@cat-factory/integrations 0.6.0

package/dist/modules/runners/runners.logic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.logic.js","sourceRoot":"","sources":["../../../src/modules/runners/runners.logic.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAA;AAEhF,4EAA4E;AAC5E,0EAA0E;AAC1E,+EAA+E;AAC/E,kFAAkF;AAClF,6EAA6E;AAC7E,kEAAkE;AAElE,oEAAoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,QAA4B;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IAC1B,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,EAAE,CAAA;QACX,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC7B,KAAK,OAAO;YACV,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACjE,KAAK,2BAA2B;YAC9B,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;QACrE,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CACpC,QAA4B,EAC5B,MAAM,GAAoB,wBAAwB;IAElD,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;IAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,EAAE,CAAC;QACvD,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,GAAuB,EACvB,SAA6D;IAE7D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7E,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC,EAAE,CAAA;QACxB,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;IACjF,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/modules/slack/SlackApiClient.d.ts

@@ -0,0 +1,67 @@
+import type { SlackChannel } from '@cat-factory/kernel';
+/** Result of `auth.test` — the installed team + the bot user the token posts as. */
+export interface SlackAuthInfo {
+    teamId: string;
+    teamName: string;
+    botUserId: string | null;
+    url: string | null;
+    /** OAuth scopes granted to the token, read from the `x-oauth-scopes` header. */
+    scopes: string[];
+}
+/** Result of an `oauth.v2.access` exchange. */
+export interface SlackOAuthResult {
+    accessToken: string;
+    teamId: string;
+    teamName: string;
+    botUserId: string | null;
+    scopes: string[];
+}
+export declare class SlackApiError extends Error {
+    readonly method: string;
+    readonly slackError: string;
+    constructor(method: string, slackError: string);
+}
+type FetchLike = typeof fetch;
+export interface SlackApiClientOptions {
+    /** Override fetch (tests); defaults to the global. */
+    fetchImpl?: FetchLike;
+    /** Slack API base; defaults to the public endpoint. */
+    apiBase?: string;
+}
+export declare class SlackApiClient {
+    private readonly fetchImpl;
+    private readonly apiBase;
+    constructor(options?: SlackApiClientOptions);
+    /**
+     * Validate a bot token and read the team it belongs to (`auth.test`). The granted
+     * OAuth scopes aren't in the body — Slack returns them in the `x-oauth-scopes`
+     * response header on any Web API call — so we read them here too, which lets the
+     * manual-token onboarding path capture real scopes (not an empty list).
+     */
+    authTest(token: string): Promise<SlackAuthInfo>;
+    /**
+     * Exchange an OAuth authorization `code` for a bot token (`oauth.v2.access`).
+     * Posted as form-encoded with the app's client credentials.
+     */
+    oauthAccess(input: {
+        clientId: string;
+        clientSecret: string;
+        code: string;
+        redirectUri: string;
+    }): Promise<SlackOAuthResult>;
+    /** Post a message (`chat.postMessage`). `body` is a rendered message payload. */
+    chatPostMessage(token: string, body: Record<string, unknown>): Promise<void>;
+    /**
+     * List the channels the bot can see (`conversations.list`), for the routing
+     * picker. Public + private, excluding archived. Follows the cursor so a workspace
+     * with more than one page of channels (>1000) isn't silently truncated, with a
+     * page cap as a safety bound against an unbounded loop.
+     */
+    conversationsList(token: string): Promise<SlackChannel[]>;
+    /** POST a JSON body to a Slack method with a bearer token (raw response). */
+    private request;
+    /** POST a JSON body to a Slack method with a bearer token; throw on `ok:false`. */
+    private postJson;
+}
+export {};
+//# sourceMappingURL=SlackApiClient.d.ts.map

package/dist/modules/slack/SlackApiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackApiClient.d.ts","sourceRoot":"","sources":["../../../src/modules/slack/SlackApiClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAOvD,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,gFAAgF;IAChF,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,+CAA+C;AAC/C,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,qBAAa,aAAc,SAAQ,KAAK;IAEpC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM;IAF7B,YACW,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAI5B;CACF;AAED,KAAK,SAAS,GAAG,OAAO,KAAK,CAAA;AAE7B,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAQD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAEhC,YAAY,OAAO,GAAE,qBAA0B,EAG9C;IAED;;;;;OAKG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAWpD;IAED;;;OAGG;IACG,WAAW,CAAC,KAAK,EAAE;QACvB,QAAQ,EAAE,MAAM,CAAA;QAChB,YAAY,EAAE,MAAM,CAAA;QACpB,IAAI,EAAE,MAAM,CAAA;QACZ,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsB5B;IAED,iFAAiF;IAC3E,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;IAED;;;;;OAKG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CA0B9D;IAED,6EAA6E;IAC7E,OAAO,CAAC,OAAO;IAWf,mFAAmF;YACrE,QAAQ;CAUvB"}

package/dist/modules/slack/SlackApiClient.js

@@ -0,0 +1,132 @@
+export class SlackApiError extends Error {
+    method;
+    slackError;
+    constructor(method, slackError) {
+        super(`Slack ${method} failed: ${slackError}`);
+        this.method = method;
+        this.slackError = slackError;
+        this.name = 'SlackApiError';
+    }
+}
+export class SlackApiClient {
+    fetchImpl;
+    apiBase;
+    constructor(options = {}) {
+        this.fetchImpl = options.fetchImpl ?? fetch;
+        this.apiBase = (options.apiBase ?? 'https://slack.com/api').replace(/\/+$/, '');
+    }
+    /**
+     * Validate a bot token and read the team it belongs to (`auth.test`). The granted
+     * OAuth scopes aren't in the body — Slack returns them in the `x-oauth-scopes`
+     * response header on any Web API call — so we read them here too, which lets the
+     * manual-token onboarding path capture real scopes (not an empty list).
+     */
+    async authTest(token) {
+        const res = await this.request('auth.test', token, {});
+        const data = (await res.json());
+        if (!data.ok)
+            throw new SlackApiError('auth.test', data.error ?? 'unknown_error');
+        return {
+            teamId: String(data.team_id ?? ''),
+            teamName: String(data.team ?? ''),
+            botUserId: data.user_id ? String(data.user_id) : null,
+            url: data.url ? String(data.url) : null,
+            scopes: parseScopeHeader(res.headers.get('x-oauth-scopes')),
+        };
+    }
+    /**
+     * Exchange an OAuth authorization `code` for a bot token (`oauth.v2.access`).
+     * Posted as form-encoded with the app's client credentials.
+     */
+    async oauthAccess(input) {
+        const form = new URLSearchParams({
+            client_id: input.clientId,
+            client_secret: input.clientSecret,
+            code: input.code,
+            redirect_uri: input.redirectUri,
+        });
+        const res = await this.fetchImpl(`${this.apiBase}/oauth.v2.access`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            body: form.toString(),
+        });
+        const data = (await res.json());
+        if (!data.ok)
+            throw new SlackApiError('oauth.v2.access', data.error ?? 'unknown_error');
+        const team = (data.team ?? {});
+        return {
+            accessToken: String(data.access_token ?? ''),
+            teamId: String(team.id ?? ''),
+            teamName: String(team.name ?? ''),
+            botUserId: data.bot_user_id ? String(data.bot_user_id) : null,
+            scopes: typeof data.scope === 'string' && data.scope ? data.scope.split(',') : [],
+        };
+    }
+    /** Post a message (`chat.postMessage`). `body` is a rendered message payload. */
+    async chatPostMessage(token, body) {
+        await this.postJson('chat.postMessage', token, body);
+    }
+    /**
+     * List the channels the bot can see (`conversations.list`), for the routing
+     * picker. Public + private, excluding archived. Follows the cursor so a workspace
+     * with more than one page of channels (>1000) isn't silently truncated, with a
+     * page cap as a safety bound against an unbounded loop.
+     */
+    async conversationsList(token) {
+        const result = [];
+        let cursor;
+        const MAX_PAGES = 20;
+        for (let page = 0; page < MAX_PAGES; page++) {
+            const data = await this.postJson('conversations.list', token, {
+                types: 'public_channel,private_channel',
+                exclude_archived: true,
+                limit: 1000,
+                ...(cursor ? { cursor } : {}),
+            });
+            const channels = Array.isArray(data.channels) ? data.channels : [];
+            for (const c of channels) {
+                const channel = c;
+                result.push({
+                    id: String(channel.id ?? ''),
+                    name: String(channel.name ?? ''),
+                    isPrivate: Boolean(channel.is_private),
+                });
+            }
+            const meta = data.response_metadata;
+            const next = meta?.next_cursor;
+            if (!next)
+                break;
+            cursor = next;
+        }
+        return result;
+    }
+    /** POST a JSON body to a Slack method with a bearer token (raw response). */
+    request(method, token, body) {
+        return this.fetchImpl(`${this.apiBase}/${method}`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${token}`,
+                'content-type': 'application/json; charset=utf-8',
+            },
+            body: JSON.stringify(body),
+        });
+    }
+    /** POST a JSON body to a Slack method with a bearer token; throw on `ok:false`. */
+    async postJson(method, token, body) {
+        const res = await this.request(method, token, body);
+        const data = (await res.json());
+        if (!data.ok)
+            throw new SlackApiError(method, data.error ?? 'unknown_error');
+        return data;
+    }
+}
+/** Parse Slack's comma-separated `x-oauth-scopes` header into a trimmed list. */
+function parseScopeHeader(header) {
+    if (!header)
+        return [];
+    return header
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+//# sourceMappingURL=SlackApiClient.js.map

package/dist/modules/slack/SlackApiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackApiClient.js","sourceRoot":"","sources":["../../../src/modules/slack/SlackApiClient.ts"],"names":[],"mappings":"AA0BA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAE3B,MAAM;IACN,UAAU;IAFrB,YACW,MAAc,EACd,UAAkB;QAE3B,KAAK,CAAC,SAAS,MAAM,YAAY,UAAU,EAAE,CAAC,CAAA;sBAHrC,MAAM;0BACN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAiBD,MAAM,OAAO,cAAc;IACR,SAAS,CAAW;IACpB,OAAO,CAAQ;IAEhC,YAAY,OAAO,GAA0B,EAAE;QAC7C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;QAC3C,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACjF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QACtD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,CAAA;QACjF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YACrD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YACvC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;SAC5D,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,KAKjB;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;SAChC,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,kBAAkB,EAAE;YAClE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,CAAA;QACvF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAmC,CAAA;QAChE,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAC5C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,MAAM,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;SAClF,CAAA;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,IAA6B;QAChE,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;IACtD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,MAAM,MAAM,GAAmB,EAAE,CAAA;QACjC,IAAI,MAA0B,CAAA;QAC9B,MAAM,SAAS,GAAG,EAAE,CAAA;QACpB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,EAAE;gBAC5D,KAAK,EAAE,gCAAgC;gBACvC,gBAAgB,EAAE,IAAI;gBACtB,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;YAClE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,CAAyD,CAAA;gBACzE,MAAM,CAAC,IAAI,CAAC;oBACV,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;oBAC5B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;oBAChC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC;iBACvC,CAAC,CAAA;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAyD,CAAA;YAC3E,MAAM,IAAI,GAAG,IAAI,EAAE,WAAW,CAAA;YAC9B,IAAI,CAAC,IAAI;gBAAE,MAAK;YAChB,MAAM,GAAG,IAAI,CAAA;QACf,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,6EAA6E;IACrE,OAAO,CAAC,MAAc,EAAE,KAAa,EAAE,IAA6B;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,iCAAiC;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;IACJ,CAAC;IAED,mFAAmF;IAC3E,KAAK,CAAC,QAAQ,CACpB,MAAc,EACd,KAAa,EACb,IAA6B;QAE7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACnD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,MAAqB;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,OAAO,MAAM;SACV,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC"}

package/dist/modules/slack/SlackConnectionService.d.ts

@@ -0,0 +1,41 @@
+import type { Clock, SecretCipher, WorkspaceRepository } from '@cat-factory/kernel';
+import type { SlackChannel, SlackConnection, SlackConnectionRepository } from '@cat-factory/kernel';
+import { SlackApiClient } from './SlackApiClient.js';
+export interface SlackConnectionServiceDependencies {
+    slackConnectionRepository: SlackConnectionRepository;
+    workspaceRepository: WorkspaceRepository;
+    secretCipher: SecretCipher;
+    clock: Clock;
+    /** Slack Web API client; defaults to a fetch-backed one. */
+    slackClient?: SlackApiClient;
+    /** OAuth app credentials, when the deployment registered a Slack app. */
+    oauth?: {
+        clientId: string;
+        clientSecret: string;
+        redirectUrl: string;
+    };
+}
+export declare class SlackConnectionService {
+    private readonly deps;
+    private readonly slack;
+    constructor(deps: SlackConnectionServiceDependencies);
+    /** Whether OAuth onboarding is available (the app credentials were configured). */
+    get oauthEnabled(): boolean;
+    /** Build the "Add to Slack" authorize URL, embedding a signed `state`. */
+    buildInstallUrl(state: string, scopes: string[]): string;
+    /** Connect by pasting a bot token (the always-available path). */
+    connectWithToken(workspaceId: string, token: string): Promise<SlackConnection>;
+    /** Connect by exchanging an OAuth authorization code for a bot token. */
+    connectViaOAuth(workspaceId: string, code: string): Promise<SlackConnection>;
+    /** The account's current connection (safe metadata), or null. */
+    getConnection(workspaceId: string): Promise<SlackConnection | null>;
+    /** Disconnect the account's Slack (tombstones the binding). */
+    disconnect(workspaceId: string): Promise<void>;
+    /** List channels the bot can post to, for the routing picker; [] when not connected. */
+    listChannels(workspaceId: string): Promise<SlackChannel[]>;
+    /** Encrypt the token + persist the connection, guarding against a cross-account claim. */
+    private store;
+    /** The per-account scope key for a workspace (account id, else the workspace id). */
+    private resolveAccountKey;
+}
+//# sourceMappingURL=SlackConnectionService.d.ts.map

package/dist/modules/slack/SlackConnectionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackConnectionService.d.ts","sourceRoot":"","sources":["../../../src/modules/slack/SlackConnectionService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACnF,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EAEf,yBAAyB,EAC1B,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAapD,MAAM,WAAW,kCAAkC;IACjD,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,YAAY,EAAE,YAAY,CAAA;IAC1B,KAAK,EAAE,KAAK,CAAA;IACZ,4DAA4D;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B,yEAAyE;IACzE,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CACxE;AAsBD,qBAAa,sBAAsB;IAGrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IAEtC,YAA6B,IAAI,EAAE,kCAAkC,EAEpE;IAED,mFAAmF;IACnF,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED,0EAA0E;IAC1E,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CASvD;IAED,kEAAkE;IAC5D,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAWnF;IAED,yEAAyE;IACnE,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAiBjF;IAED,iEAAiE;IAC3D,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAKxE;IAED,+DAA+D;IACzD,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnD;IAED,wFAAwF;IAClF,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAM/D;IAED,0FAA0F;YAC5E,KAAK;IAmCnB,qFAAqF;YACvE,iBAAiB;CAIhC"}

package/dist/modules/slack/SlackConnectionService.js

@@ -0,0 +1,136 @@
+import { ConflictError, requireWorkspace } from '@cat-factory/kernel';
+import { SlackApiClient } from './SlackApiClient.js';
+function toConnection(record) {
+    let scopes = [];
+    if (record.scopesJson) {
+        try {
+            const parsed = JSON.parse(record.scopesJson);
+            if (Array.isArray(parsed))
+                scopes = parsed;
+        }
+        catch {
+            scopes = [];
+        }
+    }
+    return {
+        teamId: record.teamId,
+        teamName: record.teamName,
+        teamIconUrl: record.teamIconUrl,
+        botUserId: record.botUserId,
+        scopes,
+        connectedAt: record.createdAt,
+    };
+}
+export class SlackConnectionService {
+    deps;
+    slack;
+    constructor(deps) {
+        this.deps = deps;
+        this.slack = deps.slackClient ?? new SlackApiClient();
+    }
+    /** Whether OAuth onboarding is available (the app credentials were configured). */
+    get oauthEnabled() {
+        return Boolean(this.deps.oauth);
+    }
+    /** Build the "Add to Slack" authorize URL, embedding a signed `state`. */
+    buildInstallUrl(state, scopes) {
+        if (!this.deps.oauth)
+            throw new ConflictError('Slack OAuth is not configured');
+        const params = new URLSearchParams({
+            client_id: this.deps.oauth.clientId,
+            scope: scopes.join(','),
+            redirect_uri: this.deps.oauth.redirectUrl,
+            state,
+        });
+        return `https://slack.com/oauth/v2/authorize?${params.toString()}`;
+    }
+    /** Connect by pasting a bot token (the always-available path). */
+    async connectWithToken(workspaceId, token) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        const info = await this.slack.authTest(token);
+        return this.store(accountKey, {
+            teamId: info.teamId,
+            teamName: info.teamName,
+            teamIconUrl: null,
+            botUserId: info.botUserId,
+            scopes: info.scopes,
+            token,
+        });
+    }
+    /** Connect by exchanging an OAuth authorization code for a bot token. */
+    async connectViaOAuth(workspaceId, code) {
+        if (!this.deps.oauth)
+            throw new ConflictError('Slack OAuth is not configured');
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        const result = await this.slack.oauthAccess({
+            clientId: this.deps.oauth.clientId,
+            clientSecret: this.deps.oauth.clientSecret,
+            code,
+            redirectUri: this.deps.oauth.redirectUrl,
+        });
+        return this.store(accountKey, {
+            teamId: result.teamId,
+            teamName: result.teamName,
+            teamIconUrl: null,
+            botUserId: result.botUserId,
+            scopes: result.scopes,
+            token: result.accessToken,
+        });
+    }
+    /** The account's current connection (safe metadata), or null. */
+    async getConnection(workspaceId) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        const record = await this.deps.slackConnectionRepository.getByAccount(accountKey);
+        if (!record || record.deletedAt)
+            return null;
+        return toConnection(record);
+    }
+    /** Disconnect the account's Slack (tombstones the binding). */
+    async disconnect(workspaceId) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        const record = await this.deps.slackConnectionRepository.getByAccount(accountKey);
+        if (!record || record.deletedAt)
+            return;
+        await this.deps.slackConnectionRepository.softDelete(accountKey, this.deps.clock.now());
+    }
+    /** List channels the bot can post to, for the routing picker; [] when not connected. */
+    async listChannels(workspaceId) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        const record = await this.deps.slackConnectionRepository.getByAccount(accountKey);
+        if (!record || record.deletedAt)
+            return [];
+        const token = await this.deps.secretCipher.decrypt(record.tokenCipher);
+        return this.slack.conversationsList(token);
+    }
+    /** Encrypt the token + persist the connection, guarding against a cross-account claim. */
+    async store(accountKey, info) {
+        // Guard: a Slack team already bound to a DIFFERENT account cannot be claimed
+        // (account-takeover prevention); reconnecting the SAME account is fine. We
+        // ignore the other binding's tombstone — the app is still installed on Slack.
+        const claimed = await this.deps.slackConnectionRepository.getByTeam(info.teamId);
+        if (claimed && claimed.accountId !== accountKey) {
+            throw new ConflictError(`Slack team ${info.teamId} is already connected to another account`);
+        }
+        const existing = await this.deps.slackConnectionRepository.getByAccount(accountKey);
+        const tokenCipher = await this.deps.secretCipher.encrypt(info.token);
+        const record = {
+            accountId: accountKey,
+            teamId: info.teamId,
+            teamName: info.teamName,
+            teamIconUrl: info.teamIconUrl,
+            botUserId: info.botUserId,
+            scopesJson: info.scopes.length ? JSON.stringify(info.scopes) : null,
+            tokenCipher,
+            createdAt: existing && !existing.deletedAt ? existing.createdAt : this.deps.clock.now(),
+            deletedAt: null,
+        };
+        await this.deps.slackConnectionRepository.upsert(record);
+        return toConnection(record);
+    }
+    /** The per-account scope key for a workspace (account id, else the workspace id). */
+    async resolveAccountKey(workspaceId) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        return (await this.deps.workspaceRepository.accountOf(workspaceId)) ?? workspaceId;
+    }
+}
+//# sourceMappingURL=SlackConnectionService.js.map

package/dist/modules/slack/SlackConnectionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackConnectionService.js","sourceRoot":"","sources":["../../../src/modules/slack/SlackConnectionService.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAwBpD,SAAS,YAAY,CAAC,MAA6B;IACjD,IAAI,MAAM,GAAa,EAAE,CAAA;IACzB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,MAAM,GAAG,MAAkB,CAAA;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,SAAS;KAC9B,CAAA;AACH,CAAC;AAED,MAAM,OAAO,sBAAsB;IAGJ,IAAI;IAFhB,KAAK,CAAgB;IAEtC,YAA6B,IAAwC;oBAAxC,IAAI;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,cAAc,EAAE,CAAA;IACvD,CAAC;IAED,mFAAmF;IACnF,IAAI,YAAY;QACd,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjC,CAAC;IAED,0EAA0E;IAC1E,eAAe,CAAC,KAAa,EAAE,MAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YACnC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;YACzC,KAAK;SACN,CAAC,CAAA;QACF,OAAO,wCAAwC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;IACpE,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,KAAa;QACvD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,IAAY;QACrD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,+BAA+B,CAAC,CAAA;QAC9E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAClC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY;YAC1C,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;SACzC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,WAAW;SAC1B,CAAC,CAAA;IACJ,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QAC5C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;YAAE,OAAM;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACzF,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACjF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,EAAE,CAAA;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IAC5C,CAAC;IAED,0FAA0F;IAClF,KAAK,CAAC,KAAK,CACjB,UAAkB,EAClB,IAOC;QAED,6EAA6E;QAC7E,2EAA2E;QAC3E,8EAA8E;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAChF,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,aAAa,CAAC,cAAc,IAAI,CAAC,MAAM,0CAA0C,CAAC,CAAA;QAC9F,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACnF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,MAAM,GAA0B;YACpC,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;YACnE,WAAW;YACX,SAAS,EAAE,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACvF,SAAS,EAAE,IAAI;SAChB,CAAA;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACxD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACjD,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,CAAA;IACpF,CAAC;CACF"}

package/dist/modules/slack/SlackMemberMappingService.d.ts

@@ -0,0 +1,17 @@
+import type { Clock, WorkspaceRepository } from '@cat-factory/kernel';
+import type { SlackMemberMappingEntry, SlackMemberMappingRepository } from '@cat-factory/kernel';
+export interface SlackMemberMappingServiceDependencies {
+    slackMemberMappingRepository: SlackMemberMappingRepository;
+    workspaceRepository: WorkspaceRepository;
+    clock: Clock;
+}
+export declare class SlackMemberMappingService {
+    private readonly deps;
+    constructor(deps: SlackMemberMappingServiceDependencies);
+    /** The account's mapping entries (empty when unset). */
+    get(workspaceId: string): Promise<SlackMemberMappingEntry[]>;
+    /** Replace the account's mapping. Last write per GitHub user id wins. */
+    update(workspaceId: string, entries: SlackMemberMappingEntry[]): Promise<SlackMemberMappingEntry[]>;
+    private resolveAccountKey;
+}
+//# sourceMappingURL=SlackMemberMappingService.d.ts.map

package/dist/modules/slack/SlackMemberMappingService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackMemberMappingService.d.ts","sourceRoot":"","sources":["../../../src/modules/slack/SlackMemberMappingService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,KAAK,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAQhG,MAAM,WAAW,qCAAqC;IACpD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,KAAK,EAAE,KAAK,CAAA;CACb;AAED,qBAAa,yBAAyB;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,qCAAqC,EAAI;IAE5E,wDAAwD;IAClD,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAGjE;IAED,yEAAyE;IACnE,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,uBAAuB,EAAE,GACjC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAQpC;YAEa,iBAAiB;CAIhC"}

package/dist/modules/slack/SlackMemberMappingService.js

@@ -0,0 +1,28 @@
+import { requireWorkspace } from '@cat-factory/kernel';
+export class SlackMemberMappingService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** The account's mapping entries (empty when unset). */
+    async get(workspaceId) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        return this.deps.slackMemberMappingRepository.getByAccount(accountKey);
+    }
+    /** Replace the account's mapping. Last write per GitHub user id wins. */
+    async update(workspaceId, entries) {
+        const accountKey = await this.resolveAccountKey(workspaceId);
+        // De-duplicate by userId (a stable, deterministic map).
+        const byUser = new Map();
+        for (const entry of entries)
+            byUser.set(entry.userId, entry);
+        const deduped = [...byUser.values()];
+        await this.deps.slackMemberMappingRepository.upsert(accountKey, deduped, this.deps.clock.now());
+        return deduped;
+    }
+    async resolveAccountKey(workspaceId) {
+        await requireWorkspace(this.deps.workspaceRepository, workspaceId);
+        return (await this.deps.workspaceRepository.accountOf(workspaceId)) ?? workspaceId;
+    }
+}
+//# sourceMappingURL=SlackMemberMappingService.js.map

package/dist/modules/slack/SlackMemberMappingService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackMemberMappingService.js","sourceRoot":"","sources":["../../../src/modules/slack/SlackMemberMappingService.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAatD,MAAM,OAAO,yBAAyB;IACP,IAAI;IAAjC,YAA6B,IAA2C;oBAA3C,IAAI;IAA0C,CAAC;IAE5E,wDAAwD;IACxD,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;IACxE,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,MAAM,CACV,WAAmB,EACnB,OAAkC;QAElC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAC5D,wDAAwD;QACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAA;QACzD,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACpC,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/F,OAAO,OAAO,CAAA;IAChB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,WAAmB;QACjD,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAA;QAClE,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,CAAA;IACpF,CAAC;CACF"}

package/dist/modules/slack/SlackNotificationChannel.d.ts

@@ -0,0 +1,45 @@
+import type { BlockRepository, Notification, NotificationChannel, SecretCipher, SlackConnectionRepository, SlackMemberMappingRepository, SlackSettingsRepository, WorkspaceRepository } from '@cat-factory/kernel';
+import { SlackApiClient } from './SlackApiClient.js';
+export interface SlackNotificationChannelDependencies {
+    workspaceRepository: WorkspaceRepository;
+    slackConnectionRepository: SlackConnectionRepository;
+    slackSettingsRepository: SlackSettingsRepository;
+    slackMemberMappingRepository: SlackMemberMappingRepository;
+    /** Resolves a notification's block to read its creator for creator-mentions. */
+    blockRepository: BlockRepository;
+    secretCipher: SecretCipher;
+    /** Slack Web API client; defaults to a fetch-backed one. */
+    slackClient?: SlackApiClient;
+    /**
+     * Optional observability hook invoked when a delivery attempt fails. Delivery is
+     * best-effort (a Slack outage/misconfig must never break the notification
+     * lifecycle), but a swallowed failure should still be diagnosable — the facades
+     * wire this to their structured logger so a broken Slack route (a revoked token,
+     * a channel the bot was never invited to) surfaces instead of vanishing.
+     */
+    onError?: (error: unknown, context: {
+        workspaceId: string;
+        notificationId: string;
+        type: string;
+    }) => void;
+}
+export declare class SlackNotificationChannel implements NotificationChannel {
+    private readonly deps;
+    private readonly slack;
+    constructor(deps: SlackNotificationChannelDependencies);
+    deliver(workspaceId: string, notification: Notification): Promise<void>;
+    private post;
+    /**
+     * Resolve the Slack member ids to @-mention, scoped to the notification's
+     * audience (see {@link resolveMentionTargets}): role-matched mapped members for
+     * the type (product people on a requirement review) plus the task's creator. So
+     * an engineering notification pings only the person who created the task, and a
+     * requirement review pings the product folks who own those decisions — never the
+     * whole workspace. Unmapped people are skipped; an empty map means no mentions.
+     */
+    private resolveMentions;
+    /** The internal user id of the block's creator, or null when unknown. */
+    private resolveCreator;
+    private parseRoutes;
+}
+//# sourceMappingURL=SlackNotificationChannel.d.ts.map

package/dist/modules/slack/SlackNotificationChannel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackNotificationChannel.d.ts","sourceRoot":"","sources":["../../../src/modules/slack/SlackNotificationChannel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAuBpD,MAAM,WAAW,oCAAoC;IACnD,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,gFAAgF;IAChF,eAAe,EAAE,eAAe,CAAA;IAChC,YAAY,EAAE,YAAY,CAAA;IAC1B,4DAA4D;IAC5D,WAAW,CAAC,EAAE,cAAc,CAAA;IAC5B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CACR,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KACnE,IAAI,CAAA;CACV;AAED,qBAAa,wBAAyB,YAAW,mBAAmB;IAGtD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IAEtC,YAA6B,IAAI,EAAE,oCAAoC,EAEtE;IAEK,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5E;YAEa,IAAI;IA0BlB;;;;;;;OAOG;YACW,eAAe;IAW7B,yEAAyE;YAC3D,cAAc;IAS5B,OAAO,CAAC,WAAW;CAWpB"}

package/dist/modules/slack/SlackNotificationChannel.js

@@ -0,0 +1,84 @@
+import { SlackApiClient } from './SlackApiClient.js';
+import { defaultSlackSettings, renderNotificationMessage, resolveMentionTargets, resolveRoute, } from './slack.logic.js';
+export class SlackNotificationChannel {
+    deps;
+    slack;
+    constructor(deps) {
+        this.deps = deps;
+        this.slack = deps.slackClient ?? new SlackApiClient();
+    }
+    async deliver(workspaceId, notification) {
+        try {
+            await this.post(workspaceId, notification);
+        }
+        catch (error) {
+            // Best-effort: never let a Slack outage/misconfig break the notification
+            // lifecycle (CompositeNotificationChannel also isolates us, belt-and-braces).
+            // Surface it through the optional observability hook so the failure is
+            // diagnosable instead of silently dropped.
+            this.deps.onError?.(error, {
+                workspaceId,
+                notificationId: notification.id,
+                type: notification.type,
+            });
+        }
+    }
+    async post(workspaceId, notification) {
+        const accountKey = (await this.deps.workspaceRepository.accountOf(workspaceId)) ?? workspaceId;
+        const connection = await this.deps.slackConnectionRepository.getByAccount(accountKey);
+        if (!connection || connection.deletedAt)
+            return;
+        const settingsRecord = await this.deps.slackSettingsRepository.getByWorkspace(workspaceId);
+        const settings = settingsRecord
+            ? {
+                routes: this.parseRoutes(settingsRecord.routesJson),
+                mentionsEnabled: settingsRecord.mentionsEnabled,
+                updatedAt: settingsRecord.updatedAt,
+            }
+            : defaultSlackSettings(0);
+        const channel = resolveRoute(settings, notification.type);
+        if (!channel)
+            return;
+        const mentions = settings.mentionsEnabled
+            ? await this.resolveMentions(accountKey, workspaceId, notification)
+            : [];
+        const token = await this.deps.secretCipher.decrypt(connection.tokenCipher);
+        const message = renderNotificationMessage(notification, channel, mentions);
+        await this.slack.chatPostMessage(token, message);
+    }
+    /**
+     * Resolve the Slack member ids to @-mention, scoped to the notification's
+     * audience (see {@link resolveMentionTargets}): role-matched mapped members for
+     * the type (product people on a requirement review) plus the task's creator. So
+     * an engineering notification pings only the person who created the task, and a
+     * requirement review pings the product folks who own those decisions — never the
+     * whole workspace. Unmapped people are skipped; an empty map means no mentions.
+     */
+    async resolveMentions(accountKey, workspaceId, notification) {
+        const mapping = await this.deps.slackMemberMappingRepository.getByAccount(accountKey);
+        if (mapping.length === 0)
+            return [];
+        const creatorUserId = await this.resolveCreator(workspaceId, notification.blockId);
+        return resolveMentionTargets(notification.type, mapping, creatorUserId);
+    }
+    /** The internal user id of the block's creator, or null when unknown. */
+    async resolveCreator(workspaceId, blockId) {
+        if (!blockId)
+            return null;
+        const block = await this.deps.blockRepository.get(workspaceId, blockId);
+        return block?.createdBy ?? null;
+    }
+    parseRoutes(routesJson) {
+        try {
+            const parsed = JSON.parse(routesJson);
+            if (parsed && typeof parsed === 'object') {
+                return parsed;
+            }
+        }
+        catch {
+            // fall through to empty
+        }
+        return {};
+    }
+}
+//# sourceMappingURL=SlackNotificationChannel.js.map

package/dist/modules/slack/SlackNotificationChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackNotificationChannel.js","sourceRoot":"","sources":["../../../src/modules/slack/SlackNotificationChannel.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,YAAY,GACb,MAAM,kBAAkB,CAAA;AAwCzB,MAAM,OAAO,wBAAwB;IAGN,IAAI;IAFhB,KAAK,CAAgB;IAEtC,YAA6B,IAA0C;oBAA1C,IAAI;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,cAAc,EAAE,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,YAA0B;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,8EAA8E;YAC9E,uEAAuE;YACvE,2CAA2C;YAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE;gBACzB,WAAW;gBACX,cAAc,EAAE,YAAY,CAAC,EAAE;gBAC/B,IAAI,EAAE,YAAY,CAAC,IAAI;aACxB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,YAA0B;QAChE,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,WAAW,CAAA;QAE9F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACrF,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS;YAAE,OAAM;QAE/C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC1F,MAAM,QAAQ,GAAG,cAAc;YAC7B,CAAC,CAAC;gBACE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,UAAU,CAAC;gBACnD,eAAe,EAAE,cAAc,CAAC,eAAe;gBAC/C,SAAS,EAAE,cAAc,CAAC,SAAS;aACpC;YACH,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAA;QAE3B,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;QACzD,IAAI,CAAC,OAAO;YAAE,OAAM;QAEpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe;YACvC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC;YACnE,CAAC,CAAC,EAAE,CAAA;QACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;QAC1E,MAAM,OAAO,GAAG,yBAAyB,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC1E,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,OAA6C,CAAC,CAAA;IACxF,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,eAAe,CAC3B,UAAkB,EAClB,WAAmB,EACnB,YAA0B;QAE1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QACrF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAA;QAClF,OAAO,qBAAqB,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAA;IACzE,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,cAAc,CAC1B,WAAmB,EACnB,OAAsB;QAEtB,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACvE,OAAO,KAAK,EAAE,SAAS,IAAI,IAAI,CAAA;IACjC,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;YACrC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAA2D,CAAA;YACpE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;CACF"}

package/dist/modules/slack/SlackSettingsService.d.ts

@@ -0,0 +1,16 @@
+import type { Clock, WorkspaceRepository } from '@cat-factory/kernel';
+import type { SlackNotificationSettings, SlackSettingsRepository, UpdateSlackSettingsInput } from '@cat-factory/kernel';
+export interface SlackSettingsServiceDependencies {
+    slackSettingsRepository: SlackSettingsRepository;
+    workspaceRepository: WorkspaceRepository;
+    clock: Clock;
+}
+export declare class SlackSettingsService {
+    private readonly deps;
+    constructor(deps: SlackSettingsServiceDependencies);
+    /** A workspace's settings, falling back to the (no-op) defaults. */
+    get(workspaceId: string): Promise<SlackNotificationSettings>;
+    /** Replace a workspace's routing settings. */
+    update(workspaceId: string, input: UpdateSlackSettingsInput): Promise<SlackNotificationSettings>;
+}
+//# sourceMappingURL=SlackSettingsService.d.ts.map

package/dist/modules/slack/SlackSettingsService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SlackSettingsService.d.ts","sourceRoot":"","sources":["../../../src/modules/slack/SlackSettingsService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACrE,OAAO,KAAK,EACV,yBAAyB,EAEzB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAS5B,MAAM,WAAW,gCAAgC;IAC/C,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,mBAAmB,EAAE,mBAAmB,CAAA;IACxC,KAAK,EAAE,KAAK,CAAA;CACb;AAeD,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,gCAAgC,EAAI;IAEvE,oEAAoE;IAC9D,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAIjE;IAED,8CAA8C;IACxC,MAAM,CACV,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,yBAAyB,CAAC,CAWpC;CACF"}