@moxxy/plugin-channel-slack 0.27.0

package/dist/server/schema.d.ts

@@ -0,0 +1,257 @@
+import { z } from '@moxxy/sdk';
+/**
+ * zod schemas for the Slack Events API request bodies we accept. Every inbound
+ * body is validated against these BEFORE any field is read or the session is
+ * touched (AGENTS.md A8: validate inbound frames with zod first). Unknown event
+ * subtypes parse to the permissive envelope so we never throw on a Slack event
+ * type we don't subscribe to — we just ignore it.
+ */
+/** The URL-verification handshake Slack sends once when you set the Request URL. */
+export declare const urlVerificationSchema: z.ZodObject<{
+    type: z.ZodLiteral<"url_verification">;
+    token: z.ZodOptional<z.ZodString>;
+    challenge: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "url_verification";
+    challenge: string;
+    token?: string | undefined;
+}, {
+    type: "url_verification";
+    challenge: string;
+    token?: string | undefined;
+}>;
+export type SlackUrlVerification = z.infer<typeof urlVerificationSchema>;
+/** A `message` or `app_mention` inner event. Loose on the many optional fields. */
+export declare const messageEventSchema: z.ZodObject<{
+    type: z.ZodEnum<["message", "app_mention"]>;
+    /** Author user id. Absent for some bot/system messages. */
+    user: z.ZodOptional<z.ZodString>;
+    /** Set for messages posted by a bot integration (including our own). */
+    bot_id: z.ZodOptional<z.ZodString>;
+    /** Message text (may be empty for attachment-only messages). */
+    text: z.ZodOptional<z.ZodString>;
+    /** Channel the event occurred in. */
+    channel: z.ZodOptional<z.ZodString>;
+    /** Message timestamp (also the thread root when no `thread_ts`). */
+    ts: z.ZodOptional<z.ZodString>;
+    /** Present when the message is inside a thread. */
+    thread_ts: z.ZodOptional<z.ZodString>;
+    /** `message_changed` / `message_deleted` etc. — we ignore edited/system subtypes. */
+    subtype: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    type: "message" | "app_mention";
+    channel?: string | undefined;
+    text?: string | undefined;
+    thread_ts?: string | undefined;
+    ts?: string | undefined;
+    user?: string | undefined;
+    bot_id?: string | undefined;
+    subtype?: string | undefined;
+}, {
+    type: "message" | "app_mention";
+    channel?: string | undefined;
+    text?: string | undefined;
+    thread_ts?: string | undefined;
+    ts?: string | undefined;
+    user?: string | undefined;
+    bot_id?: string | undefined;
+    subtype?: string | undefined;
+}>;
+export type SlackMessageEvent = z.infer<typeof messageEventSchema>;
+/** The `event_callback` envelope wrapping an inner event. */
+export declare const eventCallbackSchema: z.ZodObject<{
+    type: z.ZodLiteral<"event_callback">;
+    /** Workspace/team id — the unit we pair against. */
+    team_id: z.ZodOptional<z.ZodString>;
+    api_app_id: z.ZodOptional<z.ZodString>;
+    /** Stable per-event id used for at-least-once dedupe. */
+    event_id: z.ZodOptional<z.ZodString>;
+    event_time: z.ZodOptional<z.ZodNumber>;
+    /** The actual event. We only act on message/app_mention; others pass through. */
+    event: z.ZodObject<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    /** Bot user ids this event was authorized for — lets us detect self-authored messages. */
+    authorizations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    type: "event_callback";
+    event: {
+        type: string;
+        channel?: string | undefined;
+        text?: string | undefined;
+        thread_ts?: string | undefined;
+        ts?: string | undefined;
+        user?: string | undefined;
+        bot_id?: string | undefined;
+        subtype?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    team_id?: string | undefined;
+    api_app_id?: string | undefined;
+    event_id?: string | undefined;
+    event_time?: number | undefined;
+    authorizations?: z.objectOutputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}, {
+    type: "event_callback";
+    event: {
+        type: string;
+        channel?: string | undefined;
+        text?: string | undefined;
+        thread_ts?: string | undefined;
+        ts?: string | undefined;
+        user?: string | undefined;
+        bot_id?: string | undefined;
+        subtype?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    team_id?: string | undefined;
+    api_app_id?: string | undefined;
+    event_id?: string | undefined;
+    event_time?: number | undefined;
+    authorizations?: z.objectInputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}>;
+export type SlackEventCallback = z.infer<typeof eventCallbackSchema>;
+/**
+ * The top-level Slack request envelope: either the one-off url_verification
+ * handshake or an event_callback. A discriminated union on `type` so a body
+ * that is neither is rejected with a clear error.
+ */
+export declare const slackEnvelopeSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"url_verification">;
+    token: z.ZodOptional<z.ZodString>;
+    challenge: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "url_verification";
+    challenge: string;
+    token?: string | undefined;
+}, {
+    type: "url_verification";
+    challenge: string;
+    token?: string | undefined;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"event_callback">;
+    /** Workspace/team id — the unit we pair against. */
+    team_id: z.ZodOptional<z.ZodString>;
+    api_app_id: z.ZodOptional<z.ZodString>;
+    /** Stable per-event id used for at-least-once dedupe. */
+    event_id: z.ZodOptional<z.ZodString>;
+    event_time: z.ZodOptional<z.ZodNumber>;
+    /** The actual event. We only act on message/app_mention; others pass through. */
+    event: z.ZodObject<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        type: z.ZodString;
+        user: z.ZodOptional<z.ZodString>;
+        bot_id: z.ZodOptional<z.ZodString>;
+        text: z.ZodOptional<z.ZodString>;
+        channel: z.ZodOptional<z.ZodString>;
+        ts: z.ZodOptional<z.ZodString>;
+        thread_ts: z.ZodOptional<z.ZodString>;
+        subtype: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+    /** Bot user ids this event was authorized for — lets us detect self-authored messages. */
+    authorizations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    type: "event_callback";
+    event: {
+        type: string;
+        channel?: string | undefined;
+        text?: string | undefined;
+        thread_ts?: string | undefined;
+        ts?: string | undefined;
+        user?: string | undefined;
+        bot_id?: string | undefined;
+        subtype?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    team_id?: string | undefined;
+    api_app_id?: string | undefined;
+    event_id?: string | undefined;
+    event_time?: number | undefined;
+    authorizations?: z.objectOutputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}, {
+    type: "event_callback";
+    event: {
+        type: string;
+        channel?: string | undefined;
+        text?: string | undefined;
+        thread_ts?: string | undefined;
+        ts?: string | undefined;
+        user?: string | undefined;
+        bot_id?: string | undefined;
+        subtype?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    team_id?: string | undefined;
+    api_app_id?: string | undefined;
+    event_id?: string | undefined;
+    event_time?: number | undefined;
+    authorizations?: z.objectInputType<{
+        user_id: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}>]>;
+export type SlackEnvelope = z.infer<typeof slackEnvelopeSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/server/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAE/B;;;;;;GAMG;AAEH,oFAAoF;AACpF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;EAIhC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEzE,mFAAmF;AACnF,eAAO,MAAM,kBAAkB;;IAE7B,2DAA2D;;IAE3D,wEAAwE;;IAExE,gEAAgE;;IAEhE,qCAAqC;;IAErC,oEAAoE;;IAEpE,mDAAmD;;IAEnD,qFAAqF;;;;;;;;;;;;;;;;;;;;EAErF,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEnE,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB;;IAE9B,oDAAoD;;;IAGpD,yDAAyD;;;IAGzD,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAajF,0FAA0F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI1F,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAErE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;IA/B9B,oDAAoD;;;IAGpD,yDAAyD;;;IAGzD,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAajF,0FAA0F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAe1F,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/server/schema.js

@@ -0,0 +1,69 @@
+import { z } from '@moxxy/sdk';
+/**
+ * zod schemas for the Slack Events API request bodies we accept. Every inbound
+ * body is validated against these BEFORE any field is read or the session is
+ * touched (AGENTS.md A8: validate inbound frames with zod first). Unknown event
+ * subtypes parse to the permissive envelope so we never throw on a Slack event
+ * type we don't subscribe to — we just ignore it.
+ */
+/** The URL-verification handshake Slack sends once when you set the Request URL. */
+export const urlVerificationSchema = z.object({
+    type: z.literal('url_verification'),
+    token: z.string().optional(),
+    challenge: z.string().min(1),
+});
+/** A `message` or `app_mention` inner event. Loose on the many optional fields. */
+export const messageEventSchema = z.object({
+    type: z.enum(['message', 'app_mention']),
+    /** Author user id. Absent for some bot/system messages. */
+    user: z.string().optional(),
+    /** Set for messages posted by a bot integration (including our own). */
+    bot_id: z.string().optional(),
+    /** Message text (may be empty for attachment-only messages). */
+    text: z.string().optional(),
+    /** Channel the event occurred in. */
+    channel: z.string().optional(),
+    /** Message timestamp (also the thread root when no `thread_ts`). */
+    ts: z.string().optional(),
+    /** Present when the message is inside a thread. */
+    thread_ts: z.string().optional(),
+    /** `message_changed` / `message_deleted` etc. — we ignore edited/system subtypes. */
+    subtype: z.string().optional(),
+});
+/** The `event_callback` envelope wrapping an inner event. */
+export const eventCallbackSchema = z.object({
+    type: z.literal('event_callback'),
+    /** Workspace/team id — the unit we pair against. */
+    team_id: z.string().optional(),
+    api_app_id: z.string().optional(),
+    /** Stable per-event id used for at-least-once dedupe. */
+    event_id: z.string().optional(),
+    event_time: z.number().optional(),
+    /** The actual event. We only act on message/app_mention; others pass through. */
+    event: z
+        .object({
+        type: z.string(),
+        user: z.string().optional(),
+        bot_id: z.string().optional(),
+        text: z.string().optional(),
+        channel: z.string().optional(),
+        ts: z.string().optional(),
+        thread_ts: z.string().optional(),
+        subtype: z.string().optional(),
+    })
+        .passthrough(),
+    /** Bot user ids this event was authorized for — lets us detect self-authored messages. */
+    authorizations: z
+        .array(z.object({ user_id: z.string().optional() }).passthrough())
+        .optional(),
+});
+/**
+ * The top-level Slack request envelope: either the one-off url_verification
+ * handshake or an event_callback. A discriminated union on `type` so a body
+ * that is neither is rejected with a clear error.
+ */
+export const slackEnvelopeSchema = z.discriminatedUnion('type', [
+    urlVerificationSchema,
+    eventCallbackSchema,
+]);
+//# sourceMappingURL=schema.js.map

package/dist/server/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/server/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAE/B;;;;;;GAMG;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACxC,2DAA2D;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,qCAAqC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,oEAAoE;IACpE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,mDAAmD;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,qFAAqF;IACrF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,oDAAoD;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,yDAAyD;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,iFAAiF;IACjF,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;SACD,WAAW,EAAE;IAChB,0FAA0F;IAC1F,cAAc,EAAE,CAAC;SACd,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;SACjE,QAAQ,EAAE;CACd,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,qBAAqB;IACrB,mBAAmB;CACpB,CAAC,CAAC"}

package/dist/server/verify.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Slack request-signature verification.
+ *
+ * Slack signs each request with HMAC-SHA256 over the string
+ * `v0:{X-Slack-Request-Timestamp}:{rawBody}`, hex-encoded and prefixed `v0=`,
+ * delivered in the `X-Slack-Signature` header. This is structurally identical
+ * to the Stripe HMAC scheme in `@moxxy/plugin-webhooks/src/verify.ts` — a
+ * timestamped HMAC over the raw bytes with a replay window — so the logic here
+ * mirrors it: verify over the EXACT raw body bytes (never the reserialized
+ * JSON), constant-time compare, and reject deliveries outside a ±5-minute
+ * window to bound replay.
+ *
+ * Always returns a structured verdict; the caller decides whether to log the
+ * reason (useful in dev) or hide it (preferable on a public endpoint).
+ *
+ * See: https://api.slack.com/authentication/verifying-requests-from-slack
+ */
+/** Slack's documented replay window: reject requests older than 5 minutes. */
+export declare const SLACK_REPLAY_WINDOW_SEC: number;
+export type SlackVerifyResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export interface VerifySlackSignatureInput {
+    readonly rawBody: Buffer;
+    readonly headers: Record<string, string | string[] | undefined>;
+    readonly signingSecret: string;
+    /** Epoch-ms used to enforce the replay window. Defaults to `Date.now()`. */
+    readonly nowMs?: number;
+}
+/**
+ * Verify a Slack request signature against the raw body. Pass the EXACT bytes
+ * read off the socket, BEFORE `JSON.parse` — reserializing the body changes
+ * whitespace/key-order and breaks the HMAC.
+ */
+export declare function verifySlackSignature(input: VerifySlackSignatureInput): SlackVerifyResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/server/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/server/verify.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAuBpD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,iBAAiB,CA0BxF"}

package/dist/server/verify.js

@@ -0,0 +1,73 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Slack request-signature verification.
+ *
+ * Slack signs each request with HMAC-SHA256 over the string
+ * `v0:{X-Slack-Request-Timestamp}:{rawBody}`, hex-encoded and prefixed `v0=`,
+ * delivered in the `X-Slack-Signature` header. This is structurally identical
+ * to the Stripe HMAC scheme in `@moxxy/plugin-webhooks/src/verify.ts` — a
+ * timestamped HMAC over the raw bytes with a replay window — so the logic here
+ * mirrors it: verify over the EXACT raw body bytes (never the reserialized
+ * JSON), constant-time compare, and reject deliveries outside a ±5-minute
+ * window to bound replay.
+ *
+ * Always returns a structured verdict; the caller decides whether to log the
+ * reason (useful in dev) or hide it (preferable on a public endpoint).
+ *
+ * See: https://api.slack.com/authentication/verifying-requests-from-slack
+ */
+/** Slack's documented replay window: reject requests older than 5 minutes. */
+export const SLACK_REPLAY_WINDOW_SEC = 60 * 5;
+function lower(headers, name) {
+    const v = headers[name.toLowerCase()];
+    if (Array.isArray(v))
+        return v[0] ?? null;
+    return v ?? null;
+}
+/** Constant-time compare of two `v0=…` hex signatures. */
+function safeEqual(a, b) {
+    const ab = Buffer.from(a);
+    const bb = Buffer.from(b);
+    if (ab.length !== bb.length)
+        return false;
+    try {
+        return timingSafeEqual(ab, bb);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify a Slack request signature against the raw body. Pass the EXACT bytes
+ * read off the socket, BEFORE `JSON.parse` — reserializing the body changes
+ * whitespace/key-order and breaks the HMAC.
+ */
+export function verifySlackSignature(input) {
+    const { rawBody, headers, signingSecret } = input;
+    if (!signingSecret)
+        return { ok: false, reason: 'no signing secret configured' };
+    const timestamp = lower(headers, 'x-slack-request-timestamp');
+    const signature = lower(headers, 'x-slack-signature');
+    if (!timestamp)
+        return { ok: false, reason: 'missing X-Slack-Request-Timestamp' };
+    if (!signature)
+        return { ok: false, reason: 'missing X-Slack-Signature' };
+    const tsNum = Number(timestamp);
+    if (!Number.isFinite(tsNum))
+        return { ok: false, reason: 'non-numeric timestamp' };
+    const now = input.nowMs ?? Date.now();
+    const driftSec = Math.abs(now / 1000 - tsNum);
+    if (driftSec > SLACK_REPLAY_WINDOW_SEC) {
+        return { ok: false, reason: `timestamp drift ${Math.round(driftSec)}s exceeds replay window` };
+    }
+    // HMAC over `v0:{ts}:{rawBody}` — note the raw bytes, not a reserialized JSON.
+    const base = Buffer.concat([
+        Buffer.from(`v0:${timestamp}:`, 'utf8'),
+        rawBody,
+    ]);
+    const computed = `v0=${createHmac('sha256', signingSecret).update(base).digest('hex')}`;
+    if (safeEqual(computed, signature))
+        return { ok: true };
+    return { ok: false, reason: 'signature mismatch' };
+}
+//# sourceMappingURL=verify.js.map

package/dist/server/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/server/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;;;;;;;;;;;GAgBG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,CAAC,CAAC;AAM9C,SAAS,KAAK,CACZ,OAAsD,EACtD,IAAY;IAEZ,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC1C,OAAO,CAAC,IAAI,IAAI,CAAC;AACnB,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAClD,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAEjF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtD,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAClF,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAEnF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,GAAG,uBAAuB,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC;IACjG,CAAC;IAED,+EAA+E;IAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,MAAM,CAAC;QACvC,OAAO;KACR,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,IAAI,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AACrD,CAAC"}

package/dist/setup-wizard.d.ts

@@ -0,0 +1,17 @@
+import type { ChannelSubcommandContext } from '@moxxy/sdk';
+/**
+ * Interactive Slack setup wizard (the channel's `interactiveCommand`).
+ *
+ * Walks the operator through:
+ *   1. paste the bot token (`xoxb-…`) into the vault,
+ *   2. paste the signing secret into the vault,
+ *   3. validate the token via `auth.test`,
+ *   4. choose the working folder + the autonomous tool allow-list,
+ *   5. start the channel (opens the proxy tunnel) and PRINT the public Request
+ *      URL to paste into the Slack app's Event Subscriptions.
+ *
+ * Headless invocations bypass this and start the channel directly (the dispatch
+ * caller decides; this is only reached on a TTY).
+ */
+export declare function runSlackWizard(ctx: ChannelSubcommandContext): Promise<number>;
+//# sourceMappingURL=setup-wizard.d.ts.map

package/dist/setup-wizard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.d.ts","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAc3D;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiFnF"}

package/dist/setup-wizard.js

@@ -0,0 +1,92 @@
+import { cancel, intro, isCancel, log, note, outro, password, spinner, text, } from '@clack/prompts';
+import { SLACK_BOT_TOKEN_KEY, SLACK_BOT_TOKEN_RE, SLACK_SIGNING_SECRET_KEY, slackSigningSecretSchema, } from './keys.js';
+import { SlackClient } from './channel/slack-client.js';
+const ANSI = process.stdout.isTTY && !process.env.NO_COLOR;
+const bold = (s) => (ANSI ? `\x1b[1m${s}\x1b[22m` : s);
+const dim = (s) => (ANSI ? `\x1b[2m${s}\x1b[22m` : s);
+/**
+ * Interactive Slack setup wizard (the channel's `interactiveCommand`).
+ *
+ * Walks the operator through:
+ *   1. paste the bot token (`xoxb-…`) into the vault,
+ *   2. paste the signing secret into the vault,
+ *   3. validate the token via `auth.test`,
+ *   4. choose the working folder + the autonomous tool allow-list,
+ *   5. start the channel (opens the proxy tunnel) and PRINT the public Request
+ *      URL to paste into the Slack app's Event Subscriptions.
+ *
+ * Headless invocations bypass this and start the channel directly (the dispatch
+ * caller decides; this is only reached on a TTY).
+ */
+export async function runSlackWizard(ctx) {
+    const vault = ctx.deps.vault;
+    intro(bold('moxxy slack setup'));
+    note('Create a Slack app at https://api.slack.com/apps → "From scratch".\n' +
+        '• OAuth & Permissions → add the bot scopes app_mentions:read, chat:write,\n' +
+        '  channels:history → Install to Workspace → copy the Bot User OAuth Token (xoxb-…).\n' +
+        '• Basic Information → App Credentials → copy the Signing Secret.\n' +
+        'Both go straight into the moxxy vault — no env vars needed.', 'create a Slack app');
+    const token = await password({
+        message: 'Paste the Bot User OAuth Token',
+        mask: '•',
+        validate: (v) => {
+            if (!v || !v.trim())
+                return 'required';
+            if (!SLACK_BOT_TOKEN_RE.test(v.trim()))
+                return 'expected a token like "xoxb-…"';
+            return undefined;
+        },
+    });
+    if (isCancel(token)) {
+        cancel('cancelled.');
+        return 0;
+    }
+    const secret = await password({
+        message: 'Paste the Signing Secret',
+        mask: '•',
+        validate: (v) => {
+            const parsed = slackSigningSecretSchema.safeParse(v);
+            return parsed.success ? undefined : parsed.error.issues[0]?.message ?? 'invalid';
+        },
+    });
+    if (isCancel(secret)) {
+        cancel('cancelled.');
+        return 0;
+    }
+    // Validate the token before persisting anything the operator can act on.
+    const spin = spinner();
+    spin.start('Validating the bot token (auth.test)…');
+    try {
+        const client = new SlackClient({ token: String(token).trim() });
+        const auth = await client.authTest();
+        spin.stop(`Token OK — bot user ${auth.botUserId}${auth.team ? ` on ${auth.team}` : ''}.`);
+    }
+    catch (err) {
+        spin.stop('Token validation failed.');
+        log.error(err instanceof Error ? err.message : String(err));
+        return 1;
+    }
+    await vault.set(SLACK_BOT_TOKEN_KEY, String(token).trim(), ['slack']);
+    await vault.set(SLACK_SIGNING_SECRET_KEY, String(secret).trim(), ['slack']);
+    log.success('Stored bot token + signing secret in the vault.');
+    const allow = await text({
+        message: 'Autonomous tool allow-list (comma-separated; "*" = all, blank = read-only)',
+        placeholder: 'Read, Grep, Glob',
+    });
+    if (isCancel(allow)) {
+        cancel('cancelled.');
+        return 0;
+    }
+    const allowedTools = String(allow)
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    note('Starting the channel — it opens a proxy tunnel and prints a public Request URL.\n' +
+        'Paste that URL into your Slack app → Event Subscriptions → Request URL, then\n' +
+        'subscribe to the bot event app_mention. Mention the bot in a channel to pair.', 'next steps');
+    log.info('Starting the bot. Press Ctrl+C to stop.');
+    outro(dim('handing off to the channel…'));
+    // Start in pairing mode so the first @mention establishes trust automatically.
+    return ctx.startChannel({ pair: true, allowedTools });
+}
+//# sourceMappingURL=setup-wizard.js.map

package/dist/setup-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../src/setup-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,GAAG,EACH,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,IAAI,GACL,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC3D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAA6B;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAmB,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAEjC,IAAI,CACF,sEAAsE;QACpE,6EAA6E;QAC7E,uFAAuF;QACvF,oEAAoE;QACpE,6DAA6D,EAC/D,oBAAoB,CACrB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;QAC3B,OAAO,EAAE,gCAAgC;QACzC,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;gBAAE,OAAO,UAAU,CAAC;YACvC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAE,OAAO,gCAAgC,CAAC;YAChF,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,YAAY,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;QAC5B,OAAO,EAAE,0BAA0B;QACnC,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,CAAC;QACnF,CAAC;KACF,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACtC,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,CAAC,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IAE/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;QACvB,OAAO,EAAE,4EAA4E;QACrF,WAAW,EAAE,kBAAkB;KAChC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,YAAY,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;SAC/B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,CACF,mFAAmF;QACjF,gFAAgF;QAChF,+EAA+E,EACjF,YAAY,CACb,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACpD,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAE1C,+EAA+E;IAC/E,OAAO,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACxD,CAAC"}