+//# sourceMappingURL=services.js.map

package/dist/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../src/services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5D,8EAA8E;AAC9E,0BAA0B;AAC1B,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,yDAAyD;AACzD,EAAE;AACF,gFAAgF;AAChF,8DAA8D;AAC9D,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,iEAAiE;IACjE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,8EAA8E;IAC9E,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,mFAAmF;IACnF,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,2EAA2E;IAC3E,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACtC,gEAAgE;IAChE,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,wCAAwC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,2DAA2D;IAC3D,QAAQ,EAAE,cAAc;IACxB,2EAA2E;IAC3E,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxC,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,wFAAwF;IACxF,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;CACrC,CAAC,CAAA;AAGF,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;CACzC,CAAC,CAAA"}

package/dist/slack.d.ts

@@ -0,0 +1,104 @@
+import * as v from 'valibot';
+/**
+ * A account's Slack connection, as exposed to clients — safe metadata ONLY.
+ * The bot token is never part of this shape (it lives encrypted server-side).
+ */
+export declare const slackConnectionSchema: v.ObjectSchema<{
+    /** The Slack team (workspace) id, e.g. `T012AB3C4`. */
+    readonly teamId: v.StringSchema<undefined>;
+    /** The Slack team display name. */
+    readonly teamName: v.StringSchema<undefined>;
+    /** Team icon URL, when Slack returned one. */
+    readonly teamIconUrl: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** The bot user id the app posts as (`auth.test` `user_id`), when known. */
+    readonly botUserId: v.OptionalSchema<v.NullableSchema<v.StringSchema<undefined>, undefined>, undefined>;
+    /** OAuth scopes the bot token was granted, when known. */
+    readonly scopes: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly connectedAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type SlackConnection = v.InferOutput<typeof slackConnectionSchema>;
+/** Routing for a single notification type: whether it posts, and where. */
+export declare const slackRouteSchema: v.ObjectSchema<{
+    readonly enabled: v.BooleanSchema<undefined>;
+    /** A channel id (`C0123…`) or name (`#general`); empty = unrouted. */
+    readonly channel: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, undefined>]>;
+}, undefined>;
+export type SlackRoute = v.InferOutput<typeof slackRouteSchema>;
+/**
+ * A workspace's Slack notification settings: a partial map of notification type
+ * → route, plus whether to resolve @-mentions from the account member mapping. A
+ * type absent from `routes`, disabled, or with an empty channel does not post.
+ */
+export declare const slackNotificationSettingsSchema: v.ObjectSchema<{
+    readonly routes: v.RecordSchema<v.PicklistSchema<["merge_review", "pipeline_complete", "ci_failed", "test_failed", "requirement_review", "clarity_review", "release_regression", "decision_required"], undefined>, v.ObjectSchema<{
+        readonly enabled: v.BooleanSchema<undefined>;
+        /** A channel id (`C0123…`) or name (`#general`); empty = unrouted. */
+        readonly channel: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, undefined>]>;
+    }, undefined>, undefined>;
+    /** Resolve @-mentions from the per-account member mapping when posting. */
+    readonly mentionsEnabled: v.BooleanSchema<undefined>;
+    readonly updatedAt: v.NumberSchema<undefined>;
+}, undefined>;
+export type SlackNotificationSettings = v.InferOutput<typeof slackNotificationSettingsSchema>;
+/**
+ * Which kinds of notification a mapped member cares about. `product` people are
+ * @-mentioned on requirement-review findings (and otherwise left alone); everyone
+ * else is `engineering` and is only @-mentioned when they are the task's creator.
+ * Absent on a legacy entry means `engineering` (see {@link resolveMemberRole}).
+ */
+export declare const slackMemberRoleSchema: v.PicklistSchema<["product", "engineering"], undefined>;
+export type SlackMemberRole = v.InferOutput<typeof slackMemberRoleSchema>;
+/** One internal user id → Slack member id mapping entry, with the member's role. */
+export declare const slackMemberMappingEntrySchema: v.ObjectSchema<{
+    readonly userId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+    readonly slackUserId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+    /** Notification role (default `engineering` when absent). */
+    readonly role: v.OptionalSchema<v.PicklistSchema<["product", "engineering"], undefined>, undefined>;
+}, undefined>;
+export type SlackMemberMappingEntry = v.InferOutput<typeof slackMemberMappingEntrySchema>;
+/** An account's user→Slack member map (opt-in; backs @-mentions). */
+export declare const slackMemberMappingSchema: v.ObjectSchema<{
+    readonly entries: v.ArraySchema<v.ObjectSchema<{
+        readonly userId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+        readonly slackUserId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        /** Notification role (default `engineering` when absent). */
+        readonly role: v.OptionalSchema<v.PicklistSchema<["product", "engineering"], undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type SlackMemberMapping = v.InferOutput<typeof slackMemberMappingSchema>;
+/** A Slack channel option for the routing picker (`conversations.list`). */
+export declare const slackChannelSchema: v.ObjectSchema<{
+    readonly id: v.StringSchema<undefined>;
+    readonly name: v.StringSchema<undefined>;
+    readonly isPrivate: v.BooleanSchema<undefined>;
+}, undefined>;
+export type SlackChannel = v.InferOutput<typeof slackChannelSchema>;
+/**
+ * Connect Slack by pasting a bot token (the always-available fallback to OAuth).
+ * The token is write-only: validated via `auth.test`, encrypted, never returned.
+ */
+export declare const connectSlackByTokenSchema: v.ObjectSchema<{
+    readonly token: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>]>;
+}, undefined>;
+export type ConnectSlackByTokenInput = v.InferOutput<typeof connectSlackByTokenSchema>;
+/** Replace a workspace's Slack notification routing. */
+export declare const updateSlackSettingsSchema: v.ObjectSchema<{
+    readonly routes: v.RecordSchema<v.PicklistSchema<["merge_review", "pipeline_complete", "ci_failed", "test_failed", "requirement_review", "clarity_review", "release_regression", "decision_required"], undefined>, v.ObjectSchema<{
+        readonly enabled: v.BooleanSchema<undefined>;
+        /** A channel id (`C0123…`) or name (`#general`); empty = unrouted. */
+        readonly channel: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MaxLengthAction<string, 200, undefined>]>;
+    }, undefined>, undefined>;
+    readonly mentionsEnabled: v.BooleanSchema<undefined>;
+}, undefined>;
+export type UpdateSlackSettingsInput = v.InferOutput<typeof updateSlackSettingsSchema>;
+/** Replace an account's GitHub→Slack member mapping. */
+export declare const updateSlackMemberMappingSchema: v.ObjectSchema<{
+    readonly entries: v.ArraySchema<v.ObjectSchema<{
+        readonly userId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>;
+        readonly slackUserId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 64, undefined>]>;
+        /** Notification role (default `engineering` when absent). */
+        readonly role: v.OptionalSchema<v.PicklistSchema<["product", "engineering"], undefined>, undefined>;
+    }, undefined>, undefined>;
+}, undefined>;
+export type UpdateSlackMemberMappingInput = v.InferOutput<typeof updateSlackMemberMappingSchema>;
+//# sourceMappingURL=slack.d.ts.map

package/dist/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../src/slack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAwB5B;;;GAGG;AACH,eAAO,MAAM,qBAAqB;IAChC,uDAAuD;;IAEvD,mCAAmC;;IAEnC,8CAA8C;;IAE9C,4EAA4E;;IAE5E,0DAA0D;;;aAG1D,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,2EAA2E;AAC3E,eAAO,MAAM,gBAAgB;;IAE3B,sEAAsE;;aAEtE,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;QAV1C,sEAAsE;;;IAYtE,2EAA2E;;;aAG3E,CAAA;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,+BAA+B,CAAC,CAAA;AAE7F;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,yDAAyC,CAAA;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEzE,oFAAoF;AACpF,eAAO,MAAM,6BAA6B;;;IAGxC,6DAA6D;;aAE7D,CAAA;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB;;;;QANnC,6DAA6D;;;aAQ7D,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAE/E,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB;;;;aAI7B,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAInE;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;aAEpC,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEtF,wDAAwD;AACxD,eAAO,MAAM,yBAAyB;;;QA9DpC,sEAAsE;;;;aAiEtE,CAAA;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAEtF,wDAAwD;AACxD,eAAO,MAAM,8BAA8B;;;;QAtCzC,6DAA6D;;;aAwC7D,CAAA;AACF,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,8BAA8B,CAAC,CAAA"}

package/dist/slack.js

@@ -0,0 +1,98 @@
+import * as v from 'valibot';
+import { notificationTypeSchema } from './notifications.js';
+// ---------------------------------------------------------------------------
+// Slack integration wire contracts.
+//
+// Slack is an additional *delivery transport* for the existing notification
+// mechanism (merge_review / pipeline_complete / ci_failed) — not a parallel
+// system. A `SlackNotificationChannel` implements the same `NotificationChannel`
+// port the in-app channel does, composed in via `CompositeNotificationChannel`,
+// so the call sites that raise notifications are untouched.
+//
+// Two scopes, mirroring the GitHub-App precedent:
+//   - The Slack *connection* (a workspace/team install + its bot token) is
+//     bound PER-ACCOUNT — an org installs the Slack app once. The bot token is
+//     multi-tenant data, so it is encrypted at rest (WebCryptoSecretCipher,
+//     `cat-factory:slack`) and NEVER returned on the wire; only safe metadata
+//     (team name/icon, bot user, scopes) is exposed.
+//   - Notification *routing* (which types post, and to which channel) is
+//     configured PER-WORKSPACE.
+//   - Optional @-mentions resolve from an opt-in per-account map of GitHub user
+//     id → Slack member id (cat-factory has no member emails to look up).
+// ---------------------------------------------------------------------------
+/**
+ * A account's Slack connection, as exposed to clients — safe metadata ONLY.
+ * The bot token is never part of this shape (it lives encrypted server-side).
+ */
+export const slackConnectionSchema = v.object({
+    /** The Slack team (workspace) id, e.g. `T012AB3C4`. */
+    teamId: v.string(),
+    /** The Slack team display name. */
+    teamName: v.string(),
+    /** Team icon URL, when Slack returned one. */
+    teamIconUrl: v.optional(v.nullable(v.string())),
+    /** The bot user id the app posts as (`auth.test` `user_id`), when known. */
+    botUserId: v.optional(v.nullable(v.string())),
+    /** OAuth scopes the bot token was granted, when known. */
+    scopes: v.optional(v.array(v.string())),
+    connectedAt: v.number(),
+});
+/** Routing for a single notification type: whether it posts, and where. */
+export const slackRouteSchema = v.object({
+    enabled: v.boolean(),
+    /** A channel id (`C0123…`) or name (`#general`); empty = unrouted. */
+    channel: v.pipe(v.string(), v.trim(), v.maxLength(200)),
+});
+/**
+ * A workspace's Slack notification settings: a partial map of notification type
+ * → route, plus whether to resolve @-mentions from the account member mapping. A
+ * type absent from `routes`, disabled, or with an empty channel does not post.
+ */
+export const slackNotificationSettingsSchema = v.object({
+    routes: v.record(notificationTypeSchema, slackRouteSchema),
+    /** Resolve @-mentions from the per-account member mapping when posting. */
+    mentionsEnabled: v.boolean(),
+    updatedAt: v.number(),
+});
+/**
+ * Which kinds of notification a mapped member cares about. `product` people are
+ * @-mentioned on requirement-review findings (and otherwise left alone); everyone
+ * else is `engineering` and is only @-mentioned when they are the task's creator.
+ * Absent on a legacy entry means `engineering` (see {@link resolveMemberRole}).
+ */
+export const slackMemberRoleSchema = v.picklist(['product', 'engineering']);
+/** One internal user id → Slack member id mapping entry, with the member's role. */
+export const slackMemberMappingEntrySchema = v.object({
+    userId: v.pipe(v.string(), v.minLength(1)),
+    slackUserId: v.pipe(v.string(), v.trim(), v.minLength(1), v.maxLength(64)),
+    /** Notification role (default `engineering` when absent). */
+    role: v.optional(slackMemberRoleSchema),
+});
+/** An account's user→Slack member map (opt-in; backs @-mentions). */
+export const slackMemberMappingSchema = v.object({
+    entries: v.array(slackMemberMappingEntrySchema),
+});
+/** A Slack channel option for the routing picker (`conversations.list`). */
+export const slackChannelSchema = v.object({
+    id: v.string(),
+    name: v.string(),
+    isPrivate: v.boolean(),
+});
+// ---- Request bodies -------------------------------------------------------
+/**
+ * Connect Slack by pasting a bot token (the always-available fallback to OAuth).
+ * The token is write-only: validated via `auth.test`, encrypted, never returned.
+ */
+export const connectSlackByTokenSchema = v.object({
+    token: v.pipe(v.string(), v.trim(), v.minLength(1)),
+});
+/** Replace a workspace's Slack notification routing. */
+export const updateSlackSettingsSchema = v.object({
+    routes: v.record(notificationTypeSchema, slackRouteSchema),
+    mentionsEnabled: v.boolean(),
+});
+/** Replace an account's GitHub→Slack member mapping. */
+export const updateSlackMemberMappingSchema = v.object({
+    entries: v.array(slackMemberMappingEntrySchema),
+});
+//# sourceMappingURL=slack.js.map

package/dist/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../src/slack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,8EAA8E;AAC9E,oCAAoC;AACpC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,iFAAiF;AACjF,gFAAgF;AAChF,4DAA4D;AAC5D,EAAE;AACF,kDAAkD;AAClD,2EAA2E;AAC3E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,qDAAqD;AACrD,yEAAyE;AACzE,gCAAgC;AAChC,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,mCAAmC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,8CAA8C;IAC9C,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/C,4EAA4E;IAC5E,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,0DAA0D;IAC1D,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAA;AAGF,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;CACxD,CAAC,CAAA;AAGF;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;IAC1D,2EAA2E;IAC3E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAA;AAG3E,oFAAoF;AACpF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1E,6DAA6D;IAC7D,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACxC,CAAC,CAAA;AAGF,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;CAChD,CAAC,CAAA;AAGF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAA;AAGF,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CACpD,CAAC,CAAA;AAGF,wDAAwD;AACxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,sBAAsB,EAAE,gBAAgB,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC,CAAA;AAGF,wDAAwD;AACxD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;CAChD,CAAC,CAAA"}