@shipfox/api-integration-slack 4.0.0

package/dist/presentation/routes/errors.js

@@ -0,0 +1,75 @@
+import { ConnectionSlugConflictError } from '@shipfox/api-integration-core-dto';
+import { ClientError } from '@shipfox/node-fastify';
+import { SlackAuthorizationScopeMismatchError, SlackConnectionAlreadyLinkedError, SlackEnterpriseInstallUnsupportedError, SlackInstallationAlreadyLinkedError, SlackInstallStateActorMismatchError, SlackInstallStateError, SlackIntegrationProviderError, SlackOAuthCallbackError, SlackTokenRotationUnsupportedError } from '#core/errors.js';
+function providerStatus(reason) {
+    if (reason === 'rate-limited') return 429;
+    if (reason === 'timeout' || reason === 'provider-unavailable') return 503;
+    return 422;
+}
+export function slackRouteErrorHandler(error) {
+    if (error instanceof SlackInstallStateError) {
+        throw new ClientError(error.message, 'invalid-slack-install-state', {
+            status: 400
+        });
+    }
+    if (error instanceof SlackInstallStateActorMismatchError) {
+        throw new ClientError(error.message, 'slack-install-state-actor-mismatch', {
+            status: 403
+        });
+    }
+    if (error instanceof SlackInstallationAlreadyLinkedError) {
+        throw new ClientError(error.message, 'slack-installation-already-linked', {
+            status: 409
+        });
+    }
+    if (error instanceof SlackConnectionAlreadyLinkedError) {
+        throw new ClientError(error.message, 'slack-connection-already-linked', {
+            status: 409
+        });
+    }
+    if (error instanceof SlackAuthorizationScopeMismatchError) {
+        throw new ClientError(error.message, 'slack-authorization-scope-mismatch', {
+            status: 422,
+            details: {
+                missing_scopes: error.missingScopes
+            }
+        });
+    }
+    if (error instanceof SlackEnterpriseInstallUnsupportedError) {
+        throw new ClientError(error.message, 'slack-enterprise-install-unsupported', {
+            status: 422
+        });
+    }
+    if (error instanceof SlackTokenRotationUnsupportedError) {
+        throw new ClientError(error.message, 'slack-token-rotation-unsupported', {
+            status: 422
+        });
+    }
+    if (error instanceof SlackOAuthCallbackError) {
+        throw new ClientError(error.message, 'slack-oauth-callback-error', {
+            status: 422,
+            details: {
+                error: error.providerError,
+                ...error.providerDescription ? {
+                    error_description: error.providerDescription
+                } : {}
+            }
+        });
+    }
+    if (error instanceof ConnectionSlugConflictError) {
+        throw new ClientError(error.message, 'slug-conflict', {
+            status: 409
+        });
+    }
+    if (error instanceof SlackIntegrationProviderError) {
+        throw new ClientError(error.message, error.reason, {
+            details: {
+                retry_after_seconds: error.retryAfterSeconds
+            },
+            status: providerStatus(error.reason)
+        });
+    }
+    throw error;
+}
+
+//# sourceMappingURL=errors.js.map

package/dist/presentation/routes/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/errors.ts"],"sourcesContent":["import {\n  ConnectionSlugConflictError,\n  type IntegrationProviderErrorReason,\n} from '@shipfox/api-integration-core-dto';\nimport {ClientError} from '@shipfox/node-fastify';\nimport {\n  SlackAuthorizationScopeMismatchError,\n  SlackConnectionAlreadyLinkedError,\n  SlackEnterpriseInstallUnsupportedError,\n  SlackInstallationAlreadyLinkedError,\n  SlackInstallStateActorMismatchError,\n  SlackInstallStateError,\n  SlackIntegrationProviderError,\n  SlackOAuthCallbackError,\n  SlackTokenRotationUnsupportedError,\n} from '#core/errors.js';\n\nfunction providerStatus(reason: IntegrationProviderErrorReason): number {\n  if (reason === 'rate-limited') return 429;\n  if (reason === 'timeout' || reason === 'provider-unavailable') return 503;\n  return 422;\n}\n\nexport function slackRouteErrorHandler(error: unknown): never {\n  if (error instanceof SlackInstallStateError) {\n    throw new ClientError(error.message, 'invalid-slack-install-state', {status: 400});\n  }\n  if (error instanceof SlackInstallStateActorMismatchError) {\n    throw new ClientError(error.message, 'slack-install-state-actor-mismatch', {status: 403});\n  }\n  if (error instanceof SlackInstallationAlreadyLinkedError) {\n    throw new ClientError(error.message, 'slack-installation-already-linked', {status: 409});\n  }\n  if (error instanceof SlackConnectionAlreadyLinkedError) {\n    throw new ClientError(error.message, 'slack-connection-already-linked', {status: 409});\n  }\n  if (error instanceof SlackAuthorizationScopeMismatchError) {\n    throw new ClientError(error.message, 'slack-authorization-scope-mismatch', {\n      status: 422,\n      details: {missing_scopes: error.missingScopes},\n    });\n  }\n  if (error instanceof SlackEnterpriseInstallUnsupportedError) {\n    throw new ClientError(error.message, 'slack-enterprise-install-unsupported', {status: 422});\n  }\n  if (error instanceof SlackTokenRotationUnsupportedError) {\n    throw new ClientError(error.message, 'slack-token-rotation-unsupported', {status: 422});\n  }\n  if (error instanceof SlackOAuthCallbackError) {\n    throw new ClientError(error.message, 'slack-oauth-callback-error', {\n      status: 422,\n      details: {\n        error: error.providerError,\n        ...(error.providerDescription ? {error_description: error.providerDescription} : {}),\n      },\n    });\n  }\n  if (error instanceof ConnectionSlugConflictError) {\n    throw new ClientError(error.message, 'slug-conflict', {status: 409});\n  }\n  if (error instanceof SlackIntegrationProviderError) {\n    throw new ClientError(error.message, error.reason, {\n      details: {retry_after_seconds: error.retryAfterSeconds},\n      status: providerStatus(error.reason),\n    });\n  }\n  throw error;\n}\n"],"names":["ConnectionSlugConflictError","ClientError","SlackAuthorizationScopeMismatchError","SlackConnectionAlreadyLinkedError","SlackEnterpriseInstallUnsupportedError","SlackInstallationAlreadyLinkedError","SlackInstallStateActorMismatchError","SlackInstallStateError","SlackIntegrationProviderError","SlackOAuthCallbackError","SlackTokenRotationUnsupportedError","providerStatus","reason","slackRouteErrorHandler","error","message","status","details","missing_scopes","missingScopes","providerError","providerDescription","error_description","retry_after_seconds","retryAfterSeconds"],"mappings":"AAAA,SACEA,2BAA2B,QAEtB,oCAAoC;AAC3C,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SACEC,oCAAoC,EACpCC,iCAAiC,EACjCC,sCAAsC,EACtCC,mCAAmC,EACnCC,mCAAmC,EACnCC,sBAAsB,EACtBC,6BAA6B,EAC7BC,uBAAuB,EACvBC,kCAAkC,QAC7B,kBAAkB;AAEzB,SAASC,eAAeC,MAAsC;IAC5D,IAAIA,WAAW,gBAAgB,OAAO;IACtC,IAAIA,WAAW,aAAaA,WAAW,wBAAwB,OAAO;IACtE,OAAO;AACT;AAEA,OAAO,SAASC,uBAAuBC,KAAc;IACnD,IAAIA,iBAAiBP,wBAAwB;QAC3C,MAAM,IAAIN,YAAYa,MAAMC,OAAO,EAAE,+BAA+B;YAACC,QAAQ;QAAG;IAClF;IACA,IAAIF,iBAAiBR,qCAAqC;QACxD,MAAM,IAAIL,YAAYa,MAAMC,OAAO,EAAE,sCAAsC;YAACC,QAAQ;QAAG;IACzF;IACA,IAAIF,iBAAiBT,qCAAqC;QACxD,MAAM,IAAIJ,YAAYa,MAAMC,OAAO,EAAE,qCAAqC;YAACC,QAAQ;QAAG;IACxF;IACA,IAAIF,iBAAiBX,mCAAmC;QACtD,MAAM,IAAIF,YAAYa,MAAMC,OAAO,EAAE,mCAAmC;YAACC,QAAQ;QAAG;IACtF;IACA,IAAIF,iBAAiBZ,sCAAsC;QACzD,MAAM,IAAID,YAAYa,MAAMC,OAAO,EAAE,sCAAsC;YACzEC,QAAQ;YACRC,SAAS;gBAACC,gBAAgBJ,MAAMK,aAAa;YAAA;QAC/C;IACF;IACA,IAAIL,iBAAiBV,wCAAwC;QAC3D,MAAM,IAAIH,YAAYa,MAAMC,OAAO,EAAE,wCAAwC;YAACC,QAAQ;QAAG;IAC3F;IACA,IAAIF,iBAAiBJ,oCAAoC;QACvD,MAAM,IAAIT,YAAYa,MAAMC,OAAO,EAAE,oCAAoC;YAACC,QAAQ;QAAG;IACvF;IACA,IAAIF,iBAAiBL,yBAAyB;QAC5C,MAAM,IAAIR,YAAYa,MAAMC,OAAO,EAAE,8BAA8B;YACjEC,QAAQ;YACRC,SAAS;gBACPH,OAAOA,MAAMM,aAAa;gBAC1B,GAAIN,MAAMO,mBAAmB,GAAG;oBAACC,mBAAmBR,MAAMO,mBAAmB;gBAAA,IAAI,CAAC,CAAC;YACrF;QACF;IACF;IACA,IAAIP,iBAAiBd,6BAA6B;QAChD,MAAM,IAAIC,YAAYa,MAAMC,OAAO,EAAE,iBAAiB;YAACC,QAAQ;QAAG;IACpE;IACA,IAAIF,iBAAiBN,+BAA+B;QAClD,MAAM,IAAIP,YAAYa,MAAMC,OAAO,EAAED,MAAMF,MAAM,EAAE;YACjDK,SAAS;gBAACM,qBAAqBT,MAAMU,iBAAiB;YAAA;YACtDR,QAAQL,eAAeG,MAAMF,MAAM;QACrC;IACF;IACA,MAAME;AACR"}

package/dist/presentation/routes/install.d.ts

@@ -0,0 +1,19 @@
+import type { IntegrationCapability, IntegrationConnection } from '@shipfox/api-integration-core-dto';
+import { type RouteGroup } from '@shipfox/node-fastify';
+import type { SlackApiClient } from '#api/client.js';
+import { type ConnectSlackInstallationInput } from '#core/install.js';
+import type { SlackTokenStore } from '#core/tokens.js';
+export interface CreateSlackIntegrationRoutesOptions {
+    slack: SlackApiClient;
+    tokenStore: Pick<SlackTokenStore, 'storeTokens'>;
+    getExistingSlackConnection: (input: {
+        teamId: string;
+    }) => Promise<IntegrationConnection<'slack'> | undefined>;
+    connectSlackInstallation: (input: ConnectSlackInstallationInput) => Promise<IntegrationConnection<'slack'>>;
+    disconnectSlackInstallation: (input: {
+        connectionId: string;
+    }) => Promise<void>;
+    connectionCapabilities: IntegrationCapability[];
+}
+export declare function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities, }: CreateSlackIntegrationRoutesOptions): RouteGroup;
+//# sourceMappingURL=install.d.ts.map

package/dist/presentation/routes/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/install.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,mCAAmC,CAAC;AASpG,OAAO,EAAc,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EACL,KAAK,6BAA6B,EAGnC,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAIrD,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IACjD,0BAA0B,EAAE,CAAC,KAAK,EAAE;QAClC,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC1D,wBAAwB,EAAE,CACxB,KAAK,EAAE,6BAA6B,KACjC,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,2BAA2B,EAAE,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;CACjD;AAED,wBAAgB,4BAA4B,CAAC,EAC3C,KAAK,EACL,UAAU,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,GACvB,EAAE,mCAAmC,GAAG,UAAU,CAgElD"}

package/dist/presentation/routes/install.js

@@ -0,0 +1,98 @@
+import { AUTH_USER, requireUserContext, requireWorkspaceAccess } from '@shipfox/api-auth-context';
+import { createSlackInstallBodySchema, createSlackInstallResponseSchema, slackCallbackQuerySchema, slackCallbackResponseSchema } from '@shipfox/api-integration-slack-dto';
+import { requireWorkspaceMembership } from '@shipfox/api-workspaces';
+import { defineRoute } from '@shipfox/node-fastify';
+import { config } from '#config.js';
+import { handleSlackCallback, handleSlackOAuthCallbackError } from '#core/install.js';
+import { formatSlackBotScopes } from '#core/scopes.js';
+import { signSlackInstallState } from '#core/state.js';
+import { toIntegrationConnectionDto } from '#presentation/dto/integrations.js';
+import { slackRouteErrorHandler } from './errors.js';
+export function createSlackIntegrationRoutes({ slack, tokenStore, getExistingSlackConnection, connectSlackInstallation, disconnectSlackInstallation, connectionCapabilities }) {
+    const installRoute = defineRoute({
+        method: 'POST',
+        path: '/install',
+        auth: AUTH_USER,
+        description: 'Create a Slack OAuth authorization URL for a workspace.',
+        schema: {
+            body: createSlackInstallBodySchema,
+            response: {
+                200: createSlackInstallResponseSchema
+            }
+        },
+        handler: (request)=>{
+            const { workspace_id: workspaceId } = request.body;
+            const actor = requireUserContext(request);
+            requireWorkspaceAccess({
+                request,
+                workspaceId
+            });
+            const state = signSlackInstallState({
+                workspaceId,
+                userId: actor.userId
+            });
+            const installUrl = new URL('https://slack.com/oauth/v2/authorize');
+            installUrl.searchParams.set('client_id', config.SLACK_OAUTH_CLIENT_ID);
+            installUrl.searchParams.set('scope', formatSlackBotScopes());
+            installUrl.searchParams.set('redirect_uri', config.SLACK_OAUTH_REDIRECT_URL);
+            installUrl.searchParams.set('state', state);
+            return {
+                install_url: installUrl.toString()
+            };
+        }
+    });
+    const callbackApiRoute = defineRoute({
+        method: 'GET',
+        path: '/callback/api',
+        auth: AUTH_USER,
+        description: 'Handle the Slack OAuth callback.',
+        schema: {
+            querystring: slackCallbackQuerySchema,
+            response: {
+                200: slackCallbackResponseSchema
+            }
+        },
+        errorHandler: slackRouteErrorHandler,
+        handler: async (request)=>{
+            const actor = requireUserContext(request);
+            const query = request.query;
+            if (isSlackOAuthErrorCallback(query)) {
+                return await handleSlackOAuthCallbackError({
+                    state: query.state,
+                    error: query.error,
+                    errorDescription: query.error_description,
+                    sessionUserId: actor.userId,
+                    sessionMemberships: actor.memberships,
+                    requireWorkspaceMembership
+                });
+            }
+            const connection = await handleSlackCallback({
+                slack,
+                tokenStore,
+                code: query.code,
+                state: query.state,
+                sessionUserId: actor.userId,
+                sessionMemberships: actor.memberships,
+                requireWorkspaceMembership,
+                getExistingSlackConnection,
+                connectSlackInstallation,
+                disconnectSlackInstallation
+            });
+            return toIntegrationConnectionDto(connection, {
+                capabilities: connectionCapabilities
+            });
+        }
+    });
+    return {
+        prefix: '/integrations/slack',
+        routes: [
+            installRoute,
+            callbackApiRoute
+        ]
+    };
+}
+function isSlackOAuthErrorCallback(query) {
+    return 'error' in query && typeof query.error === 'string';
+}
+
+//# sourceMappingURL=install.js.map

package/dist/presentation/routes/install.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/install.ts"],"sourcesContent":["import {AUTH_USER, requireUserContext, requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport type {IntegrationCapability, IntegrationConnection} from '@shipfox/api-integration-core-dto';\nimport {\n  createSlackInstallBodySchema,\n  createSlackInstallResponseSchema,\n  type SlackCallbackQueryDto,\n  slackCallbackQuerySchema,\n  slackCallbackResponseSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {requireWorkspaceMembership} from '@shipfox/api-workspaces';\nimport {defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport type {SlackApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {\n  type ConnectSlackInstallationInput,\n  handleSlackCallback,\n  handleSlackOAuthCallbackError,\n} from '#core/install.js';\nimport {formatSlackBotScopes} from '#core/scopes.js';\nimport {signSlackInstallState} from '#core/state.js';\nimport type {SlackTokenStore} from '#core/tokens.js';\nimport {toIntegrationConnectionDto} from '#presentation/dto/integrations.js';\nimport {slackRouteErrorHandler} from './errors.js';\n\nexport interface CreateSlackIntegrationRoutesOptions {\n  slack: SlackApiClient;\n  tokenStore: Pick<SlackTokenStore, 'storeTokens'>;\n  getExistingSlackConnection: (input: {\n    teamId: string;\n  }) => Promise<IntegrationConnection<'slack'> | undefined>;\n  connectSlackInstallation: (\n    input: ConnectSlackInstallationInput,\n  ) => Promise<IntegrationConnection<'slack'>>;\n  disconnectSlackInstallation: (input: {connectionId: string}) => Promise<void>;\n  connectionCapabilities: IntegrationCapability[];\n}\n\nexport function createSlackIntegrationRoutes({\n  slack,\n  tokenStore,\n  getExistingSlackConnection,\n  connectSlackInstallation,\n  disconnectSlackInstallation,\n  connectionCapabilities,\n}: CreateSlackIntegrationRoutesOptions): RouteGroup {\n  const installRoute = defineRoute({\n    method: 'POST',\n    path: '/install',\n    auth: AUTH_USER,\n    description: 'Create a Slack OAuth authorization URL for a workspace.',\n    schema: {\n      body: createSlackInstallBodySchema,\n      response: {200: createSlackInstallResponseSchema},\n    },\n    handler: (request) => {\n      const {workspace_id: workspaceId} = request.body;\n      const actor = requireUserContext(request);\n      requireWorkspaceAccess({request, workspaceId});\n      const state = signSlackInstallState({workspaceId, userId: actor.userId});\n      const installUrl = new URL('https://slack.com/oauth/v2/authorize');\n      installUrl.searchParams.set('client_id', config.SLACK_OAUTH_CLIENT_ID);\n      installUrl.searchParams.set('scope', formatSlackBotScopes());\n      installUrl.searchParams.set('redirect_uri', config.SLACK_OAUTH_REDIRECT_URL);\n      installUrl.searchParams.set('state', state);\n      return {install_url: installUrl.toString()};\n    },\n  });\n\n  const callbackApiRoute = defineRoute({\n    method: 'GET',\n    path: '/callback/api',\n    auth: AUTH_USER,\n    description: 'Handle the Slack OAuth callback.',\n    schema: {\n      querystring: slackCallbackQuerySchema,\n      response: {200: slackCallbackResponseSchema},\n    },\n    errorHandler: slackRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const query = request.query;\n      if (isSlackOAuthErrorCallback(query)) {\n        return await handleSlackOAuthCallbackError({\n          state: query.state,\n          error: query.error,\n          errorDescription: query.error_description,\n          sessionUserId: actor.userId,\n          sessionMemberships: actor.memberships,\n          requireWorkspaceMembership,\n        });\n      }\n      const connection = await handleSlackCallback({\n        slack,\n        tokenStore,\n        code: query.code,\n        state: query.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership,\n        getExistingSlackConnection,\n        connectSlackInstallation,\n        disconnectSlackInstallation,\n      });\n      return toIntegrationConnectionDto(connection, {capabilities: connectionCapabilities});\n    },\n  });\n\n  return {prefix: '/integrations/slack', routes: [installRoute, callbackApiRoute]};\n}\n\nfunction isSlackOAuthErrorCallback(query: SlackCallbackQueryDto): query is SlackCallbackQueryDto & {\n  error: string;\n  error_description?: string | undefined;\n  state: string;\n} {\n  return 'error' in query && typeof query.error === 'string';\n}\n"],"names":["AUTH_USER","requireUserContext","requireWorkspaceAccess","createSlackInstallBodySchema","createSlackInstallResponseSchema","slackCallbackQuerySchema","slackCallbackResponseSchema","requireWorkspaceMembership","defineRoute","config","handleSlackCallback","handleSlackOAuthCallbackError","formatSlackBotScopes","signSlackInstallState","toIntegrationConnectionDto","slackRouteErrorHandler","createSlackIntegrationRoutes","slack","tokenStore","getExistingSlackConnection","connectSlackInstallation","disconnectSlackInstallation","connectionCapabilities","installRoute","method","path","auth","description","schema","body","response","handler","request","workspace_id","workspaceId","actor","state","userId","installUrl","URL","searchParams","set","SLACK_OAUTH_CLIENT_ID","SLACK_OAUTH_REDIRECT_URL","install_url","toString","callbackApiRoute","querystring","errorHandler","query","isSlackOAuthErrorCallback","error","errorDescription","error_description","sessionUserId","sessionMemberships","memberships","connection","code","capabilities","prefix","routes"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,kBAAkB,EAAEC,sBAAsB,QAAO,4BAA4B;AAEhG,SACEC,4BAA4B,EAC5BC,gCAAgC,EAEhCC,wBAAwB,EACxBC,2BAA2B,QACtB,qCAAqC;AAC5C,SAAQC,0BAA0B,QAAO,0BAA0B;AACnE,SAAQC,WAAW,QAAwB,wBAAwB;AAEnE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,mBAAmB,EACnBC,6BAA6B,QACxB,mBAAmB;AAC1B,SAAQC,oBAAoB,QAAO,kBAAkB;AACrD,SAAQC,qBAAqB,QAAO,iBAAiB;AAErD,SAAQC,0BAA0B,QAAO,oCAAoC;AAC7E,SAAQC,sBAAsB,QAAO,cAAc;AAenD,OAAO,SAASC,6BAA6B,EAC3CC,KAAK,EACLC,UAAU,EACVC,0BAA0B,EAC1BC,wBAAwB,EACxBC,2BAA2B,EAC3BC,sBAAsB,EACc;IACpC,MAAMC,eAAef,YAAY;QAC/BgB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNC,MAAM1B;YACN2B,UAAU;gBAAC,KAAK1B;YAAgC;QAClD;QACA2B,SAAS,CAACC;YACR,MAAM,EAACC,cAAcC,WAAW,EAAC,GAAGF,QAAQH,IAAI;YAChD,MAAMM,QAAQlC,mBAAmB+B;YACjC9B,uBAAuB;gBAAC8B;gBAASE;YAAW;YAC5C,MAAME,QAAQvB,sBAAsB;gBAACqB;gBAAaG,QAAQF,MAAME,MAAM;YAAA;YACtE,MAAMC,aAAa,IAAIC,IAAI;YAC3BD,WAAWE,YAAY,CAACC,GAAG,CAAC,aAAahC,OAAOiC,qBAAqB;YACrEJ,WAAWE,YAAY,CAACC,GAAG,CAAC,SAAS7B;YACrC0B,WAAWE,YAAY,CAACC,GAAG,CAAC,gBAAgBhC,OAAOkC,wBAAwB;YAC3EL,WAAWE,YAAY,CAACC,GAAG,CAAC,SAASL;YACrC,OAAO;gBAACQ,aAAaN,WAAWO,QAAQ;YAAE;QAC5C;IACF;IAEA,MAAMC,mBAAmBtC,YAAY;QACnCgB,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNmB,aAAa1C;YACbyB,UAAU;gBAAC,KAAKxB;YAA2B;QAC7C;QACA0C,cAAcjC;QACdgB,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMiB,QAAQjB,QAAQiB,KAAK;YAC3B,IAAIC,0BAA0BD,QAAQ;gBACpC,OAAO,MAAMtC,8BAA8B;oBACzCyB,OAAOa,MAAMb,KAAK;oBAClBe,OAAOF,MAAME,KAAK;oBAClBC,kBAAkBH,MAAMI,iBAAiB;oBACzCC,eAAenB,MAAME,MAAM;oBAC3BkB,oBAAoBpB,MAAMqB,WAAW;oBACrCjD;gBACF;YACF;YACA,MAAMkD,aAAa,MAAM/C,oBAAoB;gBAC3CO;gBACAC;gBACAwC,MAAMT,MAAMS,IAAI;gBAChBtB,OAAOa,MAAMb,KAAK;gBAClBkB,eAAenB,MAAME,MAAM;gBAC3BkB,oBAAoBpB,MAAMqB,WAAW;gBACrCjD;gBACAY;gBACAC;gBACAC;YACF;YACA,OAAOP,2BAA2B2C,YAAY;gBAACE,cAAcrC;YAAsB;QACrF;IACF;IAEA,OAAO;QAACsC,QAAQ;QAAuBC,QAAQ;YAACtC;YAAcuB;SAAiB;IAAA;AACjF;AAEA,SAASI,0BAA0BD,KAA4B;IAK7D,OAAO,WAAWA,SAAS,OAAOA,MAAME,KAAK,KAAK;AACpD"}

package/dist/presentation/routes/webhooks.d.ts

@@ -0,0 +1,16 @@
+import type { GetIntegrationConnectionByIdFn, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn } from '@shipfox/api-integration-core-dto';
+import { type RouteGroup } from '@shipfox/node-fastify';
+import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
+export declare const SLACK_WEBHOOK_BODY_LIMIT: number;
+export declare const SLASH_COMMAND_ACK: {
+    readonly response_type: "ephemeral";
+    readonly text: "Working on it.";
+};
+export interface CreateSlackWebhookRoutesOptions {
+    coreDb: () => NodePgDatabase<Record<string, unknown>>;
+    publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;
+    recordDeliveryOnly: RecordDeliveryOnlyFn;
+    getIntegrationConnectionById: GetIntegrationConnectionByIdFn;
+}
+export declare function createSlackWebhookRoutes(options: CreateSlackWebhookRoutesOptions): RouteGroup[];
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/presentation/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,8BAA8B,EAC9B,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAK3C,OAAO,EAAmC,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAExF,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,2BAA2B,CAAC;AAK9D,eAAO,MAAM,wBAAwB,QAAc,CAAC;AACpD,eAAO,MAAM,iBAAiB;;;CAAgE,CAAC;AAW/F,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;CAC9D;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,UAAU,EAAE,CAmH/F"}

package/dist/presentation/routes/webhooks.js

@@ -0,0 +1,166 @@
+import { Buffer } from 'node:buffer';
+import { slackEventsRequestSchema, slackSlashCommandSchema } from '@shipfox/api-integration-slack-dto';
+import { createRawBodyPlugin, defineRoute } from '@shipfox/node-fastify';
+import { logger } from '@shipfox/node-opentelemetry';
+import { config } from '#config.js';
+import { verifySlackSignature } from '#core/signature.js';
+import { handleSlackCommand, handleSlackEvent } from '#core/webhook.js';
+export const SLACK_WEBHOOK_BODY_LIMIT = 1024 * 1024;
+export const SLASH_COMMAND_ACK = {
+    response_type: 'ephemeral',
+    text: 'Working on it.'
+};
+const slackJsonRawBodyPlugin = createRawBodyPlugin({
+    contentType: 'application/json',
+    bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
+});
+const slackFormRawBodyPlugin = createRawBodyPlugin({
+    contentType: 'application/x-www-form-urlencoded',
+    bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
+});
+export function createSlackWebhookRoutes(options) {
+    const eventsRoute = defineRoute({
+        method: 'POST',
+        path: '/',
+        auth: [],
+        description: 'Slack Events API receiver.',
+        options: {
+            bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
+        },
+        handler: async (request, reply)=>{
+            const rawBody = rawRequestBody(request.body);
+            if (rawBody === undefined) {
+                reply.code(400);
+                return {
+                    error: 'expected raw JSON body'
+                };
+            }
+            if (!hasValidSlackSignature(request.headers, rawBody)) {
+                reply.code(401);
+                return {
+                    error: 'invalid signature'
+                };
+            }
+            let parsedJson;
+            try {
+                parsedJson = JSON.parse(rawBody);
+            } catch (error) {
+                logger().warn({
+                    errorName: error instanceof Error ? error.name : 'unknown'
+                }, 'slack events payload JSON parse failed');
+                reply.code(400);
+                return {
+                    error: 'malformed JSON'
+                };
+            }
+            const parsed = slackEventsRequestSchema.safeParse(parsedJson);
+            if (!parsed.success) {
+                logger().warn({
+                    issues: parsed.error.issues
+                }, 'slack events envelope failed schema validation');
+                reply.code(200);
+                return null;
+            }
+            const eventRequest = parsed.data;
+            if (eventRequest.type === 'url_verification') {
+                reply.code(200);
+                return {
+                    challenge: eventRequest.challenge
+                };
+            }
+            await options.coreDb().transaction(async (tx)=>{
+                await handleSlackEvent({
+                    tx,
+                    deliveryId: eventRequest.event_id,
+                    envelope: eventRequest,
+                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
+                    recordDeliveryOnly: options.recordDeliveryOnly,
+                    getIntegrationConnectionById: options.getIntegrationConnectionById
+                });
+            });
+            reply.code(200);
+            return null;
+        }
+    });
+    const commandsRoute = defineRoute({
+        method: 'POST',
+        path: '/',
+        auth: [],
+        description: 'Slack slash-command receiver.',
+        options: {
+            bodyLimit: SLACK_WEBHOOK_BODY_LIMIT
+        },
+        handler: async (request, reply)=>{
+            const rawBody = rawRequestBody(request.body);
+            if (rawBody === undefined) {
+                reply.code(400);
+                return {
+                    error: 'expected raw form body'
+                };
+            }
+            if (!hasValidSlackSignature(request.headers, rawBody)) {
+                reply.code(401);
+                return {
+                    error: 'invalid signature'
+                };
+            }
+            const command = slackSlashCommandSchema.safeParse(Object.fromEntries(new URLSearchParams(rawBody)));
+            if (!command.success) {
+                logger().warn({
+                    issues: command.error.issues
+                }, 'slack command failed schema validation');
+                reply.code(200);
+                return SLASH_COMMAND_ACK;
+            }
+            await options.coreDb().transaction(async (tx)=>{
+                await handleSlackCommand({
+                    tx,
+                    deliveryId: command.data.trigger_id,
+                    command: command.data,
+                    publishIntegrationEventReceived: options.publishIntegrationEventReceived,
+                    recordDeliveryOnly: options.recordDeliveryOnly,
+                    getIntegrationConnectionById: options.getIntegrationConnectionById
+                });
+            });
+            reply.code(200);
+            return SLASH_COMMAND_ACK;
+        }
+    });
+    return [
+        {
+            prefix: '/webhooks/integrations/slack/events',
+            auth: [],
+            plugins: [
+                slackJsonRawBodyPlugin
+            ],
+            routes: [
+                eventsRoute
+            ]
+        },
+        {
+            prefix: '/webhooks/integrations/slack/commands',
+            auth: [],
+            plugins: [
+                slackFormRawBodyPlugin
+            ],
+            routes: [
+                commandsRoute
+            ]
+        }
+    ];
+}
+function rawRequestBody(body) {
+    return Buffer.isBuffer(body) ? body.toString('utf8') : undefined;
+}
+function hasValidSlackSignature(headers, rawBody) {
+    const signature = headers['x-slack-signature'];
+    const timestamp = headers['x-slack-request-timestamp'];
+    return verifySlackSignature({
+        signingSecret: config.SLACK_SIGNING_SECRET,
+        signature: typeof signature === 'string' ? signature : undefined,
+        timestamp: typeof timestamp === 'string' ? timestamp : undefined,
+        rawBody
+    });
+}
+
+//# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport type {\n  GetIntegrationConnectionByIdFn,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  slackEventsRequestSchema,\n  slackSlashCommandSchema,\n} from '@shipfox/api-integration-slack-dto';\nimport {createRawBodyPlugin, defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {NodePgDatabase} from 'drizzle-orm/node-postgres';\nimport {config} from '#config.js';\nimport {verifySlackSignature} from '#core/signature.js';\nimport {handleSlackCommand, handleSlackEvent} from '#core/webhook.js';\n\nexport const SLACK_WEBHOOK_BODY_LIMIT = 1024 * 1024;\nexport const SLASH_COMMAND_ACK = {response_type: 'ephemeral', text: 'Working on it.'} as const;\n\nconst slackJsonRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/json',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\nconst slackFormRawBodyPlugin = createRawBodyPlugin({\n  contentType: 'application/x-www-form-urlencoded',\n  bodyLimit: SLACK_WEBHOOK_BODY_LIMIT,\n});\n\nexport interface CreateSlackWebhookRoutesOptions {\n  coreDb: () => NodePgDatabase<Record<string, unknown>>;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport function createSlackWebhookRoutes(options: CreateSlackWebhookRoutesOptions): RouteGroup[] {\n  const eventsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack Events API receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const rawBody = rawRequestBody(request.body);\n      if (rawBody === undefined) {\n        reply.code(400);\n        return {error: 'expected raw JSON body'};\n      }\n      if (!hasValidSlackSignature(request.headers, rawBody)) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      let parsedJson: unknown;\n      try {\n        parsedJson = JSON.parse(rawBody);\n      } catch (error) {\n        logger().warn(\n          {errorName: error instanceof Error ? error.name : 'unknown'},\n          'slack events payload JSON parse failed',\n        );\n        reply.code(400);\n        return {error: 'malformed JSON'};\n      }\n\n      const parsed = slackEventsRequestSchema.safeParse(parsedJson);\n      if (!parsed.success) {\n        logger().warn(\n          {issues: parsed.error.issues},\n          'slack events envelope failed schema validation',\n        );\n        reply.code(200);\n        return null;\n      }\n      const eventRequest = parsed.data;\n      if (eventRequest.type === 'url_verification') {\n        reply.code(200);\n        return {challenge: eventRequest.challenge};\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleSlackEvent({\n          tx,\n          deliveryId: eventRequest.event_id,\n          envelope: eventRequest,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n        });\n      });\n      reply.code(200);\n      return null;\n    },\n  });\n\n  const commandsRoute = defineRoute({\n    method: 'POST',\n    path: '/',\n    auth: [],\n    description: 'Slack slash-command receiver.',\n    options: {bodyLimit: SLACK_WEBHOOK_BODY_LIMIT},\n    handler: async (request, reply) => {\n      const rawBody = rawRequestBody(request.body);\n      if (rawBody === undefined) {\n        reply.code(400);\n        return {error: 'expected raw form body'};\n      }\n      if (!hasValidSlackSignature(request.headers, rawBody)) {\n        reply.code(401);\n        return {error: 'invalid signature'};\n      }\n\n      const command = slackSlashCommandSchema.safeParse(\n        Object.fromEntries(new URLSearchParams(rawBody)),\n      );\n      if (!command.success) {\n        logger().warn({issues: command.error.issues}, 'slack command failed schema validation');\n        reply.code(200);\n        return SLASH_COMMAND_ACK;\n      }\n\n      await options.coreDb().transaction(async (tx) => {\n        await handleSlackCommand({\n          tx,\n          deliveryId: command.data.trigger_id,\n          command: command.data,\n          publishIntegrationEventReceived: options.publishIntegrationEventReceived,\n          recordDeliveryOnly: options.recordDeliveryOnly,\n          getIntegrationConnectionById: options.getIntegrationConnectionById,\n        });\n      });\n      reply.code(200);\n      return SLASH_COMMAND_ACK;\n    },\n  });\n\n  return [\n    {\n      prefix: '/webhooks/integrations/slack/events',\n      auth: [],\n      plugins: [slackJsonRawBodyPlugin],\n      routes: [eventsRoute],\n    },\n    {\n      prefix: '/webhooks/integrations/slack/commands',\n      auth: [],\n      plugins: [slackFormRawBodyPlugin],\n      routes: [commandsRoute],\n    },\n  ];\n}\n\nfunction rawRequestBody(body: unknown): string | undefined {\n  return Buffer.isBuffer(body) ? body.toString('utf8') : undefined;\n}\n\nfunction hasValidSlackSignature(\n  headers: Record<string, string | string[] | undefined>,\n  rawBody: string,\n): boolean {\n  const signature = headers['x-slack-signature'];\n  const timestamp = headers['x-slack-request-timestamp'];\n  return verifySlackSignature({\n    signingSecret: config.SLACK_SIGNING_SECRET,\n    signature: typeof signature === 'string' ? signature : undefined,\n    timestamp: typeof timestamp === 'string' ? timestamp : undefined,\n    rawBody,\n  });\n}\n"],"names":["Buffer","slackEventsRequestSchema","slackSlashCommandSchema","createRawBodyPlugin","defineRoute","logger","config","verifySlackSignature","handleSlackCommand","handleSlackEvent","SLACK_WEBHOOK_BODY_LIMIT","SLASH_COMMAND_ACK","response_type","text","slackJsonRawBodyPlugin","contentType","bodyLimit","slackFormRawBodyPlugin","createSlackWebhookRoutes","options","eventsRoute","method","path","auth","description","handler","request","reply","rawBody","rawRequestBody","body","undefined","code","error","hasValidSlackSignature","headers","parsedJson","JSON","parse","warn","errorName","Error","name","parsed","safeParse","success","issues","eventRequest","data","type","challenge","coreDb","transaction","tx","deliveryId","event_id","envelope","publishIntegrationEventReceived","recordDeliveryOnly","getIntegrationConnectionById","commandsRoute","command","Object","fromEntries","URLSearchParams","trigger_id","prefix","plugins","routes","isBuffer","toString","signature","timestamp","signingSecret","SLACK_SIGNING_SECRET"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AAMnC,SACEC,wBAAwB,EACxBC,uBAAuB,QAClB,qCAAqC;AAC5C,SAAQC,mBAAmB,EAAEC,WAAW,QAAwB,wBAAwB;AACxF,SAAQC,MAAM,QAAO,8BAA8B;AAEnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,oBAAoB,QAAO,qBAAqB;AACxD,SAAQC,kBAAkB,EAAEC,gBAAgB,QAAO,mBAAmB;AAEtE,OAAO,MAAMC,2BAA2B,OAAO,KAAK;AACpD,OAAO,MAAMC,oBAAoB;IAACC,eAAe;IAAaC,MAAM;AAAgB,EAAW;AAE/F,MAAMC,yBAAyBX,oBAAoB;IACjDY,aAAa;IACbC,WAAWN;AACb;AACA,MAAMO,yBAAyBd,oBAAoB;IACjDY,aAAa;IACbC,WAAWN;AACb;AASA,OAAO,SAASQ,yBAAyBC,OAAwC;IAC/E,MAAMC,cAAchB,YAAY;QAC9BiB,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbL,SAAS;YAACH,WAAWN;QAAwB;QAC7Ce,SAAS,OAAOC,SAASC;YACvB,MAAMC,UAAUC,eAAeH,QAAQI,IAAI;YAC3C,IAAIF,YAAYG,WAAW;gBACzBJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,IAAI,CAACC,uBAAuBR,QAAQS,OAAO,EAAEP,UAAU;gBACrDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,IAAIG;YACJ,IAAI;gBACFA,aAAaC,KAAKC,KAAK,CAACV;YAC1B,EAAE,OAAOK,OAAO;gBACd5B,SAASkC,IAAI,CACX;oBAACC,WAAWP,iBAAiBQ,QAAQR,MAAMS,IAAI,GAAG;gBAAS,GAC3D;gBAEFf,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAgB;YACjC;YAEA,MAAMU,SAAS1C,yBAAyB2C,SAAS,CAACR;YAClD,IAAI,CAACO,OAAOE,OAAO,EAAE;gBACnBxC,SAASkC,IAAI,CACX;oBAACO,QAAQH,OAAOV,KAAK,CAACa,MAAM;gBAAA,GAC5B;gBAEFnB,MAAMK,IAAI,CAAC;gBACX,OAAO;YACT;YACA,MAAMe,eAAeJ,OAAOK,IAAI;YAChC,IAAID,aAAaE,IAAI,KAAK,oBAAoB;gBAC5CtB,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACkB,WAAWH,aAAaG,SAAS;gBAAA;YAC3C;YAEA,MAAM/B,QAAQgC,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAM5C,iBAAiB;oBACrB4C;oBACAC,YAAYP,aAAaQ,QAAQ;oBACjCC,UAAUT;oBACVU,iCAAiCtC,QAAQsC,+BAA+B;oBACxEC,oBAAoBvC,QAAQuC,kBAAkB;oBAC9CC,8BAA8BxC,QAAQwC,4BAA4B;gBACpE;YACF;YACAhC,MAAMK,IAAI,CAAC;YACX,OAAO;QACT;IACF;IAEA,MAAM4B,gBAAgBxD,YAAY;QAChCiB,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbL,SAAS;YAACH,WAAWN;QAAwB;QAC7Ce,SAAS,OAAOC,SAASC;YACvB,MAAMC,UAAUC,eAAeH,QAAQI,IAAI;YAC3C,IAAIF,YAAYG,WAAW;gBACzBJ,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAwB;YACzC;YACA,IAAI,CAACC,uBAAuBR,QAAQS,OAAO,EAAEP,UAAU;gBACrDD,MAAMK,IAAI,CAAC;gBACX,OAAO;oBAACC,OAAO;gBAAmB;YACpC;YAEA,MAAM4B,UAAU3D,wBAAwB0C,SAAS,CAC/CkB,OAAOC,WAAW,CAAC,IAAIC,gBAAgBpC;YAEzC,IAAI,CAACiC,QAAQhB,OAAO,EAAE;gBACpBxC,SAASkC,IAAI,CAAC;oBAACO,QAAQe,QAAQ5B,KAAK,CAACa,MAAM;gBAAA,GAAG;gBAC9CnB,MAAMK,IAAI,CAAC;gBACX,OAAOrB;YACT;YAEA,MAAMQ,QAAQgC,MAAM,GAAGC,WAAW,CAAC,OAAOC;gBACxC,MAAM7C,mBAAmB;oBACvB6C;oBACAC,YAAYO,QAAQb,IAAI,CAACiB,UAAU;oBACnCJ,SAASA,QAAQb,IAAI;oBACrBS,iCAAiCtC,QAAQsC,+BAA+B;oBACxEC,oBAAoBvC,QAAQuC,kBAAkB;oBAC9CC,8BAA8BxC,QAAQwC,4BAA4B;gBACpE;YACF;YACAhC,MAAMK,IAAI,CAAC;YACX,OAAOrB;QACT;IACF;IAEA,OAAO;QACL;YACEuD,QAAQ;YACR3C,MAAM,EAAE;YACR4C,SAAS;gBAACrD;aAAuB;YACjCsD,QAAQ;gBAAChD;aAAY;QACvB;QACA;YACE8C,QAAQ;YACR3C,MAAM,EAAE;YACR4C,SAAS;gBAAClD;aAAuB;YACjCmD,QAAQ;gBAACR;aAAc;QACzB;KACD;AACH;AAEA,SAAS/B,eAAeC,IAAa;IACnC,OAAO9B,OAAOqE,QAAQ,CAACvC,QAAQA,KAAKwC,QAAQ,CAAC,UAAUvC;AACzD;AAEA,SAASG,uBACPC,OAAsD,EACtDP,OAAe;IAEf,MAAM2C,YAAYpC,OAAO,CAAC,oBAAoB;IAC9C,MAAMqC,YAAYrC,OAAO,CAAC,4BAA4B;IACtD,OAAO5B,qBAAqB;QAC1BkE,eAAenE,OAAOoE,oBAAoB;QAC1CH,WAAW,OAAOA,cAAc,WAAWA,YAAYxC;QACvDyC,WAAW,OAAOA,cAAc,WAAWA,YAAYzC;QACvDH;IACF;AACF"}