@shipfox/api-integration-slack 4.0.0

package/dist/core/state.d.ts

@@ -0,0 +1,12 @@
+export interface SlackInstallStateClaims {
+    workspaceId: string;
+    userId: string;
+}
+export declare function signSlackInstallState(params: {
+    workspaceId: string;
+    userId: string;
+    nonce?: string | undefined;
+    now?: Date | undefined;
+}): string;
+export declare function verifySlackInstallState(state: string, now?: Date): SlackInstallStateClaims;
+//# sourceMappingURL=state.d.ts.map

package/dist/core/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/core/state.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACxB,GAAG,MAAM,CAUT;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,IAAiB,GACrB,uBAAuB,CAazB"}

package/dist/core/state.js

@@ -0,0 +1,54 @@
+import { createHmac, randomUUID, timingSafeEqual } from 'node:crypto';
+import { config } from '#config.js';
+import { SlackInstallStateError } from './errors.js';
+const STATE_TTL_SECONDS = 30 * 60;
+export function signSlackInstallState(params) {
+    const now = params.now ?? new Date();
+    const payload = {
+        workspaceId: params.workspaceId,
+        userId: params.userId,
+        nonce: params.nonce ?? randomUUID(),
+        expiresAt: Math.floor(now.getTime() / 1000) + STATE_TTL_SECONDS
+    };
+    const encodedPayload = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${encodedPayload}.${sign(encodedPayload)}`;
+}
+export function verifySlackInstallState(state, now = new Date()) {
+    const [encodedPayload, signature, extra] = state.split('.');
+    if (!encodedPayload || !signature || extra !== undefined) {
+        throw new SlackInstallStateError('Invalid Slack install state');
+    }
+    if (!constantTimeEqual(signature, sign(encodedPayload))) {
+        throw new SlackInstallStateError('Invalid Slack install state signature');
+    }
+    const payload = parsePayload(encodedPayload);
+    if (payload.expiresAt < Math.floor(now.getTime() / 1000)) {
+        throw new SlackInstallStateError('Expired Slack install state');
+    }
+    return {
+        workspaceId: payload.workspaceId,
+        userId: payload.userId
+    };
+}
+function sign(encodedPayload) {
+    return createHmac('sha256', config.SLACK_OAUTH_CLIENT_SECRET).update(encodedPayload).digest('base64url');
+}
+function constantTimeEqual(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    if (left.length !== right.length) return false;
+    return timingSafeEqual(left, right);
+}
+function parsePayload(encodedPayload) {
+    try {
+        const parsed = JSON.parse(Buffer.from(encodedPayload, 'base64url').toString('utf8'));
+        if (typeof parsed.workspaceId !== 'string' || typeof parsed.userId !== 'string' || typeof parsed.nonce !== 'string' || typeof parsed.expiresAt !== 'number') {
+            throw new Error('Invalid payload shape');
+        }
+        return parsed;
+    } catch (_error) {
+        throw new SlackInstallStateError('Invalid Slack install state payload');
+    }
+}
+
+//# sourceMappingURL=state.js.map

package/dist/core/state.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/state.ts"],"sourcesContent":["import {createHmac, randomUUID, timingSafeEqual} from 'node:crypto';\nimport {config} from '#config.js';\nimport {SlackInstallStateError} from './errors.js';\n\nconst STATE_TTL_SECONDS = 30 * 60;\n\ninterface SlackInstallStatePayload {\n  workspaceId: string;\n  userId: string;\n  nonce: string;\n  expiresAt: number;\n}\n\nexport interface SlackInstallStateClaims {\n  workspaceId: string;\n  userId: string;\n}\n\nexport function signSlackInstallState(params: {\n  workspaceId: string;\n  userId: string;\n  nonce?: string | undefined;\n  now?: Date | undefined;\n}): string {\n  const now = params.now ?? new Date();\n  const payload: SlackInstallStatePayload = {\n    workspaceId: params.workspaceId,\n    userId: params.userId,\n    nonce: params.nonce ?? randomUUID(),\n    expiresAt: Math.floor(now.getTime() / 1000) + STATE_TTL_SECONDS,\n  };\n  const encodedPayload = Buffer.from(JSON.stringify(payload)).toString('base64url');\n  return `${encodedPayload}.${sign(encodedPayload)}`;\n}\n\nexport function verifySlackInstallState(\n  state: string,\n  now: Date = new Date(),\n): SlackInstallStateClaims {\n  const [encodedPayload, signature, extra] = state.split('.');\n  if (!encodedPayload || !signature || extra !== undefined) {\n    throw new SlackInstallStateError('Invalid Slack install state');\n  }\n  if (!constantTimeEqual(signature, sign(encodedPayload))) {\n    throw new SlackInstallStateError('Invalid Slack install state signature');\n  }\n  const payload = parsePayload(encodedPayload);\n  if (payload.expiresAt < Math.floor(now.getTime() / 1000)) {\n    throw new SlackInstallStateError('Expired Slack install state');\n  }\n  return {workspaceId: payload.workspaceId, userId: payload.userId};\n}\n\nfunction sign(encodedPayload: string): string {\n  return createHmac('sha256', config.SLACK_OAUTH_CLIENT_SECRET)\n    .update(encodedPayload)\n    .digest('base64url');\n}\n\nfunction constantTimeEqual(a: string, b: string): boolean {\n  const left = Buffer.from(a);\n  const right = Buffer.from(b);\n  if (left.length !== right.length) return false;\n  return timingSafeEqual(left, right);\n}\n\nfunction parsePayload(encodedPayload: string): SlackInstallStatePayload {\n  try {\n    const parsed = JSON.parse(Buffer.from(encodedPayload, 'base64url').toString('utf8'));\n    if (\n      typeof parsed.workspaceId !== 'string' ||\n      typeof parsed.userId !== 'string' ||\n      typeof parsed.nonce !== 'string' ||\n      typeof parsed.expiresAt !== 'number'\n    ) {\n      throw new Error('Invalid payload shape');\n    }\n    return parsed;\n  } catch (_error) {\n    throw new SlackInstallStateError('Invalid Slack install state payload');\n  }\n}\n"],"names":["createHmac","randomUUID","timingSafeEqual","config","SlackInstallStateError","STATE_TTL_SECONDS","signSlackInstallState","params","now","Date","payload","workspaceId","userId","nonce","expiresAt","Math","floor","getTime","encodedPayload","Buffer","from","JSON","stringify","toString","sign","verifySlackInstallState","state","signature","extra","split","undefined","constantTimeEqual","parsePayload","SLACK_OAUTH_CLIENT_SECRET","update","digest","a","b","left","right","length","parsed","parse","Error","_error"],"mappings":"AAAA,SAAQA,UAAU,EAAEC,UAAU,EAAEC,eAAe,QAAO,cAAc;AACpE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,sBAAsB,QAAO,cAAc;AAEnD,MAAMC,oBAAoB,KAAK;AAc/B,OAAO,SAASC,sBAAsBC,MAKrC;IACC,MAAMC,MAAMD,OAAOC,GAAG,IAAI,IAAIC;IAC9B,MAAMC,UAAoC;QACxCC,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOK,MAAM;QACrBC,OAAON,OAAOM,KAAK,IAAIZ;QACvBa,WAAWC,KAAKC,KAAK,CAACR,IAAIS,OAAO,KAAK,QAAQZ;IAChD;IACA,MAAMa,iBAAiBC,OAAOC,IAAI,CAACC,KAAKC,SAAS,CAACZ,UAAUa,QAAQ,CAAC;IACrE,OAAO,GAAGL,eAAe,CAAC,EAAEM,KAAKN,iBAAiB;AACpD;AAEA,OAAO,SAASO,wBACdC,KAAa,EACblB,MAAY,IAAIC,MAAM;IAEtB,MAAM,CAACS,gBAAgBS,WAAWC,MAAM,GAAGF,MAAMG,KAAK,CAAC;IACvD,IAAI,CAACX,kBAAkB,CAACS,aAAaC,UAAUE,WAAW;QACxD,MAAM,IAAI1B,uBAAuB;IACnC;IACA,IAAI,CAAC2B,kBAAkBJ,WAAWH,KAAKN,kBAAkB;QACvD,MAAM,IAAId,uBAAuB;IACnC;IACA,MAAMM,UAAUsB,aAAad;IAC7B,IAAIR,QAAQI,SAAS,GAAGC,KAAKC,KAAK,CAACR,IAAIS,OAAO,KAAK,OAAO;QACxD,MAAM,IAAIb,uBAAuB;IACnC;IACA,OAAO;QAACO,aAAaD,QAAQC,WAAW;QAAEC,QAAQF,QAAQE,MAAM;IAAA;AAClE;AAEA,SAASY,KAAKN,cAAsB;IAClC,OAAOlB,WAAW,UAAUG,OAAO8B,yBAAyB,EACzDC,MAAM,CAAChB,gBACPiB,MAAM,CAAC;AACZ;AAEA,SAASJ,kBAAkBK,CAAS,EAAEC,CAAS;IAC7C,MAAMC,OAAOnB,OAAOC,IAAI,CAACgB;IACzB,MAAMG,QAAQpB,OAAOC,IAAI,CAACiB;IAC1B,IAAIC,KAAKE,MAAM,KAAKD,MAAMC,MAAM,EAAE,OAAO;IACzC,OAAOtC,gBAAgBoC,MAAMC;AAC/B;AAEA,SAASP,aAAad,cAAsB;IAC1C,IAAI;QACF,MAAMuB,SAASpB,KAAKqB,KAAK,CAACvB,OAAOC,IAAI,CAACF,gBAAgB,aAAaK,QAAQ,CAAC;QAC5E,IACE,OAAOkB,OAAO9B,WAAW,KAAK,YAC9B,OAAO8B,OAAO7B,MAAM,KAAK,YACzB,OAAO6B,OAAO5B,KAAK,KAAK,YACxB,OAAO4B,OAAO3B,SAAS,KAAK,UAC5B;YACA,MAAM,IAAI6B,MAAM;QAClB;QACA,OAAOF;IACT,EAAE,OAAOG,QAAQ;QACf,MAAM,IAAIxC,uBAAuB;IACnC;AACF"}

package/dist/core/tokens.d.ts

@@ -0,0 +1,35 @@
+export interface SlackConnectionResolverResult {
+    workspaceId: string;
+}
+export interface SlackSecretsStore {
+    getSecret(params: {
+        workspaceId: string;
+        namespace: string;
+        key: string;
+    }): Promise<string | null>;
+    setSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+        values: Record<string, string>;
+        editedBy?: string | null | undefined;
+    }): Promise<void>;
+}
+export interface CreateSlackTokenStoreParams {
+    resolveConnection(connectionId: string): Promise<SlackConnectionResolverResult | undefined>;
+    secrets: SlackSecretsStore;
+}
+export interface StoreSlackTokensParams {
+    connectionId: string;
+    botToken: string;
+    editedBy?: string | null | undefined;
+}
+export interface GetSlackAccessTokenParams {
+    connectionId: string;
+}
+export interface SlackTokenStore {
+    storeTokens(params: StoreSlackTokensParams): Promise<void>;
+    getAccessToken(params: GetSlackAccessTokenParams): Promise<string>;
+}
+export declare function slackSecretsNamespace(connectionId: string): string;
+export declare function createSlackTokenStore(params: CreateSlackTokenStoreParams): SlackTokenStore;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/core/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/core/tokens.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,6BAA6B;IAC5C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjG,UAAU,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;KACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAC5F,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,cAAc,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpE;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAElE;AAqBD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,eAAe,CA+B1F"}

package/dist/core/tokens.js

@@ -0,0 +1,51 @@
+import { SlackAccessTokenUnavailableError, SlackBotTokenMissingError, SlackConnectionNotFoundError } from '#core/errors.js';
+import { getSlackInstallationByConnectionId } from '#db/installations.js';
+const BOT_TOKEN_KEY = 'BOT_TOKEN';
+export function slackSecretsNamespace(connectionId) {
+    return `system/integrations/slack/${connectionId}`;
+}
+function assertSlackInstallationServesToken(connectionId, installation) {
+    if (!installation) {
+        throw new SlackAccessTokenUnavailableError(connectionId, 'installation-not-found');
+    }
+    if (installation.status !== 'installed') {
+        throw new SlackAccessTokenUnavailableError(connectionId, 'not-installed');
+    }
+    if (installation.tokenExpiresAt !== null && installation.tokenExpiresAt.getTime() <= Date.now()) {
+        throw new SlackAccessTokenUnavailableError(connectionId, 'expired', installation.tokenExpiresAt);
+    }
+}
+export function createSlackTokenStore(params) {
+    async function resolveWorkspaceId(connectionId) {
+        const connection = await params.resolveConnection(connectionId);
+        if (!connection) throw new SlackConnectionNotFoundError(connectionId);
+        return connection.workspaceId;
+    }
+    return {
+        async storeTokens (input) {
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            await params.secrets.setSecrets({
+                workspaceId,
+                namespace: slackSecretsNamespace(input.connectionId),
+                values: {
+                    [BOT_TOKEN_KEY]: input.botToken
+                },
+                editedBy: input.editedBy
+            });
+        },
+        async getAccessToken (input) {
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            const installation = await getSlackInstallationByConnectionId(input.connectionId);
+            assertSlackInstallationServesToken(input.connectionId, installation);
+            const token = await params.secrets.getSecret({
+                workspaceId,
+                namespace: slackSecretsNamespace(input.connectionId),
+                key: BOT_TOKEN_KEY
+            });
+            if (!token) throw new SlackBotTokenMissingError(input.connectionId);
+            return token;
+        }
+    };
+}
+
+//# sourceMappingURL=tokens.js.map

package/dist/core/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/tokens.ts"],"sourcesContent":["import {\n  SlackAccessTokenUnavailableError,\n  SlackBotTokenMissingError,\n  SlackConnectionNotFoundError,\n} from '#core/errors.js';\nimport {getSlackInstallationByConnectionId, type SlackInstallation} from '#db/installations.js';\n\nconst BOT_TOKEN_KEY = 'BOT_TOKEN';\n\nexport interface SlackConnectionResolverResult {\n  workspaceId: string;\n}\n\nexport interface SlackSecretsStore {\n  getSecret(params: {workspaceId: string; namespace: string; key: string}): Promise<string | null>;\n  setSecrets(params: {\n    workspaceId: string;\n    namespace: string;\n    values: Record<string, string>;\n    editedBy?: string | null | undefined;\n  }): Promise<void>;\n}\n\nexport interface CreateSlackTokenStoreParams {\n  resolveConnection(connectionId: string): Promise<SlackConnectionResolverResult | undefined>;\n  secrets: SlackSecretsStore;\n}\n\nexport interface StoreSlackTokensParams {\n  connectionId: string;\n  botToken: string;\n  editedBy?: string | null | undefined;\n}\n\nexport interface GetSlackAccessTokenParams {\n  connectionId: string;\n}\n\nexport interface SlackTokenStore {\n  storeTokens(params: StoreSlackTokensParams): Promise<void>;\n  getAccessToken(params: GetSlackAccessTokenParams): Promise<string>;\n}\n\nexport function slackSecretsNamespace(connectionId: string): string {\n  return `system/integrations/slack/${connectionId}`;\n}\n\nfunction assertSlackInstallationServesToken(\n  connectionId: string,\n  installation: SlackInstallation | undefined,\n): asserts installation is SlackInstallation {\n  if (!installation) {\n    throw new SlackAccessTokenUnavailableError(connectionId, 'installation-not-found');\n  }\n  if (installation.status !== 'installed') {\n    throw new SlackAccessTokenUnavailableError(connectionId, 'not-installed');\n  }\n  if (installation.tokenExpiresAt !== null && installation.tokenExpiresAt.getTime() <= Date.now()) {\n    throw new SlackAccessTokenUnavailableError(\n      connectionId,\n      'expired',\n      installation.tokenExpiresAt,\n    );\n  }\n}\n\nexport function createSlackTokenStore(params: CreateSlackTokenStoreParams): SlackTokenStore {\n  async function resolveWorkspaceId(connectionId: string): Promise<string> {\n    const connection = await params.resolveConnection(connectionId);\n    if (!connection) throw new SlackConnectionNotFoundError(connectionId);\n    return connection.workspaceId;\n  }\n\n  return {\n    async storeTokens(input) {\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      await params.secrets.setSecrets({\n        workspaceId,\n        namespace: slackSecretsNamespace(input.connectionId),\n        values: {[BOT_TOKEN_KEY]: input.botToken},\n        editedBy: input.editedBy,\n      });\n    },\n\n    async getAccessToken(input) {\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      const installation = await getSlackInstallationByConnectionId(input.connectionId);\n      assertSlackInstallationServesToken(input.connectionId, installation);\n      const token = await params.secrets.getSecret({\n        workspaceId,\n        namespace: slackSecretsNamespace(input.connectionId),\n        key: BOT_TOKEN_KEY,\n      });\n      if (!token) throw new SlackBotTokenMissingError(input.connectionId);\n      return token;\n    },\n  };\n}\n"],"names":["SlackAccessTokenUnavailableError","SlackBotTokenMissingError","SlackConnectionNotFoundError","getSlackInstallationByConnectionId","BOT_TOKEN_KEY","slackSecretsNamespace","connectionId","assertSlackInstallationServesToken","installation","status","tokenExpiresAt","getTime","Date","now","createSlackTokenStore","params","resolveWorkspaceId","connection","resolveConnection","workspaceId","storeTokens","input","secrets","setSecrets","namespace","values","botToken","editedBy","getAccessToken","token","getSecret","key"],"mappings":"AAAA,SACEA,gCAAgC,EAChCC,yBAAyB,EACzBC,4BAA4B,QACvB,kBAAkB;AACzB,SAAQC,kCAAkC,QAA+B,uBAAuB;AAEhG,MAAMC,gBAAgB;AAoCtB,OAAO,SAASC,sBAAsBC,YAAoB;IACxD,OAAO,CAAC,0BAA0B,EAAEA,cAAc;AACpD;AAEA,SAASC,mCACPD,YAAoB,EACpBE,YAA2C;IAE3C,IAAI,CAACA,cAAc;QACjB,MAAM,IAAIR,iCAAiCM,cAAc;IAC3D;IACA,IAAIE,aAAaC,MAAM,KAAK,aAAa;QACvC,MAAM,IAAIT,iCAAiCM,cAAc;IAC3D;IACA,IAAIE,aAAaE,cAAc,KAAK,QAAQF,aAAaE,cAAc,CAACC,OAAO,MAAMC,KAAKC,GAAG,IAAI;QAC/F,MAAM,IAAIb,iCACRM,cACA,WACAE,aAAaE,cAAc;IAE/B;AACF;AAEA,OAAO,SAASI,sBAAsBC,MAAmC;IACvE,eAAeC,mBAAmBV,YAAoB;QACpD,MAAMW,aAAa,MAAMF,OAAOG,iBAAiB,CAACZ;QAClD,IAAI,CAACW,YAAY,MAAM,IAAIf,6BAA6BI;QACxD,OAAOW,WAAWE,WAAW;IAC/B;IAEA,OAAO;QACL,MAAMC,aAAYC,KAAK;YACrB,MAAMF,cAAc,MAAMH,mBAAmBK,MAAMf,YAAY;YAC/D,MAAMS,OAAOO,OAAO,CAACC,UAAU,CAAC;gBAC9BJ;gBACAK,WAAWnB,sBAAsBgB,MAAMf,YAAY;gBACnDmB,QAAQ;oBAAC,CAACrB,cAAc,EAAEiB,MAAMK,QAAQ;gBAAA;gBACxCC,UAAUN,MAAMM,QAAQ;YAC1B;QACF;QAEA,MAAMC,gBAAeP,KAAK;YACxB,MAAMF,cAAc,MAAMH,mBAAmBK,MAAMf,YAAY;YAC/D,MAAME,eAAe,MAAML,mCAAmCkB,MAAMf,YAAY;YAChFC,mCAAmCc,MAAMf,YAAY,EAAEE;YACvD,MAAMqB,QAAQ,MAAMd,OAAOO,OAAO,CAACQ,SAAS,CAAC;gBAC3CX;gBACAK,WAAWnB,sBAAsBgB,MAAMf,YAAY;gBACnDyB,KAAK3B;YACP;YACA,IAAI,CAACyB,OAAO,MAAM,IAAI5B,0BAA0BoB,MAAMf,YAAY;YAClE,OAAOuB;QACT;IACF;AACF"}

package/dist/core/webhook.d.ts

@@ -0,0 +1,25 @@
+import type { GetIntegrationConnectionByIdFn, IntegrationTx, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn } from '@shipfox/api-integration-core-dto';
+import { type SlackEventBaseEnvelopeDto, type SlackSlashCommandDto } from '@shipfox/api-integration-slack-dto';
+export type SlackWebhookOutcome = 'published' | 'duplicate' | 'unknown-team' | 'revoked-installation' | 'missing-connection' | 'inactive-connection' | 'unsupported-event' | 'self-message';
+interface SlackWebhookParams {
+    tx: IntegrationTx;
+    deliveryId: string;
+    publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;
+    recordDeliveryOnly: RecordDeliveryOnlyFn;
+    getIntegrationConnectionById: GetIntegrationConnectionByIdFn;
+}
+export interface HandleSlackEventParams extends SlackWebhookParams {
+    envelope: SlackEventBaseEnvelopeDto;
+}
+export interface HandleSlackCommandParams extends SlackWebhookParams {
+    command: SlackSlashCommandDto;
+}
+export declare function handleSlackEvent(params: HandleSlackEventParams): Promise<{
+    outcome: SlackWebhookOutcome;
+}>;
+export declare function handleSlackCommand(params: HandleSlackCommandParams): Promise<{
+    outcome: Exclude<SlackWebhookOutcome, 'unsupported-event' | 'self-message'>;
+}>;
+export declare function isSelfAuthoredSlackEvent(event: unknown, botUserId: string): boolean;
+export {};
+//# sourceMappingURL=webhook.d.ts.map

package/dist/core/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/core/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAE9B,aAAa,EACb,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EAE1B,MAAM,oCAAoC,CAAC;AAmB5C,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,WAAW,GACX,cAAc,GACd,sBAAsB,GACtB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,GACnB,cAAc,CAAC;AAEnB,UAAU,kBAAkB;IAC1B,EAAE,EAAE,aAAa,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;CAC9D;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,QAAQ,EAAE,yBAAyB,CAAC;CACrC;AAED,MAAM,WAAW,wBAAyB,SAAQ,kBAAkB;IAClE,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAYD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAC,CAAC,CAgDzC;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,cAAc,CAAC,CAAA;CAAC,CAAC,CAwBxF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAUnF"}

package/dist/core/webhook.js

@@ -0,0 +1,160 @@
+import { SLACK_PROVIDER, SLACK_SLASH_COMMAND_EVENT, slackEventEnvelopeSchema } from '@shipfox/api-integration-slack-dto';
+import { logger } from '@shipfox/node-opentelemetry';
+import { z } from 'zod';
+import { getSlackInstallationByTeamId } from '#db/installations.js';
+const slackSelfAuthoredEventSchema = z.object({
+    bot_id: z.string().optional(),
+    user: z.string().optional(),
+    message: z.object({
+        bot_id: z.string().optional(),
+        user: z.string().optional()
+    }).passthrough().optional()
+}).passthrough();
+export async function handleSlackEvent(params) {
+    const resolution = await resolveSlackConnection({
+        ...params,
+        teamId: params.envelope.team_id
+    });
+    if (resolution.kind === 'drop') return resolution;
+    if (isSelfAuthoredSlackEvent(params.envelope.event, resolution.installation.botUserId)) {
+        await recordSlackDeliveryOnly(params);
+        return {
+            outcome: 'self-message'
+        };
+    }
+    const supported = slackEventEnvelopeSchema.safeParse(params.envelope);
+    if (!supported.success) {
+        logger().info({
+            deliveryId: params.deliveryId,
+            teamId: params.envelope.team_id,
+            type: params.envelope.event.type
+        }, 'slack webhook: unsupported event, dropping');
+        await recordSlackDeliveryOnly(params);
+        return {
+            outcome: 'unsupported-event'
+        };
+    }
+    const result = await params.publishIntegrationEventReceived({
+        tx: params.tx,
+        event: {
+            provider: SLACK_PROVIDER,
+            source: resolution.connection.slug,
+            event: supported.data.event.type,
+            workspaceId: resolution.connection.workspaceId,
+            connectionId: resolution.connection.id,
+            connectionName: resolution.connection.displayName,
+            deliveryId: params.deliveryId,
+            receivedAt: new Date().toISOString(),
+            payload: {
+                ...supported.data.event,
+                team_id: supported.data.team_id,
+                api_app_id: supported.data.api_app_id,
+                event_id: supported.data.event_id,
+                event_time: supported.data.event_time
+            }
+        }
+    });
+    return {
+        outcome: result.published ? 'published' : 'duplicate'
+    };
+}
+export async function handleSlackCommand(params) {
+    const resolution = await resolveSlackConnection({
+        ...params,
+        teamId: params.command.team_id
+    });
+    if (resolution.kind === 'drop') return resolution;
+    const { token: _token, ...payload } = params.command;
+    const result = await params.publishIntegrationEventReceived({
+        tx: params.tx,
+        event: {
+            provider: SLACK_PROVIDER,
+            source: resolution.connection.slug,
+            event: SLACK_SLASH_COMMAND_EVENT,
+            workspaceId: resolution.connection.workspaceId,
+            connectionId: resolution.connection.id,
+            connectionName: resolution.connection.displayName,
+            deliveryId: params.deliveryId,
+            receivedAt: new Date().toISOString(),
+            payload
+        }
+    });
+    return {
+        outcome: result.published ? 'published' : 'duplicate'
+    };
+}
+export function isSelfAuthoredSlackEvent(event, botUserId) {
+    const parsed = slackSelfAuthoredEventSchema.safeParse(event);
+    if (!parsed.success) return false;
+    const nestedMessage = parsed.data.message;
+    return parsed.data.bot_id !== undefined || parsed.data.user === botUserId || nestedMessage?.bot_id !== undefined || nestedMessage?.user === botUserId;
+}
+async function resolveSlackConnection(params) {
+    const installation = await getSlackInstallationByTeamId(params.teamId, {
+        tx: params.tx
+    });
+    if (!installation) {
+        logger().warn({
+            deliveryId: params.deliveryId,
+            teamId: params.teamId
+        }, 'slack webhook: unknown team, dropping');
+        await recordSlackDeliveryOnly(params);
+        return {
+            kind: 'drop',
+            outcome: 'unknown-team'
+        };
+    }
+    if (installation.status !== 'installed') {
+        logger().info({
+            deliveryId: params.deliveryId,
+            teamId: params.teamId,
+            connectionId: installation.connectionId
+        }, 'slack webhook: installation is not installed, dropping');
+        await recordSlackDeliveryOnly(params);
+        return {
+            kind: 'drop',
+            outcome: 'revoked-installation'
+        };
+    }
+    const connection = await params.getIntegrationConnectionById(installation.connectionId, {
+        tx: params.tx
+    });
+    if (!connection) {
+        logger().warn({
+            deliveryId: params.deliveryId,
+            teamId: params.teamId,
+            connectionId: installation.connectionId
+        }, 'slack webhook: installation has no connection, dropping');
+        await recordSlackDeliveryOnly(params);
+        return {
+            kind: 'drop',
+            outcome: 'missing-connection'
+        };
+    }
+    if (connection.lifecycleStatus !== 'active') {
+        logger().info({
+            deliveryId: params.deliveryId,
+            teamId: params.teamId,
+            connectionId: connection.id
+        }, 'slack webhook: inactive connection, dropping');
+        await recordSlackDeliveryOnly(params);
+        return {
+            kind: 'drop',
+            outcome: 'inactive-connection'
+        };
+    }
+    return {
+        kind: 'ok',
+        connection,
+        installation
+    };
+}
+async function recordSlackDeliveryOnly(params) {
+    await params.recordDeliveryOnly({
+        tx: params.tx,
+        provider: SLACK_PROVIDER,
+        deliveryId: params.deliveryId
+    });
+}
+
+//# sourceMappingURL=webhook.js.map

package/dist/core/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/webhook.ts"],"sourcesContent":["import type {\n  GetIntegrationConnectionByIdFn,\n  IntegrationConnection,\n  IntegrationTx,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  SLACK_PROVIDER,\n  SLACK_SLASH_COMMAND_EVENT,\n  type SlackEventBaseEnvelopeDto,\n  type SlackSlashCommandDto,\n  slackEventEnvelopeSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {z} from 'zod';\nimport {getSlackInstallationByTeamId, type SlackInstallation} from '#db/installations.js';\n\nconst slackSelfAuthoredEventSchema = z\n  .object({\n    bot_id: z.string().optional(),\n    user: z.string().optional(),\n    message: z\n      .object({\n        bot_id: z.string().optional(),\n        user: z.string().optional(),\n      })\n      .passthrough()\n      .optional(),\n  })\n  .passthrough();\n\nexport type SlackWebhookOutcome =\n  | 'published'\n  | 'duplicate'\n  | 'unknown-team'\n  | 'revoked-installation'\n  | 'missing-connection'\n  | 'inactive-connection'\n  | 'unsupported-event'\n  | 'self-message';\n\ninterface SlackWebhookParams {\n  tx: IntegrationTx;\n  deliveryId: string;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport interface HandleSlackEventParams extends SlackWebhookParams {\n  envelope: SlackEventBaseEnvelopeDto;\n}\n\nexport interface HandleSlackCommandParams extends SlackWebhookParams {\n  command: SlackSlashCommandDto;\n}\n\ntype SlackConnectionResolution =\n  | {kind: 'ok'; connection: IntegrationConnection; installation: SlackInstallation}\n  | {\n      kind: 'drop';\n      outcome: Exclude<\n        SlackWebhookOutcome,\n        'published' | 'duplicate' | 'unsupported-event' | 'self-message'\n      >;\n    };\n\nexport async function handleSlackEvent(\n  params: HandleSlackEventParams,\n): Promise<{outcome: SlackWebhookOutcome}> {\n  const resolution = await resolveSlackConnection({\n    ...params,\n    teamId: params.envelope.team_id,\n  });\n  if (resolution.kind === 'drop') return resolution;\n\n  if (isSelfAuthoredSlackEvent(params.envelope.event, resolution.installation.botUserId)) {\n    await recordSlackDeliveryOnly(params);\n    return {outcome: 'self-message'};\n  }\n\n  const supported = slackEventEnvelopeSchema.safeParse(params.envelope);\n  if (!supported.success) {\n    logger().info(\n      {\n        deliveryId: params.deliveryId,\n        teamId: params.envelope.team_id,\n        type: params.envelope.event.type,\n      },\n      'slack webhook: unsupported event, dropping',\n    );\n    await recordSlackDeliveryOnly(params);\n    return {outcome: 'unsupported-event'};\n  }\n\n  const result = await params.publishIntegrationEventReceived({\n    tx: params.tx,\n    event: {\n      provider: SLACK_PROVIDER,\n      source: resolution.connection.slug,\n      event: supported.data.event.type,\n      workspaceId: resolution.connection.workspaceId,\n      connectionId: resolution.connection.id,\n      connectionName: resolution.connection.displayName,\n      deliveryId: params.deliveryId,\n      receivedAt: new Date().toISOString(),\n      payload: {\n        ...supported.data.event,\n        team_id: supported.data.team_id,\n        api_app_id: supported.data.api_app_id,\n        event_id: supported.data.event_id,\n        event_time: supported.data.event_time,\n      },\n    },\n  });\n\n  return {outcome: result.published ? 'published' : 'duplicate'};\n}\n\nexport async function handleSlackCommand(\n  params: HandleSlackCommandParams,\n): Promise<{outcome: Exclude<SlackWebhookOutcome, 'unsupported-event' | 'self-message'>}> {\n  const resolution = await resolveSlackConnection({\n    ...params,\n    teamId: params.command.team_id,\n  });\n  if (resolution.kind === 'drop') return resolution;\n\n  const {token: _token, ...payload} = params.command;\n  const result = await params.publishIntegrationEventReceived({\n    tx: params.tx,\n    event: {\n      provider: SLACK_PROVIDER,\n      source: resolution.connection.slug,\n      event: SLACK_SLASH_COMMAND_EVENT,\n      workspaceId: resolution.connection.workspaceId,\n      connectionId: resolution.connection.id,\n      connectionName: resolution.connection.displayName,\n      deliveryId: params.deliveryId,\n      receivedAt: new Date().toISOString(),\n      payload,\n    },\n  });\n\n  return {outcome: result.published ? 'published' : 'duplicate'};\n}\n\nexport function isSelfAuthoredSlackEvent(event: unknown, botUserId: string): boolean {\n  const parsed = slackSelfAuthoredEventSchema.safeParse(event);\n  if (!parsed.success) return false;\n  const nestedMessage = parsed.data.message;\n  return (\n    parsed.data.bot_id !== undefined ||\n    parsed.data.user === botUserId ||\n    nestedMessage?.bot_id !== undefined ||\n    nestedMessage?.user === botUserId\n  );\n}\n\nasync function resolveSlackConnection(\n  params: SlackWebhookParams & {teamId: string},\n): Promise<SlackConnectionResolution> {\n  const installation = await getSlackInstallationByTeamId(params.teamId, {tx: params.tx});\n  if (!installation) {\n    logger().warn(\n      {deliveryId: params.deliveryId, teamId: params.teamId},\n      'slack webhook: unknown team, dropping',\n    );\n    await recordSlackDeliveryOnly(params);\n    return {kind: 'drop', outcome: 'unknown-team'};\n  }\n\n  if (installation.status !== 'installed') {\n    logger().info(\n      {\n        deliveryId: params.deliveryId,\n        teamId: params.teamId,\n        connectionId: installation.connectionId,\n      },\n      'slack webhook: installation is not installed, dropping',\n    );\n    await recordSlackDeliveryOnly(params);\n    return {kind: 'drop', outcome: 'revoked-installation'};\n  }\n\n  const connection = await params.getIntegrationConnectionById(installation.connectionId, {\n    tx: params.tx,\n  });\n  if (!connection) {\n    logger().warn(\n      {\n        deliveryId: params.deliveryId,\n        teamId: params.teamId,\n        connectionId: installation.connectionId,\n      },\n      'slack webhook: installation has no connection, dropping',\n    );\n    await recordSlackDeliveryOnly(params);\n    return {kind: 'drop', outcome: 'missing-connection'};\n  }\n\n  if (connection.lifecycleStatus !== 'active') {\n    logger().info(\n      {deliveryId: params.deliveryId, teamId: params.teamId, connectionId: connection.id},\n      'slack webhook: inactive connection, dropping',\n    );\n    await recordSlackDeliveryOnly(params);\n    return {kind: 'drop', outcome: 'inactive-connection'};\n  }\n\n  return {kind: 'ok', connection, installation};\n}\n\nasync function recordSlackDeliveryOnly(\n  params: Pick<SlackWebhookParams, 'tx' | 'deliveryId' | 'recordDeliveryOnly'>,\n): Promise<void> {\n  await params.recordDeliveryOnly({\n    tx: params.tx,\n    provider: SLACK_PROVIDER,\n    deliveryId: params.deliveryId,\n  });\n}\n"],"names":["SLACK_PROVIDER","SLACK_SLASH_COMMAND_EVENT","slackEventEnvelopeSchema","logger","z","getSlackInstallationByTeamId","slackSelfAuthoredEventSchema","object","bot_id","string","optional","user","message","passthrough","handleSlackEvent","params","resolution","resolveSlackConnection","teamId","envelope","team_id","kind","isSelfAuthoredSlackEvent","event","installation","botUserId","recordSlackDeliveryOnly","outcome","supported","safeParse","success","info","deliveryId","type","result","publishIntegrationEventReceived","tx","provider","source","connection","slug","data","workspaceId","connectionId","id","connectionName","displayName","receivedAt","Date","toISOString","payload","api_app_id","event_id","event_time","published","handleSlackCommand","command","token","_token","parsed","nestedMessage","undefined","warn","status","getIntegrationConnectionById","lifecycleStatus","recordDeliveryOnly"],"mappings":"AAOA,SACEA,cAAc,EACdC,yBAAyB,EAGzBC,wBAAwB,QACnB,qCAAqC;AAC5C,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,4BAA4B,QAA+B,uBAAuB;AAE1F,MAAMC,+BAA+BF,EAClCG,MAAM,CAAC;IACNC,QAAQJ,EAAEK,MAAM,GAAGC,QAAQ;IAC3BC,MAAMP,EAAEK,MAAM,GAAGC,QAAQ;IACzBE,SAASR,EACNG,MAAM,CAAC;QACNC,QAAQJ,EAAEK,MAAM,GAAGC,QAAQ;QAC3BC,MAAMP,EAAEK,MAAM,GAAGC,QAAQ;IAC3B,GACCG,WAAW,GACXH,QAAQ;AACb,GACCG,WAAW;AAsCd,OAAO,eAAeC,iBACpBC,MAA8B;IAE9B,MAAMC,aAAa,MAAMC,uBAAuB;QAC9C,GAAGF,MAAM;QACTG,QAAQH,OAAOI,QAAQ,CAACC,OAAO;IACjC;IACA,IAAIJ,WAAWK,IAAI,KAAK,QAAQ,OAAOL;IAEvC,IAAIM,yBAAyBP,OAAOI,QAAQ,CAACI,KAAK,EAAEP,WAAWQ,YAAY,CAACC,SAAS,GAAG;QACtF,MAAMC,wBAAwBX;QAC9B,OAAO;YAACY,SAAS;QAAc;IACjC;IAEA,MAAMC,YAAY1B,yBAAyB2B,SAAS,CAACd,OAAOI,QAAQ;IACpE,IAAI,CAACS,UAAUE,OAAO,EAAE;QACtB3B,SAAS4B,IAAI,CACX;YACEC,YAAYjB,OAAOiB,UAAU;YAC7Bd,QAAQH,OAAOI,QAAQ,CAACC,OAAO;YAC/Ba,MAAMlB,OAAOI,QAAQ,CAACI,KAAK,CAACU,IAAI;QAClC,GACA;QAEF,MAAMP,wBAAwBX;QAC9B,OAAO;YAACY,SAAS;QAAmB;IACtC;IAEA,MAAMO,SAAS,MAAMnB,OAAOoB,+BAA+B,CAAC;QAC1DC,IAAIrB,OAAOqB,EAAE;QACbb,OAAO;YACLc,UAAUrC;YACVsC,QAAQtB,WAAWuB,UAAU,CAACC,IAAI;YAClCjB,OAAOK,UAAUa,IAAI,CAAClB,KAAK,CAACU,IAAI;YAChCS,aAAa1B,WAAWuB,UAAU,CAACG,WAAW;YAC9CC,cAAc3B,WAAWuB,UAAU,CAACK,EAAE;YACtCC,gBAAgB7B,WAAWuB,UAAU,CAACO,WAAW;YACjDd,YAAYjB,OAAOiB,UAAU;YAC7Be,YAAY,IAAIC,OAAOC,WAAW;YAClCC,SAAS;gBACP,GAAGtB,UAAUa,IAAI,CAAClB,KAAK;gBACvBH,SAASQ,UAAUa,IAAI,CAACrB,OAAO;gBAC/B+B,YAAYvB,UAAUa,IAAI,CAACU,UAAU;gBACrCC,UAAUxB,UAAUa,IAAI,CAACW,QAAQ;gBACjCC,YAAYzB,UAAUa,IAAI,CAACY,UAAU;YACvC;QACF;IACF;IAEA,OAAO;QAAC1B,SAASO,OAAOoB,SAAS,GAAG,cAAc;IAAW;AAC/D;AAEA,OAAO,eAAeC,mBACpBxC,MAAgC;IAEhC,MAAMC,aAAa,MAAMC,uBAAuB;QAC9C,GAAGF,MAAM;QACTG,QAAQH,OAAOyC,OAAO,CAACpC,OAAO;IAChC;IACA,IAAIJ,WAAWK,IAAI,KAAK,QAAQ,OAAOL;IAEvC,MAAM,EAACyC,OAAOC,MAAM,EAAE,GAAGR,SAAQ,GAAGnC,OAAOyC,OAAO;IAClD,MAAMtB,SAAS,MAAMnB,OAAOoB,+BAA+B,CAAC;QAC1DC,IAAIrB,OAAOqB,EAAE;QACbb,OAAO;YACLc,UAAUrC;YACVsC,QAAQtB,WAAWuB,UAAU,CAACC,IAAI;YAClCjB,OAAOtB;YACPyC,aAAa1B,WAAWuB,UAAU,CAACG,WAAW;YAC9CC,cAAc3B,WAAWuB,UAAU,CAACK,EAAE;YACtCC,gBAAgB7B,WAAWuB,UAAU,CAACO,WAAW;YACjDd,YAAYjB,OAAOiB,UAAU;YAC7Be,YAAY,IAAIC,OAAOC,WAAW;YAClCC;QACF;IACF;IAEA,OAAO;QAACvB,SAASO,OAAOoB,SAAS,GAAG,cAAc;IAAW;AAC/D;AAEA,OAAO,SAAShC,yBAAyBC,KAAc,EAAEE,SAAiB;IACxE,MAAMkC,SAASrD,6BAA6BuB,SAAS,CAACN;IACtD,IAAI,CAACoC,OAAO7B,OAAO,EAAE,OAAO;IAC5B,MAAM8B,gBAAgBD,OAAOlB,IAAI,CAAC7B,OAAO;IACzC,OACE+C,OAAOlB,IAAI,CAACjC,MAAM,KAAKqD,aACvBF,OAAOlB,IAAI,CAAC9B,IAAI,KAAKc,aACrBmC,eAAepD,WAAWqD,aAC1BD,eAAejD,SAASc;AAE5B;AAEA,eAAeR,uBACbF,MAA6C;IAE7C,MAAMS,eAAe,MAAMnB,6BAA6BU,OAAOG,MAAM,EAAE;QAACkB,IAAIrB,OAAOqB,EAAE;IAAA;IACrF,IAAI,CAACZ,cAAc;QACjBrB,SAAS2D,IAAI,CACX;YAAC9B,YAAYjB,OAAOiB,UAAU;YAAEd,QAAQH,OAAOG,MAAM;QAAA,GACrD;QAEF,MAAMQ,wBAAwBX;QAC9B,OAAO;YAACM,MAAM;YAAQM,SAAS;QAAc;IAC/C;IAEA,IAAIH,aAAauC,MAAM,KAAK,aAAa;QACvC5D,SAAS4B,IAAI,CACX;YACEC,YAAYjB,OAAOiB,UAAU;YAC7Bd,QAAQH,OAAOG,MAAM;YACrByB,cAAcnB,aAAamB,YAAY;QACzC,GACA;QAEF,MAAMjB,wBAAwBX;QAC9B,OAAO;YAACM,MAAM;YAAQM,SAAS;QAAsB;IACvD;IAEA,MAAMY,aAAa,MAAMxB,OAAOiD,4BAA4B,CAACxC,aAAamB,YAAY,EAAE;QACtFP,IAAIrB,OAAOqB,EAAE;IACf;IACA,IAAI,CAACG,YAAY;QACfpC,SAAS2D,IAAI,CACX;YACE9B,YAAYjB,OAAOiB,UAAU;YAC7Bd,QAAQH,OAAOG,MAAM;YACrByB,cAAcnB,aAAamB,YAAY;QACzC,GACA;QAEF,MAAMjB,wBAAwBX;QAC9B,OAAO;YAACM,MAAM;YAAQM,SAAS;QAAoB;IACrD;IAEA,IAAIY,WAAW0B,eAAe,KAAK,UAAU;QAC3C9D,SAAS4B,IAAI,CACX;YAACC,YAAYjB,OAAOiB,UAAU;YAAEd,QAAQH,OAAOG,MAAM;YAAEyB,cAAcJ,WAAWK,EAAE;QAAA,GAClF;QAEF,MAAMlB,wBAAwBX;QAC9B,OAAO;YAACM,MAAM;YAAQM,SAAS;QAAqB;IACtD;IAEA,OAAO;QAACN,MAAM;QAAMkB;QAAYf;IAAY;AAC9C;AAEA,eAAeE,wBACbX,MAA4E;IAE5E,MAAMA,OAAOmD,kBAAkB,CAAC;QAC9B9B,IAAIrB,OAAOqB,EAAE;QACbC,UAAUrC;QACVgC,YAAYjB,OAAOiB,UAAU;IAC/B;AACF"}