@particle-academy/slack-js 0.1.2 → 0.2.0

package/CHANGELOG.md

@@ -3,6 +3,58 @@
 All notable changes to `@particle-academy/slack-ui`,
 `@particle-academy/slack-js`, `particle-academy/slack-php` and `fancy-slack`.
 
+## [0.2.0] — 2026-10-28
+
+### Added
+
+- **`block_actions`: a trigger for button clicks and menu choices.** Slack
+  posts interactivity as `application/x-www-form-urlencoded` with ONE field,
+  `payload`, holding the JSON, and signs the form body as sent. So every
+  delivery is verified first, over the raw bytes (`X-Slack-Signature`, `v0=`
+  + HMAC-SHA256 of `v0:{timestamp}:{body}`, with `X-Slack-Request-Timestamp`
+  inside a 300-second replay window), and decoded second. The decode
+  functions are `decodeSlackDelivery` (js), `BlockActions::decodeDelivery`
+  (php) and `decode_delivery` (python). The event is published as it
+  arrives: `type`, `team`, `enterprise`, `user`, `channel`, `message`,
+  `trigger_id`, `response_url`, and `actions[]` with `action_id`,
+  `block_id`, `type`, `value`, `selected_option` and `action_ts`. A field
+  Slack did not send is `null`, never `""`. **Slack shows the user an error
+  unless the request is answered with a 200 within 3 seconds**, so a host
+  acknowledges first and runs the graph after. Verified against Slack's own
+  worked example from "Verifying requests from Slack" in PHP and Python.
+- **`message_update`: edit a message the app posted** (`chat.update`,
+  addressed by `channel` + `ts`). Declared `idempotent`, because replacing a
+  message with the same content is harmless. This is what a host calls after
+  a click. The click's `response_url` is deliberately never used: it is a URL
+  taken from a delivery, so posting to it would make the package contact an
+  address the request chose.
+- **`user_lookup_by_email`: find the Slack user with an email address**
+  (`users.lookupByEmail`, a read). It exists so a host can map Slack users to
+  its own; storing that map stays with the host. `users_not_found` arrives
+  as Slack's own reason, not as an empty result.
+- **`blocks` on `message_post`**: an optional Block Kit layout, buttons
+  included. `text` stays required, because it is what screen readers and
+  notifications show. A JSON string is parsed, an already-parsed array from
+  an upstream node passes through untouched, invalid JSON is refused by name
+  before any request is built, and an empty value is left out.
+- **`signingSecret`**, a credential scoped to the provider (one value for the
+  whole Slack app). It is needed only by `block_actions`.
+
+### Changed
+
+- **Scopes:** `users:read` and `users:read.email` join `chat:write`, for
+  `user_lookup_by_email`. An existing installation must be re-authorised to
+  grant them before that action can run. Nothing else needs them.
+- **Requires `fancy-connector-core` ≥ 0.11.0**, for `decodeDelivery` /
+  `DeliveryDecode`. The floor is raised for Slack only; it is derived from
+  the trigger that decodes.
+
+## [0.1.3] — 2026-09-12
+
+### Changed
+
+- **Requires `fancy-connector-core` ≥ 0.4.0** — `particle-academy/fancy-connector-core` for php, `@particle-academy/fancy-connector-core` for js. The flow executors now pass a provider's declared `idempotencyMaxLength` through to the core's key derivation, and a named argument an older core does not accept is a fatal rather than a no-op, so the floor moves with it. This connector declares no limit and passes nothing, so nothing else changes for it; the bump is the floor alone.
+
 ## [0.1.2] — 2026-09-11
 
 ### Added

package/README.md

@@ -1,5 +1,7 @@
 # Slack
 
+[![Fancified](art/fancified.svg)](https://particle.academy)
+
 Slack for [fancy-flow][flow] — as **four imported, versioned packages**, one
 per runtime. Not vendored source: a copy cannot be upgraded, and third-party APIs
 change.
@@ -33,7 +35,7 @@ Everything below is generated from `provider/manifest.json`, so it cannot disagr
 
 ### Credentials
 
-A Slack connection holds 4 values.
+A Slack connection holds 5 values.
 
 **Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
 
@@ -43,6 +45,7 @@ A Slack connection holds 4 values.
 | **Client secret** | per installation | **secret** | The matching Slack app client secret used by OAuth V2. |
 | **Bot access token** | per connected account | **secret** | The workspace installation's rotating bot token. Token rotation must be enabled; the token expires after 12 hours. |
 | **Refresh token** | per connected account | **secret** | The workspace installation's single-use refresh token. Persist Slack's replacement after every refresh. |
+| **Signing secret** *(optional)* | per installation | **secret** | The Slack app's signing secret, from Basic Information. One value for the whole app, not per workspace. Required only by the block_actions trigger. |
 
 ### Authorising
 
@@ -50,7 +53,7 @@ Slack uses OAuth2 (authorization_code). The package DECLARES the exchange; the H
 
 - **Authorize URL** — https://slack.com/oauth/v2/authorize
 - **Token URL** — https://slack.com/api/oauth.v2.access
-- **Scopes** — `chat:write`
+- **Scopes** — `chat:write`, `users:read`, `users:read.email`
 - **Access token lifetime** — 43200 seconds (12 hours). A host that never refreshes works all afternoon and is broken by morning.
 
 **The refresh tokens ROTATE, and they are single use.** Every refresh returns a new one and spends the one submitted, so replaying a spent token revokes the ENTIRE grant — the user is signed out, with nothing in the failure that says why.
@@ -82,6 +85,42 @@ Post a text message to a Slack channel or conversation.
 |---|---|---|
 | `channel` | yes | The encoded channel, private group, direct-message or group-message conversation ID visible to the installed app. |
 | `text` | yes | The message's top-level text. Keeping meaningful text here also gives screen readers a complete fallback when richer blocks are added elsewhere. |
+| `blocks` | no | Optional Block Kit layout: a JSON array of blocks, including buttons. Message text is still required and is what screen readers and notifications show. |
+
+#### `message_update` — Slack message update
+
+Replace the text and blocks of a Slack message the app posted.
+
+`POST /api/chat.update` · idempotent — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `channel` | yes | The conversation ID holding the message, as returned when it was posted or carried in a click. |
+| `ts` | yes | The message's ts, its stable identifier within the channel. |
+| `text` | yes | The replacement top-level text, kept as the accessible fallback for the blocks. |
+| `blocks` | no | Optional replacement Block Kit layout: a JSON array of blocks. |
+
+#### `user_lookup_by_email` — Slack user lookup by email
+
+Find the Slack user in this workspace who has a given email address.
+
+`GET /api/users.lookupByEmail` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `email` | yes | The email address to look up. Requires the users:read.email scope. |
+
+### Triggers
+
+#### `block_actions` — Slack button click
+
+Start when someone clicks a button or picks from a menu in a Slack message the app posted.
+
+Delivered by webhook, and the signature is verified before anything runs.
+
+**You have to set this up with the provider first:**
+
+In the Slack app's Interactivity & Shortcuts settings, turn interactivity on and set the Request URL to the route your host mounts for this trigger, then put the app's signing secret (Basic Information) on the connection as `signingSecret`. Slack shows the user an error unless the request is answered with a 200 within 3 seconds, so the host must acknowledge FIRST and run the graph after.
 
 ## Run it before you have credentials
 

package/art/fancified.svg

@@ -0,0 +1,26 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="128" height="28" role="img" aria-label="Fancified — built with Fancy UI">
+  <title>Fancified · built with Fancy UI</title>
+  <defs>
+    <linearGradient id="fcdBg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#6d28d9"/>
+      <stop offset=".5" stop-color="#9333ea"/>
+      <stop offset="1" stop-color="#d946ef"/>
+    </linearGradient>
+    <linearGradient id="fcdGloss" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#ffffff" stop-opacity=".30"/>
+      <stop offset=".55" stop-color="#ffffff" stop-opacity="0"/>
+    </linearGradient>
+    <clipPath id="fcdClip"><rect width="128" height="28" rx="7"/></clipPath>
+  </defs>
+  <g clip-path="url(#fcdClip)">
+    <rect width="128" height="28" fill="url(#fcdBg)"/>
+    <rect width="34" height="28" fill="#3b0764" fill-opacity=".5"/>
+    <rect width="128" height="13" fill="url(#fcdGloss)"/>
+    <g fill="#fff">
+      <path transform="translate(17 14)" d="M0 -7 C.6 -2.2 2.2 -.6 7 0 C2.2 .6 .6 2.2 0 7 C-.6 2.2 -2.2 .6 -7 0 C-2.2 -.6 -.6 -2.2 0 -7 Z"/>
+      <path transform="translate(25.5 7.5) scale(.34)" fill-opacity=".85" d="M0 -7 C.6 -2.2 2.2 -.6 7 0 C2.2 .6 .6 2.2 0 7 C-.6 2.2 -2.2 .6 -7 0 C-2.2 -.6 -.6 -2.2 0 -7 Z"/>
+    </g>
+    <text x="81" y="18.5" fill="#ffffff" text-anchor="middle" font-family="'Segoe UI',Verdana,'DejaVu Sans',sans-serif" font-size="12" font-weight="700" letter-spacing=".3">Fancified</text>
+  </g>
+  <rect x=".5" y=".5" width="127" height="27" rx="6.5" fill="none" stroke="#ffffff" stroke-opacity=".22"/>
+</svg>

package/dist/chunk-LV6WHV7F.js

@@ -0,0 +1,276 @@
+import { callConnector, verifyDelivery, decodeDelivery } from '@particle-academy/fancy-connector-core';
+
+// src/faker.ts
+function fakeMessagePost({ config, fake }) {
+  return {
+    "ok": true,
+    "channel": "C123ABC456",
+    "ts": "1787719200.000100",
+    "message": {
+      "user": "U012AB3CDE",
+      "type": "message",
+      "ts": "1787719200.000100",
+      "text": "Deployment finished successfully.",
+      "app_id": "A012BC3DEF",
+      "bot_id": "B012AB3CD"
+    }
+  };
+}
+function fakeMessageUpdate({ config, fake }) {
+  return {
+    "ok": true,
+    "channel": "C123ABC456",
+    "ts": "1787719200.000100",
+    "text": "Ticket #42 assigned to Rosa."
+  };
+}
+function fakeUserLookupByEmail({ config, fake }) {
+  return {
+    "ok": true,
+    "user": {
+      "id": "U2CERLKJA",
+      "team_id": "T1DC2JH3J",
+      "name": "rosa",
+      "real_name": "Rosa Diaz",
+      "deleted": false,
+      "is_bot": false
+    }
+  };
+}
+function fakeBlockActions({ config, fake }) {
+  return {
+    "type": "block_actions",
+    "team": {
+      "id": "T1DC2JH3J",
+      "domain": "testteamnow"
+    },
+    "enterprise": null,
+    "user": {
+      "id": "U2CERLKJA",
+      "username": "roadrunner",
+      "team_id": "T1DC2JH3J"
+    },
+    "channel": {
+      "id": "C0123ABCD",
+      "name": "support"
+    },
+    "message": {
+      "type": "message",
+      "ts": "1730070000.000100",
+      "text": "Ticket #42: Printer on fire"
+    },
+    "trigger_id": "398738663015.47445629121.803a0bc887a14d10d2c447fce8b6703c",
+    "response_url": "https://hooks.slack.com/actions/T1DC2JH3J/397700885554/96rGlfmibIGlgcZRskXaIFfN",
+    "actions": [
+      {
+        "action_id": "ticket_assign_me",
+        "block_id": "ticket_42",
+        "type": "button",
+        "value": "42",
+        "selected_option": null,
+        "action_ts": "1730070012.345678"
+      }
+    ]
+  };
+}
+var slackFaker = (operation, request) => {
+  switch (operation) {
+    case "message_post":
+      return fakeMessagePost(request);
+    case "message_update":
+      return fakeMessageUpdate(request);
+    case "user_lookup_by_email":
+      return fakeUserLookupByEmail(request);
+    case "block_actions":
+      return fakeBlockActions(request);
+    default:
+      throw new Error(
+        `slack: no fake response is defined for "${operation}". Add a fixture under provider/fixtures/ and regenerate \u2014 a connector without a faker cannot be developed against, tested, or demonstrated.`
+      );
+  }
+};
+
+// src/service.ts
+var CONNECTOR_API_VERSION = 1;
+var SLACK_BASE_URLS = {
+  "live": "https://slack.com",
+  "sandbox": "https://slack.com"
+};
+var SLACK_REQUIRES = [
+  "accessToken",
+  "refreshToken",
+  "clientId",
+  "clientSecret"
+];
+function slackAuthorize(credentials, request, _mode) {
+  request.headers.Authorization = `Bearer ${credentials.accessToken ?? ""}`;
+}
+var SLACK = {
+  service: "slack",
+  title: "Slack",
+  sandbox: "separate-account",
+  baseUrls: { ...SLACK_BASE_URLS },
+  requires: [...SLACK_REQUIRES],
+  authorize: slackAuthorize,
+  faker: slackFaker
+};
+var MESSAGE_POST_OPERATION = "message_post";
+async function slackMessagePost(options) {
+  const config = options.config ?? {};
+  if (config.channel === void 0 || config.channel === null || config.channel === "") {
+    throw new Error(`message_post: "channel" is required (Channel).`);
+  }
+  if (config.text === void 0 || config.text === null || config.text === "") {
+    throw new Error(`message_post: "text" is required (Message).`);
+  }
+  if (typeof config.blocks === "string" && config.blocks !== "") {
+    try {
+      JSON.parse(config.blocks);
+    } catch (error) {
+      throw new Error(`message_post: "blocks" must be JSON: ${error.message}`);
+    }
+  }
+  const result = await callConnector(SLACK, {
+    operation: MESSAGE_POST_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "POST",
+      path: "/api/chat.postMessage",
+      json: {
+        "channel": String(config.channel),
+        "text": String(config.text),
+        ...config.blocks !== void 0 && config.blocks !== null && config.blocks !== "" ? { "blocks": typeof config.blocks === "string" ? JSON.parse(config.blocks) : config.blocks } : {}
+      }
+    }
+  });
+  const data = result.data;
+  if (data?.ok === false) {
+    throw new Error(
+      `message_post: Slack rejected chat.postMessage \u2014 ` + String(data.error ?? "no reason given")
+    );
+  }
+  return result;
+}
+var MESSAGE_UPDATE_OPERATION = "message_update";
+async function slackMessageUpdate(options) {
+  const config = options.config ?? {};
+  if (config.channel === void 0 || config.channel === null || config.channel === "") {
+    throw new Error(`message_update: "channel" is required (Channel).`);
+  }
+  if (config.ts === void 0 || config.ts === null || config.ts === "") {
+    throw new Error(`message_update: "ts" is required (Message ts).`);
+  }
+  if (config.text === void 0 || config.text === null || config.text === "") {
+    throw new Error(`message_update: "text" is required (Message).`);
+  }
+  if (typeof config.blocks === "string" && config.blocks !== "") {
+    try {
+      JSON.parse(config.blocks);
+    } catch (error) {
+      throw new Error(`message_update: "blocks" must be JSON: ${error.message}`);
+    }
+  }
+  const result = await callConnector(SLACK, {
+    operation: MESSAGE_UPDATE_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "POST",
+      path: "/api/chat.update",
+      json: {
+        "channel": String(config.channel),
+        "ts": String(config.ts),
+        "text": String(config.text),
+        ...config.blocks !== void 0 && config.blocks !== null && config.blocks !== "" ? { "blocks": typeof config.blocks === "string" ? JSON.parse(config.blocks) : config.blocks } : {}
+      }
+    }
+  });
+  const data = result.data;
+  if (data?.ok === false) {
+    throw new Error(
+      `message_update: Slack rejected chat.update \u2014 ` + String(data.error ?? "no reason given")
+    );
+  }
+  return result;
+}
+var USER_LOOKUP_BY_EMAIL_OPERATION = "user_lookup_by_email";
+async function slackUserLookupByEmail(options) {
+  const config = options.config ?? {};
+  if (config.email === void 0 || config.email === null || config.email === "") {
+    throw new Error(`user_lookup_by_email: "email" is required (Email).`);
+  }
+  const result = await callConnector(SLACK, {
+    operation: USER_LOOKUP_BY_EMAIL_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: "/api/users.lookupByEmail",
+      query: {
+        "email": String(config.email).trim()
+      }
+    }
+  });
+  const data = result.data;
+  if (data?.ok === false) {
+    throw new Error(
+      `user_lookup_by_email: Slack rejected users.lookupByEmail \u2014 ` + String(data.error ?? "no reason given")
+    );
+  }
+  return result;
+}
+var SLACK_BLOCK_ACTIONS_SIGNATURE_HEADER = "X-Slack-Signature";
+var SLACK_BLOCK_ACTIONS_TOLERANCE = 300;
+var SLACK_BLOCK_ACTIONS_SCHEME = {
+  algorithm: "SHA-256",
+  payload: (raw, timestamp) => `v0:${timestamp}:${raw}`,
+  tolerance: SLACK_BLOCK_ACTIONS_TOLERANCE,
+  encoding: "hex"
+};
+function parseSlackSignature(raw) {
+  return { signature: raw.startsWith("v0=") ? raw.slice(3) : raw };
+}
+var SLACK_BLOCK_ACTIONS_DECODE = {
+  kind: "form-field-json",
+  field: "payload"
+};
+var SLACK_BLOCK_ACTIONS = {
+  service: "slack",
+  operation: "block_actions",
+  delivery: "webhook",
+  setup: "In the Slack app's Interactivity & Shortcuts settings, turn interactivity on and set the Request URL to the route your host mounts for this trigger, then put the app's signing secret (Basic Information) on the connection as `signingSecret`. Slack shows the user an error unless the request is answered with a 200 within 3 seconds, so the host must acknowledge FIRST and run the graph after.",
+  verification: {
+    signatureHeader: SLACK_BLOCK_ACTIONS_SIGNATURE_HEADER,
+    scheme: SLACK_BLOCK_ACTIONS_SCHEME,
+    timestampHeader: "X-Slack-Request-Timestamp",
+    parse: parseSlackSignature
+  },
+  decode: SLACK_BLOCK_ACTIONS_DECODE,
+  faker: slackFaker
+};
+function verifySlackDelivery(delivery, signingSecret, now) {
+  return verifyDelivery(SLACK_BLOCK_ACTIONS, delivery, signingSecret, now);
+}
+function decodeSlackDelivery(raw) {
+  return decodeDelivery(SLACK_BLOCK_ACTIONS_DECODE, raw);
+}
+
+export { CONNECTOR_API_VERSION, MESSAGE_POST_OPERATION, MESSAGE_UPDATE_OPERATION, SLACK, SLACK_BASE_URLS, SLACK_BLOCK_ACTIONS, SLACK_BLOCK_ACTIONS_DECODE, SLACK_BLOCK_ACTIONS_SCHEME, SLACK_BLOCK_ACTIONS_SIGNATURE_HEADER, SLACK_BLOCK_ACTIONS_TOLERANCE, SLACK_REQUIRES, USER_LOOKUP_BY_EMAIL_OPERATION, decodeSlackDelivery, parseSlackSignature, slackAuthorize, slackFaker, slackMessagePost, slackMessageUpdate, slackUserLookupByEmail, verifySlackDelivery };
+//# sourceMappingURL=chunk-LV6WHV7F.js.map
+//# sourceMappingURL=chunk-LV6WHV7F.js.map

package/dist/chunk-LV6WHV7F.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/faker.ts","../src/service.ts","../src/actions/message-post.ts","../src/actions/message-update.ts","../src/actions/user-lookup-by-email.ts","../src/triggers/block-actions.ts"],"names":["callConnector"],"mappings":";;;AAyBA,SAAS,eAAA,CAAgB,EAAE,MAAA,EAAQ,IAAA,EAAK,EAAyB;AAC/D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,SAAA,EAAW,YAAA;AAAA,IACX,IAAA,EAAM,mBAAA;AAAA,IACN,SAAA,EAAW;AAAA,MACT,MAAA,EAAQ,YAAA;AAAA,MACR,MAAA,EAAQ,SAAA;AAAA,MACR,IAAA,EAAM,mBAAA;AAAA,MACN,MAAA,EAAQ,mCAAA;AAAA,MACR,QAAA,EAAU,YAAA;AAAA,MACV,QAAA,EAAU;AAAA;AACZ,GACF;AACF;AAEA,SAAS,iBAAA,CAAkB,EAAE,MAAA,EAAQ,IAAA,EAAK,EAAyB;AACjE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,SAAA,EAAW,YAAA;AAAA,IACX,IAAA,EAAM,mBAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACV;AACF;AAEA,SAAS,qBAAA,CAAsB,EAAE,MAAA,EAAQ,IAAA,EAAK,EAAyB;AACrE,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,WAAA;AAAA,MACN,SAAA,EAAW,WAAA;AAAA,MACX,MAAA,EAAQ,MAAA;AAAA,MACR,WAAA,EAAa,WAAA;AAAA,MACb,SAAA,EAAW,KAAA;AAAA,MACX,QAAA,EAAU;AAAA;AACZ,GACF;AACF;AAEA,SAAS,gBAAA,CAAiB,EAAE,MAAA,EAAQ,IAAA,EAAK,EAAyB;AAChE,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,eAAA;AAAA,IACR,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,WAAA;AAAA,MACN,QAAA,EAAU;AAAA,KACZ;AAAA,IACA,YAAA,EAAc,IAAA;AAAA,IACd,MAAA,EAAQ;AAAA,MACN,IAAA,EAAM,WAAA;AAAA,MACN,UAAA,EAAY,YAAA;AAAA,MACZ,SAAA,EAAW;AAAA,KACb;AAAA,IACA,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,SAAA,EAAW;AAAA,MACT,MAAA,EAAQ,SAAA;AAAA,MACR,IAAA,EAAM,mBAAA;AAAA,MACN,MAAA,EAAQ;AAAA,KACV;AAAA,IACA,YAAA,EAAc,2DAAA;AAAA,IACd,cAAA,EAAgB,iFAAA;AAAA,IAChB,SAAA,EAAW;AAAA,MACT;AAAA,QACE,WAAA,EAAa,kBAAA;AAAA,QACb,UAAA,EAAY,WAAA;AAAA,QACZ,MAAA,EAAQ,QAAA;AAAA,QACR,OAAA,EAAS,IAAA;AAAA,QACT,iBAAA,EAAmB,IAAA;AAAA,QACnB,WAAA,EAAa;AAAA;AACf;AACF,GACF;AACF;AAEO,IAAM,UAAA,GAA6B,CAAC,SAAA,EAAW,OAAA,KAAY;AAChE,EAAA,QAAQ,SAAA;AAAW,IACjB,KAAK,cAAA;AACH,MAAA,OAAO,gBAAgB,OAAO,CAAA;AAAA,IAEhC,KAAK,gBAAA;AACH,MAAA,OAAO,kBAAkB,OAAO,CAAA;AAAA,IAElC,KAAK,sBAAA;AACH,MAAA,OAAO,sBAAsB,OAAO,CAAA;AAAA,IAEtC,KAAK,eAAA;AACH,MAAA,OAAO,iBAAiB,OAAO,CAAA;AAAA,IAEjC;AAIE,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,2CAA2C,SAAS,CAAA,iJAAA;AAAA,OAGtD;AAAA;AAEN;;;ACxFO,IAAM,qBAAA,GAAwB;AAE9B,IAAM,eAAA,GAAkB;AAAA,EAC7B,MAAA,EAAQ,mBAAA;AAAA,EACR,SAAA,EAAW;AACb;AAGO,IAAM,cAAA,GAAiB;AAAA,EAC5B,aAAA;AAAA,EACA,cAAA;AAAA,EACA,UAAA;AAAA,EACA;AACF;AAWO,SAAS,cAAA,CACd,WAAA,EACA,OAAA,EACA,KAAA,EACM;AACN,EAAA,OAAA,CAAQ,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,WAAA,CAAY,eAAe,EAAE,CAAA,CAAA;AACzE;AAGO,IAAM,KAAA,GAA2B;AAAA,EACtC,OAAA,EAAS,OAAA;AAAA,EACT,KAAA,EAAO,OAAA;AAAA,EACP,OAAA,EAAS,kBAAA;AAAA,EACT,QAAA,EAAU,EAAE,GAAG,eAAA,EAAgB;AAAA,EAC/B,QAAA,EAAU,CAAC,GAAG,cAAc,CAAA;AAAA,EAC5B,SAAA,EAAW,cAAA;AAAA,EACX,KAAA,EAAO;AACT;AC9CO,IAAM,sBAAA,GAAyB;AActC,eAAsB,iBAAiB,OAAA,EAAuD;AAC5F,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,EAAC;AAElC,EAAA,IAAI,MAAA,CAAO,YAAY,MAAA,IAAa,MAAA,CAAO,YAAY,IAAA,IAAQ,MAAA,CAAO,YAAY,EAAA,EAAI;AACpF,IAAA,MAAM,IAAI,MAAM,CAAA,8CAAA,CAAgD,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,IAAa,MAAA,CAAO,SAAS,IAAA,IAAQ,MAAA,CAAO,SAAS,EAAA,EAAI;AAC3E,IAAA,MAAM,IAAI,MAAM,CAAA,2CAAA,CAA6C,CAAA;AAAA,EAC/D;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,WAAW,EAAA,EAAI;AAC7D,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,MAAM,CAAA;AAAA,IAC1B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qCAAA,EAAyC,KAAA,CAAgB,OAAO,CAAA,CAAE,CAAA;AAAA,IACpF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,KAAA,EAAO;AAAA,IACxC,SAAA,EAAW,sBAAA;AAAA,IACX,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAC,GAAI,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY;AAAA,IAChF,GAAI,QAAQ,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAK;AAAA,IAC3D,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA,EAAa;AAAA,IACnF,GAAI,QAAQ,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAS;AAAA,IACvE,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU;AAAA,IAC1E,OAAA,EAAS;AAAA,MACP,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,uBAAA;AAAA,MACN,IAAA,EAAM;AAAA,QACJ,SAAA,EAAW,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,QAChC,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AAAA,QAC1B,GAAI,MAAA,CAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,WAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,KAAW,EAAA,GAAK,EAAE,QAAA,EAAU,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,MAAA,CAAO,MAAA,EAAO,GAAI;AAAC;AACrL;AACF,GACD,CAAA;AAMD,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAEpB,EAAA,IAAI,IAAA,EAAM,OAAO,KAAA,EAAO;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,qDAAA,CAAA,GACE,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,iBAAiB;AAAA,KAC1C;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;ACtEO,IAAM,wBAAA,GAA2B;AAcxC,eAAsB,mBAAmB,OAAA,EAAyD;AAChG,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,EAAC;AAElC,EAAA,IAAI,MAAA,CAAO,YAAY,MAAA,IAAa,MAAA,CAAO,YAAY,IAAA,IAAQ,MAAA,CAAO,YAAY,EAAA,EAAI;AACpF,IAAA,MAAM,IAAI,MAAM,CAAA,gDAAA,CAAkD,CAAA;AAAA,EACpE;AAEA,EAAA,IAAI,MAAA,CAAO,OAAO,MAAA,IAAa,MAAA,CAAO,OAAO,IAAA,IAAQ,MAAA,CAAO,OAAO,EAAA,EAAI;AACrE,IAAA,MAAM,IAAI,MAAM,CAAA,8CAAA,CAAgD,CAAA;AAAA,EAClE;AAEA,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,IAAa,MAAA,CAAO,SAAS,IAAA,IAAQ,MAAA,CAAO,SAAS,EAAA,EAAI;AAC3E,IAAA,MAAM,IAAI,MAAM,CAAA,6CAAA,CAA+C,CAAA;AAAA,EACjE;AAEA,EAAA,IAAI,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,WAAW,EAAA,EAAI;AAC7D,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,MAAM,CAAA;AAAA,IAC1B,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uCAAA,EAA2C,KAAA,CAAgB,OAAO,CAAA,CAAE,CAAA;AAAA,IACtF;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,aAAAA,CAAc,KAAA,EAAO;AAAA,IACxC,SAAA,EAAW,wBAAA;AAAA,IACX,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAC,GAAI,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY;AAAA,IAChF,GAAI,QAAQ,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAK;AAAA,IAC3D,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA,EAAa;AAAA,IACnF,GAAI,QAAQ,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAS;AAAA,IACvE,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU;AAAA,IAC1E,OAAA,EAAS;AAAA,MACP,MAAA,EAAQ,MAAA;AAAA,MACR,IAAA,EAAM,kBAAA;AAAA,MACN,IAAA,EAAM;AAAA,QACJ,SAAA,EAAW,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,QAChC,IAAA,EAAM,MAAA,CAAO,MAAA,CAAO,EAAE,CAAA;AAAA,QACtB,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA;AAAA,QAC1B,GAAI,MAAA,CAAO,MAAA,KAAW,MAAA,IAAa,MAAA,CAAO,WAAW,IAAA,IAAQ,MAAA,CAAO,MAAA,KAAW,EAAA,GAAK,EAAE,QAAA,EAAU,OAAO,MAAA,CAAO,MAAA,KAAW,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,MAAA,CAAO,MAAA,EAAO,GAAI;AAAC;AACrL;AACF,GACD,CAAA;AAMD,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAEpB,EAAA,IAAI,IAAA,EAAM,OAAO,KAAA,EAAO;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kDAAA,CAAA,GACE,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,iBAAiB;AAAA,KAC1C;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;ACvEO,IAAM,8BAAA,GAAiC;AAc9C,eAAsB,uBAAuB,OAAA,EAA6D;AACxG,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,IAAU,EAAC;AAElC,EAAA,IAAI,MAAA,CAAO,UAAU,MAAA,IAAa,MAAA,CAAO,UAAU,IAAA,IAAQ,MAAA,CAAO,UAAU,EAAA,EAAI;AAC9E,IAAA,MAAM,IAAI,MAAM,CAAA,kDAAA,CAAoD,CAAA;AAAA,EACtE;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,aAAAA,CAAc,KAAA,EAAO;AAAA,IACxC,SAAA,EAAW,8BAAA;AAAA,IACX,MAAA;AAAA,IACA,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,GAAI,QAAQ,WAAA,KAAgB,MAAA,GAAY,EAAC,GAAI,EAAE,WAAA,EAAa,OAAA,CAAQ,WAAA,EAAY;AAAA,IAChF,GAAI,QAAQ,IAAA,KAAS,MAAA,GAAY,EAAC,GAAI,EAAE,IAAA,EAAM,OAAA,CAAQ,IAAA,EAAK;AAAA,IAC3D,GAAI,QAAQ,YAAA,KAAiB,MAAA,GAAY,EAAC,GAAI,EAAE,YAAA,EAAc,OAAA,CAAQ,YAAA,EAAa;AAAA,IACnF,GAAI,QAAQ,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,OAAA,CAAQ,QAAA,EAAS;AAAA,IACvE,GAAI,QAAQ,SAAA,KAAc,MAAA,GAAY,EAAC,GAAI,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAU;AAAA,IAC1E,OAAA,EAAS;AAAA,MACP,MAAA,EAAQ,KAAA;AAAA,MACR,IAAA,EAAM,0BAAA;AAAA,MACN,KAAA,EAAO;AAAA,QACL,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,KAAK,EAAE,IAAA;AAAK;AACrC;AACF,GACD,CAAA;AAMD,EAAA,MAAM,OAAO,MAAA,CAAO,IAAA;AAEpB,EAAA,IAAI,IAAA,EAAM,OAAO,KAAA,EAAO;AACtB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,gEAAA,CAAA,GACE,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,iBAAiB;AAAA,KAC1C;AAAA,EACF;AAEA,EAAA,OAAO,MAAA;AACT;AC7DO,IAAM,oCAAA,GAAuC;AAE7C,IAAM,6BAAA,GAAgC;AAEtC,IAAM,0BAAA,GAAyC;AAAA,EACpD,SAAA,EAAW,SAAA;AAAA,EACX,SAAS,CAAC,GAAA,EAAK,cAAc,CAAA,GAAA,EAAM,SAAS,IAAI,GAAG,CAAA,CAAA;AAAA,EACnD,SAAA,EAAW,6BAAA;AAAA,EACX,QAAA,EAAU;AACZ;AAGO,SAAS,oBAAoB,GAAA,EAAqC;AACvE,EAAA,OAAO,EAAE,SAAA,EAAW,GAAA,CAAI,UAAA,CAAW,KAAK,IAAI,GAAA,CAAI,KAAA,CAAM,CAAC,CAAA,GAAI,GAAA,EAAI;AACjE;AAEO,IAAM,0BAAA,GAA6C;AAAA,EACxD,IAAA,EAAM,iBAAA;AAAA,EACN,KAAA,EAAO;AACT;AAEO,IAAM,mBAAA,GAAyC;AAAA,EACpD,OAAA,EAAS,OAAA;AAAA,EACT,SAAA,EAAW,eAAA;AAAA,EACX,QAAA,EAAU,SAAA;AAAA,EACV,KAAA,EACE,wYAAA;AAAA,EACF,YAAA,EAAc;AAAA,IACZ,eAAA,EAAiB,oCAAA;AAAA,IACjB,MAAA,EAAQ,0BAAA;AAAA,IACR,eAAA,EAAiB,2BAAA;AAAA,IACjB,KAAA,EAAO;AAAA,GACT;AAAA,EACA,MAAA,EAAQ,0BAAA;AAAA,EACR,KAAA,EAAO;AACT;AAYO,SAAS,mBAAA,CACd,QAAA,EACA,aAAA,EACA,GAAA,EAC8B;AAC9B,EAAA,OAAO,cAAA,CAAe,mBAAA,EAAqB,QAAA,EAAU,aAAA,EAAe,GAAG,CAAA;AACzE;AAUO,SAAS,oBAAoB,GAAA,EAAmC;AACrE,EAAA,OAAO,cAAA,CAAe,4BAA4B,GAAG,CAAA;AACvD","file":"chunk-LV6WHV7F.js","sourcesContent":["/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/fixtures/ by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/fixtures/ (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * The Slack faker.\n *\n * Shapes, not behaviour: the goal is that a downstream node sees the field\n * NAMES Slack actually publishes, so an author can wire {{ $json.data.id }}\n * against a fake and have it keep working against the real thing.\n *\n * Deterministic — same inputs, same output. A faker returning a fresh uuid\n * every call cannot be asserted on, so its fixtures degrade to \"it did not\n * throw\", which is the assertion that catches nothing.\n */\n\nimport type { ConnectorFaker, FakeRequest } from \"@particle-academy/fancy-connector-core\";\n\nfunction fakeMessagePost({ config, fake }: FakeRequest): unknown {\n  return {\n    \"ok\": true,\n    \"channel\": \"C123ABC456\",\n    \"ts\": \"1787719200.000100\",\n    \"message\": {\n      \"user\": \"U012AB3CDE\",\n      \"type\": \"message\",\n      \"ts\": \"1787719200.000100\",\n      \"text\": \"Deployment finished successfully.\",\n      \"app_id\": \"A012BC3DEF\",\n      \"bot_id\": \"B012AB3CD\",\n    },\n  };\n}\n\nfunction fakeMessageUpdate({ config, fake }: FakeRequest): unknown {\n  return {\n    \"ok\": true,\n    \"channel\": \"C123ABC456\",\n    \"ts\": \"1787719200.000100\",\n    \"text\": \"Ticket #42 assigned to Rosa.\",\n  };\n}\n\nfunction fakeUserLookupByEmail({ config, fake }: FakeRequest): unknown {\n  return {\n    \"ok\": true,\n    \"user\": {\n      \"id\": \"U2CERLKJA\",\n      \"team_id\": \"T1DC2JH3J\",\n      \"name\": \"rosa\",\n      \"real_name\": \"Rosa Diaz\",\n      \"deleted\": false,\n      \"is_bot\": false,\n    },\n  };\n}\n\nfunction fakeBlockActions({ config, fake }: FakeRequest): unknown {\n  return {\n    \"type\": \"block_actions\",\n    \"team\": {\n      \"id\": \"T1DC2JH3J\",\n      \"domain\": \"testteamnow\",\n    },\n    \"enterprise\": null,\n    \"user\": {\n      \"id\": \"U2CERLKJA\",\n      \"username\": \"roadrunner\",\n      \"team_id\": \"T1DC2JH3J\",\n    },\n    \"channel\": {\n      \"id\": \"C0123ABCD\",\n      \"name\": \"support\",\n    },\n    \"message\": {\n      \"type\": \"message\",\n      \"ts\": \"1730070000.000100\",\n      \"text\": \"Ticket #42: Printer on fire\",\n    },\n    \"trigger_id\": \"398738663015.47445629121.803a0bc887a14d10d2c447fce8b6703c\",\n    \"response_url\": \"https://hooks.slack.com/actions/T1DC2JH3J/397700885554/96rGlfmibIGlgcZRskXaIFfN\",\n    \"actions\": [\n      {\n        \"action_id\": \"ticket_assign_me\",\n        \"block_id\": \"ticket_42\",\n        \"type\": \"button\",\n        \"value\": \"42\",\n        \"selected_option\": null,\n        \"action_ts\": \"1730070012.345678\",\n      },\n    ],\n  };\n}\n\nexport const slackFaker: ConnectorFaker = (operation, request) => {\n  switch (operation) {\n    case \"message_post\":\n      return fakeMessagePost(request);\n\n    case \"message_update\":\n      return fakeMessageUpdate(request);\n\n    case \"user_lookup_by_email\":\n      return fakeUserLookupByEmail(request);\n\n    case \"block_actions\":\n      return fakeBlockActions(request);\n\n    default:\n      // A faker asked for an operation it has no shape for must SAY so. Making\n      // something up would produce a green run whose output silently has none\n      // of the fields the author is about to reference.\n      throw new Error(\n        `slack: no fake response is defined for \"${operation}\". ` +\n          \"Add a fixture under provider/fixtures/ and regenerate — a connector without a faker \" +\n          \"cannot be developed against, tested, or demonstrated.\",\n      );\n  }\n};\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/manifest.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/manifest.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * Slack, as one service descriptor shared by every Slack operation.\n *\n * @particle-academy/fancy-connector-core carries what is true of ALL\n * connectors. This carries what is true of Slack: its base URL, its auth\n * scheme, its idempotency header, and its faker.\n *\n * ## The sandbox trap, written down where it is used\n *\n * Install the app into a dedicated development workspace or Slack developer\n * sandbox. Messages are real inside that workspace, but its users and data are\n * separate from production. Developer sandboxes expire by default and have\n * feature and integration limits.\n */\n\nimport type { ConnectorMode, PreparedRequest, ServiceDescriptor } from \"@particle-academy/fancy-connector-core\";\n\nimport { slackFaker } from \"./faker.js\";\n\n/**\n * The connector API version this package was GENERATED against.\n *\n * A literal, never imported. An imported constant lets an upgrade rewrite the\n * very claim it exists to detect, after which the copy agrees with itself\n * forever.\n */\nexport const CONNECTOR_API_VERSION = 1;\n\nexport const SLACK_BASE_URLS = {\n  \"live\": \"https://slack.com\",\n  \"sandbox\": \"https://slack.com\"\n} as const;\n\n/** Credential keys a remote call cannot proceed without. */\nexport const SLACK_REQUIRES = [\n  \"accessToken\",\n  \"refreshToken\",\n  \"clientId\",\n  \"clientSecret\"\n] as const;\n\n/**\n * Apply Slack's auth scheme to an outgoing request.\n *\n *\n *\n * The mode is passed in because for some providers auth and estate are the\n * same decision expressed in the URL; here it is unused, and saying so is\n * cheaper than wondering later whether it was forgotten.\n */\nexport function slackAuthorize(\n  credentials: Record<string, string | undefined>,\n  request: PreparedRequest,\n  _mode: ConnectorMode,\n): void {\n  request.headers.Authorization = `Bearer ${credentials.accessToken ?? \"\"}`;\n}\n\n/** The Slack service, for the TypeScript runtime. */\nexport const SLACK: ServiceDescriptor = {\n  service: \"slack\",\n  title: \"Slack\",\n  sandbox: \"separate-account\",\n  baseUrls: { ...SLACK_BASE_URLS },\n  requires: [...SLACK_REQUIRES],\n  authorize: slackAuthorize,\n  faker: slackFaker,\n};\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/message-post.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/message-post.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * Post a text message to a Slack channel or conversation.\n *\n * POST /api/chat.postMessage —\n * https://docs.slack.dev/reference/methods/chat.postMessage\n *\n * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,\n * no fake/real branch. This describes the request; callConnector resolves the\n * connection, picks the estate, and either calls Slack or calls the faker.\n *\n * sideEffects: unsafe-to-replay.\n */\n\nimport {\n  callConnector,\n  type ConnectorResult,\n  type RequestedMode,\n  type Transport,\n} from \"@particle-academy/fancy-connector-core\";\nimport { SLACK } from \"../service.js\";\n\nexport const MESSAGE_POST_OPERATION = \"message_post\";\n\nexport type MessagePostOptions = {\n  /** The node's resolved config. Keys: channel, text, blocks. */\n  config: Record<string, unknown>;\n  credentials?: Record<string, string | undefined>;\n  mode?: RequestedMode;\n  connectionId?: string | null;\n  input?: unknown;\n  attempts?: number;\n  /** Override the transport. The only way to exercise this without a network. */\n  transport?: Transport;\n};\n\nexport async function slackMessagePost(options: MessagePostOptions): Promise<ConnectorResult> {\n  const config = options.config ?? {};\n\n  if (config.channel === undefined || config.channel === null || config.channel === \"\") {\n    throw new Error(`message_post: \"channel\" is required (Channel).`);\n  }\n\n  if (config.text === undefined || config.text === null || config.text === \"\") {\n    throw new Error(`message_post: \"text\" is required (Message).`);\n  }\n\n  if (typeof config.blocks === \"string\" && config.blocks !== \"\") {\n    try {\n      JSON.parse(config.blocks);\n    } catch (error) {\n      throw new Error(`message_post: \"blocks\" must be JSON: ${(error as Error).message}`);\n    }\n  }\n\n  const result = await callConnector(SLACK, {\n    operation: MESSAGE_POST_OPERATION,\n    config,\n    input: options.input,\n    ...(options.credentials === undefined ? {} : { credentials: options.credentials }),\n    ...(options.mode === undefined ? {} : { mode: options.mode }),\n    ...(options.connectionId === undefined ? {} : { connectionId: options.connectionId }),\n    ...(options.attempts === undefined ? {} : { attempts: options.attempts }),\n    ...(options.transport === undefined ? {} : { transport: options.transport }),\n    request: {\n      method: \"POST\",\n      path: \"/api/chat.postMessage\",\n      json: {\n        \"channel\": String(config.channel),\n        \"text\": String(config.text),\n        ...(config.blocks !== undefined && config.blocks !== null && config.blocks !== \"\" ? { \"blocks\": typeof config.blocks === \"string\" ? JSON.parse(config.blocks) : config.blocks } : {}),\n      },\n    },\n  });\n\n  // Slack answers HTTP 200 with `{ok: false}` for an application-level\n  // failure. A status check alone reads that as success, so the call is\n  // reported as having worked and the next node receives a body that says\n  // otherwise.\n  const data = result.data as Record<string, unknown> | undefined;\n\n  if (data?.ok === false) {\n    throw new Error(\n      `message_post: Slack rejected chat.postMessage — ` +\n        String(data.error ?? \"no reason given\"),\n    );\n  }\n\n  return result;\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/message-update.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/message-update.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * Replace the text and blocks of a Slack message the app posted.\n *\n * POST /api/chat.update — https://docs.slack.dev/reference/methods/chat.update\n *\n * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,\n * no fake/real branch. This describes the request; callConnector resolves the\n * connection, picks the estate, and either calls Slack or calls the faker.\n */\n\nimport {\n  callConnector,\n  type ConnectorResult,\n  type RequestedMode,\n  type Transport,\n} from \"@particle-academy/fancy-connector-core\";\nimport { SLACK } from \"../service.js\";\n\nexport const MESSAGE_UPDATE_OPERATION = \"message_update\";\n\nexport type MessageUpdateOptions = {\n  /** The node's resolved config. Keys: channel, ts, text, blocks. */\n  config: Record<string, unknown>;\n  credentials?: Record<string, string | undefined>;\n  mode?: RequestedMode;\n  connectionId?: string | null;\n  input?: unknown;\n  attempts?: number;\n  /** Override the transport. The only way to exercise this without a network. */\n  transport?: Transport;\n};\n\nexport async function slackMessageUpdate(options: MessageUpdateOptions): Promise<ConnectorResult> {\n  const config = options.config ?? {};\n\n  if (config.channel === undefined || config.channel === null || config.channel === \"\") {\n    throw new Error(`message_update: \"channel\" is required (Channel).`);\n  }\n\n  if (config.ts === undefined || config.ts === null || config.ts === \"\") {\n    throw new Error(`message_update: \"ts\" is required (Message ts).`);\n  }\n\n  if (config.text === undefined || config.text === null || config.text === \"\") {\n    throw new Error(`message_update: \"text\" is required (Message).`);\n  }\n\n  if (typeof config.blocks === \"string\" && config.blocks !== \"\") {\n    try {\n      JSON.parse(config.blocks);\n    } catch (error) {\n      throw new Error(`message_update: \"blocks\" must be JSON: ${(error as Error).message}`);\n    }\n  }\n\n  const result = await callConnector(SLACK, {\n    operation: MESSAGE_UPDATE_OPERATION,\n    config,\n    input: options.input,\n    ...(options.credentials === undefined ? {} : { credentials: options.credentials }),\n    ...(options.mode === undefined ? {} : { mode: options.mode }),\n    ...(options.connectionId === undefined ? {} : { connectionId: options.connectionId }),\n    ...(options.attempts === undefined ? {} : { attempts: options.attempts }),\n    ...(options.transport === undefined ? {} : { transport: options.transport }),\n    request: {\n      method: \"POST\",\n      path: \"/api/chat.update\",\n      json: {\n        \"channel\": String(config.channel),\n        \"ts\": String(config.ts),\n        \"text\": String(config.text),\n        ...(config.blocks !== undefined && config.blocks !== null && config.blocks !== \"\" ? { \"blocks\": typeof config.blocks === \"string\" ? JSON.parse(config.blocks) : config.blocks } : {}),\n      },\n    },\n  });\n\n  // Slack answers HTTP 200 with `{ok: false}` for an application-level\n  // failure. A status check alone reads that as success, so the call is\n  // reported as having worked and the next node receives a body that says\n  // otherwise.\n  const data = result.data as Record<string, unknown> | undefined;\n\n  if (data?.ok === false) {\n    throw new Error(\n      `message_update: Slack rejected chat.update — ` +\n        String(data.error ?? \"no reason given\"),\n    );\n  }\n\n  return result;\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/actions/user-lookup-by-email.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/actions/user-lookup-by-email.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * Find the Slack user in this workspace who has a given email address.\n *\n * GET /api/users.lookupByEmail —\n * https://docs.slack.dev/reference/methods/users.lookupByEmail\n *\n * Notice what is NOT here: no key, no base URL, no mode check, no retry loop,\n * no fake/real branch. This describes the request; callConnector resolves the\n * connection, picks the estate, and either calls Slack or calls the faker.\n */\n\nimport {\n  callConnector,\n  type ConnectorResult,\n  type RequestedMode,\n  type Transport,\n} from \"@particle-academy/fancy-connector-core\";\nimport { SLACK } from \"../service.js\";\n\nexport const USER_LOOKUP_BY_EMAIL_OPERATION = \"user_lookup_by_email\";\n\nexport type UserLookupByEmailOptions = {\n  /** The node's resolved config. Keys: email. */\n  config: Record<string, unknown>;\n  credentials?: Record<string, string | undefined>;\n  mode?: RequestedMode;\n  connectionId?: string | null;\n  input?: unknown;\n  attempts?: number;\n  /** Override the transport. The only way to exercise this without a network. */\n  transport?: Transport;\n};\n\nexport async function slackUserLookupByEmail(options: UserLookupByEmailOptions): Promise<ConnectorResult> {\n  const config = options.config ?? {};\n\n  if (config.email === undefined || config.email === null || config.email === \"\") {\n    throw new Error(`user_lookup_by_email: \"email\" is required (Email).`);\n  }\n\n  const result = await callConnector(SLACK, {\n    operation: USER_LOOKUP_BY_EMAIL_OPERATION,\n    config,\n    input: options.input,\n    ...(options.credentials === undefined ? {} : { credentials: options.credentials }),\n    ...(options.mode === undefined ? {} : { mode: options.mode }),\n    ...(options.connectionId === undefined ? {} : { connectionId: options.connectionId }),\n    ...(options.attempts === undefined ? {} : { attempts: options.attempts }),\n    ...(options.transport === undefined ? {} : { transport: options.transport }),\n    request: {\n      method: \"GET\",\n      path: \"/api/users.lookupByEmail\",\n      query: {\n        \"email\": String(config.email).trim(),\n      },\n    },\n  });\n\n  // Slack answers HTTP 200 with `{ok: false}` for an application-level\n  // failure. A status check alone reads that as success, so the call is\n  // reported as having worked and the next node receives a body that says\n  // otherwise.\n  const data = result.data as Record<string, unknown> | undefined;\n\n  if (data?.ok === false) {\n    throw new Error(\n      `user_lookup_by_email: Slack rejected users.lookupByEmail — ` +\n        String(data.error ?? \"no reason given\"),\n    );\n  }\n\n  return result;\n}\n","/**\n * GENERATED FILE — do not edit.\n *\n * Emitted from provider/triggers/block-actions.json by weaver's generator.\n * A hand-edit here is destroyed by the next protocol sync, which is worse than\n * being rejected, because it works until it silently does not. Fix\n * provider/triggers/block-actions.json (or weaver's template/) and regenerate:\n *\n *     npm run provider -- slack\n */\n\n/**\n * Slack's webhook trigger — the delivery contract.\n *\n * Kept beside the service descriptor rather than inside a node, because a\n * signature scheme is a fact about SLACK. Two Slack triggers must not be able\n * to disagree about how a delivery is verified.\n */\n\nimport { decodeDelivery, verifyDelivery, type DeliveryDecode, type HmacScheme, type InboundDelivery, type TriggerDescriptor, type WebhookVerification } from \"@particle-academy/fancy-connector-core\";\nimport { slackFaker } from \"../faker.js\";\n\nexport const SLACK_BLOCK_ACTIONS_SIGNATURE_HEADER = \"X-Slack-Signature\";\n/** The provider's documented replay window, in seconds. */\nexport const SLACK_BLOCK_ACTIONS_TOLERANCE = 300;\n\nexport const SLACK_BLOCK_ACTIONS_SCHEME: HmacScheme = {\n  algorithm: \"SHA-256\",\n  payload: (raw, timestamp) => `v0:${timestamp}:${raw}`,\n  tolerance: SLACK_BLOCK_ACTIONS_TOLERANCE,\n  encoding: \"hex\",\n};\n\n/** Strip the `v0=` prefix the provider sends. */\nexport function parseSlackSignature(raw: string): { signature?: string } {\n  return { signature: raw.startsWith(\"v0=\") ? raw.slice(3) : raw };\n}\n\nexport const SLACK_BLOCK_ACTIONS_DECODE: DeliveryDecode = {\n  kind: \"form-field-json\",\n  field: \"payload\",\n};\n\nexport const SLACK_BLOCK_ACTIONS: TriggerDescriptor = {\n  service: \"slack\",\n  operation: \"block_actions\",\n  delivery: \"webhook\",\n  setup:\n    \"In the Slack app's Interactivity & Shortcuts settings, turn interactivity on and set the Request URL to the route your host mounts for this trigger, then put the app's signing secret (Basic Information) on the connection as `signingSecret`. Slack shows the user an error unless the request is answered with a 200 within 3 seconds, so the host must acknowledge FIRST and run the graph after.\",\n  verification: {\n    signatureHeader: SLACK_BLOCK_ACTIONS_SIGNATURE_HEADER,\n    scheme: SLACK_BLOCK_ACTIONS_SCHEME,\n    timestampHeader: \"X-Slack-Request-Timestamp\",\n    parse: parseSlackSignature,\n  },\n  decode: SLACK_BLOCK_ACTIONS_DECODE,\n  faker: slackFaker,\n};\n\n/**\n * Verify one inbound Slack delivery.\n *\n * The host calls this BEFORE starting a run, with the body exactly as\n * received. Re-serialised JSON changes key order and whitespace, and produces\n * a mismatch that looks precisely like a wrong secret — hours of debugging the\n * wrong thing.\n *\n * The secret is the connection's `signingSecret`.\n */\nexport function verifySlackDelivery(\n  delivery: InboundDelivery,\n  signingSecret: string | undefined,\n  now?: number,\n): Promise<WebhookVerification> {\n  return verifyDelivery(SLACK_BLOCK_ACTIONS, delivery, signingSecret, now);\n}\n\n/**\n * Read one VERIFIED Slack delivery.\n *\n * The body is not plain JSON: it is form-field-json, with the payload in the\n * `payload` field. The host calls this AFTER `verifySlackDelivery` has\n * accepted the delivery, with the SAME raw bytes, and starts the run with what\n * it returns. A body that cannot be read is refused by name, never passed on.\n */\nexport function decodeSlackDelivery(raw: Uint8Array | string): unknown {\n  return decodeDelivery(SLACK_BLOCK_ACTIONS_DECODE, raw);\n}\n"]}