@fastagent-sh/fastagent 0.20.0 → 0.21.0

package/dist/channels/slack/bot-auth.js

@@ -1,135 +0,0 @@
-/** Rotating Slack bot-token provider backed by owner-only channel state. */
-import { readFileSync } from "node:fs";
-import { writeFileAtomic } from "../../atomic-write.js";
-const REFRESH_EARLY_MS = 5 * 60_000;
-const REQUEST_TIMEOUT_MS = 30_000;
-function isState(value) {
-    const state = value;
-    return (typeof state === "object" &&
-        state !== null &&
-        state.version === 1 &&
-        typeof state.accessToken === "string" &&
-        typeof state.refreshToken === "string" &&
-        typeof state.expiresAt === "number");
-}
-function load(path) {
-    let raw;
-    try {
-        raw = readFileSync(path, "utf8");
-    }
-    catch (error) {
-        if (error.code === "ENOENT")
-            return undefined;
-        throw new Error(`Slack bot auth state ${path} is unreadable: ${String(error)}`, { cause: error });
-    }
-    try {
-        const value = JSON.parse(raw);
-        if (!isState(value))
-            throw new Error("unexpected shape/version");
-        return value;
-    }
-    catch (error) {
-        // A stale env refresh token may already have been consumed. Never hide corrupt rotating state by
-        // falling back to it: recovery requires restoring the durable file or reinstalling the app.
-        throw new Error(`Slack bot auth state ${path} is invalid: ${String(error)}`, { cause: error });
-    }
-}
-function save(path, state) {
-    writeFileAtomic(path, JSON.stringify(state), 0o600);
-}
-async function refreshSlackBotToken(input) {
-    const authorization = Buffer.from(`${input.clientId}:${input.clientSecret}`, "utf8").toString("base64");
-    let lastError;
-    // Slack keeps a short grace window for a just-consumed refresh token. One retry recovers the
-    // committed-but-response-lost boundary without creating an unbounded refresh loop.
-    for (let attempt = 0; attempt < 2; attempt++) {
-        try {
-            const response = await input.fetch(`${input.apiBaseUrl}/oauth.v2.access`, {
-                method: "POST",
-                headers: {
-                    authorization: `Basic ${authorization}`,
-                    "content-type": "application/x-www-form-urlencoded",
-                },
-                body: new URLSearchParams({
-                    grant_type: "refresh_token",
-                    refresh_token: input.refreshToken,
-                }).toString(),
-                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
-            });
-            const data = (await response.json().catch(() => ({})));
-            if (!response.ok ||
-                data.ok !== true ||
-                !data.access_token ||
-                !data.refresh_token ||
-                typeof data.expires_in !== "number") {
-                throw new Error(`Slack rejected bot-token refresh (HTTP ${response.status})`);
-            }
-            return {
-                version: 1,
-                accessToken: data.access_token,
-                refreshToken: data.refresh_token,
-                expiresAt: Date.now() + data.expires_in * 1_000,
-            };
-        }
-        catch (error) {
-            lastError = error;
-        }
-    }
-    throw new Error("Slack bot-token rotation failed; restore credentials or reinstall the app", { cause: lastError });
-}
-/** Latest local rotating credentials for `deploy --run`. The remote runtime still prefers its own
- * durable volume; this overlay prevents a locally consumed refresh token from being redeployed. */
-export function readSlackBotAuthEnv(statePath) {
-    const state = load(statePath);
-    return state
-        ? {
-            SLACK_BOT_TOKEN: state.accessToken,
-            SLACK_BOT_REFRESH_TOKEN: state.refreshToken,
-            SLACK_BOT_TOKEN_EXPIRES_AT: String(state.expiresAt),
-        }
-        : {};
-}
-/** Resolve the current bot token, refreshing once per process when it approaches expiry. */
-export function createSlackBotTokenProvider(options) {
-    const rotatingFields = [options.botRefreshToken, options.clientId, options.clientSecret, options.botTokenExpiresAt];
-    const rotating = rotatingFields.some((value) => value !== undefined);
-    if (rotating && rotatingFields.some((value) => value === undefined || value === "")) {
-        throw new Error("Slack token rotation requires botRefreshToken, clientId, clientSecret, and botTokenExpiresAt together");
-    }
-    if (rotating && (!Number.isFinite(options.botTokenExpiresAt) || options.botTokenExpiresAt <= 0)) {
-        throw new Error("Slack botTokenExpiresAt must be a positive epoch-millisecond value");
-    }
-    if (!rotating)
-        return async () => options.botToken;
-    const configured = {
-        version: 1,
-        accessToken: options.botToken,
-        refreshToken: options.botRefreshToken,
-        expiresAt: options.botTokenExpiresAt,
-    };
-    const persisted = load(options.statePath);
-    // Deploy may carry a newer pair from the owner machine onto an existing remote volume; ordinary
-    // restarts carry the original stale env and therefore keep the newer persisted pair.
-    let state = persisted && persisted.expiresAt >= configured.expiresAt ? persisted : configured;
-    let refreshing;
-    return async () => {
-        if (state.expiresAt > Date.now() + REFRESH_EARLY_MS)
-            return state.accessToken;
-        refreshing ??= refreshSlackBotToken({
-            refreshToken: state.refreshToken,
-            clientId: options.clientId,
-            clientSecret: options.clientSecret,
-            apiBaseUrl: (options.apiBaseUrl ?? "https://slack.com/api").replace(/\/$/, ""),
-            fetch: options.fetch ?? globalThis.fetch,
-        })
-            .then((next) => {
-            save(options.statePath, next);
-            state = next;
-        })
-            .finally(() => {
-            refreshing = undefined;
-        });
-        await refreshing;
-        return state.accessToken;
-    };
-}