@opentag/dispatcher 0.2.0 → 0.3.0

package/dist/callbacks.d.ts

@@ -1,5 +1,5 @@
 import { type LarkReplyClient } from "@opentag/lark";
-import type { CallbackSink } from "./server.js";
+import type { CallbackSink, SourceReceiptSink } from "./server.js";
 export type FetchLike = typeof fetch;
 export declare function createGitHubCallbackSink(input: {
     token?: string;
@@ -10,6 +10,13 @@ export declare function createSlackCallbackSink(input: {
     botTokensByAgentId?: Record<string, string>;
     fetchImpl?: FetchLike;
 }): CallbackSink;
+export declare function createSlackSourceReceiptSink(input: {
+    botToken?: string;
+    botTokensByAgentId?: Record<string, string>;
+    fetchImpl?: FetchLike;
+    reactionsAddUri?: string;
+    timeoutMs?: number;
+}): SourceReceiptSink;
 export declare function createLarkCallbackSink(input: {
     appId?: string;
     appSecret?: string;

package/dist/callbacks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"callbacks.d.ts","sourceRoot":"","sources":["../src/callbacks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,eAAe,EAAwC,MAAM,eAAe,CAAC;AAGlH,OAAO,KAAK,EAAmB,YAAY,EAAE,MAAM,aAAa,CAAC;AAEjE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AA8BrC,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,YAAY,CA+CvG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,GAAG,YAAY,CA0Df;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GAAG,YAAY,CA0Bf;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,GAAG,YAAY,CAyDf;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,CAQ/E"}
+{"version":3,"file":"callbacks.d.ts","sourceRoot":"","sources":["../src/callbacks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,eAAe,EAAwC,MAAM,eAAe,CAAC;AASlH,OAAO,KAAK,EAAmB,YAAY,EAAiB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnG,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAkErC,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,YAAY,CA+CvG;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,GAAG,YAAY,CA0Df;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,iBAAiB,CAgDpB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GAAG,YAAY,CA0Bf;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,GAAG,YAAY,CAyDf;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,CAQ/E"}

package/dist/index.js

@@ -1,7 +1,14 @@
 // src/callbacks.ts
 import { createLarkReplyClient, parseLarkThreadKey, replyLarkMessage } from "@opentag/lark";
-import { createSlackPostMessagePayload, createSlackUpdateMessagePayload, parseSlackThreadKey } from "@opentag/slack";
+import {
+  createSlackPostMessagePayload,
+  createSlackReactionPayload,
+  createSlackUpdateMessagePayload,
+  parseSlackThreadKey,
+  slackSourceReceiptReactionName
+} from "@opentag/slack";
 import { createTelegramSendMessageDraftPayload, createTelegramSendMessagePayload, parseTelegramThreadKey } from "@opentag/telegram";
+var DEFAULT_SLACK_SOURCE_RECEIPT_TIMEOUT_MS = 5e3;
 function slackUpdateUriFrom(postMessageUri) {
   return postMessageUri.replace(/\/chat\.postMessage$/, "/chat.update");
 }
@@ -18,6 +25,31 @@ function slackBotTokenFor(input) {
   }
   return input.botToken;
 }
+function metadataString(metadata, key) {
+  const value = metadata[key];
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function slackSourceMessageTarget(receipt) {
+  if (receipt.provider !== "slack") return null;
+  const channelId = metadataString(receipt.event.metadata, "channelId");
+  const messageTs = metadataString(receipt.event.metadata, "messageTs");
+  return channelId && messageTs ? { channelId, messageTs } : null;
+}
+function isAbortError(error) {
+  return error instanceof Error && error.name === "AbortError";
+}
+async function fetchWithTimeout(input) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), input.timeoutMs);
+  try {
+    return await input.fetchImpl(input.uri, { ...input.init, signal: controller.signal });
+  } catch (error) {
+    if (isAbortError(error)) return null;
+    throw error;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 function createGitHubCallbackSink(input) {
   const fetchImpl = input.fetchImpl ?? fetch;
   const commentUriByKey = /* @__PURE__ */ new Map();
@@ -70,9 +102,9 @@ function createSlackCallbackSink(input) {
     async deliver(message) {
       if (message.provider !== "slack") return;
       const botToken = slackBotTokenFor({
-        ...input.botToken ? { botToken: input.botToken } : {},
-        ...input.botTokensByAgentId ? { botTokensByAgentId: input.botTokensByAgentId } : {},
-        ...message.agentId ? { agentId: message.agentId } : {}
+        botToken: input.botToken,
+        botTokensByAgentId: input.botTokensByAgentId,
+        agentId: message.agentId
       });
       if (!botToken) return;
       const thread = parseSlackThreadKey(message.threadKey ?? "");
@@ -117,6 +149,51 @@ function createSlackCallbackSink(input) {
     }
   };
 }
+function createSlackSourceReceiptSink(input) {
+  const fetchImpl = input.fetchImpl ?? fetch;
+  const reactionsAddUri = input.reactionsAddUri ?? "https://slack.com/api/reactions.add";
+  const timeoutMs = input.timeoutMs ?? DEFAULT_SLACK_SOURCE_RECEIPT_TIMEOUT_MS;
+  return {
+    async deliver(receipt) {
+      const target = slackSourceMessageTarget(receipt);
+      if (!target) return { delivered: false };
+      const botToken = slackBotTokenFor({
+        botToken: input.botToken,
+        botTokensByAgentId: input.botTokensByAgentId,
+        agentId: receipt.agentId
+      });
+      if (!botToken) return { delivered: false };
+      const response = await fetchWithTimeout({
+        fetchImpl,
+        uri: reactionsAddUri,
+        timeoutMs,
+        init: {
+          method: "POST",
+          headers: {
+            authorization: `Bearer ${botToken}`,
+            "content-type": "application/json"
+          },
+          body: JSON.stringify(
+            createSlackReactionPayload({
+              channelId: target.channelId,
+              messageTs: target.messageTs,
+              name: slackSourceReceiptReactionName(receipt.state)
+            })
+          )
+        }
+      });
+      if (!response) return { delivered: false };
+      if (!response.ok) {
+        throw new Error(`deliver Slack source receipt failed: ${response.status} ${await response.text()}`);
+      }
+      const body = await response.json().catch(() => ({}));
+      if (body?.ok === false && body.error !== "already_reacted") {
+        throw new Error(`deliver Slack source receipt failed: ${body?.error ?? "unknown_error"}`);
+      }
+      return { delivered: true };
+    }
+  };
+}
 function createLarkCallbackSink(input) {
   if (!input.client && Boolean(input.appId) !== Boolean(input.appSecret)) {
     throw new Error("Lark callback sink requires both appId and appSecret (or neither).");
@@ -144,9 +221,9 @@ function createTelegramCallbackSink(input) {
     async deliver(message) {
       if (message.provider !== "telegram") return;
       const botToken = slackBotTokenFor({
-        ...input.botToken ? { botToken: input.botToken } : {},
-        ...input.botTokensByAgentId ? { botTokensByAgentId: input.botTokensByAgentId } : {},
-        ...message.agentId ? { agentId: message.agentId } : {}
+        botToken: input.botToken,
+        botTokensByAgentId: input.botTokensByAgentId,
+        agentId: message.agentId
       });
       if (!botToken) return;
       const thread = parseTelegramThreadKey(message.threadKey ?? "");
@@ -206,7 +283,7 @@ import { renderTelegramAcknowledgement, renderTelegramFinalResult, renderTelegra
 function createDefaultCallbackPresentation() {
   return {
     shouldDeliverAcknowledgement(provider) {
-      return provider !== "lark";
+      return provider !== "lark" && provider !== "slack";
     },
     shouldDeliverProgress(provider) {
       return provider !== "slack" && provider !== "lark";
@@ -272,6 +349,7 @@ import { createOpenTagRepository, migrateSchema } from "@opentag/store";
 import Database from "better-sqlite3";
 import { drizzle } from "drizzle-orm/better-sqlite3";
 import { Hono } from "hono";
+import { HTTPException } from "hono/http-exception";
 import { z } from "zod";
 
 // src/admission.ts
@@ -416,6 +494,26 @@ function createAdmissionRuntime(input) {
 }
 
 // src/server.ts
+async function parseBody(c, schema) {
+  let json;
+  try {
+    json = await c.req.json();
+  } catch (err) {
+    if (err instanceof SyntaxError) {
+      throw new HTTPException(400, {
+        res: c.json({ error: "invalid_json_body" }, 400)
+      });
+    }
+    throw err;
+  }
+  const result = schema.safeParse(json);
+  if (!result.success) {
+    throw new HTTPException(400, {
+      res: c.json({ error: "invalid_request_body", issues: result.error.issues }, 400)
+    });
+  }
+  return result.data;
+}
 var CreateRunnerSchema = z.object({
   runnerId: z.string().min(1),
   name: z.string().min(1)
@@ -526,7 +624,8 @@ function childEventFromParent(input) {
     metadata: {
       ...input.parentEvent.metadata,
       ...input.metadata ?? {}
-    }
+    },
+    permissions: input.permissions ?? input.parentEvent.permissions
   };
 }
 function mappingsFromAdapterPlan(adapterPlan) {
@@ -544,13 +643,13 @@ function metadataIssueNumber(metadata) {
   if (typeof value === "string" && /^[1-9]\d*$/.test(value)) return value;
   return void 0;
 }
-function metadataString(metadata, key) {
+function metadataString2(metadata, key) {
   const value = metadata?.[key];
   return typeof value === "string" && value.length > 0 ? value : void 0;
 }
 function githubIssueWorkItemExternalId(metadata) {
-  const owner = metadataString(metadata, "owner");
-  const repo = metadataString(metadata, "repo");
+  const owner = metadataString2(metadata, "owner");
+  const repo = metadataString2(metadata, "repo");
   const issueNumber = metadataIssueNumber(metadata);
   if (!owner || !repo || !issueNumber) return void 0;
   return `${owner}/${repo}#${issueNumber}`;
@@ -807,6 +906,30 @@ function githubTargetFromEvent(event) {
 function selectedActionSummary(candidates) {
   return candidates.map((candidate) => `${candidate.index}. ${candidate.intent.summary}`).join("; ");
 }
+function addPermissionGrant(permissions, grant) {
+  if (permissions.some((permission) => permission.scope === grant.scope)) return permissions;
+  return [...permissions, grant];
+}
+function childRunPermissionsForThreadAction(input) {
+  let permissions = [...input.resolved.proposal.event.permissions ?? []];
+  if (input.command.verb === "apply" || input.command.verb === "continue") {
+    permissions = addPermissionGrant(permissions, {
+      scope: "repo:read",
+      reason: "inspect the repository while continuing an approved source-thread action"
+    });
+    permissions = addPermissionGrant(permissions, {
+      scope: "repo:write",
+      reason: "apply an approved source-thread mutation on a run branch"
+    });
+  }
+  if (input.resolved.selectedCandidates.some((candidate) => candidate.intent.action === "create_pull_request")) {
+    permissions = addPermissionGrant(permissions, {
+      scope: "pr:create",
+      reason: "create the pull request approved in the source thread"
+    });
+  }
+  return permissions;
+}
 function childRunContextLines(input) {
   const previousSummary = input.resolved.proposal.run.result?.summary ?? input.resolved.proposal.snapshot.summary;
   return [
@@ -820,6 +943,12 @@ function childRunContextLines(input) {
   ];
 }
 function renderChildRunCreatedBody(input) {
+  if (input.provider === "slack") {
+    return [
+      "Approved. OpenTag will continue from this proposal in a follow-up run.",
+      ...input.fallbackReason ? [`Reason: ${input.fallbackReason}`] : []
+    ].join("\n");
+  }
   return [
     input.lead,
     "",
@@ -831,6 +960,44 @@ function renderChildRunCreatedBody(input) {
     "The model will continue from this approved proposal instead of starting from a fresh mention."
   ].join("\n");
 }
+function renderAppliedThreadActionBody(input) {
+  const selectedOutcomes = input.outcomes.filter((outcome) => input.selectedIntentIds.includes(outcome.intentId));
+  if (input.provider === "slack") {
+    const lines = [`Applied ${input.selectionText}.`];
+    for (const outcome of selectedOutcomes) {
+      if (outcome.externalUri) {
+        lines.push(`Result: ${outcome.externalUri}`);
+      } else if (outcome.message) {
+        lines.push(`Result: ${outcome.outcome}. ${outcome.message}`);
+      } else {
+        lines.push(`Result: ${outcome.outcome}.`);
+      }
+    }
+    return lines.join("\n");
+  }
+  return [
+    `Applied ${input.selectionText} from \`${input.proposalId}\`.`,
+    "",
+    "Result:",
+    ...selectedOutcomes.map((outcome) => `- \`${outcome.intentId}\`: ${outcome.outcome}${outcome.externalUri ? ` (${outcome.externalUri})` : ""}`)
+  ].join("\n");
+}
+function renderThreadActionRecordedBody(input) {
+  const pastTense = input.verb === "approve" ? "Approved" : "Rejected";
+  if (input.provider === "slack") {
+    if (input.verb === "approve") {
+      return `${pastTense} ${input.selectionText}.
+Next: use Apply ${input.applyIndex ?? 1} when you want OpenTag to perform it.`;
+    }
+    return `${pastTense} ${input.selectionText}.`;
+  }
+  if (input.verb === "approve") {
+    return `${pastTense} ${input.selectionText} from \`${input.proposalId}\`.
+
+Reply with \`apply ${input.applyIndex ?? 1}\` to apply it, or \`continue ${input.applyIndex ?? 1}\` to continue with a follow-up run.`;
+  }
+  return `${pastTense} ${input.selectionText} from \`${input.proposalId}\`.`;
+}
 function actionContextPointer(input) {
   const lines = [
     "OpenTag thread action continuation.",
@@ -895,7 +1062,8 @@ async function createChildRunForThreadAction(input) {
         ...input.approvalDecisionId ? { approvalDecisionId: input.approvalDecisionId } : {},
         ...input.sourceApplyPlanId ? { sourceApplyPlanId: input.sourceApplyPlanId } : {},
         ...input.fallbackReason ? { fallbackReason: input.fallbackReason } : {}
-      }
+      },
+      permissions: childRunPermissionsForThreadAction({ resolved: input.resolved, command: input.command })
     }),
     parentRunId: input.resolved.proposal.runId,
     triggeredByAction: action,
@@ -972,6 +1140,11 @@ var noopCallbackSink = {
     return;
   }
 };
+var noopSourceReceiptSink = {
+  async deliver() {
+    return { delivered: false };
+  }
+};
 function nextCallbackAttemptAt(input) {
   const maxAttempts = input.maxAttempts ?? 5;
   const nextAttempt = input.attempts + 1;
@@ -1049,6 +1222,38 @@ async function deliverAndAudit(input) {
     ...input.retry ? { retry: input.retry } : {}
   });
 }
+async function deliverSourceReceiptBestEffort(input) {
+  try {
+    const result = await input.sink.deliver(input.receipt);
+    if (!result.delivered) return result;
+    await input.repo.appendRunEvent({
+      runId: input.receipt.runId,
+      type: "source_receipt.delivered",
+      payload: {
+        provider: input.receipt.provider,
+        state: input.receipt.state
+      },
+      visibility: "audit",
+      importance: "low",
+      message: `Source ${input.receipt.state} receipt delivered.`
+    });
+    return result;
+  } catch (error) {
+    await input.repo.appendRunEvent({
+      runId: input.receipt.runId,
+      type: "source_receipt.failed",
+      payload: {
+        provider: input.receipt.provider,
+        state: input.receipt.state,
+        error: error instanceof Error ? error.message : String(error)
+      },
+      visibility: "audit",
+      importance: "low",
+      message: `Source ${input.receipt.state} receipt failed.`
+    });
+    return { delivered: false };
+  }
+}
 function isAuthorized(request, pairingToken) {
   if (!pairingToken) return true;
   return request.headers.get("authorization") === `Bearer ${pairingToken}`;
@@ -1059,6 +1264,7 @@ function createDispatcherApp(input) {
   const repo = createOpenTagRepository(drizzle(sqlite));
   const app = new Hono();
   const callbackSink = input.callbackSink ?? noopCallbackSink;
+  const sourceReceiptSink = input.sourceReceiptSink ?? noopSourceReceiptSink;
   const presentation = input.presentation ?? createDefaultCallbackPresentation();
   const callbackRetry = input.callbackRetry ?? {};
   const admission = createAdmissionRuntime({
@@ -1073,7 +1279,7 @@ function createDispatcherApp(input) {
     await next();
   });
   app.post("/v1/runners", async (c) => {
-    const parsed = CreateRunnerSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CreateRunnerSchema);
     await repo.registerRunner(parsed);
     return c.json({ ok: true }, 201);
   });
@@ -1083,7 +1289,7 @@ function createDispatcherApp(input) {
     return c.json({ runner });
   });
   app.post("/v1/repo-bindings", async (c) => {
-    const parsed = CreateRepoBindingSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CreateRepoBindingSchema);
     await repo.createRepoBinding({
       provider: parsed.provider,
       owner: parsed.owner,
@@ -1105,7 +1311,7 @@ function createDispatcherApp(input) {
     return c.json({ binding });
   });
   app.post("/v1/repo-bindings/:provider/:owner/:repo/policy-rules", async (c) => {
-    const parsed = UpsertPolicyRuleSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, UpsertPolicyRuleSchema);
     const rule = await repo.upsertRepoPolicyRule({
       provider: c.req.param("provider"),
       owner: c.req.param("owner"),
@@ -1123,7 +1329,7 @@ function createDispatcherApp(input) {
     return c.json({ rules });
   });
   app.post("/v1/repo-bindings/:provider/:owner/:repo/mutation-mappings", async (c) => {
-    const parsed = UpsertMutationMappingSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, UpsertMutationMappingSchema);
     const mapping = await repo.upsertRepoMutationMapping({
       provider: c.req.param("provider"),
       owner: c.req.param("owner"),
@@ -1155,7 +1361,7 @@ function createDispatcherApp(input) {
     return c.json({ metrics });
   });
   app.post("/v1/channel-bindings", async (c) => {
-    const parsed = CreateChannelBindingSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CreateChannelBindingSchema);
     await repo.upsertChannelBinding({
       provider: parsed.provider,
       accountId: parsed.accountId,
@@ -1177,7 +1383,7 @@ function createDispatcherApp(input) {
     return c.json({ binding });
   });
   app.post("/v1/slack-channel-bindings", async (c) => {
-    const parsed = CreateSlackChannelBindingSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CreateSlackChannelBindingSchema);
     await repo.createSlackChannelBinding(parsed);
     return c.json({ ok: true }, 201);
   });
@@ -1190,7 +1396,7 @@ function createDispatcherApp(input) {
     return c.json({ binding });
   });
   app.post("/v1/runs", async (c) => {
-    const parsed = CreateRunSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CreateRunSchema);
     const admitted = await admission.admitRun({ requestId: parsed.runId, event: parsed.event });
     if (admitted.outcome === "needs_human_decision") {
       return c.json({ decision: admitted.decision }, 202);
@@ -1234,7 +1440,19 @@ function createDispatcherApp(input) {
       );
     }
     const { run } = createdRun;
-    if (presentation.shouldDeliverAcknowledgement(parsed.event.callback.provider)) {
+    const sourceReceiptDelivery = await deliverSourceReceiptBestEffort({
+      repo,
+      sink: sourceReceiptSink,
+      receipt: {
+        runId: run.id,
+        provider: parsed.event.callback.provider,
+        state: "received",
+        event: parsed.event,
+        ...parsed.event.target.agentId ? { agentId: parsed.event.target.agentId } : {}
+      }
+    });
+    const shouldDeliverAcknowledgement = presentation.shouldDeliverAcknowledgement(parsed.event.callback.provider) || parsed.event.callback.provider === "slack" && !sourceReceiptDelivery.delivered;
+    if (shouldDeliverAcknowledgement) {
       await deliverAndAudit({
         repo,
         sink: callbackSink,
@@ -1253,7 +1471,7 @@ function createDispatcherApp(input) {
     return c.json({ decision: admitted.decision, run }, 201);
   });
   app.post("/v1/thread-actions", async (c) => {
-    const parsed = ThreadActionInputSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, ThreadActionInputSchema);
     const command = parseThreadActionCommand(parsed.rawText);
     if (!command) {
       return c.json({ outcome: "ignored", reason: "not_action_command" }, 202);
@@ -1335,6 +1553,7 @@ function createDispatcherApp(input) {
               lead: "This action was already planned, so OpenTag will not execute the external write again.",
               resolved: resolved.resolved,
               childRun: childRun2,
+              provider: parsed.callback.provider,
               approvalDecisionId: existingPlan.approvalDecisionId,
               sourceApplyPlanId: existingPlan.id,
               fallbackReason
@@ -1383,7 +1602,12 @@ function createDispatcherApp(input) {
       if (existingDecision) {
         return c.json({ outcome: "already_rejected", decision }, 200);
       }
-      const body2 = `Rejected ${selectionText} from \`${resolved.resolved.proposal.snapshot.proposalId}\`.`;
+      const body2 = renderThreadActionRecordedBody({
+        provider: parsed.callback.provider,
+        verb: "reject",
+        selectionText,
+        proposalId: resolved.resolved.proposal.snapshot.proposalId
+      });
       await deliverAndAudit({
         repo,
         sink: callbackSink,
@@ -1403,9 +1627,13 @@ function createDispatcherApp(input) {
       if (existingDecision) {
         return c.json({ outcome: "already_approved", decision }, 200);
       }
-      const body2 = `Approved ${selectionText} from \`${resolved.resolved.proposal.snapshot.proposalId}\`.
-
-Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to apply it, or \`continue ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to continue with a follow-up run.`;
+      const body2 = renderThreadActionRecordedBody({
+        provider: parsed.callback.provider,
+        verb: "approve",
+        selectionText,
+        proposalId: resolved.resolved.proposal.snapshot.proposalId,
+        applyIndex: resolved.resolved.selectedCandidates[0]?.index ?? 1
+      });
       await deliverAndAudit({
         repo,
         sink: callbackSink,
@@ -1433,6 +1661,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
         lead: `Continuing from ${selectionText} in \`${resolved.resolved.proposal.snapshot.proposalId}\`.`,
         resolved: resolved.resolved,
         childRun: childRun2,
+        provider: parsed.callback.provider,
         approvalDecisionId: decision.id
       });
       await deliverAndAudit({
@@ -1492,6 +1721,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
             lead: "This action was already planned, so OpenTag will not execute the external write again.",
             resolved: resolved.resolved,
             childRun: childRun2,
+            provider: parsed.callback.provider,
             approvalDecisionId: decision.id,
             sourceApplyPlanId: planResult.plan.id,
             fallbackReason
@@ -1510,12 +1740,13 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
     });
     if (execution.executed) {
       const outcomes = execution.plan.outcomes ?? [];
-      const body2 = [
-        `Applied ${selectionText} from \`${resolved.resolved.proposal.snapshot.proposalId}\`.`,
-        "",
-        "Result:",
-        ...outcomes.filter((outcome) => resolved.resolved.selectedIntentIds.includes(outcome.intentId)).map((outcome) => `- \`${outcome.intentId}\`: ${outcome.outcome}${outcome.externalUri ? ` (${outcome.externalUri})` : ""}`)
-      ].join("\n");
+      const body2 = renderAppliedThreadActionBody({
+        provider: parsed.callback.provider,
+        selectionText,
+        proposalId: resolved.resolved.proposal.snapshot.proposalId,
+        selectedIntentIds: resolved.resolved.selectedIntentIds,
+        outcomes
+      });
       await deliverAndAudit({
         repo,
         sink: callbackSink,
@@ -1549,6 +1780,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
       lead: `Action ${selectionText} was approved, but OpenTag cannot directly apply it yet.`,
       resolved: resolved.resolved,
       childRun,
+      provider: parsed.callback.provider,
       approvalDecisionId: decision.id,
       sourceApplyPlanId: execution.plan.id,
       fallbackReason: execution.fallbackReason ?? "The adapter could not execute the selected intent."
@@ -1574,7 +1806,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
     return c.json({ followUpRequest });
   });
   app.post("/v1/follow-up-requests/:id/create-run", async (c) => {
-    const parsed = PromoteFollowUpRequestSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, PromoteFollowUpRequestSchema);
     let promoted;
     try {
       promoted = await repo.createRunFromFollowUpRequest({
@@ -1628,7 +1860,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
     }, 410);
   });
   app.post("/v1/runners/:runnerId/runs/:runId/running", async (c) => {
-    const body = z.object({ executor: z.string().min(1) }).parse(await c.req.json());
+    const body = await parseBody(c, z.object({ executor: z.string().min(1) }));
     const ok = await repo.markRunning({
       runId: c.req.param("runId"),
       runnerId: c.req.param("runnerId"),
@@ -1645,7 +1877,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
   });
   app.post("/v1/runners/:runnerId/runs/:runId/progress", async (c) => {
     const runId = c.req.param("runId");
-    const body = ProgressSchema.parse(await c.req.json());
+    const body = await parseBody(c, ProgressSchema);
     const ok = await repo.recordProgress({
       runId,
       runnerId: c.req.param("runnerId"),
@@ -1685,7 +1917,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
   });
   app.post("/v1/runners/:runnerId/runs/:runId/complete", async (c) => {
     const runId = c.req.param("runId");
-    const parsed = CompleteRunSchema.parse(await c.req.json());
+    const parsed = await parseBody(c, CompleteRunSchema);
     const ok = await repo.completeRun({ runId, runnerId: c.req.param("runnerId"), result: parsed.result });
     if (!ok) return c.json({ error: "run_not_claimed_by_runner" }, 404);
     const stored = await repo.getRun({ runId });
@@ -1725,7 +1957,16 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
   });
   app.post("/v1/proposals/:proposalId/approvals", async (c) => {
     const proposalId = c.req.param("proposalId");
-    const parsedBody = ApprovalDecisionInputSchema.safeParse(await c.req.json());
+    let rawBody;
+    try {
+      rawBody = await c.req.json();
+    } catch (err) {
+      if (err instanceof SyntaxError) {
+        return c.json({ error: "invalid_json_body" }, 400);
+      }
+      throw err;
+    }
+    const parsedBody = ApprovalDecisionInputSchema.safeParse(rawBody);
     if (!parsedBody.success) return c.json({ error: "invalid_approval_decision" }, 400);
     const body = parsedBody.data;
     const decision = await repo.recordApprovalDecision({
@@ -1749,7 +1990,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
   });
   app.post("/v1/proposals/:proposalId/apply-plans", async (c) => {
     const proposalId = c.req.param("proposalId");
-    const body = ApplyPlanInputSchema.parse(await c.req.json());
+    const body = await parseBody(c, ApplyPlanInputSchema);
     let executableTarget;
     if (body.execute) {
       if (body.adapter !== "github") {
@@ -1843,7 +2084,7 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
   });
   app.post("/v1/runs/:runId/child-runs", async (c) => {
     const parentRunId = c.req.param("runId");
-    const body = ChildRunInputSchema.parse(await c.req.json());
+    const body = await parseBody(c, ChildRunInputSchema);
     const parent = await repo.getRun({ runId: parentRunId });
     if (!parent) return c.json({ error: "parent_run_not_found" }, 404);
     const receivedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -1880,6 +2121,13 @@ Reply with \`apply ${resolved.resolved.selectedCandidates[0]?.index ?? 1}\` to a
     const events = await repo.listRunEvents({ runId: c.req.param("runId") });
     return c.json({ events });
   });
+  app.onError((err, c) => {
+    if (err instanceof HTTPException) {
+      return err.getResponse();
+    }
+    console.error("dispatcher unhandled error", err);
+    return c.json({ error: "internal_server_error" }, 500);
+  });
   return app;
 }
 export {
@@ -1889,6 +2137,7 @@ export {
   createGitHubCallbackSink,
   createLarkCallbackSink,
   createSlackCallbackSink,
+  createSlackSourceReceiptSink,
   createTelegramCallbackSink,
   processPendingCallbacks
 };