@shipfox/api-integration-slack 4.0.0 → 6.0.0

package/dist/presentation/routes/install.d.ts

@@ -14,6 +14,11 @@ export interface CreateSlackIntegrationRoutesOptions {
         connectionId: string;
     }) => Promise<void>;
     connectionCapabilities: IntegrationCapability[];
+    requireActiveWorkspaceMembership?: (input: {
+        workspaceId: string;
+        userId: string;
+        memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;
+    }) => Promise<unknown>;
 }
-export declare function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities, }: CreateSlackIntegrationRoutesOptions): RouteGroup;
+export declare function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities, requireActiveWorkspaceMembership, }: CreateSlackIntegrationRoutesOptions): RouteGroup;
 //# sourceMappingURL=install.d.ts.map

package/dist/presentation/routes/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/install.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,mCAAmC,CAAC;AASpG,OAAO,EAAc,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAIrD,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IACjD,0BAA0B,EAAE,CAAC,KAAK,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1D,wBAAwB,EAAE,CACxB,KAAK,EAAE,6BAA6B,KACjC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,2BAA2B,EAAE,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;CACjD;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,GACvB,EAAE,mCAAmC,GAAG,UAAU,CAgElD"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/install.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,mCAAmC,CAAC;AAQpG,OAAO,EAAc,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAIrD,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IACjD,0BAA0B,EAAE,CAAC,KAAK,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1D,wBAAwB,EAAE,CACxB,KAAK,EAAE,6BAA6B,KACjC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,2BAA2B,EAAE,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;IAChD,gCAAgC,CAAC,EAAE,CAAC,KAAK,EAAE;QACzC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,aAAa,CAAC,OAAO,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;KACvF,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,gCAAgC,GACjC,EAAE,mCAAmC,GAAG,UAAU,CAkElD"}

package/dist/presentation/routes/install.js

@@ -1,6 +1,5 @@
 import { AUTH_USER, requireUserContext, requireWorkspaceAccess } from '@shipfox/api-auth-context';
 import { createSlackInstallBodySchema, createSlackInstallResponseSchema, slackCallbackQuerySchema, slackCallbackResponseSchema } from '@shipfox/api-integration-slack-dto';
-import { requireWorkspaceMembership } from '@shipfox/api-workspaces';
 import { defineRoute } from '@shipfox/node-fastify';
 import { config } from '#config.js';
 import { handleSlackCallback, handleSlackOAuthCallbackError } from '#core/install.js';
@@ -8,7 +7,7 @@ import { formatSlackBotScopes } from '#core/scopes.js';
 import { signSlackInstallState } from '#core/state.js';
 import { toIntegrationConnectionDto } from '#presentation/dto/integrations.js';
 import { slackRouteErrorHandler } from './errors.js';
-export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities }) {
+export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities, requireActiveWorkspaceMembership }) {
     const installRoute = defineRoute({
         method: 'POST',
         path: '/install',
@@ -63,7 +62,7 @@ export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSla
                     errorDescription: query.error_description,
                     sessionUserId: actor.userId,
                     sessionMemberships: actor.memberships,
-                    requireWorkspaceMembership
+                    requireWorkspaceMembership: requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck
                 });
             }
             const connection = await handleSlackCallback({
@@ -73,7 +72,7 @@ export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSla
                 state: query.state,
                 sessionUserId: actor.userId,
                 sessionMemberships: actor.memberships,
-                requireWorkspaceMembership,
+                requireWorkspaceMembership: requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck,
                 getExistingSlackConnection,
                 connectSlackInstallation,
                 disconnectSlackInstallation
@@ -91,6 +90,9 @@ export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSla
         ]
     };
 }
+function unavailableWorkspaceMembershipCheck(_input) {
+    return Promise.reject(new Error('Workspaces inter-module client is not configured'));
+}
 function isSlackOAuthErrorCallback(query) {
     return 'error' in query && typeof query.error === 'string';
 }

package/dist/presentation/routes/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/install.ts"],"sourcesContent":["import {AUTH_USER, requireUserContext, requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport type {IntegrationCapability, IntegrationConnection} from '@shipfox/api-integration-core-dto';\nimport {\n  createSlackInstallBodySchema,\n  createSlackInstallResponseSchema,\n  type SlackCallbackQueryDto,\n  slackCallbackQuerySchema,\n  slackCallbackResponseSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {requireWorkspaceMembership} from '@shipfox/api-workspaces';\nimport {defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport type {SlackApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {\n  type ConnectSlackInstallationInput,\n  handleSlackCallback,\n  handleSlackOAuthCallbackError,\n} from '#core/install.js';\nimport {formatSlackBotScopes} from '#core/scopes.js';\nimport {signSlackInstallState} from '#core/state.js';\nimport type {SlackTokenStore} from '#core/tokens.js';\nimport {toIntegrationConnectionDto} from '#presentation/dto/integrations.js';\nimport {slackRouteErrorHandler} from './errors.js';\n\nexport interface CreateSlackIntegrationRoutesOptions {\n  slack: SlackApiClient;\n  tokenStore: Pick<SlackTokenStore, 'storeTokens'>;\n  getExistingSlackConnection: (input: {\n    teamId: string;\n  }) => Promise<IntegrationConnection<'slack'> | undefined>;\n  connectSlackInstallation: (\n    input: ConnectSlackInstallationInput,\n  ) => Promise<IntegrationConnection<'slack'>>;\n  disconnectSlackInstallation: (input: {connectionId: string}) => Promise<void>;\n  connectionCapabilities: IntegrationCapability[];\n}\n\nexport function createSlackIntegrationRoutes({\n  slack,\n  tokenStore,\n  getExistingSlackConnection,\n  connectSlackInstallation,\n  disconnectSlackInstallation,\n  connectionCapabilities,\n}: CreateSlackIntegrationRoutesOptions): RouteGroup {\n  const installRoute = defineRoute({\n    method: 'POST',\n    path: '/install',\n    auth: AUTH_USER,\n    description: 'Create a Slack OAuth authorization URL for a workspace.',\n    schema: {\n      body: createSlackInstallBodySchema,\n      response: {200: createSlackInstallResponseSchema},\n    },\n    handler: (request) => {\n      const {workspace_id: workspaceId} = request.body;\n      const actor = requireUserContext(request);\n      requireWorkspaceAccess({request, workspaceId});\n      const state = signSlackInstallState({workspaceId, userId: actor.userId});\n      const installUrl = new URL('https://slack.com/oauth/v2/authorize');\n      installUrl.searchParams.set('client_id', config.SLACK_OAUTH_CLIENT_ID);\n      installUrl.searchParams.set('scope', formatSlackBotScopes());\n      installUrl.searchParams.set('redirect_uri', config.SLACK_OAUTH_REDIRECT_URL);\n      installUrl.searchParams.set('state', state);\n      return {install_url: installUrl.toString()};\n    },\n  });\n\n  const callbackApiRoute = defineRoute({\n    method: 'GET',\n    path: '/callback/api',\n    auth: AUTH_USER,\n    description: 'Handle the Slack OAuth callback.',\n    schema: {\n      querystring: slackCallbackQuerySchema,\n      response: {200: slackCallbackResponseSchema},\n    },\n    errorHandler: slackRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const query = request.query;\n      if (isSlackOAuthErrorCallback(query)) {\n        return await handleSlackOAuthCallbackError({\n          state: query.state,\n          error: query.error,\n          errorDescription: query.error_description,\n          sessionUserId: actor.userId,\n          sessionMemberships: actor.memberships,\n          requireWorkspaceMembership,\n        });\n      }\n      const connection = await handleSlackCallback({\n        slack,\n        tokenStore,\n        code: query.code,\n        state: query.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership,\n        getExistingSlackConnection,\n        connectSlackInstallation,\n        disconnectSlackInstallation,\n      });\n      return toIntegrationConnectionDto(connection, {capabilities: connectionCapabilities});\n    },\n  });\n\n  return {prefix: '/integrations/slack', routes: [installRoute, callbackApiRoute]};\n}\n\nfunction isSlackOAuthErrorCallback(query: SlackCallbackQueryDto): query is SlackCallbackQueryDto & {\n  error: string;\n  error_description?: string | undefined;\n  state: string;\n} {\n  return 'error' in query && typeof query.error === 'string';\n}\n"],"names":["AUTH_USER","requireUserContext","requireWorkspaceAccess","createSlackInstallBodySchema","createSlackInstallResponseSchema","slackCallbackQuerySchema","slackCallbackResponseSchema","requireWorkspaceMembership","defineRoute","config","handleSlackCallback","handleSlackOAuthCallbackError","formatSlackBotScopes","signSlackInstallState","toIntegrationConnectionDto","slackRouteErrorHandler","createSlackIntegrationRoutes","slack","tokenStore","getExistingSlackConnection","connectSlackInstallation","disconnectSlackInstallation","connectionCapabilities","installRoute","method","path","auth","description","schema","body","response","handler","request","workspace_id","workspaceId","actor","state","userId","installUrl","URL","searchParams","set","SLACK_OAUTH_CLIENT_ID","SLACK_OAUTH_REDIRECT_URL","install_url","toString","callbackApiRoute","querystring","errorHandler","query","isSlackOAuthErrorCallback","error","errorDescription","error_description","sessionUserId","sessionMemberships","memberships","connection","code","capabilities","prefix","routes"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,kBAAkB,EAAEC,sBAAsB,QAAO,4BAA4B;AAEhG,SACEC,4BAA4B,EAC5BC,gCAAgC,EAEhCC,wBAAwB,EACxBC,2BAA2B,QACtB,qCAAqC;AAC5C,SAAQC,0BAA0B,QAAO,0BAA0B;AACnE,SAAQC,WAAW,QAAwB,wBAAwB;AAEnE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,mBAAmB,EACnBC,6BAA6B,QACxB,mBAAmB;AAC1B,SAAQC,oBAAoB,QAAO,kBAAkB;AACrD,SAAQC,qBAAqB,QAAO,iBAAiB;AAErD,SAAQC,0BAA0B,QAAO,oCAAoC;AAC7E,SAAQC,sBAAsB,QAAO,cAAc;AAenD,OAAO,SAASC,6BAA6B,EAC3CC,KAAK,EACLC,UAAU,EACVC,0BAA0B,EAC1BC,wBAAwB,EACxBC,2BAA2B,EAC3BC,sBAAsB,EACc;IACpC,MAAMC,eAAef,YAAY;QAC/BgB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNC,MAAM1B;YACN2B,UAAU;gBAAC,KAAK1B;YAAgC;QAClD;QACA2B,SAAS,CAACC;YACR,MAAM,EAACC,cAAcC,WAAW,EAAC,GAAGF,QAAQH,IAAI;YAChD,MAAMM,QAAQlC,mBAAmB+B;YACjC9B,uBAAuB;gBAAC8B;gBAASE;YAAW;YAC5C,MAAME,QAAQvB,sBAAsB;gBAACqB;gBAAaG,QAAQF,MAAME,MAAM;YAAA;YACtE,MAAMC,aAAa,IAAIC,IAAI;YAC3BD,WAAWE,YAAY,CAACC,GAAG,CAAC,aAAahC,OAAOiC,qBAAqB;YACrEJ,WAAWE,YAAY,CAACC,GAAG,CAAC,SAAS7B;YACrC0B,WAAWE,YAAY,CAACC,GAAG,CAAC,gBAAgBhC,OAAOkC,wBAAwB;YAC3EL,WAAWE,YAAY,CAACC,GAAG,CAAC,SAASL;YACrC,OAAO;gBAACQ,aAAaN,WAAWO,QAAQ;YAAE;QAC5C;IACF;IAEA,MAAMC,mBAAmBtC,YAAY;QACnCgB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNmB,aAAa1C;YACbyB,UAAU;gBAAC,KAAKxB;YAA2B;QAC7C;QACA0C,cAAcjC;QACdgB,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMiB,QAAQjB,QAAQiB,KAAK;YAC3B,IAAIC,0BAA0BD,QAAQ;gBACpC,OAAO,MAAMtC,8BAA8B;oBACzCyB,OAAOa,MAAMb,KAAK;oBAClBe,OAAOF,MAAME,KAAK;oBAClBC,kBAAkBH,MAAMI,iBAAiB;oBACzCC,eAAenB,MAAME,MAAM;oBAC3BkB,oBAAoBpB,MAAMqB,WAAW;oBACrCjD;gBACF;YACF;YACA,MAAMkD,aAAa,MAAM/C,oBAAoB;gBAC3CO;gBACAC;gBACAwC,MAAMT,MAAMS,IAAI;gBAChBtB,OAAOa,MAAMb,KAAK;gBAClBkB,eAAenB,MAAME,MAAM;gBAC3BkB,oBAAoBpB,MAAMqB,WAAW;gBACrCjD;gBACAY;gBACAC;gBACAC;YACF;YACA,OAAOP,2BAA2B2C,YAAY;gBAACE,cAAcrC;YAAsB;QACrF;IACF;IAEA,OAAO;QAACsC,QAAQ;QAAuBC,QAAQ;YAACtC;YAAcuB;SAAiB;IAAA;AACjF;AAEA,SAASI,0BAA0BD,KAA4B;IAK7D,OAAO,WAAWA,SAAS,OAAOA,MAAME,KAAK,KAAK;AACpD"}
+{"version":3,"sources":["../../../src/presentation/routes/install.ts"],"sourcesContent":["import {AUTH_USER, requireUserContext, requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport type {IntegrationCapability, IntegrationConnection} from '@shipfox/api-integration-core-dto';\nimport {\n  createSlackInstallBodySchema,\n  createSlackInstallResponseSchema,\n  type SlackCallbackQueryDto,\n  slackCallbackQuerySchema,\n  slackCallbackResponseSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport type {SlackApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {\n  type ConnectSlackInstallationInput,\n  handleSlackCallback,\n  handleSlackOAuthCallbackError,\n} from '#core/install.js';\nimport {formatSlackBotScopes} from '#core/scopes.js';\nimport {signSlackInstallState} from '#core/state.js';\nimport type {SlackTokenStore} from '#core/tokens.js';\nimport {toIntegrationConnectionDto} from '#presentation/dto/integrations.js';\nimport {slackRouteErrorHandler} from './errors.js';\n\nexport interface CreateSlackIntegrationRoutesOptions {\n  slack: SlackApiClient;\n  tokenStore: Pick<SlackTokenStore, 'storeTokens'>;\n  getExistingSlackConnection: (input: {\n    teamId: string;\n  }) => Promise<IntegrationConnection<'slack'> | undefined>;\n  connectSlackInstallation: (\n    input: ConnectSlackInstallationInput,\n  ) => Promise<IntegrationConnection<'slack'>>;\n  disconnectSlackInstallation: (input: {connectionId: string}) => Promise<void>;\n  connectionCapabilities: IntegrationCapability[];\n  requireActiveWorkspaceMembership?: (input: {\n    workspaceId: string;\n    userId: string;\n    memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n  }) => Promise<unknown>;\n}\n\nexport function createSlackIntegrationRoutes({\n  slack,\n  tokenStore,\n  getExistingSlackConnection,\n  connectSlackInstallation,\n  disconnectSlackInstallation,\n  connectionCapabilities,\n  requireActiveWorkspaceMembership,\n}: CreateSlackIntegrationRoutesOptions): RouteGroup {\n  const installRoute = defineRoute({\n    method: 'POST',\n    path: '/install',\n    auth: AUTH_USER,\n    description: 'Create a Slack OAuth authorization URL for a workspace.',\n    schema: {\n      body: createSlackInstallBodySchema,\n      response: {200: createSlackInstallResponseSchema},\n    },\n    handler: (request) => {\n      const {workspace_id: workspaceId} = request.body;\n      const actor = requireUserContext(request);\n      requireWorkspaceAccess({request, workspaceId});\n      const state = signSlackInstallState({workspaceId, userId: actor.userId});\n      const installUrl = new URL('https://slack.com/oauth/v2/authorize');\n      installUrl.searchParams.set('client_id', config.SLACK_OAUTH_CLIENT_ID);\n      installUrl.searchParams.set('scope', formatSlackBotScopes());\n      installUrl.searchParams.set('redirect_uri', config.SLACK_OAUTH_REDIRECT_URL);\n      installUrl.searchParams.set('state', state);\n      return {install_url: installUrl.toString()};\n    },\n  });\n\n  const callbackApiRoute = defineRoute({\n    method: 'GET',\n    path: '/callback/api',\n    auth: AUTH_USER,\n    description: 'Handle the Slack OAuth callback.',\n    schema: {\n      querystring: slackCallbackQuerySchema,\n      response: {200: slackCallbackResponseSchema},\n    },\n    errorHandler: slackRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const query = request.query;\n      if (isSlackOAuthErrorCallback(query)) {\n        return await handleSlackOAuthCallbackError({\n          state: query.state,\n          error: query.error,\n          errorDescription: query.error_description,\n          sessionUserId: actor.userId,\n          sessionMemberships: actor.memberships,\n          requireWorkspaceMembership:\n            requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck,\n        });\n      }\n      const connection = await handleSlackCallback({\n        slack,\n        tokenStore,\n        code: query.code,\n        state: query.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership:\n          requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck,\n        getExistingSlackConnection,\n        connectSlackInstallation,\n        disconnectSlackInstallation,\n      });\n      return toIntegrationConnectionDto(connection, {capabilities: connectionCapabilities});\n    },\n  });\n\n  return {prefix: '/integrations/slack', routes: [installRoute, callbackApiRoute]};\n}\n\nfunction unavailableWorkspaceMembershipCheck(_input: {\n  workspaceId: string;\n  userId: string;\n  memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n}): Promise<never> {\n  return Promise.reject(new Error('Workspaces inter-module client is not configured'));\n}\n\nfunction isSlackOAuthErrorCallback(query: SlackCallbackQueryDto): query is SlackCallbackQueryDto & {\n  error: string;\n  error_description?: string | undefined;\n  state: string;\n} {\n  return 'error' in query && typeof query.error === 'string';\n}\n"],"names":["AUTH_USER","requireUserContext","requireWorkspaceAccess","createSlackInstallBodySchema","createSlackInstallResponseSchema","slackCallbackQuerySchema","slackCallbackResponseSchema","defineRoute","config","handleSlackCallback","handleSlackOAuthCallbackError","formatSlackBotScopes","signSlackInstallState","toIntegrationConnectionDto","slackRouteErrorHandler","createSlackIntegrationRoutes","slack","tokenStore","getExistingSlackConnection","connectSlackInstallation","disconnectSlackInstallation","connectionCapabilities","requireActiveWorkspaceMembership","installRoute","method","path","auth","description","schema","body","response","handler","request","workspace_id","workspaceId","actor","state","userId","installUrl","URL","searchParams","set","SLACK_OAUTH_CLIENT_ID","SLACK_OAUTH_REDIRECT_URL","install_url","toString","callbackApiRoute","querystring","errorHandler","query","isSlackOAuthErrorCallback","error","errorDescription","error_description","sessionUserId","sessionMemberships","memberships","requireWorkspaceMembership","unavailableWorkspaceMembershipCheck","connection","code","capabilities","prefix","routes","_input","Promise","reject","Error"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,kBAAkB,EAAEC,sBAAsB,QAAO,4BAA4B;AAEhG,SACEC,4BAA4B,EAC5BC,gCAAgC,EAEhCC,wBAAwB,EACxBC,2BAA2B,QACtB,qCAAqC;AAC5C,SAAQC,WAAW,QAAwB,wBAAwB;AAEnE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,mBAAmB,EACnBC,6BAA6B,QACxB,mBAAmB;AAC1B,SAAQC,oBAAoB,QAAO,kBAAkB;AACrD,SAAQC,qBAAqB,QAAO,iBAAiB;AAErD,SAAQC,0BAA0B,QAAO,oCAAoC;AAC7E,SAAQC,sBAAsB,QAAO,cAAc;AAoBnD,OAAO,SAASC,6BAA6B,EAC3CC,KAAK,EACLC,UAAU,EACVC,0BAA0B,EAC1BC,wBAAwB,EACxBC,2BAA2B,EAC3BC,sBAAsB,EACtBC,gCAAgC,EACI;IACpC,MAAMC,eAAehB,YAAY;QAC/BiB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNC,MAAM1B;YACN2B,UAAU;gBAAC,KAAK1B;YAAgC;QAClD;QACA2B,SAAS,CAACC;YACR,MAAM,EAACC,cAAcC,WAAW,EAAC,GAAGF,QAAQH,IAAI;YAChD,MAAMM,QAAQlC,mBAAmB+B;YACjC9B,uBAAuB;gBAAC8B;gBAASE;YAAW;YAC5C,MAAME,QAAQxB,sBAAsB;gBAACsB;gBAAaG,QAAQF,MAAME,MAAM;YAAA;YACtE,MAAMC,aAAa,IAAIC,IAAI;YAC3BD,WAAWE,YAAY,CAACC,GAAG,CAAC,aAAajC,OAAOkC,qBAAqB;YACrEJ,WAAWE,YAAY,CAACC,GAAG,CAAC,SAAS9B;YACrC2B,WAAWE,YAAY,CAACC,GAAG,CAAC,gBAAgBjC,OAAOmC,wBAAwB;YAC3EL,WAAWE,YAAY,CAACC,GAAG,CAAC,SAASL;YACrC,OAAO;gBAACQ,aAAaN,WAAWO,QAAQ;YAAE;QAC5C;IACF;IAEA,MAAMC,mBAAmBvC,YAAY;QACnCiB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNmB,aAAa1C;YACbyB,UAAU;gBAAC,KAAKxB;YAA2B;QAC7C;QACA0C,cAAclC;QACdiB,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMiB,QAAQjB,QAAQiB,KAAK;YAC3B,IAAIC,0BAA0BD,QAAQ;gBACpC,OAAO,MAAMvC,8BAA8B;oBACzC0B,OAAOa,MAAMb,KAAK;oBAClBe,OAAOF,MAAME,KAAK;oBAClBC,kBAAkBH,MAAMI,iBAAiB;oBACzCC,eAAenB,MAAME,MAAM;oBAC3BkB,oBAAoBpB,MAAMqB,WAAW;oBACrCC,4BACEnC,oCAAoCoC;gBACxC;YACF;YACA,MAAMC,aAAa,MAAMlD,oBAAoB;gBAC3CO;gBACAC;gBACA2C,MAAMX,MAAMW,IAAI;gBAChBxB,OAAOa,MAAMb,KAAK;gBAClBkB,eAAenB,MAAME,MAAM;gBAC3BkB,oBAAoBpB,MAAMqB,WAAW;gBACrCC,4BACEnC,oCAAoCoC;gBACtCxC;gBACAC;gBACAC;YACF;YACA,OAAOP,2BAA2B8C,YAAY;gBAACE,cAAcxC;YAAsB;QACrF;IACF;IAEA,OAAO;QAACyC,QAAQ;QAAuBC,QAAQ;YAACxC;YAAcuB;SAAiB;IAAA;AACjF;AAEA,SAASY,oCAAoCM,MAI5C;IACC,OAAOC,QAAQC,MAAM,CAAC,IAAIC,MAAM;AAClC;AAEA,SAASjB,0BAA0BD,KAA4B;IAK7D,OAAO,WAAWA,SAAS,OAAOA,MAAME,KAAK,KAAK;AACpD"}

package/dist/presentation/routes/webhooks.d.ts

@@ -1,6 +1,7 @@
-import type { GetIntegrationConnectionByIdFn, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn } from '@shipfox/api-integration-core-dto';
+import type { ClaimWebhookDeliveryFn, GetIntegrationConnectionByIdFn, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn } from '@shipfox/api-integration-core-dto';
 import { type RouteGroup } from '@shipfox/node-fastify';
 import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
+import { type SlackWebhookProcessor } from '#core/webhook-processor.js';
 export declare const SLACK_WEBHOOK_BODY_LIMIT: number;
 export declare const SLASH_COMMAND_ACK: {
     readonly response_type: "ephemeral";
@@ -8,9 +9,11 @@ export declare const SLASH_COMMAND_ACK: {
 };
 export interface CreateSlackWebhookRoutesOptions {
     coreDb: () => NodePgDatabase<Record<string, unknown>>;
+    claimWebhookDelivery: ClaimWebhookDeliveryFn;
     publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;
     recordDeliveryOnly: RecordDeliveryOnlyFn;
     getIntegrationConnectionById: GetIntegrationConnectionByIdFn;
+    processor?: SlackWebhookProcessor | undefined;
 }
 export declare function createSlackWebhookRoutes(options: CreateSlackWebhookRoutesOptions): RouteGroup[];
 //# sourceMappingURL=webhooks.d.ts.map

package/dist/presentation/routes/webhooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,8BAA8B,EAC9B,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAK3C,OAAO,EAAmC,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAExF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAK9D,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,iBAAiB;;;CAAgE,CAAC;AAW/F,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;CAC9D;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,UAAU,EAAE,CAmH/F"}
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,sBAAsB,EACtB,8BAA8B,EAC9B,iCAAiC,EACjC,oBAAoB,EAGrB,MAAM,mCAAmC,CAAC;AAK3C,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAA8B,KAAK,qBAAqB,EAAC,MAAM,4BAA4B,CAAC;AAEnG,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,iBAAiB;;;CAAgE,CAAC;AAW/F,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,oBAAoB,EAAE,sBAAsB,CAAC;IAC7C,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;IAC7D,SAAS,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CAC/C;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,UAAU,EAAE,CAqE/F"}

package/dist/presentation/routes/webhooks.js

@@ -1,10 +1,7 @@
-import { Buffer } from 'node:buffer';
-import { slackEventsRequestSchema, slackSlashCommandSchema } from '@shipfox/api-integration-slack-dto';
-import { createRawBodyPlugin, defineRoute } from '@shipfox/node-fastify';
-import { logger } from '@shipfox/node-opentelemetry';
-import { config } from '#config.js';
-import { verifySlackSignature } from '#core/signature.js';
-import { handleSlackCommand, handleSlackEvent } from '#core/webhook.js';
+import { randomUUID } from 'node:crypto';
+import { createStoredWebhookRequest, WEBHOOK_MAX_RAW_BODY_BYTES } from '@shipfox/api-integration-core-dto';
+import { ClientError, createRawBodyPlugin, defineRoute } from '@shipfox/node-fastify';
+import { createSlackWebhookProcessor } from '#core/webhook-processor.js';
 export const SLACK_WEBHOOK_BODY_LIMIT = 1024 * 1024;
 export const SLASH_COMMAND_ACK = {
     response_type: 'ephemeral',
@@ -19,6 +16,7 @@ const slackFormRawBodyPlugin = createRawBodyPlugin({
     bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
 });
 export function createSlackWebhookRoutes(options) {
+    const processor = options.processor ?? createSlackWebhookProcessor(options);
     const eventsRoute = defineRoute({
         method: 'POST',
         path: '/',
@@ -28,58 +26,20 @@ export function createSlackWebhookRoutes(options) {
             bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
         },
         handler: async (request, reply)=>{
-            const rawBody = rawRequestBody(request.body);
-            if (rawBody === undefined) {
+            const body = rawRequestBody(request.body);
+            if (!body) {
                 reply.code(400);
                 return {
                     error: 'expected raw JSON body'
                 };
             }
-            if (!hasValidSlackSignature(request.headers, rawBody)) {
-                reply.code(401);
-                return {
-                    error: 'invalid signature'
-                };
-            }
-            let parsedJson;
-            try {
-                parsedJson = JSON.parse(rawBody);
-            } catch (error) {
-                logger().warn({
-                    errorName: error instanceof Error ? error.name : 'unknown'
-                }, 'slack events payload JSON parse failed');
-                reply.code(400);
-                return {
-                    error: 'malformed JSON'
-                };
-            }
-            const parsed = slackEventsRequestSchema.safeParse(parsedJson);
-            if (!parsed.success) {
-                logger().warn({
-                    issues: parsed.error.issues
-                }, 'slack events envelope failed schema validation');
-                reply.code(200);
-                return null;
-            }
-            const eventRequest = parsed.data;
-            if (eventRequest.type === 'url_verification') {
-                reply.code(200);
-                return {
-                    challenge: eventRequest.challenge
-                };
-            }
-            await options.coreDb().transaction(async (tx)=>{
-                await handleSlackEvent({
-                    tx,
-                    deliveryId: eventRequest.event_id,
-                    envelope: eventRequest,
-                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
-                    recordDeliveryOnly: options.recordDeliveryOnly,
-                    getIntegrationConnectionById: options.getIntegrationConnectionById
-                });
-            });
-            reply.code(200);
-            return null;
+            const result = await processor.process(createSlackStoredWebhookRequest({
+                routeId: 'slack.event',
+                body,
+                headers: request.headers,
+                rawQueryString: rawQueryString(request)
+            }, new Date().toISOString()));
+            return sendSlackEventResponse(reply, result);
         }
     });
     const commandsRoute = defineRoute({
@@ -91,39 +51,20 @@ export function createSlackWebhookRoutes(options) {
             bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
         },
         handler: async (request, reply)=>{
-            const rawBody = rawRequestBody(request.body);
-            if (rawBody === undefined) {
+            const body = rawRequestBody(request.body);
+            if (!body) {
                 reply.code(400);
                 return {
                     error: 'expected raw form body'
                 };
             }
-            if (!hasValidSlackSignature(request.headers, rawBody)) {
-                reply.code(401);
-                return {
-                    error: 'invalid signature'
-                };
-            }
-            const command = slackSlashCommandSchema.safeParse(Object.fromEntries(new URLSearchParams(rawBody)));
-            if (!command.success) {
-                logger().warn({
-                    issues: command.error.issues
-                }, 'slack command failed schema validation');
-                reply.code(200);
-                return SLASH_COMMAND_ACK;
-            }
-            await options.coreDb().transaction(async (tx)=>{
-                await handleSlackCommand({
-                    tx,
-                    deliveryId: command.data.trigger_id,
-                    command: command.data,
-                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
-                    recordDeliveryOnly: options.recordDeliveryOnly,
-                    getIntegrationConnectionById: options.getIntegrationConnectionById
-                });
-            });
-            reply.code(200);
-            return SLASH_COMMAND_ACK;
+            const result = await processor.process(createSlackStoredWebhookRequest({
+                routeId: 'slack.command',
+                body,
+                headers: request.headers,
+                rawQueryString: rawQueryString(request)
+            }, new Date().toISOString()));
+            return sendSlackCommandResponse(reply, result);
         }
     });
     return [
@@ -150,17 +91,78 @@ export function createSlackWebhookRoutes(options) {
     ];
 }
 function rawRequestBody(body) {
-    return Buffer.isBuffer(body) ? body.toString('utf8') : undefined;
+    return body instanceof Uint8Array ? body : undefined;
 }
-function hasValidSlackSignature(headers, rawBody) {
-    const signature = headers['x-slack-signature'];
-    const timestamp = headers['x-slack-request-timestamp'];
-    return verifySlackSignature({
-        signingSecret: config.SLACK_SIGNING_SECRET,
-        signature: typeof signature === 'string' ? signature : undefined,
-        timestamp: typeof timestamp === 'string' ? timestamp : undefined,
-        rawBody
-    });
+function rawQueryString(request) {
+    return request.raw.url?.split('?')[1] ?? '';
+}
+function createSlackStoredWebhookRequest(input, receivedAt) {
+    if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {
+        throw new ClientError('Webhook request body is too large', 'body-too-large', {
+            status: 413
+        });
+    }
+    try {
+        return createStoredWebhookRequest({
+            requestId: randomUUID(),
+            routeId: input.routeId,
+            receivedAt,
+            rawQueryString: input.rawQueryString,
+            headers: slackWebhookHeaders(input.headers),
+            body: input.body
+        });
+    } catch (error) {
+        throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {
+            cause: error
+        });
+    }
+}
+function slackWebhookHeaders(headers) {
+    return Object.fromEntries([
+        'content-type',
+        'x-slack-signature',
+        'x-slack-request-timestamp'
+    ].flatMap((name)=>{
+        const value = headers[name];
+        return typeof value === 'string' ? [
+            [
+                name,
+                value
+            ]
+        ] : [];
+    }));
+}
+function sendSlackEventResponse(reply, result) {
+    if (result.outcome === 'processed' && 'challenge' in result) {
+        reply.code(200);
+        return {
+            challenge: result.challenge
+        };
+    }
+    if (result.outcome === 'discarded' && (result.reason === 'invalid_signature' || result.reason === 'missing_required_input' || result.reason === 'stale_at_receipt')) {
+        reply.code(401);
+        return {
+            error: 'invalid signature'
+        };
+    }
+    if (result.outcome === 'discarded' && result.reason === 'malformed_payload') {
+        reply.code(400);
+        return {
+            error: 'malformed JSON'
+        };
+    }
+    reply.code(200);
+    return null;
+}
+function sendSlackCommandResponse(reply, result) {
+    if (result.outcome === 'discarded' && (result.reason === 'invalid_signature' || result.reason === 'missing_required_input' || result.reason === 'stale_at_receipt')) {
+        reply.code(401);
+        return {
+            error: 'invalid signature'
+        };
+    }
+    reply.code(200);
+    return SLASH_COMMAND_ACK;
 }
 
 //# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  slackEventsRequestSchema,\n  slackSlashCommandSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {createRawBodyPlugin, defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {config} from '#config.js';\nimport {verifySlackSignature} from '#core/signature.js';\nimport {handleSlackCommand, handleSlackEvent} from '#core/webhook.js';\n\nexport const SLACK_WEBHOOK_BODY_LIMIT = 1024 * 1024;\nexport const SLASH_COMMAND_ACK = {response_type: 'ephemeral', text: 'Working on it.'} as const;\n\nconst slackJsonRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/json',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\nconst slackFormRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/x-www-form-urlencoded',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\n\nexport interface CreateSlackWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport function createSlackWebhookRoutes(options: CreateSlackWebhookRoutesOptions): RouteGroup[] {\n  const eventsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack Events API receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const rawBody = rawRequestBody(request.body);\n      if (rawBody === undefined) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      if (!hasValidSlackSignature(request.headers, rawBody)) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      let parsedJson: unknown;\n      try {\n        parsedJson = JSON.parse(rawBody);\n      } catch (error) {\n        logger().warn(\n          {errorName: error instanceof Error ? error.name : 'unknown'},\n          'slack events payload JSON parse failed',\n        );\n        reply.code(400);\n        return {error: 'malformed JSON'};\n      }\n\n      const parsed = slackEventsRequestSchema.safeParse(parsedJson);\n      if (!parsed.success) {\n        logger().warn(\n          {issues: parsed.error.issues},\n          'slack events envelope failed schema validation',\n        );\n        reply.code(200);\n        return null;\n      }\n      const eventRequest = parsed.data;\n      if (eventRequest.type === 'url_verification') {\n        reply.code(200);\n        return {challenge: eventRequest.challenge};\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleSlackEvent({\n          tx,\n          deliveryId: eventRequest.event_id,\n          envelope: eventRequest,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n        });\n      });\n      reply.code(200);\n      return null;\n    },\n  });\n\n  const commandsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack slash-command receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const rawBody = rawRequestBody(request.body);\n      if (rawBody === undefined) {\n        reply.code(400);\n        return {error: 'expected raw form body'};\n      }\n      if (!hasValidSlackSignature(request.headers, rawBody)) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      const command = slackSlashCommandSchema.safeParse(\n        Object.fromEntries(new URLSearchParams(rawBody)),\n      );\n      if (!command.success) {\n        logger().warn({issues: command.error.issues}, 'slack command failed schema validation');\n        reply.code(200);\n        return SLASH_COMMAND_ACK;\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleSlackCommand({\n          tx,\n          deliveryId: command.data.trigger_id,\n          command: command.data,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n        });\n      });\n      reply.code(200);\n      return SLASH_COMMAND_ACK;\n    },\n  });\n\n  return [\n    {\n      prefix: '/webhooks/integrations/slack/events',\n      auth: [],\n      plugins: [slackJsonRawBodyPlugin],\n      routes: [eventsRoute],\n    },\n    {\n      prefix: '/webhooks/integrations/slack/commands',\n      auth: [],\n      plugins: [slackFormRawBodyPlugin],\n      routes: [commandsRoute],\n    },\n  ];\n}\n\nfunction rawRequestBody(body: unknown): string | undefined {\n  return Buffer.isBuffer(body) ? body.toString('utf8') : undefined;\n}\n\nfunction hasValidSlackSignature(\n  headers: Record<string, string | string[] | undefined>,\n  rawBody: string,\n): boolean {\n  const signature = headers['x-slack-signature'];\n  const timestamp = headers['x-slack-request-timestamp'];\n  return verifySlackSignature({\n    signingSecret: config.SLACK_SIGNING_SECRET,\n    signature: typeof signature === 'string' ? signature : undefined,\n    timestamp: typeof timestamp === 'string' ? timestamp : undefined,\n    rawBody,\n  });\n}\n"],"names":["Buffer","slackEventsRequestSchema","slackSlashCommandSchema","createRawBodyPlugin","defineRoute","logger","config","verifySlackSignature","handleSlackCommand","handleSlackEvent","SLACK_WEBHOOK_BODY_LIMIT","SLASH_COMMAND_ACK","response_type","text","slackJsonRawBodyPlugin","contentType","bodyLimit","slackFormRawBodyPlugin","createSlackWebhookRoutes","options","eventsRoute","method","path","auth","description","handler","request","reply","rawBody","rawRequestBody","body","undefined","code","error","hasValidSlackSignature","headers","parsedJson","JSON","parse","warn","errorName","Error","name","parsed","safeParse","success","issues","eventRequest","data","type","challenge","coreDb","transaction","tx","deliveryId","event_id","envelope","publishIntegrationEventReceived","recordDeliveryOnly","getIntegrationConnectionById","commandsRoute","command","Object","fromEntries","URLSearchParams","trigger_id","prefix","plugins","routes","isBuffer","toString","signature","timestamp","signingSecret","SLACK_SIGNING_SECRET"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AAMnC,SACEC,wBAAwB,EACxBC,uBAAuB,QAClB,qCAAqC;AAC5C,SAAQC,mBAAmB,EAAEC,WAAW,QAAwB,wBAAwB;AACxF,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,oBAAoB,QAAO,qBAAqB;AACxD,SAAQC,kBAAkB,EAAEC,gBAAgB,QAAO,mBAAmB;AAEtE,OAAO,MAAMC,2BAA2B,OAAO,KAAK;AACpD,OAAO,MAAMC,oBAAoB;IAACC,eAAe;IAAaC,MAAM;AAAgB,EAAW;AAE/F,MAAMC,yBAAyBX,oBAAoB;IACjDY,aAAa;IACbC,WAAWN;AACb;AACA,MAAMO,yBAAyBd,oBAAoB;IACjDY,aAAa;IACbC,WAAWN;AACb;AASA,OAAO,SAASQ,yBAAyBC,OAAwC;IAC/E,MAAMC,cAAchB,YAAY;QAC9BiB,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbL,SAAS;YAACH,WAAWN;QAAwB;QAC7Ce,SAAS,OAAOC,SAASC;YACvB,MAAMC,UAAUC,eAAeH,QAAQI,IAAI;YAC3C,IAAIF,YAAYG,WAAW;gBACzBJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,IAAI,CAACC,uBAAuBR,QAAQS,OAAO,EAAEP,UAAU;gBACrDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,IAAIG;YACJ,IAAI;gBACFA,aAAaC,KAAKC,KAAK,CAACV;YAC1B,EAAE,OAAOK,OAAO;gBACd5B,SAASkC,IAAI,CACX;oBAACC,WAAWP,iBAAiBQ,QAAQR,MAAMS,IAAI,GAAG;gBAAS,GAC3D;gBAEFf,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgB;YACjC;YAEA,MAAMU,SAAS1C,yBAAyB2C,SAAS,CAACR;YAClD,IAAI,CAACO,OAAOE,OAAO,EAAE;gBACnBxC,SAASkC,IAAI,CACX;oBAACO,QAAQH,OAAOV,KAAK,CAACa,MAAM;gBAAA,GAC5B;gBAEFnB,MAAMK,IAAI,CAAC;gBACX,OAAO;YACT;YACA,MAAMe,eAAeJ,OAAOK,IAAI;YAChC,IAAID,aAAaE,IAAI,KAAK,oBAAoB;gBAC5CtB,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACkB,WAAWH,aAAaG,SAAS;gBAAA;YAC3C;YAEA,MAAM/B,QAAQgC,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAM5C,iBAAiB;oBACrB4C;oBACAC,YAAYP,aAAaQ,QAAQ;oBACjCC,UAAUT;oBACVU,iCAAiCtC,QAAQsC,+BAA+B;oBACxEC,oBAAoBvC,QAAQuC,kBAAkB;oBAC9CC,8BAA8BxC,QAAQwC,4BAA4B;gBACpE;YACF;YACAhC,MAAMK,IAAI,CAAC;YACX,OAAO;QACT;IACF;IAEA,MAAM4B,gBAAgBxD,YAAY;QAChCiB,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbL,SAAS;YAACH,WAAWN;QAAwB;QAC7Ce,SAAS,OAAOC,SAASC;YACvB,MAAMC,UAAUC,eAAeH,QAAQI,IAAI;YAC3C,IAAIF,YAAYG,WAAW;gBACzBJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,IAAI,CAACC,uBAAuBR,QAAQS,OAAO,EAAEP,UAAU;gBACrDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,MAAM4B,UAAU3D,wBAAwB0C,SAAS,CAC/CkB,OAAOC,WAAW,CAAC,IAAIC,gBAAgBpC;YAEzC,IAAI,CAACiC,QAAQhB,OAAO,EAAE;gBACpBxC,SAASkC,IAAI,CAAC;oBAACO,QAAQe,QAAQ5B,KAAK,CAACa,MAAM;gBAAA,GAAG;gBAC9CnB,MAAMK,IAAI,CAAC;gBACX,OAAOrB;YACT;YAEA,MAAMQ,QAAQgC,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAM7C,mBAAmB;oBACvB6C;oBACAC,YAAYO,QAAQb,IAAI,CAACiB,UAAU;oBACnCJ,SAASA,QAAQb,IAAI;oBACrBS,iCAAiCtC,QAAQsC,+BAA+B;oBACxEC,oBAAoBvC,QAAQuC,kBAAkB;oBAC9CC,8BAA8BxC,QAAQwC,4BAA4B;gBACpE;YACF;YACAhC,MAAMK,IAAI,CAAC;YACX,OAAOrB;QACT;IACF;IAEA,OAAO;QACL;YACEuD,QAAQ;YACR3C,MAAM,EAAE;YACR4C,SAAS;gBAACrD;aAAuB;YACjCsD,QAAQ;gBAAChD;aAAY;QACvB;QACA;YACE8C,QAAQ;YACR3C,MAAM,EAAE;YACR4C,SAAS;gBAAClD;aAAuB;YACjCmD,QAAQ;gBAACR;aAAc;QACzB;KACD;AACH;AAEA,SAAS/B,eAAeC,IAAa;IACnC,OAAO9B,OAAOqE,QAAQ,CAACvC,QAAQA,KAAKwC,QAAQ,CAAC,UAAUvC;AACzD;AAEA,SAASG,uBACPC,OAAsD,EACtDP,OAAe;IAEf,MAAM2C,YAAYpC,OAAO,CAAC,oBAAoB;IAC9C,MAAMqC,YAAYrC,OAAO,CAAC,4BAA4B;IACtD,OAAO5B,qBAAqB;QAC1BkE,eAAenE,OAAOoE,oBAAoB;QAC1CH,WAAW,OAAOA,cAAc,WAAWA,YAAYxC;QACvDyC,WAAW,OAAOA,cAAc,WAAWA,YAAYzC;QACvDH;IACF;AACF"}
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {randomUUID} from 'node:crypto';\nimport type {\n  ClaimWebhookDeliveryFn,\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n  StoredWebhookRequest,\n  WebhookProcessingResult,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  createStoredWebhookRequest,\n  WEBHOOK_MAX_RAW_BODY_BYTES,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  ClientError,\n  createRawBodyPlugin,\n  defineRoute,\n  type RouteGroup,\n} from '@shipfox/node-fastify';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {createSlackWebhookProcessor, type SlackWebhookProcessor} from '#core/webhook-processor.js';\n\nexport const SLACK_WEBHOOK_BODY_LIMIT = 1024 * 1024;\nexport const SLASH_COMMAND_ACK = {response_type: 'ephemeral', text: 'Working on it.'} as const;\n\nconst slackJsonRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/json',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\nconst slackFormRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/x-www-form-urlencoded',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\n\nexport interface CreateSlackWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  claimWebhookDelivery: ClaimWebhookDeliveryFn;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n  processor?: SlackWebhookProcessor | undefined;\n}\n\nexport function createSlackWebhookRoutes(options: CreateSlackWebhookRoutesOptions): RouteGroup[] {\n  const processor = options.processor ?? createSlackWebhookProcessor(options);\n  const eventsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack Events API receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const body = rawRequestBody(request.body);\n      if (!body) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      const result = await processor.process(\n        createSlackStoredWebhookRequest(\n          {\n            routeId: 'slack.event',\n            body,\n            headers: request.headers,\n            rawQueryString: rawQueryString(request),\n          },\n          new Date().toISOString(),\n        ),\n      );\n      return sendSlackEventResponse(reply, result);\n    },\n  });\n  const commandsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack slash-command receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const body = rawRequestBody(request.body);\n      if (!body) {\n        reply.code(400);\n        return {error: 'expected raw form body'};\n      }\n      const result = await processor.process(\n        createSlackStoredWebhookRequest(\n          {\n            routeId: 'slack.command',\n            body,\n            headers: request.headers,\n            rawQueryString: rawQueryString(request),\n          },\n          new Date().toISOString(),\n        ),\n      );\n      return sendSlackCommandResponse(reply, result);\n    },\n  });\n\n  return [\n    {\n      prefix: '/webhooks/integrations/slack/events',\n      auth: [],\n      plugins: [slackJsonRawBodyPlugin],\n      routes: [eventsRoute],\n    },\n    {\n      prefix: '/webhooks/integrations/slack/commands',\n      auth: [],\n      plugins: [slackFormRawBodyPlugin],\n      routes: [commandsRoute],\n    },\n  ];\n}\n\nfunction rawRequestBody(body: unknown): Uint8Array | undefined {\n  return body instanceof Uint8Array ? body : undefined;\n}\n\nfunction rawQueryString(request: {raw: {url?: string | undefined}}): string {\n  return request.raw.url?.split('?')[1] ?? '';\n}\n\nfunction createSlackStoredWebhookRequest(\n  input: {\n    routeId: 'slack.event' | 'slack.command';\n    body: Uint8Array;\n    headers: Record<string, string | string[] | undefined>;\n    rawQueryString: string;\n  },\n  receivedAt: string,\n): StoredWebhookRequest {\n  if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {\n    throw new ClientError('Webhook request body is too large', 'body-too-large', {status: 413});\n  }\n  try {\n    return createStoredWebhookRequest({\n      requestId: randomUUID(),\n      routeId: input.routeId,\n      receivedAt,\n      rawQueryString: input.rawQueryString,\n      headers: slackWebhookHeaders(input.headers),\n      body: input.body,\n    });\n  } catch (error) {\n    throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {\n      cause: error,\n    });\n  }\n}\n\nfunction slackWebhookHeaders(headers: Record<string, string | string[] | undefined>) {\n  return Object.fromEntries(\n    ['content-type', 'x-slack-signature', 'x-slack-request-timestamp'].flatMap((name) => {\n      const value = headers[name];\n      return typeof value === 'string' ? [[name, value]] : [];\n    }),\n  );\n}\n\nfunction sendSlackEventResponse(\n  reply: {code(statusCode: number): void},\n  result: WebhookProcessingResult,\n) {\n  if (result.outcome === 'processed' && 'challenge' in result) {\n    reply.code(200);\n    return {challenge: result.challenge};\n  }\n  if (\n    result.outcome === 'discarded' &&\n    (result.reason === 'invalid_signature' ||\n      result.reason === 'missing_required_input' ||\n      result.reason === 'stale_at_receipt')\n  ) {\n    reply.code(401);\n    return {error: 'invalid signature'};\n  }\n  if (result.outcome === 'discarded' && result.reason === 'malformed_payload') {\n    reply.code(400);\n    return {error: 'malformed JSON'};\n  }\n  reply.code(200);\n  return null;\n}\n\nfunction sendSlackCommandResponse(\n  reply: {code(statusCode: number): void},\n  result: WebhookProcessingResult,\n) {\n  if (\n    result.outcome === 'discarded' &&\n    (result.reason === 'invalid_signature' ||\n      result.reason === 'missing_required_input' ||\n      result.reason === 'stale_at_receipt')\n  ) {\n    reply.code(401);\n    return {error: 'invalid signature'};\n  }\n  reply.code(200);\n  return SLASH_COMMAND_ACK;\n}\n"],"names":["randomUUID","createStoredWebhookRequest","WEBHOOK_MAX_RAW_BODY_BYTES","ClientError","createRawBodyPlugin","defineRoute","createSlackWebhookProcessor","SLACK_WEBHOOK_BODY_LIMIT","SLASH_COMMAND_ACK","response_type","text","slackJsonRawBodyPlugin","contentType","bodyLimit","slackFormRawBodyPlugin","createSlackWebhookRoutes","options","processor","eventsRoute","method","path","auth","description","handler","request","reply","body","rawRequestBody","code","error","result","process","createSlackStoredWebhookRequest","routeId","headers","rawQueryString","Date","toISOString","sendSlackEventResponse","commandsRoute","sendSlackCommandResponse","prefix","plugins","routes","Uint8Array","undefined","raw","url","split","input","receivedAt","byteLength","status","requestId","slackWebhookHeaders","cause","Object","fromEntries","flatMap","name","value","outcome","challenge","reason"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAc;AASvC,SACEC,0BAA0B,EAC1BC,0BAA0B,QACrB,oCAAoC;AAC3C,SACEC,WAAW,EACXC,mBAAmB,EACnBC,WAAW,QAEN,wBAAwB;AAE/B,SAAQC,2BAA2B,QAAmC,6BAA6B;AAEnG,OAAO,MAAMC,2BAA2B,OAAO,KAAK;AACpD,OAAO,MAAMC,oBAAoB;IAACC,eAAe;IAAaC,MAAM;AAAgB,EAAW;AAE/F,MAAMC,yBAAyBP,oBAAoB;IACjDQ,aAAa;IACbC,WAAWN;AACb;AACA,MAAMO,yBAAyBV,oBAAoB;IACjDQ,aAAa;IACbC,WAAWN;AACb;AAWA,OAAO,SAASQ,yBAAyBC,OAAwC;IAC/E,MAAMC,YAAYD,QAAQC,SAAS,IAAIX,4BAA4BU;IACnE,MAAME,cAAcb,YAAY;QAC9Bc,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbN,SAAS;YAACH,WAAWN;QAAwB;QAC7CgB,SAAS,OAAOC,SAASC;YACvB,MAAMC,OAAOC,eAAeH,QAAQE,IAAI;YACxC,IAAI,CAACA,MAAM;gBACTD,MAAMG,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMC,SAAS,MAAMb,UAAUc,OAAO,CACpCC,gCACE;gBACEC,SAAS;gBACTP;gBACAQ,SAASV,QAAQU,OAAO;gBACxBC,gBAAgBA,eAAeX;YACjC,GACA,IAAIY,OAAOC,WAAW;YAG1B,OAAOC,uBAAuBb,OAAOK;QACvC;IACF;IACA,MAAMS,gBAAgBlC,YAAY;QAChCc,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbN,SAAS;YAACH,WAAWN;QAAwB;QAC7CgB,SAAS,OAAOC,SAASC;YACvB,MAAMC,OAAOC,eAAeH,QAAQE,IAAI;YACxC,IAAI,CAACA,MAAM;gBACTD,MAAMG,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,MAAMC,SAAS,MAAMb,UAAUc,OAAO,CACpCC,gCACE;gBACEC,SAAS;gBACTP;gBACAQ,SAASV,QAAQU,OAAO;gBACxBC,gBAAgBA,eAAeX;YACjC,GACA,IAAIY,OAAOC,WAAW;YAG1B,OAAOG,yBAAyBf,OAAOK;QACzC;IACF;IAEA,OAAO;QACL;YACEW,QAAQ;YACRpB,MAAM,EAAE;YACRqB,SAAS;gBAAC/B;aAAuB;YACjCgC,QAAQ;gBAACzB;aAAY;QACvB;QACA;YACEuB,QAAQ;YACRpB,MAAM,EAAE;YACRqB,SAAS;gBAAC5B;aAAuB;YACjC6B,QAAQ;gBAACJ;aAAc;QACzB;KACD;AACH;AAEA,SAASZ,eAAeD,IAAa;IACnC,OAAOA,gBAAgBkB,aAAalB,OAAOmB;AAC7C;AAEA,SAASV,eAAeX,OAA0C;IAChE,OAAOA,QAAQsB,GAAG,CAACC,GAAG,EAAEC,MAAM,IAAI,CAAC,EAAE,IAAI;AAC3C;AAEA,SAAShB,gCACPiB,KAKC,EACDC,UAAkB;IAElB,IAAID,MAAMvB,IAAI,CAACyB,UAAU,GAAGjD,4BAA4B;QACtD,MAAM,IAAIC,YAAY,qCAAqC,kBAAkB;YAACiD,QAAQ;QAAG;IAC3F;IACA,IAAI;QACF,OAAOnD,2BAA2B;YAChCoD,WAAWrD;YACXiC,SAASgB,MAAMhB,OAAO;YACtBiB;YACAf,gBAAgBc,MAAMd,cAAc;YACpCD,SAASoB,oBAAoBL,MAAMf,OAAO;YAC1CR,MAAMuB,MAAMvB,IAAI;QAClB;IACF,EAAE,OAAOG,OAAO;QACd,MAAM,IAAI1B,YAAY,uCAAuC,2BAA2B;YACtFoD,OAAO1B;QACT;IACF;AACF;AAEA,SAASyB,oBAAoBpB,OAAsD;IACjF,OAAOsB,OAAOC,WAAW,CACvB;QAAC;QAAgB;QAAqB;KAA4B,CAACC,OAAO,CAAC,CAACC;QAC1E,MAAMC,QAAQ1B,OAAO,CAACyB,KAAK;QAC3B,OAAO,OAAOC,UAAU,WAAW;YAAC;gBAACD;gBAAMC;aAAM;SAAC,GAAG,EAAE;IACzD;AAEJ;AAEA,SAAStB,uBACPb,KAAuC,EACvCK,MAA+B;IAE/B,IAAIA,OAAO+B,OAAO,KAAK,eAAe,eAAe/B,QAAQ;QAC3DL,MAAMG,IAAI,CAAC;QACX,OAAO;YAACkC,WAAWhC,OAAOgC,SAAS;QAAA;IACrC;IACA,IACEhC,OAAO+B,OAAO,KAAK,eAClB/B,CAAAA,OAAOiC,MAAM,KAAK,uBACjBjC,OAAOiC,MAAM,KAAK,4BAClBjC,OAAOiC,MAAM,KAAK,kBAAiB,GACrC;QACAtC,MAAMG,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAmB;IACpC;IACA,IAAIC,OAAO+B,OAAO,KAAK,eAAe/B,OAAOiC,MAAM,KAAK,qBAAqB;QAC3EtC,MAAMG,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAgB;IACjC;IACAJ,MAAMG,IAAI,CAAC;IACX,OAAO;AACT;AAEA,SAASY,yBACPf,KAAuC,EACvCK,MAA+B;IAE/B,IACEA,OAAO+B,OAAO,KAAK,eAClB/B,CAAAA,OAAOiC,MAAM,KAAK,uBACjBjC,OAAOiC,MAAM,KAAK,4BAClBjC,OAAOiC,MAAM,KAAK,kBAAiB,GACrC;QACAtC,MAAMG,IAAI,CAAC;QACX,OAAO;YAACC,OAAO;QAAmB;IACpC;IACAJ,MAAMG,IAAI,CAAC;IACX,OAAOpB;AACT"}