@shipfox/api-integration-slack 4.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 24 files with swc (30.2ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,22 @@
+# @shipfox/api-integration-slack
+
+## 4.0.0
+
+### Minor Changes
+
+- 67176d4: Adds the Slack OAuth connection flow with provider routes, secure bot-token storage, and E2E setup.
+- 7267872: Adds signed Slack Events API and slash-command receivers that publish normalized integration events without persisting command verification tokens.
+- bbba3b7: Adds the Slack integration provider scaffold with installation storage, bot-token custody, and flag-gated registration.
+
+### Patch Changes
+
+- 0745ee9: Prevents Slack bot tokens from being read for revoked, expired, or missing installations.
+- 23c8e4d: Rejects Slack OAuth grants that enable unsupported token rotation.
+- 1951293: Adds in-process Slack agent tools for reading conversations and acting on messages through the lease-authenticated gateway.
+- Updated dependencies [dda7c54]
+- Updated dependencies [7267872]
+- Updated dependencies [bbba3b7]
+  - @shipfox/api-integration-slack-dto@4.0.0
+  - @shipfox/node-drizzle@0.3.0
+  - @shipfox/api-secrets@4.0.0
+  - @shipfox/api-workspaces@4.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/api/client.d.ts

@@ -0,0 +1,28 @@
+export interface SlackAuthorization {
+    accessToken: string;
+    botUserId: string;
+    appId: string;
+    teamId: string;
+    teamName: string;
+    scopes: string[];
+}
+export interface SlackWebApiResponse {
+    ok: boolean;
+    error?: string | undefined;
+    [key: string]: unknown;
+}
+export interface SlackApiClient {
+    exchangeAuthorizationCode(input: {
+        code: string;
+    }): Promise<SlackAuthorization>;
+    revokeToken(input: {
+        token: string;
+    }): Promise<void>;
+    callMethod(input: {
+        method: string;
+        token: string;
+        arguments: Record<string, unknown>;
+    }): Promise<SlackWebApiResponse>;
+}
+export declare function createSlackApiClient(): SlackApiClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,yBAAyB,CAAC,KAAK,EAAE;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9E,WAAW,CAAC,KAAK,EAAE;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,UAAU,CAAC,KAAK,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClC;AAeD,wBAAgB,oBAAoB,IAAI,cAAc,CAwCrD"}

package/dist/api/client.js

@@ -0,0 +1,163 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import ky, { HTTPError, TimeoutError } from 'ky';
+import { config } from '#config.js';
+import { SlackEnterpriseInstallUnsupportedError, SlackIntegrationProviderError, SlackTokenRotationUnsupportedError } from '#core/errors.js';
+const SLACK_API_TIMEOUT_MS = 10_000;
+export function createSlackApiClient() {
+    return {
+        async exchangeAuthorizationCode (input) {
+            const body = await mapSlackError('exchange-authorization-code', ()=>ky.post(slackApiUrl('oauth.v2.access'), {
+                    body: new URLSearchParams({
+                        client_id: config.SLACK_OAUTH_CLIENT_ID,
+                        client_secret: config.SLACK_OAUTH_CLIENT_SECRET,
+                        code: input.code,
+                        redirect_uri: config.SLACK_OAUTH_REDIRECT_URL
+                    }),
+                    timeout: SLACK_API_TIMEOUT_MS
+                }).json());
+            return parseOAuthAccess(body);
+        },
+        async revokeToken (input) {
+            await mapSlackError('revoke-token', async ()=>{
+                await ky.post(slackApiUrl('auth.revoke'), {
+                    headers: {
+                        authorization: `Bearer ${input.token}`
+                    },
+                    timeout: SLACK_API_TIMEOUT_MS
+                });
+            });
+        },
+        async callMethod (input) {
+            return await mapSlackWebApiError(input.method, ()=>ky.post(slackApiUrl(input.method), {
+                    headers: {
+                        authorization: `Bearer ${input.token}`
+                    },
+                    body: slackMethodArguments(input.arguments),
+                    timeout: SLACK_API_TIMEOUT_MS
+                }).json());
+        }
+    };
+}
+function parseOAuthAccess(body) {
+    if (body.ok !== true) {
+        throw new SlackIntegrationProviderError(slackOAuthErrorReason(body.error), 'Slack authorization request failed');
+    }
+    if (body.is_enterprise_install === true || body.team == null) {
+        throw new SlackEnterpriseInstallUnsupportedError();
+    }
+    // The bot-token store has no refresh path, so a rotating (expiring) token must never be persisted.
+    // Slack omits both fields when rotation is off, so presence of either signals rotation.
+    // The rejected token self-expires, matching the Enterprise Grid rejection path.
+    if (body.expires_in !== undefined || body.refresh_token !== undefined) {
+        throw new SlackTokenRotationUnsupportedError();
+    }
+    const { access_token: accessToken, bot_user_id: botUserId, app_id: appId, team, scope } = body;
+    if (typeof accessToken !== 'string' || typeof botUserId !== 'string' || typeof appId !== 'string' || typeof team.id !== 'string' || typeof team.name !== 'string' || typeof scope !== 'string') {
+        throw new SlackIntegrationProviderError('malformed-provider-response', 'Slack authorization response did not include the required installation details');
+    }
+    return {
+        accessToken,
+        botUserId,
+        appId,
+        teamId: team.id,
+        teamName: team.name,
+        scopes: scope.split(',').map((value)=>value.trim()).filter(Boolean)
+    };
+}
+function slackOAuthErrorReason(error) {
+    if (error === 'service_unavailable' || error === 'internal_error') return 'provider-unavailable';
+    if (error === 'ratelimited') return 'rate-limited';
+    return 'access-denied';
+}
+async function mapSlackError(operation, request) {
+    try {
+        return await request();
+    } catch (error) {
+        if (error instanceof SlackIntegrationProviderError) throw error;
+        if (error instanceof HTTPError) {
+            const { status, statusText, headers } = error.response;
+            logger().warn({
+                operation,
+                status,
+                statusText
+            }, 'Slack API request rejected');
+            if (status === 429) {
+                throw new SlackIntegrationProviderError('rate-limited', 'Slack request was rate limited', retryAfterSeconds(headers));
+            }
+            if (status >= 500) {
+                throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');
+            }
+            throw new SlackIntegrationProviderError('access-denied', 'Slack request was rejected');
+        }
+        if (error instanceof TimeoutError) {
+            logger().warn({
+                operation
+            }, 'Slack API request timed out');
+            throw new SlackIntegrationProviderError('timeout', 'Slack request timed out');
+        }
+        logger().warn({
+            operation,
+            errName: error instanceof Error ? error.name : typeof error
+        }, 'Slack API request failed');
+        throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');
+    }
+}
+async function mapSlackWebApiError(method, request) {
+    try {
+        return await request();
+    } catch (error) {
+        if (error instanceof SlackIntegrationProviderError) throw error;
+        if (error instanceof HTTPError) {
+            const { status, statusText, headers } = error.response;
+            logger().warn({
+                operation: 'call-method',
+                method,
+                status,
+                statusText
+            }, 'Slack API request rejected');
+            if (status === 429) {
+                throw new SlackIntegrationProviderError('rate-limited', 'Slack request was rate limited', retryAfterSeconds(headers));
+            }
+            if (status === 413) {
+                throw new SlackIntegrationProviderError('content-too-large', 'Slack request content was too large');
+            }
+            if (status >= 500) {
+                throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');
+            }
+            throw new SlackIntegrationProviderError('malformed-provider-response', 'Slack request was rejected');
+        }
+        if (error instanceof TimeoutError) {
+            logger().warn({
+                operation: 'call-method',
+                method
+            }, 'Slack API request timed out');
+            throw new SlackIntegrationProviderError('timeout', 'Slack request timed out');
+        }
+        logger().warn({
+            operation: 'call-method',
+            method,
+            errName: error instanceof Error ? error.name : typeof error
+        }, 'Slack API request failed');
+        throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');
+    }
+}
+function slackMethodArguments(input) {
+    const body = new URLSearchParams();
+    for (const [key, value] of Object.entries(input)){
+        if (value === null || value === undefined) continue;
+        const serialized = typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean' ? String(value) : JSON.stringify(value);
+        if (serialized !== undefined) body.set(key, serialized);
+    }
+    return body;
+}
+function slackApiUrl(path) {
+    return new URL(path, `${config.SLACK_API_BASE_URL}/`).toString();
+}
+function retryAfterSeconds(headers) {
+    const retryAfter = headers.get('retry-after');
+    if (!retryAfter) return undefined;
+    const parsed = Number.parseInt(retryAfter, 10);
+    return Number.isNaN(parsed) ? undefined : parsed;
+}
+
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/client.ts"],"sourcesContent":["import {logger} from '@shipfox/node-opentelemetry';\nimport ky, {HTTPError, TimeoutError} from 'ky';\nimport {config} from '#config.js';\nimport {\n  SlackEnterpriseInstallUnsupportedError,\n  SlackIntegrationProviderError,\n  SlackTokenRotationUnsupportedError,\n} from '#core/errors.js';\n\nconst SLACK_API_TIMEOUT_MS = 10_000;\n\nexport interface SlackAuthorization {\n  accessToken: string;\n  botUserId: string;\n  appId: string;\n  teamId: string;\n  teamName: string;\n  scopes: string[];\n}\n\nexport interface SlackWebApiResponse {\n  ok: boolean;\n  error?: string | undefined;\n  [key: string]: unknown;\n}\n\nexport interface SlackApiClient {\n  exchangeAuthorizationCode(input: {code: string}): Promise<SlackAuthorization>;\n  revokeToken(input: {token: string}): Promise<void>;\n  callMethod(input: {\n    method: string;\n    token: string;\n    arguments: Record<string, unknown>;\n  }): Promise<SlackWebApiResponse>;\n}\n\ninterface SlackOAuthAccessResponse {\n  ok?: unknown;\n  error?: unknown;\n  access_token?: unknown;\n  bot_user_id?: unknown;\n  app_id?: unknown;\n  team?: {id?: unknown; name?: unknown} | null | undefined;\n  scope?: unknown;\n  is_enterprise_install?: unknown;\n  expires_in?: unknown;\n  refresh_token?: unknown;\n}\n\nexport function createSlackApiClient(): SlackApiClient {\n  return {\n    async exchangeAuthorizationCode(input) {\n      const body = await mapSlackError('exchange-authorization-code', () =>\n        ky\n          .post(slackApiUrl('oauth.v2.access'), {\n            body: new URLSearchParams({\n              client_id: config.SLACK_OAUTH_CLIENT_ID,\n              client_secret: config.SLACK_OAUTH_CLIENT_SECRET,\n              code: input.code,\n              redirect_uri: config.SLACK_OAUTH_REDIRECT_URL,\n            }),\n            timeout: SLACK_API_TIMEOUT_MS,\n          })\n          .json<SlackOAuthAccessResponse>(),\n      );\n      return parseOAuthAccess(body);\n    },\n\n    async revokeToken(input) {\n      await mapSlackError('revoke-token', async () => {\n        await ky.post(slackApiUrl('auth.revoke'), {\n          headers: {authorization: `Bearer ${input.token}`},\n          timeout: SLACK_API_TIMEOUT_MS,\n        });\n      });\n    },\n\n    async callMethod(input) {\n      return await mapSlackWebApiError(input.method, () =>\n        ky\n          .post(slackApiUrl(input.method), {\n            headers: {authorization: `Bearer ${input.token}`},\n            body: slackMethodArguments(input.arguments),\n            timeout: SLACK_API_TIMEOUT_MS,\n          })\n          .json<SlackWebApiResponse>(),\n      );\n    },\n  };\n}\n\nfunction parseOAuthAccess(body: SlackOAuthAccessResponse): SlackAuthorization {\n  if (body.ok !== true) {\n    throw new SlackIntegrationProviderError(\n      slackOAuthErrorReason(body.error),\n      'Slack authorization request failed',\n    );\n  }\n  if (body.is_enterprise_install === true || body.team == null) {\n    throw new SlackEnterpriseInstallUnsupportedError();\n  }\n  // The bot-token store has no refresh path, so a rotating (expiring) token must never be persisted.\n  // Slack omits both fields when rotation is off, so presence of either signals rotation.\n  // The rejected token self-expires, matching the Enterprise Grid rejection path.\n  if (body.expires_in !== undefined || body.refresh_token !== undefined) {\n    throw new SlackTokenRotationUnsupportedError();\n  }\n  const {access_token: accessToken, bot_user_id: botUserId, app_id: appId, team, scope} = body;\n  if (\n    typeof accessToken !== 'string' ||\n    typeof botUserId !== 'string' ||\n    typeof appId !== 'string' ||\n    typeof team.id !== 'string' ||\n    typeof team.name !== 'string' ||\n    typeof scope !== 'string'\n  ) {\n    throw new SlackIntegrationProviderError(\n      'malformed-provider-response',\n      'Slack authorization response did not include the required installation details',\n    );\n  }\n  return {\n    accessToken,\n    botUserId,\n    appId,\n    teamId: team.id,\n    teamName: team.name,\n    scopes: scope\n      .split(',')\n      .map((value) => value.trim())\n      .filter(Boolean),\n  };\n}\n\nfunction slackOAuthErrorReason(error: unknown) {\n  if (error === 'service_unavailable' || error === 'internal_error') return 'provider-unavailable';\n  if (error === 'ratelimited') return 'rate-limited';\n  return 'access-denied';\n}\n\nasync function mapSlackError<T>(operation: string, request: () => Promise<T>): Promise<T> {\n  try {\n    return await request();\n  } catch (error) {\n    if (error instanceof SlackIntegrationProviderError) throw error;\n    if (error instanceof HTTPError) {\n      const {status, statusText, headers} = error.response;\n      logger().warn({operation, status, statusText}, 'Slack API request rejected');\n      if (status === 429) {\n        throw new SlackIntegrationProviderError(\n          'rate-limited',\n          'Slack request was rate limited',\n          retryAfterSeconds(headers),\n        );\n      }\n      if (status >= 500) {\n        throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');\n      }\n      throw new SlackIntegrationProviderError('access-denied', 'Slack request was rejected');\n    }\n    if (error instanceof TimeoutError) {\n      logger().warn({operation}, 'Slack API request timed out');\n      throw new SlackIntegrationProviderError('timeout', 'Slack request timed out');\n    }\n    logger().warn(\n      {operation, errName: error instanceof Error ? error.name : typeof error},\n      'Slack API request failed',\n    );\n    throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');\n  }\n}\n\nasync function mapSlackWebApiError<T>(method: string, request: () => Promise<T>): Promise<T> {\n  try {\n    return await request();\n  } catch (error) {\n    if (error instanceof SlackIntegrationProviderError) throw error;\n    if (error instanceof HTTPError) {\n      const {status, statusText, headers} = error.response;\n      logger().warn(\n        {operation: 'call-method', method, status, statusText},\n        'Slack API request rejected',\n      );\n      if (status === 429) {\n        throw new SlackIntegrationProviderError(\n          'rate-limited',\n          'Slack request was rate limited',\n          retryAfterSeconds(headers),\n        );\n      }\n      if (status === 413) {\n        throw new SlackIntegrationProviderError(\n          'content-too-large',\n          'Slack request content was too large',\n        );\n      }\n      if (status >= 500) {\n        throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');\n      }\n      throw new SlackIntegrationProviderError(\n        'malformed-provider-response',\n        'Slack request was rejected',\n      );\n    }\n    if (error instanceof TimeoutError) {\n      logger().warn({operation: 'call-method', method}, 'Slack API request timed out');\n      throw new SlackIntegrationProviderError('timeout', 'Slack request timed out');\n    }\n    logger().warn(\n      {\n        operation: 'call-method',\n        method,\n        errName: error instanceof Error ? error.name : typeof error,\n      },\n      'Slack API request failed',\n    );\n    throw new SlackIntegrationProviderError('provider-unavailable', 'Slack request failed');\n  }\n}\n\nfunction slackMethodArguments(input: Record<string, unknown>): URLSearchParams {\n  const body = new URLSearchParams();\n  for (const [key, value] of Object.entries(input)) {\n    if (value === null || value === undefined) continue;\n    const serialized =\n      typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean'\n        ? String(value)\n        : JSON.stringify(value);\n    if (serialized !== undefined) body.set(key, serialized);\n  }\n  return body;\n}\n\nfunction slackApiUrl(path: string): string {\n  return new URL(path, `${config.SLACK_API_BASE_URL}/`).toString();\n}\n\nfunction retryAfterSeconds(headers: Headers): number | undefined {\n  const retryAfter = headers.get('retry-after');\n  if (!retryAfter) return undefined;\n  const parsed = Number.parseInt(retryAfter, 10);\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n"],"names":["logger","ky","HTTPError","TimeoutError","config","SlackEnterpriseInstallUnsupportedError","SlackIntegrationProviderError","SlackTokenRotationUnsupportedError","SLACK_API_TIMEOUT_MS","createSlackApiClient","exchangeAuthorizationCode","input","body","mapSlackError","post","slackApiUrl","URLSearchParams","client_id","SLACK_OAUTH_CLIENT_ID","client_secret","SLACK_OAUTH_CLIENT_SECRET","code","redirect_uri","SLACK_OAUTH_REDIRECT_URL","timeout","json","parseOAuthAccess","revokeToken","headers","authorization","token","callMethod","mapSlackWebApiError","method","slackMethodArguments","arguments","ok","slackOAuthErrorReason","error","is_enterprise_install","team","expires_in","undefined","refresh_token","access_token","accessToken","bot_user_id","botUserId","app_id","appId","scope","id","name","teamId","teamName","scopes","split","map","value","trim","filter","Boolean","operation","request","status","statusText","response","warn","retryAfterSeconds","errName","Error","key","Object","entries","serialized","String","JSON","stringify","set","path","URL","SLACK_API_BASE_URL","toString","retryAfter","get","parsed","Number","parseInt","isNaN"],"mappings":"AAAA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,OAAOC,MAAKC,SAAS,EAAEC,YAAY,QAAO,KAAK;AAC/C,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,sCAAsC,EACtCC,6BAA6B,EAC7BC,kCAAkC,QAC7B,kBAAkB;AAEzB,MAAMC,uBAAuB;AAwC7B,OAAO,SAASC;IACd,OAAO;QACL,MAAMC,2BAA0BC,KAAK;YACnC,MAAMC,OAAO,MAAMC,cAAc,+BAA+B,IAC9DZ,GACGa,IAAI,CAACC,YAAY,oBAAoB;oBACpCH,MAAM,IAAII,gBAAgB;wBACxBC,WAAWb,OAAOc,qBAAqB;wBACvCC,eAAef,OAAOgB,yBAAyB;wBAC/CC,MAAMV,MAAMU,IAAI;wBAChBC,cAAclB,OAAOmB,wBAAwB;oBAC/C;oBACAC,SAAShB;gBACX,GACCiB,IAAI;YAET,OAAOC,iBAAiBd;QAC1B;QAEA,MAAMe,aAAYhB,KAAK;YACrB,MAAME,cAAc,gBAAgB;gBAClC,MAAMZ,GAAGa,IAAI,CAACC,YAAY,gBAAgB;oBACxCa,SAAS;wBAACC,eAAe,CAAC,OAAO,EAAElB,MAAMmB,KAAK,EAAE;oBAAA;oBAChDN,SAAShB;gBACX;YACF;QACF;QAEA,MAAMuB,YAAWpB,KAAK;YACpB,OAAO,MAAMqB,oBAAoBrB,MAAMsB,MAAM,EAAE,IAC7ChC,GACGa,IAAI,CAACC,YAAYJ,MAAMsB,MAAM,GAAG;oBAC/BL,SAAS;wBAACC,eAAe,CAAC,OAAO,EAAElB,MAAMmB,KAAK,EAAE;oBAAA;oBAChDlB,MAAMsB,qBAAqBvB,MAAMwB,SAAS;oBAC1CX,SAAShB;gBACX,GACCiB,IAAI;QAEX;IACF;AACF;AAEA,SAASC,iBAAiBd,IAA8B;IACtD,IAAIA,KAAKwB,EAAE,KAAK,MAAM;QACpB,MAAM,IAAI9B,8BACR+B,sBAAsBzB,KAAK0B,KAAK,GAChC;IAEJ;IACA,IAAI1B,KAAK2B,qBAAqB,KAAK,QAAQ3B,KAAK4B,IAAI,IAAI,MAAM;QAC5D,MAAM,IAAInC;IACZ;IACA,mGAAmG;IACnG,wFAAwF;IACxF,gFAAgF;IAChF,IAAIO,KAAK6B,UAAU,KAAKC,aAAa9B,KAAK+B,aAAa,KAAKD,WAAW;QACrE,MAAM,IAAInC;IACZ;IACA,MAAM,EAACqC,cAAcC,WAAW,EAAEC,aAAaC,SAAS,EAAEC,QAAQC,KAAK,EAAET,IAAI,EAAEU,KAAK,EAAC,GAAGtC;IACxF,IACE,OAAOiC,gBAAgB,YACvB,OAAOE,cAAc,YACrB,OAAOE,UAAU,YACjB,OAAOT,KAAKW,EAAE,KAAK,YACnB,OAAOX,KAAKY,IAAI,KAAK,YACrB,OAAOF,UAAU,UACjB;QACA,MAAM,IAAI5C,8BACR,+BACA;IAEJ;IACA,OAAO;QACLuC;QACAE;QACAE;QACAI,QAAQb,KAAKW,EAAE;QACfG,UAAUd,KAAKY,IAAI;QACnBG,QAAQL,MACLM,KAAK,CAAC,KACNC,GAAG,CAAC,CAACC,QAAUA,MAAMC,IAAI,IACzBC,MAAM,CAACC;IACZ;AACF;AAEA,SAASxB,sBAAsBC,KAAc;IAC3C,IAAIA,UAAU,yBAAyBA,UAAU,kBAAkB,OAAO;IAC1E,IAAIA,UAAU,eAAe,OAAO;IACpC,OAAO;AACT;AAEA,eAAezB,cAAiBiD,SAAiB,EAAEC,OAAyB;IAC1E,IAAI;QACF,OAAO,MAAMA;IACf,EAAE,OAAOzB,OAAO;QACd,IAAIA,iBAAiBhC,+BAA+B,MAAMgC;QAC1D,IAAIA,iBAAiBpC,WAAW;YAC9B,MAAM,EAAC8D,MAAM,EAAEC,UAAU,EAAErC,OAAO,EAAC,GAAGU,MAAM4B,QAAQ;YACpDlE,SAASmE,IAAI,CAAC;gBAACL;gBAAWE;gBAAQC;YAAU,GAAG;YAC/C,IAAID,WAAW,KAAK;gBAClB,MAAM,IAAI1D,8BACR,gBACA,kCACA8D,kBAAkBxC;YAEtB;YACA,IAAIoC,UAAU,KAAK;gBACjB,MAAM,IAAI1D,8BAA8B,wBAAwB;YAClE;YACA,MAAM,IAAIA,8BAA8B,iBAAiB;QAC3D;QACA,IAAIgC,iBAAiBnC,cAAc;YACjCH,SAASmE,IAAI,CAAC;gBAACL;YAAS,GAAG;YAC3B,MAAM,IAAIxD,8BAA8B,WAAW;QACrD;QACAN,SAASmE,IAAI,CACX;YAACL;YAAWO,SAAS/B,iBAAiBgC,QAAQhC,MAAMc,IAAI,GAAG,OAAOd;QAAK,GACvE;QAEF,MAAM,IAAIhC,8BAA8B,wBAAwB;IAClE;AACF;AAEA,eAAe0B,oBAAuBC,MAAc,EAAE8B,OAAyB;IAC7E,IAAI;QACF,OAAO,MAAMA;IACf,EAAE,OAAOzB,OAAO;QACd,IAAIA,iBAAiBhC,+BAA+B,MAAMgC;QAC1D,IAAIA,iBAAiBpC,WAAW;YAC9B,MAAM,EAAC8D,MAAM,EAAEC,UAAU,EAAErC,OAAO,EAAC,GAAGU,MAAM4B,QAAQ;YACpDlE,SAASmE,IAAI,CACX;gBAACL,WAAW;gBAAe7B;gBAAQ+B;gBAAQC;YAAU,GACrD;YAEF,IAAID,WAAW,KAAK;gBAClB,MAAM,IAAI1D,8BACR,gBACA,kCACA8D,kBAAkBxC;YAEtB;YACA,IAAIoC,WAAW,KAAK;gBAClB,MAAM,IAAI1D,8BACR,qBACA;YAEJ;YACA,IAAI0D,UAAU,KAAK;gBACjB,MAAM,IAAI1D,8BAA8B,wBAAwB;YAClE;YACA,MAAM,IAAIA,8BACR,+BACA;QAEJ;QACA,IAAIgC,iBAAiBnC,cAAc;YACjCH,SAASmE,IAAI,CAAC;gBAACL,WAAW;gBAAe7B;YAAM,GAAG;YAClD,MAAM,IAAI3B,8BAA8B,WAAW;QACrD;QACAN,SAASmE,IAAI,CACX;YACEL,WAAW;YACX7B;YACAoC,SAAS/B,iBAAiBgC,QAAQhC,MAAMc,IAAI,GAAG,OAAOd;QACxD,GACA;QAEF,MAAM,IAAIhC,8BAA8B,wBAAwB;IAClE;AACF;AAEA,SAAS4B,qBAAqBvB,KAA8B;IAC1D,MAAMC,OAAO,IAAII;IACjB,KAAK,MAAM,CAACuD,KAAKb,MAAM,IAAIc,OAAOC,OAAO,CAAC9D,OAAQ;QAChD,IAAI+C,UAAU,QAAQA,UAAUhB,WAAW;QAC3C,MAAMgC,aACJ,OAAOhB,UAAU,YAAY,OAAOA,UAAU,YAAY,OAAOA,UAAU,YACvEiB,OAAOjB,SACPkB,KAAKC,SAAS,CAACnB;QACrB,IAAIgB,eAAehC,WAAW9B,KAAKkE,GAAG,CAACP,KAAKG;IAC9C;IACA,OAAO9D;AACT;AAEA,SAASG,YAAYgE,IAAY;IAC/B,OAAO,IAAIC,IAAID,MAAM,GAAG3E,OAAO6E,kBAAkB,CAAC,CAAC,CAAC,EAAEC,QAAQ;AAChE;AAEA,SAASd,kBAAkBxC,OAAgB;IACzC,MAAMuD,aAAavD,QAAQwD,GAAG,CAAC;IAC/B,IAAI,CAACD,YAAY,OAAOzC;IACxB,MAAM2C,SAASC,OAAOC,QAAQ,CAACJ,YAAY;IAC3C,OAAOG,OAAOE,KAAK,CAACH,UAAU3C,YAAY2C;AAC5C"}

package/dist/config.d.ts

@@ -0,0 +1,8 @@
+export declare const config: Readonly<{
+    SLACK_OAUTH_CLIENT_ID: string;
+    SLACK_OAUTH_CLIENT_SECRET: string;
+    SLACK_SIGNING_SECRET: string;
+    SLACK_OAUTH_REDIRECT_URL: string;
+    SLACK_API_BASE_URL: string;
+} & import("@shipfox/config").CleanedEnvAccessors>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,MAAM;;;;;;kDAiBjB,CAAC"}

package/dist/config.js

@@ -0,0 +1,21 @@
+import { createConfig, str, url } from '@shipfox/config';
+export const config = createConfig({
+    SLACK_OAUTH_CLIENT_ID: str({
+        desc: 'OAuth client ID of the Slack app, used to start and complete the Slack connect flow. Required.'
+    }),
+    SLACK_OAUTH_CLIENT_SECRET: str({
+        desc: 'OAuth client secret of the Slack app, used to exchange authorization codes for workspace bot tokens. Required.'
+    }),
+    SLACK_SIGNING_SECRET: str({
+        desc: 'Secret used to verify incoming Slack events and commands. It must match the signing secret configured on the Slack app. Required.'
+    }),
+    SLACK_OAUTH_REDIRECT_URL: url({
+        desc: 'Public client callback URL Slack redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/slack/callback. Required.'
+    }),
+    SLACK_API_BASE_URL: url({
+        desc: 'Slack Web API base URL. Override this only when routing Slack API requests through a proxy or test server.',
+        default: 'https://slack.com/api'
+    })
+});
+
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {createConfig, str, url} from '@shipfox/config';\n\nexport const config = createConfig({\n  SLACK_OAUTH_CLIENT_ID: str({\n    desc: 'OAuth client ID of the Slack app, used to start and complete the Slack connect flow. Required.',\n  }),\n  SLACK_OAUTH_CLIENT_SECRET: str({\n    desc: 'OAuth client secret of the Slack app, used to exchange authorization codes for workspace bot tokens. Required.',\n  }),\n  SLACK_SIGNING_SECRET: str({\n    desc: 'Secret used to verify incoming Slack events and commands. It must match the signing secret configured on the Slack app. Required.',\n  }),\n  SLACK_OAUTH_REDIRECT_URL: url({\n    desc: 'Public client callback URL Slack redirects to after OAuth authorization, such as https://shipfox.example.com/integrations/slack/callback. Required.',\n  }),\n  SLACK_API_BASE_URL: url({\n    desc: 'Slack Web API base URL. Override this only when routing Slack API requests through a proxy or test server.',\n    default: 'https://slack.com/api',\n  }),\n});\n"],"names":["createConfig","str","url","config","SLACK_OAUTH_CLIENT_ID","desc","SLACK_OAUTH_CLIENT_SECRET","SLACK_SIGNING_SECRET","SLACK_OAUTH_REDIRECT_URL","SLACK_API_BASE_URL","default"],"mappings":"AAAA,SAAQA,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAEvD,OAAO,MAAMC,SAASH,aAAa;IACjCI,uBAAuBH,IAAI;QACzBI,MAAM;IACR;IACAC,2BAA2BL,IAAI;QAC7BI,MAAM;IACR;IACAE,sBAAsBN,IAAI;QACxBI,MAAM;IACR;IACAG,0BAA0BN,IAAI;QAC5BG,MAAM;IACR;IACAI,oBAAoBP,IAAI;QACtBG,MAAM;QACNK,SAAS;IACX;AACF,GAAG"}

package/dist/core/agent-tools-provider.d.ts

@@ -0,0 +1,75 @@
+import type { AgentToolSession, AgentToolsProvider, IntegrationConnection, OpenAgentToolsSessionInput } from '@shipfox/api-integration-core-dto';
+import type { SlackApiClient } from '#api/client.js';
+import { type SlackAgentToolRequiredScope } from '#core/agent-tools.js';
+import type { SlackTokenStore } from '#core/tokens.js';
+type SlackIntegrationConnection = IntegrationConnection<'slack'>;
+export type SlackToolCallResult = {
+    isError?: boolean | undefined;
+    content: readonly {
+        type: 'text';
+        text: string;
+    }[];
+    structuredContent?: Record<string, unknown> | undefined;
+};
+export interface SlackAgentToolsProviderOptions {
+    slack: Pick<SlackApiClient, 'callMethod'>;
+    tokenStore: Pick<SlackTokenStore, 'getAccessToken'>;
+}
+export declare class SlackAgentToolsProvider implements AgentToolsProvider<SlackIntegrationConnection, SlackAgentToolRequiredScope, unknown, SlackToolCallResult> {
+    private readonly options;
+    constructor(options: SlackAgentToolsProviderOptions);
+    catalog(): readonly [{
+        readonly id: "conversations_history";
+        readonly description: "List messages in a Slack channel or direct message.";
+        readonly sensitivity: "read";
+        readonly sensitive: false;
+        readonly requiredScope: "read";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "conversations_replies";
+        readonly description: "List replies in a Slack message thread.";
+        readonly sensitivity: "read";
+        readonly sensitive: false;
+        readonly requiredScope: "read";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "conversations_list";
+        readonly description: "List Slack channels visible to the bot.";
+        readonly sensitivity: "read";
+        readonly sensitive: false;
+        readonly requiredScope: "read";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "users_info";
+        readonly description: "Look up a Slack user and profile by user ID.";
+        readonly sensitivity: "read";
+        readonly sensitive: false;
+        readonly requiredScope: "read";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "chat_postMessage";
+        readonly description: "Post a Slack message to a channel or thread. Provide text, blocks, or both.";
+        readonly sensitivity: "write";
+        readonly sensitive: false;
+        readonly requiredScope: "write";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "chat_update";
+        readonly description: "Update a Slack message with text, blocks, or both.";
+        readonly sensitivity: "write";
+        readonly sensitive: false;
+        readonly requiredScope: "write";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }, {
+        readonly id: "reactions_add";
+        readonly description: "Add an emoji reaction to a Slack message.";
+        readonly sensitivity: "write";
+        readonly sensitive: false;
+        readonly requiredScope: "write";
+        readonly inputSchema: import("@shipfox/api-integration-core-dto").AgentToolJsonSchema;
+    }];
+    selectionCatalog(): import("@shipfox/api-integration-core-dto").AgentToolSelectionCatalog;
+    openSession(input: OpenAgentToolsSessionInput<SlackIntegrationConnection, SlackAgentToolRequiredScope, unknown>): Promise<AgentToolSession<SlackToolCallResult>>;
+}
+export {};
+//# sourceMappingURL=agent-tools-provider.d.ts.map

package/dist/core/agent-tools-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools-provider.d.ts","sourceRoot":"","sources":["../../src/core/agent-tools-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAC,cAAc,EAAsB,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAIL,KAAK,2BAA2B,EAGjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAErD,KAAK,0BAA0B,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAEjE,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,SAAS;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAC,EAAE,CAAC;IACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC1C,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;CACrD;AAED,qBAAa,uBACX,YACE,kBAAkB,CAChB,0BAA0B,EAC1B,2BAA2B,EAC3B,OAAO,EACP,mBAAmB,CACpB;IAES,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,8BAA8B;IAEpE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIP,gBAAgB;IAIV,WAAW,CACf,KAAK,EAAE,0BAA0B,CAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,OAAO,CACR,GACA,OAAO,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;CAgDlD"}

package/dist/core/agent-tools-provider.js

@@ -0,0 +1,111 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import { SLACK_TOOL_METHODS, slackAgentToolCatalog, slackAgentToolSelectionCatalog } from '#core/agent-tools.js';
+import { SlackIntegrationProviderError } from '#core/errors.js';
+export class SlackAgentToolsProvider {
+    constructor(options){
+        this.options = options;
+    }
+    catalog() {
+        return slackAgentToolCatalog;
+    }
+    selectionCatalog() {
+        return slackAgentToolSelectionCatalog;
+    }
+    async openSession(input) {
+        const token = await this.options.tokenStore.getAccessToken({
+            connectionId: input.connection.id
+        });
+        return {
+            call: async (call)=>{
+                const tool = input.tools.find((candidate)=>candidate.id === call.toolId);
+                if (!tool) return slackToolError(`Unknown Slack tool: ${call.toolId}`);
+                const method = slackToolMethod(tool.id);
+                if (!method) return slackToolError(`Unknown Slack tool method: ${tool.id}`);
+                const missingParameter = missingRequiredParameter(tool, call.arguments);
+                if (missingParameter) {
+                    return slackToolError(`Missing required parameter: ${missingParameter}`);
+                }
+                let body;
+                try {
+                    body = await this.options.slack.callMethod({
+                        method,
+                        token,
+                        arguments: call.arguments
+                    });
+                } catch (error) {
+                    if (error instanceof SlackIntegrationProviderError) {
+                        return slackToolError(error.message, {
+                            code: error.reason,
+                            retryAfterSeconds: error.retryAfterSeconds
+                        });
+                    }
+                    throw error;
+                }
+                if (body.ok) return slackToolResult(body);
+                const slackError = typeof body.error === 'string' ? body.error : 'Slack request failed';
+                if (isSlackAccessError(slackError)) {
+                    logger().warn({
+                        connectionId: input.connection.id,
+                        slackError
+                    }, 'Slack API rejected integration credentials');
+                    return slackToolError(slackError, {
+                        code: 'access-denied'
+                    });
+                }
+                if (slackError === 'ratelimited') {
+                    return slackToolError(slackError, {
+                        code: 'rate-limited'
+                    });
+                }
+                return slackToolError(slackError);
+            },
+            close: ()=>Promise.resolve()
+        };
+    }
+}
+function slackToolMethod(toolId) {
+    return SLACK_TOOL_METHODS[toolId];
+}
+function missingRequiredParameter(tool, args) {
+    const required = tool.inputSchema.required;
+    if (!Array.isArray(required)) return undefined;
+    return required.find((parameter)=>typeof parameter === 'string' && !(parameter in args));
+}
+function isSlackAccessError(error) {
+    return error === 'invalid_auth' || error === 'token_revoked' || error === 'account_inactive';
+}
+function slackToolResult(body) {
+    return {
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify(body)
+            }
+        ],
+        structuredContent: body
+    };
+}
+function slackToolError(message, options = {}) {
+    const structuredContent = {
+        ...options.code === undefined ? {} : {
+            code: options.code
+        },
+        ...options.retryAfterSeconds === undefined ? {} : {
+            retryAfterSeconds: options.retryAfterSeconds
+        }
+    };
+    return {
+        isError: true,
+        content: [
+            {
+                type: 'text',
+                text: message
+            }
+        ],
+        ...Object.keys(structuredContent).length === 0 ? {} : {
+            structuredContent
+        }
+    };
+}
+
+//# sourceMappingURL=agent-tools-provider.js.map

package/dist/core/agent-tools-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/agent-tools-provider.ts"],"sourcesContent":["import type {\n  AgentToolSession,\n  AgentToolsProvider,\n  IntegrationConnection,\n  OpenAgentToolsSessionInput,\n} from '@shipfox/api-integration-core-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {SlackApiClient, SlackWebApiResponse} from '#api/client.js';\nimport {\n  SLACK_TOOL_METHODS,\n  type SlackAgentToolCatalogEntry,\n  type SlackAgentToolId,\n  type SlackAgentToolRequiredScope,\n  slackAgentToolCatalog,\n  slackAgentToolSelectionCatalog,\n} from '#core/agent-tools.js';\nimport {SlackIntegrationProviderError} from '#core/errors.js';\nimport type {SlackTokenStore} from '#core/tokens.js';\n\ntype SlackIntegrationConnection = IntegrationConnection<'slack'>;\n\nexport type SlackToolCallResult = {\n  isError?: boolean | undefined;\n  content: readonly {type: 'text'; text: string}[];\n  structuredContent?: Record<string, unknown> | undefined;\n};\n\nexport interface SlackAgentToolsProviderOptions {\n  slack: Pick<SlackApiClient, 'callMethod'>;\n  tokenStore: Pick<SlackTokenStore, 'getAccessToken'>;\n}\n\nexport class SlackAgentToolsProvider\n  implements\n    AgentToolsProvider<\n      SlackIntegrationConnection,\n      SlackAgentToolRequiredScope,\n      unknown,\n      SlackToolCallResult\n    >\n{\n  constructor(private readonly options: SlackAgentToolsProviderOptions) {}\n\n  catalog() {\n    return slackAgentToolCatalog;\n  }\n\n  selectionCatalog() {\n    return slackAgentToolSelectionCatalog;\n  }\n\n  async openSession(\n    input: OpenAgentToolsSessionInput<\n      SlackIntegrationConnection,\n      SlackAgentToolRequiredScope,\n      unknown\n    >,\n  ): Promise<AgentToolSession<SlackToolCallResult>> {\n    const token = await this.options.tokenStore.getAccessToken({connectionId: input.connection.id});\n\n    return {\n      call: async (call) => {\n        const tool = input.tools.find((candidate) => candidate.id === call.toolId);\n        if (!tool) return slackToolError(`Unknown Slack tool: ${call.toolId}`);\n        const method = slackToolMethod(tool.id);\n        if (!method) return slackToolError(`Unknown Slack tool method: ${tool.id}`);\n        const missingParameter = missingRequiredParameter(tool, call.arguments);\n        if (missingParameter) {\n          return slackToolError(`Missing required parameter: ${missingParameter}`);\n        }\n\n        let body: SlackWebApiResponse;\n        try {\n          body = await this.options.slack.callMethod({\n            method,\n            token,\n            arguments: call.arguments,\n          });\n        } catch (error) {\n          if (error instanceof SlackIntegrationProviderError) {\n            return slackToolError(error.message, {\n              code: error.reason,\n              retryAfterSeconds: error.retryAfterSeconds,\n            });\n          }\n          throw error;\n        }\n\n        if (body.ok) return slackToolResult(body);\n        const slackError = typeof body.error === 'string' ? body.error : 'Slack request failed';\n        if (isSlackAccessError(slackError)) {\n          logger().warn(\n            {connectionId: input.connection.id, slackError},\n            'Slack API rejected integration credentials',\n          );\n          return slackToolError(slackError, {code: 'access-denied'});\n        }\n        if (slackError === 'ratelimited') {\n          return slackToolError(slackError, {code: 'rate-limited'});\n        }\n        return slackToolError(slackError);\n      },\n      close: () => Promise.resolve(),\n    };\n  }\n}\n\nfunction slackToolMethod(toolId: string): string | undefined {\n  return SLACK_TOOL_METHODS[toolId as SlackAgentToolId];\n}\n\nfunction missingRequiredParameter(\n  tool: SlackAgentToolCatalogEntry,\n  args: Record<string, unknown>,\n): string | undefined {\n  const required = tool.inputSchema.required;\n  if (!Array.isArray(required)) return undefined;\n  return required.find((parameter) => typeof parameter === 'string' && !(parameter in args));\n}\n\nfunction isSlackAccessError(error: string): boolean {\n  return error === 'invalid_auth' || error === 'token_revoked' || error === 'account_inactive';\n}\n\nfunction slackToolResult(body: SlackWebApiResponse): SlackToolCallResult {\n  return {\n    content: [{type: 'text', text: JSON.stringify(body)}],\n    structuredContent: body,\n  };\n}\n\nfunction slackToolError(\n  message: string,\n  options: {code?: string | undefined; retryAfterSeconds?: number | undefined} = {},\n): SlackToolCallResult {\n  const structuredContent = {\n    ...(options.code === undefined ? {} : {code: options.code}),\n    ...(options.retryAfterSeconds === undefined\n      ? {}\n      : {retryAfterSeconds: options.retryAfterSeconds}),\n  };\n  return {\n    isError: true,\n    content: [{type: 'text', text: message}],\n    ...(Object.keys(structuredContent).length === 0 ? {} : {structuredContent}),\n  };\n}\n"],"names":["logger","SLACK_TOOL_METHODS","slackAgentToolCatalog","slackAgentToolSelectionCatalog","SlackIntegrationProviderError","SlackAgentToolsProvider","options","catalog","selectionCatalog","openSession","input","token","tokenStore","getAccessToken","connectionId","connection","id","call","tool","tools","find","candidate","toolId","slackToolError","method","slackToolMethod","missingParameter","missingRequiredParameter","arguments","body","slack","callMethod","error","message","code","reason","retryAfterSeconds","ok","slackToolResult","slackError","isSlackAccessError","warn","close","Promise","resolve","args","required","inputSchema","Array","isArray","undefined","parameter","content","type","text","JSON","stringify","structuredContent","isError","Object","keys","length"],"mappings":"AAMA,SAAQA,MAAM,QAAO,8BAA8B;AAEnD,SACEC,kBAAkB,EAIlBC,qBAAqB,EACrBC,8BAA8B,QACzB,uBAAuB;AAC9B,SAAQC,6BAA6B,QAAO,kBAAkB;AAgB9D,OAAO,MAAMC;IASX,YAAY,AAAiBC,OAAuC,CAAE;aAAzCA,UAAAA;IAA0C;IAEvEC,UAAU;QACR,OAAOL;IACT;IAEAM,mBAAmB;QACjB,OAAOL;IACT;IAEA,MAAMM,YACJC,KAIC,EAC+C;QAChD,MAAMC,QAAQ,MAAM,IAAI,CAACL,OAAO,CAACM,UAAU,CAACC,cAAc,CAAC;YAACC,cAAcJ,MAAMK,UAAU,CAACC,EAAE;QAAA;QAE7F,OAAO;YACLC,MAAM,OAAOA;gBACX,MAAMC,OAAOR,MAAMS,KAAK,CAACC,IAAI,CAAC,CAACC,YAAcA,UAAUL,EAAE,KAAKC,KAAKK,MAAM;gBACzE,IAAI,CAACJ,MAAM,OAAOK,eAAe,CAAC,oBAAoB,EAAEN,KAAKK,MAAM,EAAE;gBACrE,MAAME,SAASC,gBAAgBP,KAAKF,EAAE;gBACtC,IAAI,CAACQ,QAAQ,OAAOD,eAAe,CAAC,2BAA2B,EAAEL,KAAKF,EAAE,EAAE;gBAC1E,MAAMU,mBAAmBC,yBAAyBT,MAAMD,KAAKW,SAAS;gBACtE,IAAIF,kBAAkB;oBACpB,OAAOH,eAAe,CAAC,4BAA4B,EAAEG,kBAAkB;gBACzE;gBAEA,IAAIG;gBACJ,IAAI;oBACFA,OAAO,MAAM,IAAI,CAACvB,OAAO,CAACwB,KAAK,CAACC,UAAU,CAAC;wBACzCP;wBACAb;wBACAiB,WAAWX,KAAKW,SAAS;oBAC3B;gBACF,EAAE,OAAOI,OAAO;oBACd,IAAIA,iBAAiB5B,+BAA+B;wBAClD,OAAOmB,eAAeS,MAAMC,OAAO,EAAE;4BACnCC,MAAMF,MAAMG,MAAM;4BAClBC,mBAAmBJ,MAAMI,iBAAiB;wBAC5C;oBACF;oBACA,MAAMJ;gBACR;gBAEA,IAAIH,KAAKQ,EAAE,EAAE,OAAOC,gBAAgBT;gBACpC,MAAMU,aAAa,OAAOV,KAAKG,KAAK,KAAK,WAAWH,KAAKG,KAAK,GAAG;gBACjE,IAAIQ,mBAAmBD,aAAa;oBAClCvC,SAASyC,IAAI,CACX;wBAAC3B,cAAcJ,MAAMK,UAAU,CAACC,EAAE;wBAAEuB;oBAAU,GAC9C;oBAEF,OAAOhB,eAAegB,YAAY;wBAACL,MAAM;oBAAe;gBAC1D;gBACA,IAAIK,eAAe,eAAe;oBAChC,OAAOhB,eAAegB,YAAY;wBAACL,MAAM;oBAAc;gBACzD;gBACA,OAAOX,eAAegB;YACxB;YACAG,OAAO,IAAMC,QAAQC,OAAO;QAC9B;IACF;AACF;AAEA,SAASnB,gBAAgBH,MAAc;IACrC,OAAOrB,kBAAkB,CAACqB,OAA2B;AACvD;AAEA,SAASK,yBACPT,IAAgC,EAChC2B,IAA6B;IAE7B,MAAMC,WAAW5B,KAAK6B,WAAW,CAACD,QAAQ;IAC1C,IAAI,CAACE,MAAMC,OAAO,CAACH,WAAW,OAAOI;IACrC,OAAOJ,SAAS1B,IAAI,CAAC,CAAC+B,YAAc,OAAOA,cAAc,YAAY,CAAEA,CAAAA,aAAaN,IAAG;AACzF;AAEA,SAASL,mBAAmBR,KAAa;IACvC,OAAOA,UAAU,kBAAkBA,UAAU,mBAAmBA,UAAU;AAC5E;AAEA,SAASM,gBAAgBT,IAAyB;IAChD,OAAO;QACLuB,SAAS;YAAC;gBAACC,MAAM;gBAAQC,MAAMC,KAAKC,SAAS,CAAC3B;YAAK;SAAE;QACrD4B,mBAAmB5B;IACrB;AACF;AAEA,SAASN,eACPU,OAAe,EACf3B,UAA+E,CAAC,CAAC;IAEjF,MAAMmD,oBAAoB;QACxB,GAAInD,QAAQ4B,IAAI,KAAKgB,YAAY,CAAC,IAAI;YAAChB,MAAM5B,QAAQ4B,IAAI;QAAA,CAAC;QAC1D,GAAI5B,QAAQ8B,iBAAiB,KAAKc,YAC9B,CAAC,IACD;YAACd,mBAAmB9B,QAAQ8B,iBAAiB;QAAA,CAAC;IACpD;IACA,OAAO;QACLsB,SAAS;QACTN,SAAS;YAAC;gBAACC,MAAM;gBAAQC,MAAMrB;YAAO;SAAE;QACxC,GAAI0B,OAAOC,IAAI,CAACH,mBAAmBI,MAAM,KAAK,IAAI,CAAC,IAAI;YAACJ;QAAiB,CAAC;IAC5E;AACF"}

package/dist/core/agent-tools.d.ts

@@ -0,0 +1,65 @@
+import type { AgentToolCatalogEntry, AgentToolJsonSchema, AgentToolSelectionCatalog } from '@shipfox/api-integration-core-dto';
+export type SlackAgentToolRequiredScope = 'read' | 'write';
+export type SlackAgentToolCatalogEntry = AgentToolCatalogEntry<SlackAgentToolRequiredScope>;
+export declare const slackAgentToolCatalog: readonly [{
+    readonly id: "conversations_history";
+    readonly description: "List messages in a Slack channel or direct message.";
+    readonly sensitivity: "read";
+    readonly sensitive: false;
+    readonly requiredScope: "read";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "conversations_replies";
+    readonly description: "List replies in a Slack message thread.";
+    readonly sensitivity: "read";
+    readonly sensitive: false;
+    readonly requiredScope: "read";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "conversations_list";
+    readonly description: "List Slack channels visible to the bot.";
+    readonly sensitivity: "read";
+    readonly sensitive: false;
+    readonly requiredScope: "read";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "users_info";
+    readonly description: "Look up a Slack user and profile by user ID.";
+    readonly sensitivity: "read";
+    readonly sensitive: false;
+    readonly requiredScope: "read";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "chat_postMessage";
+    readonly description: "Post a Slack message to a channel or thread. Provide text, blocks, or both.";
+    readonly sensitivity: "write";
+    readonly sensitive: false;
+    readonly requiredScope: "write";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "chat_update";
+    readonly description: "Update a Slack message with text, blocks, or both.";
+    readonly sensitivity: "write";
+    readonly sensitive: false;
+    readonly requiredScope: "write";
+    readonly inputSchema: AgentToolJsonSchema;
+}, {
+    readonly id: "reactions_add";
+    readonly description: "Add an emoji reaction to a Slack message.";
+    readonly sensitivity: "write";
+    readonly sensitive: false;
+    readonly requiredScope: "write";
+    readonly inputSchema: AgentToolJsonSchema;
+}];
+export type SlackAgentToolId = (typeof slackAgentToolCatalog)[number]['id'];
+export declare const SLACK_TOOL_METHODS: {
+    readonly conversations_history: "conversations.history";
+    readonly conversations_replies: "conversations.replies";
+    readonly conversations_list: "conversations.list";
+    readonly users_info: "users.info";
+    readonly chat_postMessage: "chat.postMessage";
+    readonly chat_update: "chat.update";
+    readonly reactions_add: "reactions.add";
+};
+export declare const slackAgentToolSelectionCatalog: AgentToolSelectionCatalog;
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/core/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../src/core/agent-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EAE1B,MAAM,mCAAmC,CAAC;AAE3C,MAAM,MAAM,2BAA2B,GAAG,MAAM,GAAG,OAAO,CAAC;AAC3D,MAAM,MAAM,0BAA0B,GAAG,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;AAe5F,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuGwB,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAE5E,eAAO,MAAM,kBAAkB;;;;;;;;CAQsB,CAAC;AAEtD,eAAO,MAAM,8BAA8B,2BACiB,CAAC"}