@maroonedsoftware/slack 2.0.1 → 2.1.0

package/dist/client/slack.client.d.ts

@@ -2,6 +2,14 @@ import { WebClient } from '@slack/web-api';
 import type { ChatPostMessageArguments, ChatPostMessageResponse, ChatUpdateArguments, ChatUpdateResponse, ChatDeleteArguments, ChatDeleteResponse, ViewsOpenArguments, ViewsOpenResponse } from '@slack/web-api';
 import { Logger } from '@maroonedsoftware/logger';
 import { SlackConfig } from '../slack.config.js';
+/** Default per-request timeout (ms) applied to outbound `postWebhook` calls. */
+export declare const SLACK_DEFAULT_REQUEST_TIMEOUT_MS = 10000;
+/**
+ * Redacts a Slack webhook / `response_url` so it is safe to log. The final path
+ * segment is the secret token (and the query string can carry secrets too), so
+ * both are stripped, leaving only the host and path prefix.
+ */
+export declare const redactSlackUrl: (raw: string) => string;
 /**
  * Payload for an incoming-webhook POST. Mirrors the subset of fields Slack's
  * incoming webhooks accept (text, blocks, attachments, response shaping).

package/dist/client/slack.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.client.d.ts","sourceRoot":"","sources":["../../src/client/slack.client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACjN,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IAC3C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;gBAGL,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM;IAKjC,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAI7E,2CAA2C;IAC3C,aAAa,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIrE,2CAA2C;IAC3C,aAAa,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIrE,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI9D;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,sBAAsB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBhF"}
+{"version":3,"file":"slack.client.d.ts","sourceRoot":"","sources":["../../src/client/slack.client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACjN,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD,gFAAgF;AAChF,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,KAAG,MAS5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;IAC3C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,qBACa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,0CAA0C;IAC1C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;gBAGL,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM;IAKjC,8CAA8C;IAC9C,WAAW,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAI7E,2CAA2C;IAC3C,aAAa,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIrE,2CAA2C;IAC3C,aAAa,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIrE,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI9D;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,sBAAsB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAoBhF"}

package/dist/comms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"comms.d.ts","sourceRoot":"","sources":["../src/comms.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAyB,KAAK,aAAa,EAAsB,KAAK,QAAQ,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACpK,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAyBhE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,WAAW,EAAE,WAAW,gBAAgB,KAAG,QASrF,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,MAAM,kBAAkB,KAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAYxJ,CAAC;AAEF,4GAA4G;AAC5G,eAAO,MAAM,oBAAoB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,SAAS,mBAAmB,KAAG,OAAO,CAAC,IAAI,CAYjI,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,SAAS,uBAAuB,KAAG,OAAO,CAAC,IAAI,CAgBzI,CAAC"}
+{"version":3,"file":"comms.d.ts","sourceRoot":"","sources":["../src/comms.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAyB,KAAK,aAAa,EAAsB,KAAK,QAAQ,EAAwB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACpK,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAkChE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,WAAW,EAAE,WAAW,gBAAgB,KAAG,QASrF,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,MAAM,kBAAkB,KAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAYxJ,CAAC;AAEF,4GAA4G;AAC5G,eAAO,MAAM,oBAAoB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,SAAS,mBAAmB,KAAG,OAAO,CAAC,IAAI,CAYjI,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GAAU,QAAQ,aAAa,EAAE,QAAQ,WAAW,EAAE,SAAS,uBAAuB,KAAG,OAAO,CAAC,IAAI,CAgBzI,CAAC"}

package/dist/comms.js

@@ -4,18 +4,20 @@ import {
 
 // src/comms.ts
 import { bindReply, CommsError } from "@maroonedsoftware/comms";
+var sanitizeText = /* @__PURE__ */ __name((text) => text === void 0 ? void 0 : text.replace(/<!(everyone|channel|here)(\|[^>]*)?>/gi, "@$1"), "sanitizeText");
 var render = /* @__PURE__ */ __name((message) => {
+  const text = sanitizeText(message.text);
   if (!message.buttons?.length) return {
-    text: message.text
+    text
   };
   return {
-    text: message.text,
+    text,
     blocks: [
       {
         type: "section",
         text: {
           type: "mrkdwn",
-          text: message.text
+          text
         }
       },
       {

package/dist/comms.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/comms.ts"],"sourcesContent":["/**\n * `@maroonedsoftware/slack/comms` — adapter binding the Slack package to the\n * channel-agnostic `@maroonedsoftware/comms` router. Importing this subpath\n * pulls in `@maroonedsoftware/comms` (an optional peer); the slack core does not.\n */\nimport { bindReply, CommsError, type ChannelRouter, type IncomingEvent, type Notifier, type OutgoingMessage, type TemplateRegistry } from '@maroonedsoftware/comms';\nimport { SlackClient } from './client/slack.client.js';\nimport type { SlackCommandPayload } from './slack.command.handler.js';\nimport type { SlackInteractionPayload } from './slack.interaction.handler.js';\nimport type { SlackEventCallback } from './slack.event.handler.js';\nimport type { SlackEventsRequest } from './slack.dispatcher.js';\n\ntype SlackPayload = Record<string, unknown>;\n\n/** Renders a portable message to a Slack chat payload (`text`, or `text` + Block Kit `actions`). */\nconst render = (message: OutgoingMessage): SlackPayload => {\n  if (!message.buttons?.length) return { text: message.text };\n  return {\n    text: message.text,\n    blocks: [\n      { type: 'section', text: { type: 'mrkdwn', text: message.text } },\n      {\n        type: 'actions',\n        elements: message.buttons.map(b => ({ type: 'button', action_id: b.id, text: { type: 'plain_text', text: b.label }, value: b.value ?? b.id })),\n      },\n    ],\n  };\n};\n\n/** Delivers a Slack payload: to a `response_url` (http) via webhook, otherwise to a channel id. */\nconst deliver = (client: SlackClient, to: string, payload: SlackPayload): Promise<unknown> =>\n  to.startsWith('http')\n    ? client.postWebhook(payload as Parameters<SlackClient['postWebhook']>[0], to)\n    : client.postMessage({ channel: to, ...payload } as Parameters<SlackClient['postMessage']>[0]);\n\n/**\n * Builds a {@link Notifier} that sends portable messages and registered templates\n * through {@link SlackClient}. The recipient string is either a `response_url`\n * (used as an incoming webhook) or a channel id (`chat.postMessage`).\n */\nexport const createSlackNotifier = (client: SlackClient, templates: TemplateRegistry): Notifier => ({\n  channel: 'slack',\n  send: async (to, message) => void (await deliver(client, to, render(message))),\n  sendTemplate: async (to, name, data) => {\n    const resolved = templates.render(name, 'slack', data);\n    if (!resolved) throw new CommsError(`No comms template registered for \"${name}\"`).withInternalDetails({ channel: 'slack', name });\n    await deliver(client, to, resolved.kind === 'native' ? (resolved.payload as SlackPayload) : render(resolved.message));\n  },\n  sendNative: async (to, payload) => void (await deliver(client, to, payload as SlackPayload)),\n});\n\n/**\n * Dispatches a parsed Slack Events API body. Returns the `url_verification`\n * challenge for the handshake; for `message` / `app_mention` events it routes a\n * normalized `message` event to the {@link ChannelRouter} (replying via\n * `chat.postMessage` to the event's channel). Returns `undefined` otherwise.\n */\nexport const dispatchSlackEvent = async (router: ChannelRouter, client: SlackClient, body: SlackEventsRequest): Promise<{ challenge: string } | undefined> => {\n  if (body.type === 'url_verification') return { challenge: (body as { challenge: string }).challenge };\n  if (body.type !== 'event_callback') return undefined;\n\n  const envelope = body as SlackEventCallback;\n  const ev = envelope.event as { type: string; channel?: string; user?: string; text?: string; bot_id?: string; subtype?: string };\n  if ((ev.type === 'message' || ev.type === 'app_mention') && ev.user && !ev.bot_id && ev.subtype !== 'bot_message') {\n    const channel = ev.channel ?? '';\n    const event: IncomingEvent = { channel: 'slack', kind: 'message', user: { id: ev.user }, conversation: { id: channel }, text: ev.text, raw: envelope };\n    await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), channel));\n  }\n  return undefined;\n};\n\n/** Dispatches a parsed slash-command payload as a normalized `command` event (reply via `response_url`). */\nexport const dispatchSlackCommand = async (router: ChannelRouter, client: SlackClient, payload: SlackCommandPayload): Promise<void> => {\n  const event: IncomingEvent = {\n    channel: 'slack',\n    kind: 'command',\n    user: { id: payload.user_id, username: payload.user_name },\n    conversation: { id: payload.channel_id },\n    text: `${payload.command} ${payload.text}`.trim(),\n    command: { name: payload.command, args: payload.text },\n    raw: payload,\n  };\n  const to = payload.response_url || payload.channel_id;\n  await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), to));\n};\n\n/**\n * Dispatches a parsed interactive payload. Only `block_actions` is normalized\n * (to an `action` event keyed by the first action's `action_id`); other types\n * (e.g. `view_submission`) stay on the slack package's native handlers.\n */\nexport const dispatchSlackInteraction = async (router: ChannelRouter, client: SlackClient, payload: SlackInteractionPayload): Promise<void> => {\n  if (payload.type !== 'block_actions') return;\n  const first = payload.actions?.[0];\n  if (!first) return;\n\n  const channel = (payload as { channel?: { id?: string } }).channel?.id ?? '';\n  const event: IncomingEvent = {\n    channel: 'slack',\n    kind: 'action',\n    user: { id: payload.user?.id ?? '', username: payload.user?.name },\n    conversation: { id: channel },\n    action: { id: first.action_id, value: first.value },\n    raw: payload,\n  };\n  const to = payload.response_url || channel;\n  await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), to));\n};\n"],"mappings":";;;;;AAKA,SAASA,WAAWC,kBAAsH;AAU1I,IAAMC,SAAS,wBAACC,YAAAA;AACd,MAAI,CAACA,QAAQC,SAASC,OAAQ,QAAO;IAAEC,MAAMH,QAAQG;EAAK;AAC1D,SAAO;IACLA,MAAMH,QAAQG;IACdC,QAAQ;MACN;QAAEC,MAAM;QAAWF,MAAM;UAAEE,MAAM;UAAUF,MAAMH,QAAQG;QAAK;MAAE;MAChE;QACEE,MAAM;QACNC,UAAUN,QAAQC,QAAQM,IAAIC,CAAAA,OAAM;UAAEH,MAAM;UAAUI,WAAWD,EAAEE;UAAIP,MAAM;YAAEE,MAAM;YAAcF,MAAMK,EAAEG;UAAM;UAAGC,OAAOJ,EAAEI,SAASJ,EAAEE;QAAG,EAAA;MAC7I;;EAEJ;AACF,GAZe;AAef,IAAMG,UAAU,wBAACC,QAAqBC,IAAYC,YAChDD,GAAGE,WAAW,MAAA,IACVH,OAAOI,YAAYF,SAAsDD,EAAAA,IACzED,OAAOK,YAAY;EAAEC,SAASL;EAAI,GAAGC;AAAQ,CAAA,GAHnC;AAUT,IAAMK,sBAAsB,wBAACP,QAAqBQ,eAA2C;EAClGF,SAAS;EACTG,MAAM,8BAAOR,IAAIf,YAAY,KAAM,MAAMa,QAAQC,QAAQC,IAAIhB,OAAOC,OAAAA,CAAAA,GAA9D;EACNwB,cAAc,8BAAOT,IAAIU,MAAMC,SAAAA;AAC7B,UAAMC,WAAWL,UAAUvB,OAAO0B,MAAM,SAASC,IAAAA;AACjD,QAAI,CAACC,SAAU,OAAM,IAAIC,WAAW,qCAAqCH,IAAAA,GAAO,EAAEI,oBAAoB;MAAET,SAAS;MAASK;IAAK,CAAA;AAC/H,UAAMZ,QAAQC,QAAQC,IAAIY,SAASG,SAAS,WAAYH,SAASX,UAA2BjB,OAAO4B,SAAS3B,OAAO,CAAA;EACrH,GAJc;EAKd+B,YAAY,8BAAOhB,IAAIC,YAAY,KAAM,MAAMH,QAAQC,QAAQC,IAAIC,OAAAA,GAAvD;AACd,IATmC;AAiB5B,IAAMgB,qBAAqB,8BAAOC,QAAuBnB,QAAqBoB,SAAAA;AACnF,MAAIA,KAAK7B,SAAS,mBAAoB,QAAO;IAAE8B,WAAYD,KAA+BC;EAAU;AACpG,MAAID,KAAK7B,SAAS,iBAAkB,QAAO+B;AAE3C,QAAMC,WAAWH;AACjB,QAAMI,KAAKD,SAASE;AACpB,OAAKD,GAAGjC,SAAS,aAAaiC,GAAGjC,SAAS,kBAAkBiC,GAAGE,QAAQ,CAACF,GAAGG,UAAUH,GAAGI,YAAY,eAAe;AACjH,UAAMtB,UAAUkB,GAAGlB,WAAW;AAC9B,UAAMmB,QAAuB;MAAEnB,SAAS;MAASU,MAAM;MAAWU,MAAM;QAAE9B,IAAI4B,GAAGE;MAAK;MAAGG,cAAc;QAAEjC,IAAIU;MAAQ;MAAGjB,MAAMmC,GAAGnC;MAAMyC,KAAKP;IAAS;AACrJ,UAAMJ,OAAOY,SAASN,OAAOO,UAAUzB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGF,OAAAA,CAAAA;EACxF;AACA,SAAOgB;AACT,GAZkC;AAe3B,IAAMW,uBAAuB,8BAAOd,QAAuBnB,QAAqBE,YAAAA;AACrF,QAAMuB,QAAuB;IAC3BnB,SAAS;IACTU,MAAM;IACNU,MAAM;MAAE9B,IAAIM,QAAQgC;MAASC,UAAUjC,QAAQkC;IAAU;IACzDP,cAAc;MAAEjC,IAAIM,QAAQmC;IAAW;IACvChD,MAAM,GAAGa,QAAQoC,OAAO,IAAIpC,QAAQb,IAAI,GAAGkD,KAAI;IAC/CD,SAAS;MAAE3B,MAAMT,QAAQoC;MAASE,MAAMtC,QAAQb;IAAK;IACrDyC,KAAK5B;EACP;AACA,QAAMD,KAAKC,QAAQuC,gBAAgBvC,QAAQmC;AAC3C,QAAMlB,OAAOY,SAASN,OAAOO,UAAUzB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGP,EAAAA,CAAAA;AACxF,GAZoC;AAmB7B,IAAMyC,2BAA2B,8BAAOvB,QAAuBnB,QAAqBE,YAAAA;AACzF,MAAIA,QAAQX,SAAS,gBAAiB;AACtC,QAAMoD,QAAQzC,QAAQ0C,UAAU,CAAA;AAChC,MAAI,CAACD,MAAO;AAEZ,QAAMrC,UAAWJ,QAA0CI,SAASV,MAAM;AAC1E,QAAM6B,QAAuB;IAC3BnB,SAAS;IACTU,MAAM;IACNU,MAAM;MAAE9B,IAAIM,QAAQwB,MAAM9B,MAAM;MAAIuC,UAAUjC,QAAQwB,MAAMf;IAAK;IACjEkB,cAAc;MAAEjC,IAAIU;IAAQ;IAC5BuC,QAAQ;MAAEjD,IAAI+C,MAAMhD;MAAWG,OAAO6C,MAAM7C;IAAM;IAClDgC,KAAK5B;EACP;AACA,QAAMD,KAAKC,QAAQuC,gBAAgBnC;AACnC,QAAMa,OAAOY,SAASN,OAAOO,UAAUzB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGP,EAAAA,CAAAA;AACxF,GAhBwC;","names":["bindReply","CommsError","render","message","buttons","length","text","blocks","type","elements","map","b","action_id","id","label","value","deliver","client","to","payload","startsWith","postWebhook","postMessage","channel","createSlackNotifier","templates","send","sendTemplate","name","data","resolved","CommsError","withInternalDetails","kind","sendNative","dispatchSlackEvent","router","body","challenge","undefined","envelope","ev","event","user","bot_id","subtype","conversation","raw","dispatch","bindReply","dispatchSlackCommand","user_id","username","user_name","channel_id","command","trim","args","response_url","dispatchSlackInteraction","first","actions","action"]}
+{"version":3,"sources":["../src/comms.ts"],"sourcesContent":["/**\n * `@maroonedsoftware/slack/comms` — adapter binding the Slack package to the\n * channel-agnostic `@maroonedsoftware/comms` router. Importing this subpath\n * pulls in `@maroonedsoftware/comms` (an optional peer); the slack core does not.\n */\nimport { bindReply, CommsError, type ChannelRouter, type IncomingEvent, type Notifier, type OutgoingMessage, type TemplateRegistry } from '@maroonedsoftware/comms';\nimport { SlackClient } from './client/slack.client.js';\nimport type { SlackCommandPayload } from './slack.command.handler.js';\nimport type { SlackInteractionPayload } from './slack.interaction.handler.js';\nimport type { SlackEventCallback } from './slack.event.handler.js';\nimport type { SlackEventsRequest } from './slack.dispatcher.js';\n\ntype SlackPayload = Record<string, unknown>;\n\n/**\n * Neutralizes Slack broadcast control sequences in user-supplied text so it\n * cannot ping a whole channel/workspace. `<!everyone>`, `<!channel>`, `<!here>`\n * (and their `<!channel|label>` forms) are rewritten to harmless literal\n * `@everyone`/`@channel`/`@here` text.\n */\nconst sanitizeText = (text: string | undefined): string | undefined => (text === undefined ? undefined : text.replace(/<!(everyone|channel|here)(\\|[^>]*)?>/gi, '@$1'));\n\n/** Renders a portable message to a Slack chat payload (`text`, or `text` + Block Kit `actions`). */\nconst render = (message: OutgoingMessage): SlackPayload => {\n  const text = sanitizeText(message.text);\n  if (!message.buttons?.length) return { text };\n  return {\n    text,\n    blocks: [\n      { type: 'section', text: { type: 'mrkdwn', text } },\n      {\n        type: 'actions',\n        elements: message.buttons.map(b => ({ type: 'button', action_id: b.id, text: { type: 'plain_text', text: b.label }, value: b.value ?? b.id })),\n      },\n    ],\n  };\n};\n\n/** Delivers a Slack payload: to a `response_url` (http) via webhook, otherwise to a channel id. */\nconst deliver = (client: SlackClient, to: string, payload: SlackPayload): Promise<unknown> =>\n  to.startsWith('http')\n    ? client.postWebhook(payload as Parameters<SlackClient['postWebhook']>[0], to)\n    : client.postMessage({ channel: to, ...payload } as Parameters<SlackClient['postMessage']>[0]);\n\n/**\n * Builds a {@link Notifier} that sends portable messages and registered templates\n * through {@link SlackClient}. The recipient string is either a `response_url`\n * (used as an incoming webhook) or a channel id (`chat.postMessage`).\n */\nexport const createSlackNotifier = (client: SlackClient, templates: TemplateRegistry): Notifier => ({\n  channel: 'slack',\n  send: async (to, message) => void (await deliver(client, to, render(message))),\n  sendTemplate: async (to, name, data) => {\n    const resolved = templates.render(name, 'slack', data);\n    if (!resolved) throw new CommsError(`No comms template registered for \"${name}\"`).withInternalDetails({ channel: 'slack', name });\n    await deliver(client, to, resolved.kind === 'native' ? (resolved.payload as SlackPayload) : render(resolved.message));\n  },\n  sendNative: async (to, payload) => void (await deliver(client, to, payload as SlackPayload)),\n});\n\n/**\n * Dispatches a parsed Slack Events API body. Returns the `url_verification`\n * challenge for the handshake; for `message` / `app_mention` events it routes a\n * normalized `message` event to the {@link ChannelRouter} (replying via\n * `chat.postMessage` to the event's channel). Returns `undefined` otherwise.\n */\nexport const dispatchSlackEvent = async (router: ChannelRouter, client: SlackClient, body: SlackEventsRequest): Promise<{ challenge: string } | undefined> => {\n  if (body.type === 'url_verification') return { challenge: (body as { challenge: string }).challenge };\n  if (body.type !== 'event_callback') return undefined;\n\n  const envelope = body as SlackEventCallback;\n  const ev = envelope.event as { type: string; channel?: string; user?: string; text?: string; bot_id?: string; subtype?: string };\n  if ((ev.type === 'message' || ev.type === 'app_mention') && ev.user && !ev.bot_id && ev.subtype !== 'bot_message') {\n    const channel = ev.channel ?? '';\n    const event: IncomingEvent = { channel: 'slack', kind: 'message', user: { id: ev.user }, conversation: { id: channel }, text: ev.text, raw: envelope };\n    await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), channel));\n  }\n  return undefined;\n};\n\n/** Dispatches a parsed slash-command payload as a normalized `command` event (reply via `response_url`). */\nexport const dispatchSlackCommand = async (router: ChannelRouter, client: SlackClient, payload: SlackCommandPayload): Promise<void> => {\n  const event: IncomingEvent = {\n    channel: 'slack',\n    kind: 'command',\n    user: { id: payload.user_id, username: payload.user_name },\n    conversation: { id: payload.channel_id },\n    text: `${payload.command} ${payload.text}`.trim(),\n    command: { name: payload.command, args: payload.text },\n    raw: payload,\n  };\n  const to = payload.response_url || payload.channel_id;\n  await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), to));\n};\n\n/**\n * Dispatches a parsed interactive payload. Only `block_actions` is normalized\n * (to an `action` event keyed by the first action's `action_id`); other types\n * (e.g. `view_submission`) stay on the slack package's native handlers.\n */\nexport const dispatchSlackInteraction = async (router: ChannelRouter, client: SlackClient, payload: SlackInteractionPayload): Promise<void> => {\n  if (payload.type !== 'block_actions') return;\n  const first = payload.actions?.[0];\n  if (!first) return;\n\n  const channel = (payload as { channel?: { id?: string } }).channel?.id ?? '';\n  const event: IncomingEvent = {\n    channel: 'slack',\n    kind: 'action',\n    user: { id: payload.user?.id ?? '', username: payload.user?.name },\n    conversation: { id: channel },\n    action: { id: first.action_id, value: first.value },\n    raw: payload,\n  };\n  const to = payload.response_url || channel;\n  await router.dispatch(event, bindReply(createSlackNotifier(client, router.templates), to));\n};\n"],"mappings":";;;;;AAKA,SAASA,WAAWC,kBAAsH;AAe1I,IAAMC,eAAe,wBAACC,SAAkDA,SAASC,SAAYA,SAAYD,KAAKE,QAAQ,0CAA0C,KAAA,GAA3I;AAGrB,IAAMC,SAAS,wBAACC,YAAAA;AACd,QAAMJ,OAAOD,aAAaK,QAAQJ,IAAI;AACtC,MAAI,CAACI,QAAQC,SAASC,OAAQ,QAAO;IAAEN;EAAK;AAC5C,SAAO;IACLA;IACAO,QAAQ;MACN;QAAEC,MAAM;QAAWR,MAAM;UAAEQ,MAAM;UAAUR;QAAK;MAAE;MAClD;QACEQ,MAAM;QACNC,UAAUL,QAAQC,QAAQK,IAAIC,CAAAA,OAAM;UAAEH,MAAM;UAAUI,WAAWD,EAAEE;UAAIb,MAAM;YAAEQ,MAAM;YAAcR,MAAMW,EAAEG;UAAM;UAAGC,OAAOJ,EAAEI,SAASJ,EAAEE;QAAG,EAAA;MAC7I;;EAEJ;AACF,GAbe;AAgBf,IAAMG,UAAU,wBAACC,QAAqBC,IAAYC,YAChDD,GAAGE,WAAW,MAAA,IACVH,OAAOI,YAAYF,SAAsDD,EAAAA,IACzED,OAAOK,YAAY;EAAEC,SAASL;EAAI,GAAGC;AAAQ,CAAA,GAHnC;AAUT,IAAMK,sBAAsB,wBAACP,QAAqBQ,eAA2C;EAClGF,SAAS;EACTG,MAAM,8BAAOR,IAAId,YAAY,KAAM,MAAMY,QAAQC,QAAQC,IAAIf,OAAOC,OAAAA,CAAAA,GAA9D;EACNuB,cAAc,8BAAOT,IAAIU,MAAMC,SAAAA;AAC7B,UAAMC,WAAWL,UAAUtB,OAAOyB,MAAM,SAASC,IAAAA;AACjD,QAAI,CAACC,SAAU,OAAM,IAAIC,WAAW,qCAAqCH,IAAAA,GAAO,EAAEI,oBAAoB;MAAET,SAAS;MAASK;IAAK,CAAA;AAC/H,UAAMZ,QAAQC,QAAQC,IAAIY,SAASG,SAAS,WAAYH,SAASX,UAA2BhB,OAAO2B,SAAS1B,OAAO,CAAA;EACrH,GAJc;EAKd8B,YAAY,8BAAOhB,IAAIC,YAAY,KAAM,MAAMH,QAAQC,QAAQC,IAAIC,OAAAA,GAAvD;AACd,IATmC;AAiB5B,IAAMgB,qBAAqB,8BAAOC,QAAuBnB,QAAqBoB,SAAAA;AACnF,MAAIA,KAAK7B,SAAS,mBAAoB,QAAO;IAAE8B,WAAYD,KAA+BC;EAAU;AACpG,MAAID,KAAK7B,SAAS,iBAAkB,QAAOP;AAE3C,QAAMsC,WAAWF;AACjB,QAAMG,KAAKD,SAASE;AACpB,OAAKD,GAAGhC,SAAS,aAAagC,GAAGhC,SAAS,kBAAkBgC,GAAGE,QAAQ,CAACF,GAAGG,UAAUH,GAAGI,YAAY,eAAe;AACjH,UAAMrB,UAAUiB,GAAGjB,WAAW;AAC9B,UAAMkB,QAAuB;MAAElB,SAAS;MAASU,MAAM;MAAWS,MAAM;QAAE7B,IAAI2B,GAAGE;MAAK;MAAGG,cAAc;QAAEhC,IAAIU;MAAQ;MAAGvB,MAAMwC,GAAGxC;MAAM8C,KAAKP;IAAS;AACrJ,UAAMH,OAAOW,SAASN,OAAOO,UAAUxB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGF,OAAAA,CAAAA;EACxF;AACA,SAAOtB;AACT,GAZkC;AAe3B,IAAMgD,uBAAuB,8BAAOb,QAAuBnB,QAAqBE,YAAAA;AACrF,QAAMsB,QAAuB;IAC3BlB,SAAS;IACTU,MAAM;IACNS,MAAM;MAAE7B,IAAIM,QAAQ+B;MAASC,UAAUhC,QAAQiC;IAAU;IACzDP,cAAc;MAAEhC,IAAIM,QAAQkC;IAAW;IACvCrD,MAAM,GAAGmB,QAAQmC,OAAO,IAAInC,QAAQnB,IAAI,GAAGuD,KAAI;IAC/CD,SAAS;MAAE1B,MAAMT,QAAQmC;MAASE,MAAMrC,QAAQnB;IAAK;IACrD8C,KAAK3B;EACP;AACA,QAAMD,KAAKC,QAAQsC,gBAAgBtC,QAAQkC;AAC3C,QAAMjB,OAAOW,SAASN,OAAOO,UAAUxB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGP,EAAAA,CAAAA;AACxF,GAZoC;AAmB7B,IAAMwC,2BAA2B,8BAAOtB,QAAuBnB,QAAqBE,YAAAA;AACzF,MAAIA,QAAQX,SAAS,gBAAiB;AACtC,QAAMmD,QAAQxC,QAAQyC,UAAU,CAAA;AAChC,MAAI,CAACD,MAAO;AAEZ,QAAMpC,UAAWJ,QAA0CI,SAASV,MAAM;AAC1E,QAAM4B,QAAuB;IAC3BlB,SAAS;IACTU,MAAM;IACNS,MAAM;MAAE7B,IAAIM,QAAQuB,MAAM7B,MAAM;MAAIsC,UAAUhC,QAAQuB,MAAMd;IAAK;IACjEiB,cAAc;MAAEhC,IAAIU;IAAQ;IAC5BsC,QAAQ;MAAEhD,IAAI8C,MAAM/C;MAAWG,OAAO4C,MAAM5C;IAAM;IAClD+B,KAAK3B;EACP;AACA,QAAMD,KAAKC,QAAQsC,gBAAgBlC;AACnC,QAAMa,OAAOW,SAASN,OAAOO,UAAUxB,oBAAoBP,QAAQmB,OAAOX,SAAS,GAAGP,EAAAA,CAAAA;AACxF,GAhBwC;","names":["bindReply","CommsError","sanitizeText","text","undefined","replace","render","message","buttons","length","blocks","type","elements","map","b","action_id","id","label","value","deliver","client","to","payload","startsWith","postWebhook","postMessage","channel","createSlackNotifier","templates","send","sendTemplate","name","data","resolved","CommsError","withInternalDetails","kind","sendNative","dispatchSlackEvent","router","body","challenge","envelope","ev","event","user","bot_id","subtype","conversation","raw","dispatch","bindReply","dispatchSlackCommand","user_id","username","user_name","channel_id","command","trim","args","response_url","dispatchSlackInteraction","first","actions","action"]}

package/dist/index.js

@@ -60,7 +60,7 @@ var verifySlackSignature = /* @__PURE__ */ __name((input) => {
       reason: "missing_signature"
     });
   }
-  const expected = `v0=${createHmac("sha256", signingSecret).update(`v0:${ts}:${rawBody}`).digest("hex")}`;
+  const expected = `v0=${createHmac("sha256", signingSecret).update(`v0:${timestamp}:${rawBody}`).digest("hex")}`;
   const expectedBuf = Buffer.from(expected, "utf8");
   const providedBuf = Buffer.from(signature, "utf8");
   if (expectedBuf.length !== providedBuf.length || !timingSafeEqual(expectedBuf, providedBuf)) {
@@ -321,6 +321,17 @@ function _ts_metadata2(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
 __name(_ts_metadata2, "_ts_metadata");
+var SLACK_DEFAULT_REQUEST_TIMEOUT_MS = 1e4;
+var redactSlackUrl = /* @__PURE__ */ __name((raw) => {
+  try {
+    const url = new URL(raw);
+    const segments = url.pathname.split("/").filter(Boolean);
+    if (segments.length > 0) segments[segments.length - 1] = "***";
+    return `${url.origin}/${segments.join("/")}`;
+  } catch {
+    return "***";
+  }
+}, "redactSlackUrl");
 var SlackClient = class {
   static {
     __name(this, "SlackClient");
@@ -369,18 +380,21 @@ var SlackClient = class {
       headers: {
         "content-type": "application/json"
       },
-      body: JSON.stringify(payload)
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(this.config.requestTimeoutMs ?? SLACK_DEFAULT_REQUEST_TIMEOUT_MS)
     });
     if (!response.ok) {
       const body = await response.text().catch(() => "");
+      const safeUrl = redactSlackUrl(target);
       this.logger.warn("Slack webhook POST returned non-OK status", {
         status: response.status,
-        body
+        body,
+        url: safeUrl
       });
       throw new SlackError(`Slack webhook POST returned ${response.status}`).withInternalDetails({
         status: response.status,
         body,
-        url: target
+        url: safeUrl
       });
     }
   }
@@ -395,6 +409,7 @@ SlackClient = _ts_decorate4([
 ], SlackClient);
 export {
   IsSlackError,
+  SLACK_DEFAULT_REQUEST_TIMEOUT_MS,
   SLACK_REQUEST_TIMESTAMP_HEADER,
   SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS,
   SLACK_SIGNATURE_HEADER,
@@ -409,6 +424,7 @@ export {
   SlackSignaturePolicy,
   adaptLogger,
   interactionRouteKey,
+  redactSlackUrl,
   verifySlackSignature
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/slack.config.ts","../src/slack.error.ts","../src/slack.signature.ts","../src/slack.signature.policy.ts","../src/slack.interaction.handler.ts","../src/slack.dispatcher.ts","../src/client/slack.client.ts","../src/client/slack.logger.adapter.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-unsafe-declaration-merging */\nimport { Injectable } from 'injectkit';\n\n/**\n * Configuration for the Slack package. Declared as an abstract `@Injectable()`\n * class so it doubles as a DI token (mirrors the `Logger` pattern in\n * `@maroonedsoftware/logger`).\n *\n * Consumers register a concrete value at bootstrap, typically resolved from\n * `AppConfig`:\n *\n * ```ts\n * const slackConfig = appConfig.getAs<SlackConfig>('slack');\n * container.register(SlackConfig, { useValue: slackConfig });\n * ```\n *\n * Services in this package take `SlackConfig` directly in their constructor.\n */\nexport interface SlackConfig {\n  /** Bot user OAuth token (`xoxb-...`). Required for Web API calls. */\n  botToken: string;\n  /** App-level signing secret used to verify request signatures. */\n  signingSecret: string;\n  /** Optional incoming webhook URL used as the default target for `SlackClient.postWebhook`. */\n  incomingWebhookUrl?: string;\n  /**\n   * Maximum age (in seconds) for request timestamps before signature\n   * verification rejects them as replays. Defaults to `300` (5 minutes).\n   */\n  signatureMaxAgeSeconds?: number;\n}\n\n@Injectable()\nexport abstract class SlackConfig implements SlackConfig {}\n","import { ServerkitError } from '@maroonedsoftware/errors';\n\n/**\n * Domain error raised by the Slack package for non-HTTP failures (e.g.\n * incoming-webhook POST failed, unknown handler dispatch).\n *\n * Extends {@link ServerkitError} so `errorMiddleware` renders a 500 with\n * `{ message, details }` if one of these escapes a route handler. Inside\n * route handlers, throw `httpError(...)` directly for status-coded responses.\n */\nexport class SlackError extends ServerkitError {}\n\n/**\n * Type guard for {@link SlackError}. Narrows `unknown` to `SlackError` so\n * `details`, `internalDetails`, and the chainable setters are accessible\n * without further checks. Returns `true` for any subclass.\n */\nexport const IsSlackError = (error: unknown): error is SlackError => error instanceof SlackError;\n","import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { DateTime } from 'luxon';\nimport { SlackError } from './slack.error.js';\n\n/** Default replay-protection window in seconds (5 minutes — matches Slack's recommendation). */\nexport const SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS = 300;\n\n/**\n * Reason codes attached to {@link SlackError.internalDetails} when verification\n * fails. Useful for callers that want to log structured reasons without\n * pattern-matching on error messages.\n */\nexport type SlackSignatureFailureReason =\n  | 'missing_timestamp'\n  | 'invalid_timestamp'\n  | 'stale_timestamp'\n  | 'missing_signature'\n  | 'invalid_signature';\n\n/**\n * Inputs to {@link verifySlackSignature}. All values are taken verbatim from\n * the request — the helper does no header lookups or body reads of its own.\n */\nexport type VerifySlackSignatureInput = {\n  /** App signing secret (`SlackConfig.signingSecret`). */\n  signingSecret: string;\n  /** Raw, unparsed request body — exactly as Slack sent it. */\n  rawBody: string;\n  /** Value of the `X-Slack-Request-Timestamp` header. */\n  timestamp: string | undefined;\n  /** Value of the `X-Slack-Signature` header (e.g. `\"v0=abc123…\"`). */\n  signature: string | undefined;\n  /**\n   * Maximum age in seconds before the request is rejected as a replay.\n   * Defaults to {@link SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS}.\n   */\n  maxAgeSeconds?: number;\n  /**\n   * Override for the current Unix time in seconds. Mostly useful for tests;\n   * defaults to `Math.floor(DateTime.now().toSeconds())`.\n   */\n  now?: number;\n};\n\n/**\n * Verifies a Slack request signature against the app signing secret.\n *\n * Implements Slack's v0 scheme:\n * 1. Reject the request if `X-Slack-Request-Timestamp` is missing, non-numeric,\n *    or older than `maxAgeSeconds` (replay protection).\n * 2. Compute `v0=` + `HMAC-SHA256(signingSecret, \"v0:{timestamp}:{rawBody}\")`\n *    as hex.\n * 3. Compare against the provided `X-Slack-Signature` value using a\n *    constant-time compare.\n *\n * Pure: no request/context coupling. The caller extracts the headers and raw\n * body from whatever transport it's using and passes them in.\n *\n * @throws {@link SlackError} on any failure. The error's `internalDetails.reason`\n *   is one of {@link SlackSignatureFailureReason}; map to HTTP 401 at the route boundary.\n *\n * @example\n * ```ts\n * try {\n *   verifySlackSignature({\n *     signingSecret: config.signingSecret,\n *     rawBody,\n *     timestamp: req.headers['x-slack-request-timestamp'],\n *     signature: req.headers['x-slack-signature'],\n *   });\n * } catch (err) {\n *   throw httpError(401).withCause(err);\n * }\n * ```\n */\nexport const verifySlackSignature = (input: VerifySlackSignatureInput): void => {\n  const {\n    signingSecret,\n    rawBody,\n    timestamp,\n    signature,\n    maxAgeSeconds = SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS,\n    now = Math.floor(DateTime.now().toSeconds()),\n  } = input;\n\n  if (!timestamp) {\n    throw new SlackError('Slack request missing X-Slack-Request-Timestamp header').withInternalDetails({\n      reason: 'missing_timestamp' satisfies SlackSignatureFailureReason,\n    });\n  }\n\n  const ts = Number(timestamp);\n  if (!Number.isFinite(ts) || !Number.isInteger(ts)) {\n    throw new SlackError('Slack request timestamp is not a valid integer').withInternalDetails({\n      reason: 'invalid_timestamp' satisfies SlackSignatureFailureReason,\n      timestamp,\n    });\n  }\n\n  if (Math.abs(now - ts) > maxAgeSeconds) {\n    throw new SlackError('Slack request timestamp is outside the allowed window').withInternalDetails({\n      reason: 'stale_timestamp' satisfies SlackSignatureFailureReason,\n      timestamp: ts,\n      now,\n      maxAgeSeconds,\n    });\n  }\n\n  if (!signature) {\n    throw new SlackError('Slack request missing X-Slack-Signature header').withInternalDetails({\n      reason: 'missing_signature' satisfies SlackSignatureFailureReason,\n    });\n  }\n\n  const expected = `v0=${createHmac('sha256', signingSecret).update(`v0:${ts}:${rawBody}`).digest('hex')}`;\n  const expectedBuf = Buffer.from(expected, 'utf8');\n  const providedBuf = Buffer.from(signature, 'utf8');\n\n  // timingSafeEqual throws on length mismatch — short-circuit so the caller\n  // gets a uniform \"invalid_signature\" error instead of a crypto exception.\n  if (expectedBuf.length !== providedBuf.length || !timingSafeEqual(expectedBuf, providedBuf)) {\n    throw new SlackError('Slack request signature does not match').withInternalDetails({\n      reason: 'invalid_signature' satisfies SlackSignatureFailureReason,\n    });\n  }\n};\n","import { BinaryLike } from 'node:crypto';\nimport { Injectable } from 'injectkit';\nimport { Policy, PolicyEnvelope, PolicyResult } from '@maroonedsoftware/policies';\nimport { SlackConfig } from './slack.config.js';\nimport { IsSlackError } from './slack.error.js';\nimport { verifySlackSignature, type SlackSignatureFailureReason } from './slack.signature.js';\n\n/**\n * Policy name under which {@link SlackSignaturePolicy} is registered. Use as the\n * key when wiring your `PolicyRegistryMap`, and pass to `PolicyService.check`.\n */\nexport const SLACK_SIGNATURE_POLICY = 'slack.signature.valid' as const;\n\n/** Header carrying the request timestamp Slack signs into the HMAC. */\nexport const SLACK_REQUEST_TIMESTAMP_HEADER = 'X-Slack-Request-Timestamp';\n/** Header carrying the `v0=`-prefixed request signature. */\nexport const SLACK_SIGNATURE_HEADER = 'X-Slack-Signature';\n\n/**\n * Configuration the {@link SlackSignaturePolicy} reads. A structural subset of\n * {@link SlackConfig}, so a `SlackConfig` value satisfies it directly — e.g.\n * `requireSignature<SlackSignatureOptions>('slack')` with the Slack config\n * stored under that `AppConfig` key.\n */\nexport type SlackSignatureOptions = Pick<SlackConfig, 'signingSecret' | 'signatureMaxAgeSeconds'>;\n\n/**\n * Context for {@link SlackSignaturePolicy}: the raw request bytes, a\n * case-insensitive header accessor, and the {@link SlackSignatureOptions}.\n *\n * Structurally compatible with `@maroonedsoftware/koa`'s\n * `SignaturePolicyContext<SlackSignatureOptions>`, so the koa `requireSignature`\n * middleware can drive this policy without the slack package depending on koa —\n * register `SlackSignaturePolicy` under the signature policy name and point the\n * middleware at the `AppConfig` key holding the Slack config.\n */\nexport interface SlackSignaturePolicyContext {\n  /** Raw, unparsed request body — exactly as Slack sent it (from `ctx.rawBody`). */\n  rawBody: BinaryLike;\n  /**\n   * Case-insensitive request header accessor (Koa's `ctx.get`); returns `''`\n   * when the header is absent.\n   */\n  getHeader: (name: string) => string;\n  /** Slack signing configuration. */\n  options: SlackSignatureOptions;\n}\n\n/**\n * Policy form of {@link verifySlackSignature}: verifies a Slack request against\n * the app signing secret using Slack's v0 scheme (HMAC over\n * `v0:{timestamp}:{rawBody}`, `v0=`-prefixed, with timestamp replay\n * protection).\n *\n * Delegates to {@link verifySlackSignature} so the crypto/timestamp logic has a\n * single source of truth, but answers as a {@link PolicyResult} rather than\n * throwing: allows on success, denies on failure with the helper's\n * {@link SlackSignatureFailureReason} as the denial `reason` and its diagnostics\n * (timestamps, window) on `internalDetails` — never the signing secret, never\n * on the wire. The replay window is anchored to `envelope.now` so all policies\n * in an evaluation share one clock.\n *\n * Registered by default under {@link SLACK_SIGNATURE_POLICY}.\n *\n * @example\n * ```ts\n * // Direct evaluation in a route handler:\n * const result = await policyService.check(SLACK_SIGNATURE_POLICY, {\n *   rawBody: ctx.rawBody,\n *   getHeader: name => ctx.get(name),\n *   options: ctx.container.get(SlackConfig),\n * });\n * if (isPolicyResultDenied(result)) throw httpError(401);\n * ```\n */\n@Injectable()\nexport class SlackSignaturePolicy extends Policy<SlackSignaturePolicyContext> {\n  async evaluate(context: SlackSignaturePolicyContext, envelope: PolicyEnvelope): Promise<PolicyResult> {\n    const { rawBody, getHeader, options } = context;\n\n    // Slack signs the raw text body; `ctx.rawBody` may arrive as a Buffer.\n    const body = typeof rawBody === 'string' ? rawBody : Buffer.from(rawBody as Uint8Array).toString('utf8');\n\n    try {\n      verifySlackSignature({\n        signingSecret: options.signingSecret,\n        rawBody: body,\n        timestamp: getHeader(SLACK_REQUEST_TIMESTAMP_HEADER),\n        signature: getHeader(SLACK_SIGNATURE_HEADER),\n        maxAgeSeconds: options.signatureMaxAgeSeconds,\n        now: Math.floor(envelope.now.toSeconds()),\n      });\n      return this.allow();\n    } catch (error) {\n      if (!IsSlackError(error)) throw error;\n\n      const internalDetails = error.internalDetails ?? {};\n      const reason = typeof internalDetails.reason === 'string' ? internalDetails.reason : ('invalid_signature' satisfies SlackSignatureFailureReason);\n      return this.deny(reason, undefined, { message: error.message, ...internalDetails });\n    }\n  }\n}\n","/**\n * The supported interactive payload types Slack POSTs to the interactivity\n * endpoint. Each maps to a different identifier shape (see\n * {@link interactionRouteKey}).\n */\nexport type SlackInteractionType = 'block_actions' | 'view_submission' | 'view_closed' | 'shortcut' | 'message_action' | string;\n\n/**\n * Loose typing for the interactive payload; consumers narrow per handler.\n * Slack's payloads vary by type, but every variant has a `type` field plus\n * one of: `actions[].action_id`, `view.callback_id`, or top-level `callback_id`.\n */\nexport type SlackInteractionPayload = {\n  type: SlackInteractionType;\n  team?: { id: string; domain?: string };\n  user?: { id: string; name?: string };\n  trigger_id?: string;\n  response_url?: string;\n  actions?: Array<{ action_id: string; block_id?: string; value?: string; [key: string]: unknown }>;\n  view?: { id: string; callback_id: string; [key: string]: unknown };\n  callback_id?: string;\n  [key: string]: unknown;\n};\n\n/**\n * Optional response Slack accepts for `view_submission` / `view_closed`\n * payloads (e.g. to display validation errors or update a modal).\n */\nexport type SlackInteractionResponse = {\n  response_action?: 'errors' | 'update' | 'push' | 'clear';\n  errors?: Record<string, string>;\n  view?: unknown;\n  [key: string]: unknown;\n};\n\n/**\n * Handler for one interactive payload, keyed in {@link SlackInteractionHandlerMap}\n * by `${type}:${identifier}` — see {@link interactionRouteKey}.\n */\nexport interface SlackInteractionHandler {\n  handle(payload: SlackInteractionPayload): Promise<SlackInteractionResponse | void>;\n}\n\n/**\n * Computes the routing key used by {@link SlackDispatcher.dispatchInteraction}\n * to look a handler up in {@link SlackInteractionHandlerMap}.\n *\n * - `block_actions` → `block_actions:<first action.action_id>`\n * - `view_submission` / `view_closed` → `<type>:<view.callback_id>`\n * - `shortcut` / `message_action` → `<type>:<callback_id>`\n * - any other type with a `callback_id` → `<type>:<callback_id>`\n *\n * @returns The routing key, or `undefined` if the payload doesn't carry an\n *   identifier we can route on (e.g. a `block_actions` payload with no actions).\n */\nexport const interactionRouteKey = (payload: SlackInteractionPayload): string | undefined => {\n  switch (payload.type) {\n    case 'block_actions': {\n      const id = payload.actions?.[0]?.action_id;\n      return id ? `block_actions:${id}` : undefined;\n    }\n    case 'view_submission':\n    case 'view_closed': {\n      const id = payload.view?.callback_id;\n      return id ? `${payload.type}:${id}` : undefined;\n    }\n    case 'shortcut':\n    case 'message_action': {\n      return payload.callback_id ? `${payload.type}:${payload.callback_id}` : undefined;\n    }\n    default: {\n      return payload.callback_id ? `${payload.type}:${payload.callback_id}` : undefined;\n    }\n  }\n};\n","import { Injectable } from 'injectkit';\nimport { Logger } from '@maroonedsoftware/logger';\nimport type { SlackEventCallback, SlackEventHandler } from './slack.event.handler.js';\nimport type { SlackCommandHandler, SlackCommandPayload, SlackCommandResponse } from './slack.command.handler.js';\nimport {\n  interactionRouteKey,\n  SlackInteractionHandler,\n  type SlackInteractionPayload,\n  type SlackInteractionResponse,\n} from './slack.interaction.handler.js';\n\n/**\n * Body shape Slack POSTs to the Events API endpoint. The handshake variant\n * (`url_verification`) is sent once during app configuration; the rest of the\n * traffic is `event_callback` envelopes (or other future top-level types).\n */\nexport type SlackEventsRequest =\n  | { type: 'url_verification'; challenge: string; token?: string }\n  | SlackEventCallback\n  | { type: string; [key: string]: unknown };\n\n/**\n * Response Slack expects for the `url_verification` handshake. For\n * `event_callback` and unknown event types, the dispatcher returns\n * `undefined` and the caller should ack with HTTP 200.\n */\nexport type SlackEventsResponse = { challenge: string } | undefined;\n\n/**\n * Injectable map of command keyword (e.g. `/deploy`) → {@link SlackCommandHandler}.\n *\n * @example\n * ```ts\n * const commands = new SlackCommandHandlerMap();\n * commands.set('/deploy', container.get(DeployCommandHandler));\n * container.register(SlackCommandHandlerMap, { useValue: commands });\n * ```\n */\n@Injectable()\nexport class SlackCommandHandlerMap extends Map<string, SlackCommandHandler> {}\n\n/**\n * Injectable map of Slack event type → {@link SlackEventHandler}. Consumers\n * register handlers at bootstrap and place an instance of this map in their\n * DI container; {@link SlackDispatcher.dispatchEvent} resolves it per request.\n *\n * @example\n * ```ts\n * const handlers = new SlackEventHandlerMap();\n * handlers.set('app_mention', container.get(MyAppMentionHandler));\n * container.register(SlackEventHandlerMap, { useValue: handlers });\n * ```\n */\n@Injectable()\nexport class SlackEventHandlerMap extends Map<string, SlackEventHandler> {}\n\n/**\n * Injectable map of interaction routing keys → {@link SlackInteractionHandler}.\n *\n * Keys are produced by `interactionRouteKey(payload)`, which combines the\n * payload `type` with the relevant identifier (`action_id`, `callback_id`,\n * etc.). Register handlers under the same key shape:\n *\n * @example\n * ```ts\n * const interactions = new SlackInteractionHandlerMap();\n * interactions.set('block_actions:approve_button', container.get(ApproveHandler));\n * interactions.set('view_submission:create_ticket_modal', container.get(CreateTicketHandler));\n * container.register(SlackInteractionHandlerMap, { useValue: interactions });\n * ```\n */\n@Injectable()\nexport class SlackInteractionHandlerMap extends Map<string, SlackInteractionHandler> {}\n\n/**\n * Single entry point for dispatching parsed Slack payloads to registered\n * handlers. Transport-agnostic: the consumer is responsible for receiving\n * the HTTP request, verifying the signature, parsing the body, calling the\n * appropriate `dispatch*` method, and serializing the response.\n *\n * @example Koa route\n * ```ts\n * router.post('/slack/events', async (ctx) => {\n *   const raw = await rawBody(ctx.req, { encoding: 'utf8' });\n *   verifySlackSignature({\n *     signingSecret: ctx.container.get(SlackConfig).signingSecret,\n *     rawBody: raw,\n *     timestamp: ctx.get('x-slack-request-timestamp'),\n *     signature: ctx.get('x-slack-signature'),\n *   });\n *   const result = await ctx.container.get(SlackDispatcher).dispatchEvent(JSON.parse(raw));\n *   if (result) ctx.body = result;\n *   else { ctx.status = 200; ctx.body = ''; }\n * });\n * ```\n */\n@Injectable()\nexport class SlackDispatcher {\n  constructor(\n    private readonly events: SlackEventHandlerMap,\n    private readonly commands: SlackCommandHandlerMap,\n    private readonly interactions: SlackInteractionHandlerMap,\n    private readonly logger: Logger,\n  ) {}\n\n  /**\n   * Dispatch a parsed Events API body.\n   *\n   * - Returns `{ challenge }` for `url_verification` — the caller serializes\n   *   it as the response body.\n   * - For `event_callback`, looks up a handler in {@link SlackEventHandlerMap}\n   *   keyed by `event.type` and invokes it. Returns `undefined`. Slack retries\n   *   any non-2xx so unknown event types are logged at debug and acked.\n   * - For any other top-level type, logs and returns `undefined`.\n   */\n  async dispatchEvent(body: SlackEventsRequest): Promise<SlackEventsResponse> {\n    if (body.type === 'url_verification') {\n      return { challenge: (body as { challenge: string }).challenge };\n    }\n\n    if (body.type === 'event_callback') {\n      const envelope = body as SlackEventCallback;\n      const handler = this.events.get(envelope.event.type);\n      if (handler) {\n        await handler.handle(envelope.event, {\n          teamId: envelope.team_id,\n          eventId: envelope.event_id,\n          eventTime: envelope.event_time,\n          envelope,\n        });\n      } else {\n        this.logger.debug('No Slack event handler registered for event type', { type: envelope.event.type });\n      }\n      return undefined;\n    }\n\n    this.logger.debug('Unhandled Slack events payload type', { type: body.type });\n    return undefined;\n  }\n\n  /**\n   * Dispatch a parsed slash-command payload.\n   *\n   * Looks up a handler in {@link SlackCommandHandlerMap} keyed by\n   * `payload.command` (e.g. `/deploy`). If the handler returns a response,\n   * the caller serializes it as JSON; otherwise the caller acks with `200 ''`\n   * and the handler is expected to follow up via `payload.response_url`.\n   */\n  async dispatchCommand(payload: SlackCommandPayload): Promise<SlackCommandResponse | void> {\n    const handler = this.commands.get(payload.command);\n    if (!handler) {\n      this.logger.debug('No Slack command handler registered', { command: payload.command });\n      return undefined;\n    }\n    return await handler.handle(payload);\n  }\n\n  /**\n   * Dispatch a parsed interactive payload (block actions, view submission,\n   * shortcut, etc.). Computes a routing key via {@link interactionRouteKey}\n   * and looks it up in {@link SlackInteractionHandlerMap}.\n   */\n  async dispatchInteraction(payload: SlackInteractionPayload): Promise<SlackInteractionResponse | void> {\n    const key = interactionRouteKey(payload);\n    if (!key) {\n      this.logger.debug('Slack interaction payload missing routable identifier', { type: payload.type });\n      return undefined;\n    }\n    const handler = this.interactions.get(key);\n    if (!handler) {\n      this.logger.debug('No Slack interaction handler registered', { key });\n      return undefined;\n    }\n    return await handler.handle(payload);\n  }\n}\n","import { Injectable } from 'injectkit';\nimport { WebClient } from '@slack/web-api';\nimport type { ChatPostMessageArguments, ChatPostMessageResponse, ChatUpdateArguments, ChatUpdateResponse, ChatDeleteArguments, ChatDeleteResponse, ViewsOpenArguments, ViewsOpenResponse } from '@slack/web-api';\nimport { Logger } from '@maroonedsoftware/logger';\nimport { SlackConfig } from '../slack.config.js';\nimport { SlackError } from '../slack.error.js';\nimport { adaptLogger } from './slack.logger.adapter.js';\n\n/**\n * Payload for an incoming-webhook POST. Mirrors the subset of fields Slack's\n * incoming webhooks accept (text, blocks, attachments, response shaping).\n * The body is JSON-stringified verbatim, so any extra fields are preserved.\n */\nexport type IncomingWebhookPayload = {\n  text?: string;\n  blocks?: unknown[];\n  attachments?: unknown[];\n  thread_ts?: string;\n  response_type?: 'in_channel' | 'ephemeral';\n  replace_original?: boolean;\n  delete_original?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n  [key: string]: unknown;\n};\n\n/**\n * Thin DI-friendly wrapper around `@slack/web-api`'s `WebClient`. Constructed\n * once per request scope (or as a singleton, depending on how the consumer\n * registers it) and exposes typed passthroughs for the most common Web API\n * methods plus a `postWebhook` helper for incoming-webhook URLs and the\n * `response_url` returned by slash commands and interactive payloads.\n *\n * Reach for {@link SlackClient.web} directly for anything else the underlying\n * client supports.\n *\n * @example\n * ```ts\n * await container.get(SlackClient).postMessage({ channel: '#ops', text: 'hello' });\n * await container.get(SlackClient).postWebhook({ text: 'follow-up' }, payload.response_url);\n * ```\n */\n@Injectable()\nexport class SlackClient {\n  /** Underlying `@slack/web-api` client. */\n  readonly web: WebClient;\n\n  constructor(\n    private readonly config: SlackConfig,\n    private readonly logger: Logger,\n  ) {\n    this.web = new WebClient(config.botToken, { logger: adaptLogger(logger) });\n  }\n\n  /** Posts a message via `chat.postMessage`. */\n  postMessage(args: ChatPostMessageArguments): Promise<ChatPostMessageResponse> {\n    return this.web.chat.postMessage(args);\n  }\n\n  /** Updates a message via `chat.update`. */\n  updateMessage(args: ChatUpdateArguments): Promise<ChatUpdateResponse> {\n    return this.web.chat.update(args);\n  }\n\n  /** Deletes a message via `chat.delete`. */\n  deleteMessage(args: ChatDeleteArguments): Promise<ChatDeleteResponse> {\n    return this.web.chat.delete(args);\n  }\n\n  /** Opens a modal view via `views.open`. */\n  openView(args: ViewsOpenArguments): Promise<ViewsOpenResponse> {\n    return this.web.views.open(args);\n  }\n\n  /**\n   * POSTs a payload to a Slack incoming-webhook-style URL — either the\n   * configured `incomingWebhookUrl` or an explicit URL (e.g. the\n   * `response_url` from a slash command or interactive payload).\n   *\n   * @throws {@link SlackError} if no URL is available or the response is non-2xx.\n   */\n  async postWebhook(payload: IncomingWebhookPayload, url?: string): Promise<void> {\n    const target = url ?? this.config.incomingWebhookUrl;\n    if (!target) {\n      throw new SlackError('SlackClient.postWebhook called but no incomingWebhookUrl is configured and no url was provided');\n    }\n    const response = await fetch(target, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(payload),\n    });\n    if (!response.ok) {\n      const body = await response.text().catch(() => '');\n      this.logger.warn('Slack webhook POST returned non-OK status', { status: response.status, body });\n      throw new SlackError(`Slack webhook POST returned ${response.status}`).withInternalDetails({ status: response.status, body, url: target });\n    }\n  }\n}\n","import type { Logger as SlackLogger, LogLevel } from '@slack/web-api';\nimport { Logger } from '@maroonedsoftware/logger';\n\n/**\n * Adapts a ServerKit {@link Logger} to the `@slack/web-api` {@link SlackLogger}\n * interface so the WebClient can route its diagnostics through the host\n * application's logger.\n *\n * The Slack SDK's logger calls `logger.info(...args)` with a variable number\n * of arguments and no separate \"primary message\"; the adapter forwards them\n * to ServerKit's `(message, ...optionalParams)` shape, with an empty-string\n * primary when no args are passed.\n *\n * `setLevel`, `setName`, and `getLevel` are stored locally — ServerKit\n * loggers do not expose these knobs but the SDK expects them on its logger.\n *\n * @param logger - The ServerKit logger to forward calls to.\n * @param name - Initial value for the SDK logger's name. Defaults to `'slack-web-api'`.\n * @returns A `@slack/web-api`-compatible logger object.\n */\nexport const adaptLogger = (logger: Logger, name = 'slack-web-api'): SlackLogger => {\n  const state = { name, level: 'info' as LogLevel };\n  const forward = (fn: (message: unknown, ...optionalParams: unknown[]) => void) => (...msg: unknown[]) => {\n    const [first, ...rest] = msg;\n    fn(first ?? '', ...rest);\n  };\n  return {\n    debug: forward(logger.debug.bind(logger)),\n    info: forward(logger.info.bind(logger)),\n    warn: forward(logger.warn.bind(logger)),\n    error: forward(logger.error.bind(logger)),\n    setLevel: (level: LogLevel) => {\n      state.level = level;\n    },\n    getLevel: () => state.level,\n    setName: (n: string) => {\n      state.name = n;\n    },\n  };\n};\n"],"mappings":";;;;;AACA,SAASA,kBAAkB;;;;;;;;AAgCpB,IAAeC,cAAf,MAAeA;SAAAA;;;AAAoC;;;;;;ACjC1D,SAASC,sBAAsB;AAUxB,IAAMC,aAAN,cAAyBC,eAAAA;EAVhC,OAUgCA;;;AAAgB;AAOzC,IAAMC,eAAe,wBAACC,UAAwCA,iBAAiBH,YAA1D;;;ACjB5B,SAASI,YAAYC,uBAAuB;AAC5C,SAASC,gBAAgB;AAIlB,IAAMC,0CAA0C;AAsEhD,IAAMC,uBAAuB,wBAACC,UAAAA;AACnC,QAAM,EACJC,eACAC,SACAC,WACAC,WACAC,gBAAgBP,yCAChBQ,MAAMC,KAAKC,MAAMC,SAASH,IAAG,EAAGI,UAAS,CAAA,EAAG,IAC1CV;AAEJ,MAAI,CAACG,WAAW;AACd,UAAM,IAAIQ,WAAW,wDAAA,EAA0DC,oBAAoB;MACjGC,QAAQ;IACV,CAAA;EACF;AAEA,QAAMC,KAAKC,OAAOZ,SAAAA;AAClB,MAAI,CAACY,OAAOC,SAASF,EAAAA,KAAO,CAACC,OAAOE,UAAUH,EAAAA,GAAK;AACjD,UAAM,IAAIH,WAAW,gDAAA,EAAkDC,oBAAoB;MACzFC,QAAQ;MACRV;IACF,CAAA;EACF;AAEA,MAAII,KAAKW,IAAIZ,MAAMQ,EAAAA,IAAMT,eAAe;AACtC,UAAM,IAAIM,WAAW,uDAAA,EAAyDC,oBAAoB;MAChGC,QAAQ;MACRV,WAAWW;MACXR;MACAD;IACF,CAAA;EACF;AAEA,MAAI,CAACD,WAAW;AACd,UAAM,IAAIO,WAAW,gDAAA,EAAkDC,oBAAoB;MACzFC,QAAQ;IACV,CAAA;EACF;AAEA,QAAMM,WAAW,MAAMC,WAAW,UAAUnB,aAAAA,EAAeoB,OAAO,MAAMP,EAAAA,IAAMZ,OAAAA,EAAS,EAAEoB,OAAO,KAAA,CAAA;AAChG,QAAMC,cAAcC,OAAOC,KAAKN,UAAU,MAAA;AAC1C,QAAMO,cAAcF,OAAOC,KAAKrB,WAAW,MAAA;AAI3C,MAAImB,YAAYI,WAAWD,YAAYC,UAAU,CAACC,gBAAgBL,aAAaG,WAAAA,GAAc;AAC3F,UAAM,IAAIf,WAAW,wCAAA,EAA0CC,oBAAoB;MACjFC,QAAQ;IACV,CAAA;EACF;AACF,GAlDoC;;;AC1EpC,SAASgB,cAAAA,mBAAkB;AAC3B,SAASC,cAA4C;;;;;;;;AAS9C,IAAMC,yBAAyB;AAG/B,IAAMC,iCAAiC;AAEvC,IAAMC,yBAAyB;AA4D/B,IAAMC,uBAAN,cAAmCC,OAAAA;SAAAA;;;EACxC,MAAMC,SAASC,SAAsCC,UAAiD;AACpG,UAAM,EAAEC,SAASC,WAAWC,QAAO,IAAKJ;AAGxC,UAAMK,OAAO,OAAOH,YAAY,WAAWA,UAAUI,OAAOC,KAAKL,OAAAA,EAAuBM,SAAS,MAAA;AAEjG,QAAI;AACFC,2BAAqB;QACnBC,eAAeN,QAAQM;QACvBR,SAASG;QACTM,WAAWR,UAAUR,8BAAAA;QACrBiB,WAAWT,UAAUP,sBAAAA;QACrBiB,eAAeT,QAAQU;QACvBC,KAAKC,KAAKC,MAAMhB,SAASc,IAAIG,UAAS,CAAA;MACxC,CAAA;AACA,aAAO,KAAKC,MAAK;IACnB,SAASC,OAAO;AACd,UAAI,CAACC,aAAaD,KAAAA,EAAQ,OAAMA;AAEhC,YAAME,kBAAkBF,MAAME,mBAAmB,CAAC;AAClD,YAAMC,SAAS,OAAOD,gBAAgBC,WAAW,WAAWD,gBAAgBC,SAAU;AACtF,aAAO,KAAKC,KAAKD,QAAQE,QAAW;QAAEC,SAASN,MAAMM;QAAS,GAAGJ;MAAgB,CAAA;IACnF;EACF;AACF;;;;;;AC9CO,IAAMK,sBAAsB,wBAACC,YAAAA;AAClC,UAAQA,QAAQC,MAAI;IAClB,KAAK,iBAAiB;AACpB,YAAMC,KAAKF,QAAQG,UAAU,CAAA,GAAIC;AACjC,aAAOF,KAAK,iBAAiBA,EAAAA,KAAOG;IACtC;IACA,KAAK;IACL,KAAK,eAAe;AAClB,YAAMH,KAAKF,QAAQM,MAAMC;AACzB,aAAOL,KAAK,GAAGF,QAAQC,IAAI,IAAIC,EAAAA,KAAOG;IACxC;IACA,KAAK;IACL,KAAK,kBAAkB;AACrB,aAAOL,QAAQO,cAAc,GAAGP,QAAQC,IAAI,IAAID,QAAQO,WAAW,KAAKF;IAC1E;IACA,SAAS;AACP,aAAOL,QAAQO,cAAc,GAAGP,QAAQC,IAAI,IAAID,QAAQO,WAAW,KAAKF;IAC1E;EACF;AACF,GAnBmC;;;ACvDnC,SAASG,cAAAA,mBAAkB;AAC3B,SAASC,cAAc;;;;;;;;;;;;AAsChB,IAAMC,yBAAN,cAAqCC,IAAAA;SAAAA;;;AAAkC;;;;AAevE,IAAMC,uBAAN,cAAmCD,IAAAA;SAAAA;;;AAAgC;;;;AAkBnE,IAAME,6BAAN,cAAyCF,IAAAA;SAAAA;;;AAAsC;;;;AAyB/E,IAAMG,kBAAN,MAAMA;SAAAA;;;;;;;EACX,YACmBC,QACAC,UACAC,cACAC,QACjB;SAJiBH,SAAAA;SACAC,WAAAA;SACAC,eAAAA;SACAC,SAAAA;EAChB;;;;;;;;;;;EAYH,MAAMC,cAAcC,MAAwD;AAC1E,QAAIA,KAAKC,SAAS,oBAAoB;AACpC,aAAO;QAAEC,WAAYF,KAA+BE;MAAU;IAChE;AAEA,QAAIF,KAAKC,SAAS,kBAAkB;AAClC,YAAME,WAAWH;AACjB,YAAMI,UAAU,KAAKT,OAAOU,IAAIF,SAASG,MAAML,IAAI;AACnD,UAAIG,SAAS;AACX,cAAMA,QAAQG,OAAOJ,SAASG,OAAO;UACnCE,QAAQL,SAASM;UACjBC,SAASP,SAASQ;UAClBC,WAAWT,SAASU;UACpBV;QACF,CAAA;MACF,OAAO;AACL,aAAKL,OAAOgB,MAAM,oDAAoD;UAAEb,MAAME,SAASG,MAAML;QAAK,CAAA;MACpG;AACA,aAAOc;IACT;AAEA,SAAKjB,OAAOgB,MAAM,uCAAuC;MAAEb,MAAMD,KAAKC;IAAK,CAAA;AAC3E,WAAOc;EACT;;;;;;;;;EAUA,MAAMC,gBAAgBC,SAAoE;AACxF,UAAMb,UAAU,KAAKR,SAASS,IAAIY,QAAQC,OAAO;AACjD,QAAI,CAACd,SAAS;AACZ,WAAKN,OAAOgB,MAAM,uCAAuC;QAAEI,SAASD,QAAQC;MAAQ,CAAA;AACpF,aAAOH;IACT;AACA,WAAO,MAAMX,QAAQG,OAAOU,OAAAA;EAC9B;;;;;;EAOA,MAAME,oBAAoBF,SAA4E;AACpG,UAAMG,MAAMC,oBAAoBJ,OAAAA;AAChC,QAAI,CAACG,KAAK;AACR,WAAKtB,OAAOgB,MAAM,yDAAyD;QAAEb,MAAMgB,QAAQhB;MAAK,CAAA;AAChG,aAAOc;IACT;AACA,UAAMX,UAAU,KAAKP,aAAaQ,IAAIe,GAAAA;AACtC,QAAI,CAAChB,SAAS;AACZ,WAAKN,OAAOgB,MAAM,2CAA2C;QAAEM;MAAI,CAAA;AACnE,aAAOL;IACT;AACA,WAAO,MAAMX,QAAQG,OAAOU,OAAAA;EAC9B;AACF;;;;;;;;;;;;;AC/KA,SAASK,cAAAA,mBAAkB;AAC3B,SAASC,iBAAiB;AAE1B,SAASC,UAAAA,eAAc;;;ACiBhB,IAAMC,cAAc,wBAACC,QAAgBC,OAAO,oBAAe;AAChE,QAAMC,QAAQ;IAAED;IAAME,OAAO;EAAmB;AAChD,QAAMC,UAAU,wBAACC,OAAiE,IAAIC,QAAAA;AACpF,UAAM,CAACC,OAAO,GAAGC,IAAAA,IAAQF;AACzBD,OAAGE,SAAS,IAAA,GAAOC,IAAAA;EACrB,GAHgB;AAIhB,SAAO;IACLC,OAAOL,QAAQJ,OAAOS,MAAMC,KAAKV,MAAAA,CAAAA;IACjCW,MAAMP,QAAQJ,OAAOW,KAAKD,KAAKV,MAAAA,CAAAA;IAC/BY,MAAMR,QAAQJ,OAAOY,KAAKF,KAAKV,MAAAA,CAAAA;IAC/Ba,OAAOT,QAAQJ,OAAOa,MAAMH,KAAKV,MAAAA,CAAAA;IACjCc,UAAU,wBAACX,UAAAA;AACTD,YAAMC,QAAQA;IAChB,GAFU;IAGVY,UAAU,6BAAMb,MAAMC,OAAZ;IACVa,SAAS,wBAACC,MAAAA;AACRf,YAAMD,OAAOgB;IACf,GAFS;EAGX;AACF,GAnB2B;;;;;;;;;;;;;;ADuBpB,IAAMC,cAAN,MAAMA;SAAAA;;;;;;EAEFC;EAET,YACmBC,QACAC,QACjB;SAFiBD,SAAAA;SACAC,SAAAA;AAEjB,SAAKF,MAAM,IAAIG,UAAUF,OAAOG,UAAU;MAAEF,QAAQG,YAAYH,MAAAA;IAAQ,CAAA;EAC1E;;EAGAI,YAAYC,MAAkE;AAC5E,WAAO,KAAKP,IAAIQ,KAAKF,YAAYC,IAAAA;EACnC;;EAGAE,cAAcF,MAAwD;AACpE,WAAO,KAAKP,IAAIQ,KAAKE,OAAOH,IAAAA;EAC9B;;EAGAI,cAAcJ,MAAwD;AACpE,WAAO,KAAKP,IAAIQ,KAAKI,OAAOL,IAAAA;EAC9B;;EAGAM,SAASN,MAAsD;AAC7D,WAAO,KAAKP,IAAIc,MAAMC,KAAKR,IAAAA;EAC7B;;;;;;;;EASA,MAAMS,YAAYC,SAAiCC,KAA6B;AAC9E,UAAMC,SAASD,OAAO,KAAKjB,OAAOmB;AAClC,QAAI,CAACD,QAAQ;AACX,YAAM,IAAIE,WAAW,gGAAA;IACvB;AACA,UAAMC,WAAW,MAAMC,MAAMJ,QAAQ;MACnCK,QAAQ;MACRC,SAAS;QAAE,gBAAgB;MAAmB;MAC9CC,MAAMC,KAAKC,UAAUX,OAAAA;IACvB,CAAA;AACA,QAAI,CAACK,SAASO,IAAI;AAChB,YAAMH,OAAO,MAAMJ,SAASQ,KAAI,EAAGC,MAAM,MAAM,EAAA;AAC/C,WAAK7B,OAAO8B,KAAK,6CAA6C;QAAEC,QAAQX,SAASW;QAAQP;MAAK,CAAA;AAC9F,YAAM,IAAIL,WAAW,+BAA+BC,SAASW,MAAM,EAAE,EAAEC,oBAAoB;QAAED,QAAQX,SAASW;QAAQP;QAAMR,KAAKC;MAAO,CAAA;IAC1I;EACF;AACF;;;;;;;;;","names":["Injectable","SlackConfig","ServerkitError","SlackError","ServerkitError","IsSlackError","error","createHmac","timingSafeEqual","DateTime","SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS","verifySlackSignature","input","signingSecret","rawBody","timestamp","signature","maxAgeSeconds","now","Math","floor","DateTime","toSeconds","SlackError","withInternalDetails","reason","ts","Number","isFinite","isInteger","abs","expected","createHmac","update","digest","expectedBuf","Buffer","from","providedBuf","length","timingSafeEqual","Injectable","Policy","SLACK_SIGNATURE_POLICY","SLACK_REQUEST_TIMESTAMP_HEADER","SLACK_SIGNATURE_HEADER","SlackSignaturePolicy","Policy","evaluate","context","envelope","rawBody","getHeader","options","body","Buffer","from","toString","verifySlackSignature","signingSecret","timestamp","signature","maxAgeSeconds","signatureMaxAgeSeconds","now","Math","floor","toSeconds","allow","error","IsSlackError","internalDetails","reason","deny","undefined","message","interactionRouteKey","payload","type","id","actions","action_id","undefined","view","callback_id","Injectable","Logger","SlackCommandHandlerMap","Map","SlackEventHandlerMap","SlackInteractionHandlerMap","SlackDispatcher","events","commands","interactions","logger","dispatchEvent","body","type","challenge","envelope","handler","get","event","handle","teamId","team_id","eventId","event_id","eventTime","event_time","debug","undefined","dispatchCommand","payload","command","dispatchInteraction","key","interactionRouteKey","Injectable","WebClient","Logger","adaptLogger","logger","name","state","level","forward","fn","msg","first","rest","debug","bind","info","warn","error","setLevel","getLevel","setName","n","SlackClient","web","config","logger","WebClient","botToken","adaptLogger","postMessage","args","chat","updateMessage","update","deleteMessage","delete","openView","views","open","postWebhook","payload","url","target","incomingWebhookUrl","SlackError","response","fetch","method","headers","body","JSON","stringify","ok","text","catch","warn","status","withInternalDetails"]}
+{"version":3,"sources":["../src/slack.config.ts","../src/slack.error.ts","../src/slack.signature.ts","../src/slack.signature.policy.ts","../src/slack.interaction.handler.ts","../src/slack.dispatcher.ts","../src/client/slack.client.ts","../src/client/slack.logger.adapter.ts"],"sourcesContent":["/* eslint-disable @typescript-eslint/no-unsafe-declaration-merging */\nimport { Injectable } from 'injectkit';\n\n/**\n * Configuration for the Slack package. Declared as an abstract `@Injectable()`\n * class so it doubles as a DI token (mirrors the `Logger` pattern in\n * `@maroonedsoftware/logger`).\n *\n * Consumers register a concrete value at bootstrap, typically resolved from\n * `AppConfig`:\n *\n * ```ts\n * const slackConfig = appConfig.getAs<SlackConfig>('slack');\n * container.register(SlackConfig, { useValue: slackConfig });\n * ```\n *\n * Services in this package take `SlackConfig` directly in their constructor.\n */\nexport interface SlackConfig {\n  /** Bot user OAuth token (`xoxb-...`). Required for Web API calls. */\n  botToken: string;\n  /** App-level signing secret used to verify request signatures. */\n  signingSecret: string;\n  /** Optional incoming webhook URL used as the default target for `SlackClient.postWebhook`. */\n  incomingWebhookUrl?: string;\n  /**\n   * Maximum age (in seconds) for request timestamps before signature\n   * verification rejects them as replays. Defaults to `300` (5 minutes).\n   */\n  signatureMaxAgeSeconds?: number;\n  /**\n   * Per-request timeout (in milliseconds) for outbound `SlackClient.postWebhook`\n   * calls. Defaults to\n   * {@link import('./client/slack.client.js').SLACK_DEFAULT_REQUEST_TIMEOUT_MS} (10s).\n   */\n  requestTimeoutMs?: number;\n}\n\n@Injectable()\nexport abstract class SlackConfig implements SlackConfig {}\n","import { ServerkitError } from '@maroonedsoftware/errors';\n\n/**\n * Domain error raised by the Slack package for non-HTTP failures (e.g.\n * incoming-webhook POST failed, unknown handler dispatch).\n *\n * Extends {@link ServerkitError} so `errorMiddleware` renders a 500 with\n * `{ message, details }` if one of these escapes a route handler. Inside\n * route handlers, throw `httpError(...)` directly for status-coded responses.\n */\nexport class SlackError extends ServerkitError {}\n\n/**\n * Type guard for {@link SlackError}. Narrows `unknown` to `SlackError` so\n * `details`, `internalDetails`, and the chainable setters are accessible\n * without further checks. Returns `true` for any subclass.\n */\nexport const IsSlackError = (error: unknown): error is SlackError => error instanceof SlackError;\n","import { createHmac, timingSafeEqual } from 'node:crypto';\nimport { DateTime } from 'luxon';\nimport { SlackError } from './slack.error.js';\n\n/** Default replay-protection window in seconds (5 minutes — matches Slack's recommendation). */\nexport const SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS = 300;\n\n/**\n * Reason codes attached to {@link SlackError.internalDetails} when verification\n * fails. Useful for callers that want to log structured reasons without\n * pattern-matching on error messages.\n */\nexport type SlackSignatureFailureReason =\n  | 'missing_timestamp'\n  | 'invalid_timestamp'\n  | 'stale_timestamp'\n  | 'missing_signature'\n  | 'invalid_signature';\n\n/**\n * Inputs to {@link verifySlackSignature}. All values are taken verbatim from\n * the request — the helper does no header lookups or body reads of its own.\n */\nexport type VerifySlackSignatureInput = {\n  /** App signing secret (`SlackConfig.signingSecret`). */\n  signingSecret: string;\n  /** Raw, unparsed request body — exactly as Slack sent it. */\n  rawBody: string;\n  /** Value of the `X-Slack-Request-Timestamp` header. */\n  timestamp: string | undefined;\n  /** Value of the `X-Slack-Signature` header (e.g. `\"v0=abc123…\"`). */\n  signature: string | undefined;\n  /**\n   * Maximum age in seconds before the request is rejected as a replay.\n   * Defaults to {@link SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS}.\n   */\n  maxAgeSeconds?: number;\n  /**\n   * Override for the current Unix time in seconds. Mostly useful for tests;\n   * defaults to `Math.floor(DateTime.now().toSeconds())`.\n   */\n  now?: number;\n};\n\n/**\n * Verifies a Slack request signature against the app signing secret.\n *\n * Implements Slack's v0 scheme:\n * 1. Reject the request if `X-Slack-Request-Timestamp` is missing, non-numeric,\n *    or older than `maxAgeSeconds` (replay protection).\n * 2. Compute `v0=` + `HMAC-SHA256(signingSecret, \"v0:{timestamp}:{rawBody}\")`\n *    as hex.\n * 3. Compare against the provided `X-Slack-Signature` value using a\n *    constant-time compare.\n *\n * Pure: no request/context coupling. The caller extracts the headers and raw\n * body from whatever transport it's using and passes them in.\n *\n * @throws {@link SlackError} on any failure. The error's `internalDetails.reason`\n *   is one of {@link SlackSignatureFailureReason}; map to HTTP 401 at the route boundary.\n *\n * @example\n * ```ts\n * try {\n *   verifySlackSignature({\n *     signingSecret: config.signingSecret,\n *     rawBody,\n *     timestamp: req.headers['x-slack-request-timestamp'],\n *     signature: req.headers['x-slack-signature'],\n *   });\n * } catch (err) {\n *   throw httpError(401).withCause(err);\n * }\n * ```\n */\nexport const verifySlackSignature = (input: VerifySlackSignatureInput): void => {\n  const {\n    signingSecret,\n    rawBody,\n    timestamp,\n    signature,\n    maxAgeSeconds = SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS,\n    now = Math.floor(DateTime.now().toSeconds()),\n  } = input;\n\n  if (!timestamp) {\n    throw new SlackError('Slack request missing X-Slack-Request-Timestamp header').withInternalDetails({\n      reason: 'missing_timestamp' satisfies SlackSignatureFailureReason,\n    });\n  }\n\n  const ts = Number(timestamp);\n  if (!Number.isFinite(ts) || !Number.isInteger(ts)) {\n    throw new SlackError('Slack request timestamp is not a valid integer').withInternalDetails({\n      reason: 'invalid_timestamp' satisfies SlackSignatureFailureReason,\n      timestamp,\n    });\n  }\n\n  if (Math.abs(now - ts) > maxAgeSeconds) {\n    throw new SlackError('Slack request timestamp is outside the allowed window').withInternalDetails({\n      reason: 'stale_timestamp' satisfies SlackSignatureFailureReason,\n      timestamp: ts,\n      now,\n      maxAgeSeconds,\n    });\n  }\n\n  if (!signature) {\n    throw new SlackError('Slack request missing X-Slack-Signature header').withInternalDetails({\n      reason: 'missing_signature' satisfies SlackSignatureFailureReason,\n    });\n  }\n\n  // Sign with the raw header value verbatim (not the parsed `ts`): Slack computes\n  // its signature over the exact `X-Slack-Request-Timestamp` string it sent, so a\n  // non-canonical-but-numeric header (e.g. leading zeros) must round-trip as-is.\n  const expected = `v0=${createHmac('sha256', signingSecret).update(`v0:${timestamp}:${rawBody}`).digest('hex')}`;\n  const expectedBuf = Buffer.from(expected, 'utf8');\n  const providedBuf = Buffer.from(signature, 'utf8');\n\n  // timingSafeEqual throws on length mismatch — short-circuit so the caller\n  // gets a uniform \"invalid_signature\" error instead of a crypto exception.\n  if (expectedBuf.length !== providedBuf.length || !timingSafeEqual(expectedBuf, providedBuf)) {\n    throw new SlackError('Slack request signature does not match').withInternalDetails({\n      reason: 'invalid_signature' satisfies SlackSignatureFailureReason,\n    });\n  }\n};\n","import { BinaryLike } from 'node:crypto';\nimport { Injectable } from 'injectkit';\nimport { Policy, PolicyEnvelope, PolicyResult } from '@maroonedsoftware/policies';\nimport { SlackConfig } from './slack.config.js';\nimport { IsSlackError } from './slack.error.js';\nimport { verifySlackSignature, type SlackSignatureFailureReason } from './slack.signature.js';\n\n/**\n * Policy name under which {@link SlackSignaturePolicy} is registered. Use as the\n * key when wiring your `PolicyRegistryMap`, and pass to `PolicyService.check`.\n */\nexport const SLACK_SIGNATURE_POLICY = 'slack.signature.valid' as const;\n\n/** Header carrying the request timestamp Slack signs into the HMAC. */\nexport const SLACK_REQUEST_TIMESTAMP_HEADER = 'X-Slack-Request-Timestamp';\n/** Header carrying the `v0=`-prefixed request signature. */\nexport const SLACK_SIGNATURE_HEADER = 'X-Slack-Signature';\n\n/**\n * Configuration the {@link SlackSignaturePolicy} reads. A structural subset of\n * {@link SlackConfig}, so a `SlackConfig` value satisfies it directly — e.g.\n * `requireSignature<SlackSignatureOptions>('slack')` with the Slack config\n * stored under that `AppConfig` key.\n */\nexport type SlackSignatureOptions = Pick<SlackConfig, 'signingSecret' | 'signatureMaxAgeSeconds'>;\n\n/**\n * Context for {@link SlackSignaturePolicy}: the raw request bytes, a\n * case-insensitive header accessor, and the {@link SlackSignatureOptions}.\n *\n * Structurally compatible with `@maroonedsoftware/koa`'s\n * `SignaturePolicyContext<SlackSignatureOptions>`, so the koa `requireSignature`\n * middleware can drive this policy without the slack package depending on koa —\n * register `SlackSignaturePolicy` under the signature policy name and point the\n * middleware at the `AppConfig` key holding the Slack config.\n */\nexport interface SlackSignaturePolicyContext {\n  /** Raw, unparsed request body — exactly as Slack sent it (from `ctx.rawBody`). */\n  rawBody: BinaryLike;\n  /**\n   * Case-insensitive request header accessor (Koa's `ctx.get`); returns `''`\n   * when the header is absent.\n   */\n  getHeader: (name: string) => string;\n  /** Slack signing configuration. */\n  options: SlackSignatureOptions;\n}\n\n/**\n * Policy form of {@link verifySlackSignature}: verifies a Slack request against\n * the app signing secret using Slack's v0 scheme (HMAC over\n * `v0:{timestamp}:{rawBody}`, `v0=`-prefixed, with timestamp replay\n * protection).\n *\n * Delegates to {@link verifySlackSignature} so the crypto/timestamp logic has a\n * single source of truth, but answers as a {@link PolicyResult} rather than\n * throwing: allows on success, denies on failure with the helper's\n * {@link SlackSignatureFailureReason} as the denial `reason` and its diagnostics\n * (timestamps, window) on `internalDetails` — never the signing secret, never\n * on the wire. The replay window is anchored to `envelope.now` so all policies\n * in an evaluation share one clock.\n *\n * Registered by default under {@link SLACK_SIGNATURE_POLICY}.\n *\n * @example\n * ```ts\n * // Direct evaluation in a route handler:\n * const result = await policyService.check(SLACK_SIGNATURE_POLICY, {\n *   rawBody: ctx.rawBody,\n *   getHeader: name => ctx.get(name),\n *   options: ctx.container.get(SlackConfig),\n * });\n * if (isPolicyResultDenied(result)) throw httpError(401);\n * ```\n */\n@Injectable()\nexport class SlackSignaturePolicy extends Policy<SlackSignaturePolicyContext> {\n  async evaluate(context: SlackSignaturePolicyContext, envelope: PolicyEnvelope): Promise<PolicyResult> {\n    const { rawBody, getHeader, options } = context;\n\n    // Slack signs the raw text body; `ctx.rawBody` may arrive as a Buffer.\n    const body = typeof rawBody === 'string' ? rawBody : Buffer.from(rawBody as Uint8Array).toString('utf8');\n\n    try {\n      verifySlackSignature({\n        signingSecret: options.signingSecret,\n        rawBody: body,\n        timestamp: getHeader(SLACK_REQUEST_TIMESTAMP_HEADER),\n        signature: getHeader(SLACK_SIGNATURE_HEADER),\n        maxAgeSeconds: options.signatureMaxAgeSeconds,\n        now: Math.floor(envelope.now.toSeconds()),\n      });\n      return this.allow();\n    } catch (error) {\n      if (!IsSlackError(error)) throw error;\n\n      const internalDetails = error.internalDetails ?? {};\n      const reason = typeof internalDetails.reason === 'string' ? internalDetails.reason : ('invalid_signature' satisfies SlackSignatureFailureReason);\n      return this.deny(reason, undefined, { message: error.message, ...internalDetails });\n    }\n  }\n}\n","/**\n * The supported interactive payload types Slack POSTs to the interactivity\n * endpoint. Each maps to a different identifier shape (see\n * {@link interactionRouteKey}).\n */\nexport type SlackInteractionType = 'block_actions' | 'view_submission' | 'view_closed' | 'shortcut' | 'message_action' | string;\n\n/**\n * Loose typing for the interactive payload; consumers narrow per handler.\n * Slack's payloads vary by type, but every variant has a `type` field plus\n * one of: `actions[].action_id`, `view.callback_id`, or top-level `callback_id`.\n */\nexport type SlackInteractionPayload = {\n  type: SlackInteractionType;\n  team?: { id: string; domain?: string };\n  user?: { id: string; name?: string };\n  trigger_id?: string;\n  response_url?: string;\n  actions?: Array<{ action_id: string; block_id?: string; value?: string; [key: string]: unknown }>;\n  view?: { id: string; callback_id: string; [key: string]: unknown };\n  callback_id?: string;\n  [key: string]: unknown;\n};\n\n/**\n * Optional response Slack accepts for `view_submission` / `view_closed`\n * payloads (e.g. to display validation errors or update a modal).\n */\nexport type SlackInteractionResponse = {\n  response_action?: 'errors' | 'update' | 'push' | 'clear';\n  errors?: Record<string, string>;\n  view?: unknown;\n  [key: string]: unknown;\n};\n\n/**\n * Handler for one interactive payload, keyed in {@link SlackInteractionHandlerMap}\n * by `${type}:${identifier}` — see {@link interactionRouteKey}.\n */\nexport interface SlackInteractionHandler {\n  handle(payload: SlackInteractionPayload): Promise<SlackInteractionResponse | void>;\n}\n\n/**\n * Computes the routing key used by {@link SlackDispatcher.dispatchInteraction}\n * to look a handler up in {@link SlackInteractionHandlerMap}.\n *\n * - `block_actions` → `block_actions:<first action.action_id>`\n * - `view_submission` / `view_closed` → `<type>:<view.callback_id>`\n * - `shortcut` / `message_action` → `<type>:<callback_id>`\n * - any other type with a `callback_id` → `<type>:<callback_id>`\n *\n * @returns The routing key, or `undefined` if the payload doesn't carry an\n *   identifier we can route on (e.g. a `block_actions` payload with no actions).\n */\nexport const interactionRouteKey = (payload: SlackInteractionPayload): string | undefined => {\n  switch (payload.type) {\n    case 'block_actions': {\n      const id = payload.actions?.[0]?.action_id;\n      return id ? `block_actions:${id}` : undefined;\n    }\n    case 'view_submission':\n    case 'view_closed': {\n      const id = payload.view?.callback_id;\n      return id ? `${payload.type}:${id}` : undefined;\n    }\n    case 'shortcut':\n    case 'message_action': {\n      return payload.callback_id ? `${payload.type}:${payload.callback_id}` : undefined;\n    }\n    default: {\n      return payload.callback_id ? `${payload.type}:${payload.callback_id}` : undefined;\n    }\n  }\n};\n","import { Injectable } from 'injectkit';\nimport { Logger } from '@maroonedsoftware/logger';\nimport type { SlackEventCallback, SlackEventHandler } from './slack.event.handler.js';\nimport type { SlackCommandHandler, SlackCommandPayload, SlackCommandResponse } from './slack.command.handler.js';\nimport {\n  interactionRouteKey,\n  SlackInteractionHandler,\n  type SlackInteractionPayload,\n  type SlackInteractionResponse,\n} from './slack.interaction.handler.js';\n\n/**\n * Body shape Slack POSTs to the Events API endpoint. The handshake variant\n * (`url_verification`) is sent once during app configuration; the rest of the\n * traffic is `event_callback` envelopes (or other future top-level types).\n */\nexport type SlackEventsRequest =\n  | { type: 'url_verification'; challenge: string; token?: string }\n  | SlackEventCallback\n  | { type: string; [key: string]: unknown };\n\n/**\n * Response Slack expects for the `url_verification` handshake. For\n * `event_callback` and unknown event types, the dispatcher returns\n * `undefined` and the caller should ack with HTTP 200.\n */\nexport type SlackEventsResponse = { challenge: string } | undefined;\n\n/**\n * Injectable map of command keyword (e.g. `/deploy`) → {@link SlackCommandHandler}.\n *\n * @example\n * ```ts\n * const commands = new SlackCommandHandlerMap();\n * commands.set('/deploy', container.get(DeployCommandHandler));\n * container.register(SlackCommandHandlerMap, { useValue: commands });\n * ```\n */\n@Injectable()\nexport class SlackCommandHandlerMap extends Map<string, SlackCommandHandler> {}\n\n/**\n * Injectable map of Slack event type → {@link SlackEventHandler}. Consumers\n * register handlers at bootstrap and place an instance of this map in their\n * DI container; {@link SlackDispatcher.dispatchEvent} resolves it per request.\n *\n * @example\n * ```ts\n * const handlers = new SlackEventHandlerMap();\n * handlers.set('app_mention', container.get(MyAppMentionHandler));\n * container.register(SlackEventHandlerMap, { useValue: handlers });\n * ```\n */\n@Injectable()\nexport class SlackEventHandlerMap extends Map<string, SlackEventHandler> {}\n\n/**\n * Injectable map of interaction routing keys → {@link SlackInteractionHandler}.\n *\n * Keys are produced by `interactionRouteKey(payload)`, which combines the\n * payload `type` with the relevant identifier (`action_id`, `callback_id`,\n * etc.). Register handlers under the same key shape:\n *\n * @example\n * ```ts\n * const interactions = new SlackInteractionHandlerMap();\n * interactions.set('block_actions:approve_button', container.get(ApproveHandler));\n * interactions.set('view_submission:create_ticket_modal', container.get(CreateTicketHandler));\n * container.register(SlackInteractionHandlerMap, { useValue: interactions });\n * ```\n */\n@Injectable()\nexport class SlackInteractionHandlerMap extends Map<string, SlackInteractionHandler> {}\n\n/**\n * Single entry point for dispatching parsed Slack payloads to registered\n * handlers. Transport-agnostic: the consumer is responsible for receiving\n * the HTTP request, verifying the signature, parsing the body, calling the\n * appropriate `dispatch*` method, and serializing the response.\n *\n * @example Koa route\n * ```ts\n * router.post('/slack/events', async (ctx) => {\n *   const raw = await rawBody(ctx.req, { encoding: 'utf8' });\n *   verifySlackSignature({\n *     signingSecret: ctx.container.get(SlackConfig).signingSecret,\n *     rawBody: raw,\n *     timestamp: ctx.get('x-slack-request-timestamp'),\n *     signature: ctx.get('x-slack-signature'),\n *   });\n *   const result = await ctx.container.get(SlackDispatcher).dispatchEvent(JSON.parse(raw));\n *   if (result) ctx.body = result;\n *   else { ctx.status = 200; ctx.body = ''; }\n * });\n * ```\n */\n@Injectable()\nexport class SlackDispatcher {\n  constructor(\n    private readonly events: SlackEventHandlerMap,\n    private readonly commands: SlackCommandHandlerMap,\n    private readonly interactions: SlackInteractionHandlerMap,\n    private readonly logger: Logger,\n  ) {}\n\n  /**\n   * Dispatch a parsed Events API body.\n   *\n   * - Returns `{ challenge }` for `url_verification` — the caller serializes\n   *   it as the response body.\n   * - For `event_callback`, looks up a handler in {@link SlackEventHandlerMap}\n   *   keyed by `event.type` and invokes it. Returns `undefined`. Slack retries\n   *   any non-2xx so unknown event types are logged at debug and acked.\n   * - For any other top-level type, logs and returns `undefined`.\n   */\n  async dispatchEvent(body: SlackEventsRequest): Promise<SlackEventsResponse> {\n    if (body.type === 'url_verification') {\n      return { challenge: (body as { challenge: string }).challenge };\n    }\n\n    if (body.type === 'event_callback') {\n      const envelope = body as SlackEventCallback;\n      const handler = this.events.get(envelope.event.type);\n      if (handler) {\n        await handler.handle(envelope.event, {\n          teamId: envelope.team_id,\n          eventId: envelope.event_id,\n          eventTime: envelope.event_time,\n          envelope,\n        });\n      } else {\n        this.logger.debug('No Slack event handler registered for event type', { type: envelope.event.type });\n      }\n      return undefined;\n    }\n\n    this.logger.debug('Unhandled Slack events payload type', { type: body.type });\n    return undefined;\n  }\n\n  /**\n   * Dispatch a parsed slash-command payload.\n   *\n   * Looks up a handler in {@link SlackCommandHandlerMap} keyed by\n   * `payload.command` (e.g. `/deploy`). If the handler returns a response,\n   * the caller serializes it as JSON; otherwise the caller acks with `200 ''`\n   * and the handler is expected to follow up via `payload.response_url`.\n   */\n  async dispatchCommand(payload: SlackCommandPayload): Promise<SlackCommandResponse | void> {\n    const handler = this.commands.get(payload.command);\n    if (!handler) {\n      this.logger.debug('No Slack command handler registered', { command: payload.command });\n      return undefined;\n    }\n    return await handler.handle(payload);\n  }\n\n  /**\n   * Dispatch a parsed interactive payload (block actions, view submission,\n   * shortcut, etc.). Computes a routing key via {@link interactionRouteKey}\n   * and looks it up in {@link SlackInteractionHandlerMap}.\n   */\n  async dispatchInteraction(payload: SlackInteractionPayload): Promise<SlackInteractionResponse | void> {\n    const key = interactionRouteKey(payload);\n    if (!key) {\n      this.logger.debug('Slack interaction payload missing routable identifier', { type: payload.type });\n      return undefined;\n    }\n    const handler = this.interactions.get(key);\n    if (!handler) {\n      this.logger.debug('No Slack interaction handler registered', { key });\n      return undefined;\n    }\n    return await handler.handle(payload);\n  }\n}\n","import { Injectable } from 'injectkit';\nimport { WebClient } from '@slack/web-api';\nimport type { ChatPostMessageArguments, ChatPostMessageResponse, ChatUpdateArguments, ChatUpdateResponse, ChatDeleteArguments, ChatDeleteResponse, ViewsOpenArguments, ViewsOpenResponse } from '@slack/web-api';\nimport { Logger } from '@maroonedsoftware/logger';\nimport { SlackConfig } from '../slack.config.js';\nimport { SlackError } from '../slack.error.js';\nimport { adaptLogger } from './slack.logger.adapter.js';\n\n/** Default per-request timeout (ms) applied to outbound `postWebhook` calls. */\nexport const SLACK_DEFAULT_REQUEST_TIMEOUT_MS = 10_000;\n\n/**\n * Redacts a Slack webhook / `response_url` so it is safe to log. The final path\n * segment is the secret token (and the query string can carry secrets too), so\n * both are stripped, leaving only the host and path prefix.\n */\nexport const redactSlackUrl = (raw: string): string => {\n  try {\n    const url = new URL(raw);\n    const segments = url.pathname.split('/').filter(Boolean);\n    if (segments.length > 0) segments[segments.length - 1] = '***';\n    return `${url.origin}/${segments.join('/')}`;\n  } catch {\n    return '***';\n  }\n};\n\n/**\n * Payload for an incoming-webhook POST. Mirrors the subset of fields Slack's\n * incoming webhooks accept (text, blocks, attachments, response shaping).\n * The body is JSON-stringified verbatim, so any extra fields are preserved.\n */\nexport type IncomingWebhookPayload = {\n  text?: string;\n  blocks?: unknown[];\n  attachments?: unknown[];\n  thread_ts?: string;\n  response_type?: 'in_channel' | 'ephemeral';\n  replace_original?: boolean;\n  delete_original?: boolean;\n  unfurl_links?: boolean;\n  unfurl_media?: boolean;\n  [key: string]: unknown;\n};\n\n/**\n * Thin DI-friendly wrapper around `@slack/web-api`'s `WebClient`. Constructed\n * once per request scope (or as a singleton, depending on how the consumer\n * registers it) and exposes typed passthroughs for the most common Web API\n * methods plus a `postWebhook` helper for incoming-webhook URLs and the\n * `response_url` returned by slash commands and interactive payloads.\n *\n * Reach for {@link SlackClient.web} directly for anything else the underlying\n * client supports.\n *\n * @example\n * ```ts\n * await container.get(SlackClient).postMessage({ channel: '#ops', text: 'hello' });\n * await container.get(SlackClient).postWebhook({ text: 'follow-up' }, payload.response_url);\n * ```\n */\n@Injectable()\nexport class SlackClient {\n  /** Underlying `@slack/web-api` client. */\n  readonly web: WebClient;\n\n  constructor(\n    private readonly config: SlackConfig,\n    private readonly logger: Logger,\n  ) {\n    this.web = new WebClient(config.botToken, { logger: adaptLogger(logger) });\n  }\n\n  /** Posts a message via `chat.postMessage`. */\n  postMessage(args: ChatPostMessageArguments): Promise<ChatPostMessageResponse> {\n    return this.web.chat.postMessage(args);\n  }\n\n  /** Updates a message via `chat.update`. */\n  updateMessage(args: ChatUpdateArguments): Promise<ChatUpdateResponse> {\n    return this.web.chat.update(args);\n  }\n\n  /** Deletes a message via `chat.delete`. */\n  deleteMessage(args: ChatDeleteArguments): Promise<ChatDeleteResponse> {\n    return this.web.chat.delete(args);\n  }\n\n  /** Opens a modal view via `views.open`. */\n  openView(args: ViewsOpenArguments): Promise<ViewsOpenResponse> {\n    return this.web.views.open(args);\n  }\n\n  /**\n   * POSTs a payload to a Slack incoming-webhook-style URL — either the\n   * configured `incomingWebhookUrl` or an explicit URL (e.g. the\n   * `response_url` from a slash command or interactive payload).\n   *\n   * @throws {@link SlackError} if no URL is available or the response is non-2xx.\n   */\n  async postWebhook(payload: IncomingWebhookPayload, url?: string): Promise<void> {\n    const target = url ?? this.config.incomingWebhookUrl;\n    if (!target) {\n      throw new SlackError('SlackClient.postWebhook called but no incomingWebhookUrl is configured and no url was provided');\n    }\n    const response = await fetch(target, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(payload),\n      signal: AbortSignal.timeout(this.config.requestTimeoutMs ?? SLACK_DEFAULT_REQUEST_TIMEOUT_MS),\n    });\n    if (!response.ok) {\n      const body = await response.text().catch(() => '');\n      // `target` is a response_url / incoming-webhook URL whose last path segment\n      // is a secret — redact it before it reaches the log or internalDetails.\n      const safeUrl = redactSlackUrl(target);\n      this.logger.warn('Slack webhook POST returned non-OK status', { status: response.status, body, url: safeUrl });\n      throw new SlackError(`Slack webhook POST returned ${response.status}`).withInternalDetails({ status: response.status, body, url: safeUrl });\n    }\n  }\n}\n","import type { Logger as SlackLogger, LogLevel } from '@slack/web-api';\nimport { Logger } from '@maroonedsoftware/logger';\n\n/**\n * Adapts a ServerKit {@link Logger} to the `@slack/web-api` {@link SlackLogger}\n * interface so the WebClient can route its diagnostics through the host\n * application's logger.\n *\n * The Slack SDK's logger calls `logger.info(...args)` with a variable number\n * of arguments and no separate \"primary message\"; the adapter forwards them\n * to ServerKit's `(message, ...optionalParams)` shape, with an empty-string\n * primary when no args are passed.\n *\n * `setLevel`, `setName`, and `getLevel` are stored locally — ServerKit\n * loggers do not expose these knobs but the SDK expects them on its logger.\n *\n * @param logger - The ServerKit logger to forward calls to.\n * @param name - Initial value for the SDK logger's name. Defaults to `'slack-web-api'`.\n * @returns A `@slack/web-api`-compatible logger object.\n */\nexport const adaptLogger = (logger: Logger, name = 'slack-web-api'): SlackLogger => {\n  const state = { name, level: 'info' as LogLevel };\n  const forward = (fn: (message: unknown, ...optionalParams: unknown[]) => void) => (...msg: unknown[]) => {\n    const [first, ...rest] = msg;\n    fn(first ?? '', ...rest);\n  };\n  return {\n    debug: forward(logger.debug.bind(logger)),\n    info: forward(logger.info.bind(logger)),\n    warn: forward(logger.warn.bind(logger)),\n    error: forward(logger.error.bind(logger)),\n    setLevel: (level: LogLevel) => {\n      state.level = level;\n    },\n    getLevel: () => state.level,\n    setName: (n: string) => {\n      state.name = n;\n    },\n  };\n};\n"],"mappings":";;;;;AACA,SAASA,kBAAkB;;;;;;;;AAsCpB,IAAeC,cAAf,MAAeA;SAAAA;;;AAAoC;;;;;;ACvC1D,SAASC,sBAAsB;AAUxB,IAAMC,aAAN,cAAyBC,eAAAA;EAVhC,OAUgCA;;;AAAgB;AAOzC,IAAMC,eAAe,wBAACC,UAAwCA,iBAAiBH,YAA1D;;;ACjB5B,SAASI,YAAYC,uBAAuB;AAC5C,SAASC,gBAAgB;AAIlB,IAAMC,0CAA0C;AAsEhD,IAAMC,uBAAuB,wBAACC,UAAAA;AACnC,QAAM,EACJC,eACAC,SACAC,WACAC,WACAC,gBAAgBP,yCAChBQ,MAAMC,KAAKC,MAAMC,SAASH,IAAG,EAAGI,UAAS,CAAA,EAAG,IAC1CV;AAEJ,MAAI,CAACG,WAAW;AACd,UAAM,IAAIQ,WAAW,wDAAA,EAA0DC,oBAAoB;MACjGC,QAAQ;IACV,CAAA;EACF;AAEA,QAAMC,KAAKC,OAAOZ,SAAAA;AAClB,MAAI,CAACY,OAAOC,SAASF,EAAAA,KAAO,CAACC,OAAOE,UAAUH,EAAAA,GAAK;AACjD,UAAM,IAAIH,WAAW,gDAAA,EAAkDC,oBAAoB;MACzFC,QAAQ;MACRV;IACF,CAAA;EACF;AAEA,MAAII,KAAKW,IAAIZ,MAAMQ,EAAAA,IAAMT,eAAe;AACtC,UAAM,IAAIM,WAAW,uDAAA,EAAyDC,oBAAoB;MAChGC,QAAQ;MACRV,WAAWW;MACXR;MACAD;IACF,CAAA;EACF;AAEA,MAAI,CAACD,WAAW;AACd,UAAM,IAAIO,WAAW,gDAAA,EAAkDC,oBAAoB;MACzFC,QAAQ;IACV,CAAA;EACF;AAKA,QAAMM,WAAW,MAAMC,WAAW,UAAUnB,aAAAA,EAAeoB,OAAO,MAAMlB,SAAAA,IAAaD,OAAAA,EAAS,EAAEoB,OAAO,KAAA,CAAA;AACvG,QAAMC,cAAcC,OAAOC,KAAKN,UAAU,MAAA;AAC1C,QAAMO,cAAcF,OAAOC,KAAKrB,WAAW,MAAA;AAI3C,MAAImB,YAAYI,WAAWD,YAAYC,UAAU,CAACC,gBAAgBL,aAAaG,WAAAA,GAAc;AAC3F,UAAM,IAAIf,WAAW,wCAAA,EAA0CC,oBAAoB;MACjFC,QAAQ;IACV,CAAA;EACF;AACF,GArDoC;;;AC1EpC,SAASgB,cAAAA,mBAAkB;AAC3B,SAASC,cAA4C;;;;;;;;AAS9C,IAAMC,yBAAyB;AAG/B,IAAMC,iCAAiC;AAEvC,IAAMC,yBAAyB;AA4D/B,IAAMC,uBAAN,cAAmCC,OAAAA;SAAAA;;;EACxC,MAAMC,SAASC,SAAsCC,UAAiD;AACpG,UAAM,EAAEC,SAASC,WAAWC,QAAO,IAAKJ;AAGxC,UAAMK,OAAO,OAAOH,YAAY,WAAWA,UAAUI,OAAOC,KAAKL,OAAAA,EAAuBM,SAAS,MAAA;AAEjG,QAAI;AACFC,2BAAqB;QACnBC,eAAeN,QAAQM;QACvBR,SAASG;QACTM,WAAWR,UAAUR,8BAAAA;QACrBiB,WAAWT,UAAUP,sBAAAA;QACrBiB,eAAeT,QAAQU;QACvBC,KAAKC,KAAKC,MAAMhB,SAASc,IAAIG,UAAS,CAAA;MACxC,CAAA;AACA,aAAO,KAAKC,MAAK;IACnB,SAASC,OAAO;AACd,UAAI,CAACC,aAAaD,KAAAA,EAAQ,OAAMA;AAEhC,YAAME,kBAAkBF,MAAME,mBAAmB,CAAC;AAClD,YAAMC,SAAS,OAAOD,gBAAgBC,WAAW,WAAWD,gBAAgBC,SAAU;AACtF,aAAO,KAAKC,KAAKD,QAAQE,QAAW;QAAEC,SAASN,MAAMM;QAAS,GAAGJ;MAAgB,CAAA;IACnF;EACF;AACF;;;;;;AC9CO,IAAMK,sBAAsB,wBAACC,YAAAA;AAClC,UAAQA,QAAQC,MAAI;IAClB,KAAK,iBAAiB;AACpB,YAAMC,KAAKF,QAAQG,UAAU,CAAA,GAAIC;AACjC,aAAOF,KAAK,iBAAiBA,EAAAA,KAAOG;IACtC;IACA,KAAK;IACL,KAAK,eAAe;AAClB,YAAMH,KAAKF,QAAQM,MAAMC;AACzB,aAAOL,KAAK,GAAGF,QAAQC,IAAI,IAAIC,EAAAA,KAAOG;IACxC;IACA,KAAK;IACL,KAAK,kBAAkB;AACrB,aAAOL,QAAQO,cAAc,GAAGP,QAAQC,IAAI,IAAID,QAAQO,WAAW,KAAKF;IAC1E;IACA,SAAS;AACP,aAAOL,QAAQO,cAAc,GAAGP,QAAQC,IAAI,IAAID,QAAQO,WAAW,KAAKF;IAC1E;EACF;AACF,GAnBmC;;;ACvDnC,SAASG,cAAAA,mBAAkB;AAC3B,SAASC,cAAc;;;;;;;;;;;;AAsChB,IAAMC,yBAAN,cAAqCC,IAAAA;SAAAA;;;AAAkC;;;;AAevE,IAAMC,uBAAN,cAAmCD,IAAAA;SAAAA;;;AAAgC;;;;AAkBnE,IAAME,6BAAN,cAAyCF,IAAAA;SAAAA;;;AAAsC;;;;AAyB/E,IAAMG,kBAAN,MAAMA;SAAAA;;;;;;;EACX,YACmBC,QACAC,UACAC,cACAC,QACjB;SAJiBH,SAAAA;SACAC,WAAAA;SACAC,eAAAA;SACAC,SAAAA;EAChB;;;;;;;;;;;EAYH,MAAMC,cAAcC,MAAwD;AAC1E,QAAIA,KAAKC,SAAS,oBAAoB;AACpC,aAAO;QAAEC,WAAYF,KAA+BE;MAAU;IAChE;AAEA,QAAIF,KAAKC,SAAS,kBAAkB;AAClC,YAAME,WAAWH;AACjB,YAAMI,UAAU,KAAKT,OAAOU,IAAIF,SAASG,MAAML,IAAI;AACnD,UAAIG,SAAS;AACX,cAAMA,QAAQG,OAAOJ,SAASG,OAAO;UACnCE,QAAQL,SAASM;UACjBC,SAASP,SAASQ;UAClBC,WAAWT,SAASU;UACpBV;QACF,CAAA;MACF,OAAO;AACL,aAAKL,OAAOgB,MAAM,oDAAoD;UAAEb,MAAME,SAASG,MAAML;QAAK,CAAA;MACpG;AACA,aAAOc;IACT;AAEA,SAAKjB,OAAOgB,MAAM,uCAAuC;MAAEb,MAAMD,KAAKC;IAAK,CAAA;AAC3E,WAAOc;EACT;;;;;;;;;EAUA,MAAMC,gBAAgBC,SAAoE;AACxF,UAAMb,UAAU,KAAKR,SAASS,IAAIY,QAAQC,OAAO;AACjD,QAAI,CAACd,SAAS;AACZ,WAAKN,OAAOgB,MAAM,uCAAuC;QAAEI,SAASD,QAAQC;MAAQ,CAAA;AACpF,aAAOH;IACT;AACA,WAAO,MAAMX,QAAQG,OAAOU,OAAAA;EAC9B;;;;;;EAOA,MAAME,oBAAoBF,SAA4E;AACpG,UAAMG,MAAMC,oBAAoBJ,OAAAA;AAChC,QAAI,CAACG,KAAK;AACR,WAAKtB,OAAOgB,MAAM,yDAAyD;QAAEb,MAAMgB,QAAQhB;MAAK,CAAA;AAChG,aAAOc;IACT;AACA,UAAMX,UAAU,KAAKP,aAAaQ,IAAIe,GAAAA;AACtC,QAAI,CAAChB,SAAS;AACZ,WAAKN,OAAOgB,MAAM,2CAA2C;QAAEM;MAAI,CAAA;AACnE,aAAOL;IACT;AACA,WAAO,MAAMX,QAAQG,OAAOU,OAAAA;EAC9B;AACF;;;;;;;;;;;;;AC/KA,SAASK,cAAAA,mBAAkB;AAC3B,SAASC,iBAAiB;AAE1B,SAASC,UAAAA,eAAc;;;ACiBhB,IAAMC,cAAc,wBAACC,QAAgBC,OAAO,oBAAe;AAChE,QAAMC,QAAQ;IAAED;IAAME,OAAO;EAAmB;AAChD,QAAMC,UAAU,wBAACC,OAAiE,IAAIC,QAAAA;AACpF,UAAM,CAACC,OAAO,GAAGC,IAAAA,IAAQF;AACzBD,OAAGE,SAAS,IAAA,GAAOC,IAAAA;EACrB,GAHgB;AAIhB,SAAO;IACLC,OAAOL,QAAQJ,OAAOS,MAAMC,KAAKV,MAAAA,CAAAA;IACjCW,MAAMP,QAAQJ,OAAOW,KAAKD,KAAKV,MAAAA,CAAAA;IAC/BY,MAAMR,QAAQJ,OAAOY,KAAKF,KAAKV,MAAAA,CAAAA;IAC/Ba,OAAOT,QAAQJ,OAAOa,MAAMH,KAAKV,MAAAA,CAAAA;IACjCc,UAAU,wBAACX,UAAAA;AACTD,YAAMC,QAAQA;IAChB,GAFU;IAGVY,UAAU,6BAAMb,MAAMC,OAAZ;IACVa,SAAS,wBAACC,MAAAA;AACRf,YAAMD,OAAOgB;IACf,GAFS;EAGX;AACF,GAnB2B;;;;;;;;;;;;;;ADXpB,IAAMC,mCAAmC;AAOzC,IAAMC,iBAAiB,wBAACC,QAAAA;AAC7B,MAAI;AACF,UAAMC,MAAM,IAAIC,IAAIF,GAAAA;AACpB,UAAMG,WAAWF,IAAIG,SAASC,MAAM,GAAA,EAAKC,OAAOC,OAAAA;AAChD,QAAIJ,SAASK,SAAS,EAAGL,UAASA,SAASK,SAAS,CAAA,IAAK;AACzD,WAAO,GAAGP,IAAIQ,MAAM,IAAIN,SAASO,KAAK,GAAA,CAAA;EACxC,QAAQ;AACN,WAAO;EACT;AACF,GAT8B;AA8CvB,IAAMC,cAAN,MAAMA;SAAAA;;;;;;EAEFC;EAET,YACmBC,QACAC,QACjB;SAFiBD,SAAAA;SACAC,SAAAA;AAEjB,SAAKF,MAAM,IAAIG,UAAUF,OAAOG,UAAU;MAAEF,QAAQG,YAAYH,MAAAA;IAAQ,CAAA;EAC1E;;EAGAI,YAAYC,MAAkE;AAC5E,WAAO,KAAKP,IAAIQ,KAAKF,YAAYC,IAAAA;EACnC;;EAGAE,cAAcF,MAAwD;AACpE,WAAO,KAAKP,IAAIQ,KAAKE,OAAOH,IAAAA;EAC9B;;EAGAI,cAAcJ,MAAwD;AACpE,WAAO,KAAKP,IAAIQ,KAAKI,OAAOL,IAAAA;EAC9B;;EAGAM,SAASN,MAAsD;AAC7D,WAAO,KAAKP,IAAIc,MAAMC,KAAKR,IAAAA;EAC7B;;;;;;;;EASA,MAAMS,YAAYC,SAAiC5B,KAA6B;AAC9E,UAAM6B,SAAS7B,OAAO,KAAKY,OAAOkB;AAClC,QAAI,CAACD,QAAQ;AACX,YAAM,IAAIE,WAAW,gGAAA;IACvB;AACA,UAAMC,WAAW,MAAMC,MAAMJ,QAAQ;MACnCK,QAAQ;MACRC,SAAS;QAAE,gBAAgB;MAAmB;MAC9CC,MAAMC,KAAKC,UAAUV,OAAAA;MACrBW,QAAQC,YAAYC,QAAQ,KAAK7B,OAAO8B,oBAAoB7C,gCAAAA;IAC9D,CAAA;AACA,QAAI,CAACmC,SAASW,IAAI;AAChB,YAAMP,OAAO,MAAMJ,SAASY,KAAI,EAAGC,MAAM,MAAM,EAAA;AAG/C,YAAMC,UAAUhD,eAAe+B,MAAAA;AAC/B,WAAKhB,OAAOkC,KAAK,6CAA6C;QAAEC,QAAQhB,SAASgB;QAAQZ;QAAMpC,KAAK8C;MAAQ,CAAA;AAC5G,YAAM,IAAIf,WAAW,+BAA+BC,SAASgB,MAAM,EAAE,EAAEC,oBAAoB;QAAED,QAAQhB,SAASgB;QAAQZ;QAAMpC,KAAK8C;MAAQ,CAAA;IAC3I;EACF;AACF;;;;;;;;;","names":["Injectable","SlackConfig","ServerkitError","SlackError","ServerkitError","IsSlackError","error","createHmac","timingSafeEqual","DateTime","SLACK_SIGNATURE_DEFAULT_MAX_AGE_SECONDS","verifySlackSignature","input","signingSecret","rawBody","timestamp","signature","maxAgeSeconds","now","Math","floor","DateTime","toSeconds","SlackError","withInternalDetails","reason","ts","Number","isFinite","isInteger","abs","expected","createHmac","update","digest","expectedBuf","Buffer","from","providedBuf","length","timingSafeEqual","Injectable","Policy","SLACK_SIGNATURE_POLICY","SLACK_REQUEST_TIMESTAMP_HEADER","SLACK_SIGNATURE_HEADER","SlackSignaturePolicy","Policy","evaluate","context","envelope","rawBody","getHeader","options","body","Buffer","from","toString","verifySlackSignature","signingSecret","timestamp","signature","maxAgeSeconds","signatureMaxAgeSeconds","now","Math","floor","toSeconds","allow","error","IsSlackError","internalDetails","reason","deny","undefined","message","interactionRouteKey","payload","type","id","actions","action_id","undefined","view","callback_id","Injectable","Logger","SlackCommandHandlerMap","Map","SlackEventHandlerMap","SlackInteractionHandlerMap","SlackDispatcher","events","commands","interactions","logger","dispatchEvent","body","type","challenge","envelope","handler","get","event","handle","teamId","team_id","eventId","event_id","eventTime","event_time","debug","undefined","dispatchCommand","payload","command","dispatchInteraction","key","interactionRouteKey","Injectable","WebClient","Logger","adaptLogger","logger","name","state","level","forward","fn","msg","first","rest","debug","bind","info","warn","error","setLevel","getLevel","setName","n","SLACK_DEFAULT_REQUEST_TIMEOUT_MS","redactSlackUrl","raw","url","URL","segments","pathname","split","filter","Boolean","length","origin","join","SlackClient","web","config","logger","WebClient","botToken","adaptLogger","postMessage","args","chat","updateMessage","update","deleteMessage","delete","openView","views","open","postWebhook","payload","target","incomingWebhookUrl","SlackError","response","fetch","method","headers","body","JSON","stringify","signal","AbortSignal","timeout","requestTimeoutMs","ok","text","catch","safeUrl","warn","status","withInternalDetails"]}

package/dist/slack.config.d.ts

@@ -25,6 +25,12 @@ export interface SlackConfig {
      * verification rejects them as replays. Defaults to `300` (5 minutes).
      */
     signatureMaxAgeSeconds?: number;
+    /**
+     * Per-request timeout (in milliseconds) for outbound `SlackClient.postWebhook`
+     * calls. Defaults to
+     * {@link import('./client/slack.client.js').SLACK_DEFAULT_REQUEST_TIMEOUT_MS} (10s).
+     */
+    requestTimeoutMs?: number;
 }
 export declare abstract class SlackConfig implements SlackConfig {
 }

package/dist/slack.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.config.d.ts","sourceRoot":"","sources":["../src/slack.config.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,8BACsB,WAAY,YAAW,WAAW;CAAG"}
+{"version":3,"file":"slack.config.d.ts","sourceRoot":"","sources":["../src/slack.config.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,8BACsB,WAAY,YAAW,WAAW;CAAG"}

package/dist/slack.signature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.signature.d.ts","sourceRoot":"","sources":["../src/slack.signature.ts"],"names":[],"mappings":"AAIA,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,MAAM,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GACnC,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,qEAAqE;IACrE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,yBAAyB,KAAG,IAkDvE,CAAC"}
+{"version":3,"file":"slack.signature.d.ts","sourceRoot":"","sources":["../src/slack.signature.ts"],"names":[],"mappings":"AAIA,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,MAAM,CAAC;AAE3D;;;;GAIG;AACH,MAAM,MAAM,2BAA2B,GACnC,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG;IACtC,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,qEAAqE;IACrE,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,GAAI,OAAO,yBAAyB,KAAG,IAqDvE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@maroonedsoftware/slack",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "description": "Slack utilities for ServerKit.",
   "author": {
     "name": "Marooned Software",
@@ -44,24 +44,27 @@
     "@slack/web-api": "^7.18.0",
     "injectkit": "^1.6.0",
     "luxon": "^3.7.2",
-    "@maroonedsoftware/errors": "1.7.0",
-    "@maroonedsoftware/policies": "0.5.1",
-    "@maroonedsoftware/logger": "1.1.2"
+    "@maroonedsoftware/logger": "1.1.3",
+    "@maroonedsoftware/errors": "1.8.0",
+    "@maroonedsoftware/policies": "0.5.3"
   },
   "devDependencies": {
     "@types/luxon": "^3.7.2",
-    "@maroonedsoftware/comms": "0.2.1",
-    "@repo/config-typescript": "0.1.0",
-    "@repo/config-eslint": "0.2.1"
+    "@maroonedsoftware/comms": "0.2.3",
+    "@repo/config-eslint": "0.2.1",
+    "@repo/config-typescript": "0.1.0"
   },
   "peerDependencies": {
-    "@maroonedsoftware/comms": "0.2.1"
+    "@maroonedsoftware/comms": "0.2.3"
   },
   "peerDependenciesMeta": {
     "@maroonedsoftware/comms": {
       "optional": true
     }
   },
+  "engines": {
+    "node": ">=22"
+  },
   "scripts": {
     "build": "tsup src/index.ts src/comms.ts --format esm --sourcemap && tsc --emitDeclarationOnly --declaration",
     "build:ci": "eslint --max-warnings=0 && pnpm run build",