@slack/bolt 4.0.0-nextGen.9 → 4.0.0-rc.2

package/dist/App.js

@@ -4,29 +4,24 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogLevel = void 0;
-const util_1 = __importDefault(require("util"));
-const web_api_1 = require("@slack/web-api");
+const node_util_1 = __importDefault(require("node:util"));
 const logger_1 = require("@slack/logger");
+const web_api_1 = require("@slack/web-api");
 const axios_1 = __importDefault(require("axios"));
-const SocketModeReceiver_1 = __importDefault(require("./receivers/SocketModeReceiver"));
-const HTTPReceiver_1 = __importDefault(require("./receivers/HTTPReceiver"));
-const builtin_1 = require("./middleware/builtin");
-const process_1 = __importDefault(require("./middleware/process"));
+const CustomFunction_1 = require("./CustomFunction");
 const conversation_store_1 = require("./conversation-store");
-const Subscription_1 = require("./Subscription");
-const helpers_1 = require("./helpers");
 const errors_1 = require("./errors");
+const helpers_1 = require("./helpers");
+const builtin_1 = require("./middleware/builtin");
+const process_1 = __importDefault(require("./middleware/process"));
+const HTTPReceiver_1 = __importDefault(require("./receivers/HTTPReceiver"));
+const SocketModeReceiver_1 = __importDefault(require("./receivers/SocketModeReceiver"));
 const middleware_1 = require("./types/middleware");
-// eslint-disable-next-line import/order
-const allSettled = require("promise.allsettled"); // eslint-disable-line @typescript-eslint/no-require-imports
-// eslint-disable-next-line @typescript-eslint/no-require-imports, import/no-commonjs
-const packageJson = require('../package.json'); // eslint-disable-line @typescript-eslint/no-var-requires
-// ----------------------------
-// For CLI local run use case
-const cliAppTokenOverride = process.env.SLACK_CLI_XAPP;
-const cliBotTokenOverride = process.env.SLACK_CLI_XOXB;
+const utilities_1 = require("./types/utilities");
+const packageJson = require('../package.json');
 // ----------------------------
 // For listener registration methods
+// TODO: we have types for this... consolidate
 const validViewTypes = ['view_closed', 'view_submission'];
 // ----------------------------
 // For the constructor
@@ -35,9 +30,7 @@ const tokenUsage = 'Apps used in a single workspace can be initialized with a to
 var logger_2 = require("@slack/logger");
 Object.defineProperty(exports, "LogLevel", { enumerable: true, get: function () { return logger_2.LogLevel; } });
 class WebClientPool {
-    constructor() {
-        this.pool = {};
-    }
+    pool = {};
     getOrCreate(token, clientOptions) {
         const cachedClient = this.pool[token];
         if (typeof cachedClient !== 'undefined') {
@@ -52,22 +45,53 @@ class WebClientPool {
  * A Slack App
  */
 class App {
-    constructor({ signingSecret = undefined, endpoints = undefined, port = undefined, customRoutes = undefined, agent = undefined, clientTls = undefined, receiver = undefined, convoStore = undefined, token = undefined, appToken = undefined, botId = undefined, botUserId = undefined, authorize = undefined, logger = undefined, logLevel = undefined, ignoreSelf = true, clientOptions = undefined, processBeforeResponse = false, signatureVerification = true, clientId = undefined, clientSecret = undefined, stateSecret = undefined, redirectUri = undefined, installationStore = undefined, scopes = undefined, installerOptions = undefined, socketMode = undefined, developerMode = false, tokenVerificationEnabled = true, extendedErrorHandler = false, deferInitialization = false, } = {}) {
-        // Some payloads don't have teamId anymore. So we use EnterpriseId in those scenarios
-        this.clients = {};
+    /** Slack Web API client */
+    client;
+    clientOptions;
+    // Some payloads don't have teamId anymore. So we use EnterpriseId in those scenarios
+    clients = {};
+    /** Receiver - ingests events from the Slack platform */
+    receiver;
+    /** Logger */
+    logger;
+    /** Log Level */
+    logLevel;
+    /** Authorize */
+    authorize;
+    /** Global middleware chain */
+    middleware;
+    /** Listener middleware chains */
+    listeners;
+    errorHandler;
+    axios;
+    installerOptions;
+    socketMode;
+    developerMode;
+    extendedErrorHandler;
+    hasCustomErrorHandler;
+    // used when deferInitialization is true
+    argToken;
+    // used when deferInitialization is true
+    argAuthorize;
+    // used when deferInitialization is true
+    argAuthorization;
+    tokenVerificationEnabled;
+    initialized;
+    attachFunctionToken;
+    constructor({ signingSecret = undefined, endpoints = undefined, port = undefined, customRoutes = undefined, agent = undefined, clientTls = undefined, receiver = undefined, convoStore = undefined, token = undefined, appToken = undefined, botId = undefined, botUserId = undefined, authorize = undefined, logger = undefined, logLevel = undefined, ignoreSelf = true, clientOptions = undefined, processBeforeResponse = false, signatureVerification = true, clientId = undefined, clientSecret = undefined, stateSecret = undefined, redirectUri = undefined, installationStore = undefined, scopes = undefined, installerOptions = undefined, socketMode = undefined, developerMode = false, tokenVerificationEnabled = true, extendedErrorHandler = false, deferInitialization = false, attachFunctionToken = true, } = {}) {
         /* ------------------------ Developer mode ----------------------------- */
         this.developerMode = developerMode;
-        if (developerMode || cliAppTokenOverride) {
+        if (developerMode) {
             // Set logLevel to Debug in Developer Mode if one wasn't passed in
-            this.logLevel = logLevel !== null && logLevel !== void 0 ? logLevel : logger_1.LogLevel.DEBUG;
+            this.logLevel = logLevel ?? logger_1.LogLevel.DEBUG;
             // Set SocketMode to true if one wasn't passed in
-            this.socketMode = socketMode !== null && socketMode !== void 0 ? socketMode : true;
+            this.socketMode = socketMode ?? true;
         }
         else {
             // If devs aren't using Developer Mode or Socket Mode, set it to false
-            this.socketMode = socketMode !== null && socketMode !== void 0 ? socketMode : false;
+            this.socketMode = socketMode ?? false;
             // Set logLevel to Info if one wasn't passed in
-            this.logLevel = logLevel !== null && logLevel !== void 0 ? logLevel : logger_1.LogLevel.INFO;
+            this.logLevel = logLevel ?? logger_1.LogLevel.INFO;
         }
         /* ------------------------ Set logger ----------------------------- */
         if (typeof logger === 'undefined') {
@@ -86,6 +110,8 @@ class App {
         this.hasCustomErrorHandler = false;
         this.errorHandler = defaultErrorHandler(this.logger);
         this.extendedErrorHandler = extendedErrorHandler;
+        // Override token with functionBotAccessToken in function-related handlers
+        this.attachFunctionToken = attachFunctionToken;
         /* ------------------------ Set client options ------------------------*/
         this.clientOptions = clientOptions !== undefined ? clientOptions : {};
         if (agent !== undefined && this.clientOptions.agent === undefined) {
@@ -104,7 +130,7 @@ class App {
         }
         // The public WebClient instance (app.client)
         // Since v3.4, it can have the passed token in the case of single workspace installation.
-        this.client = new web_api_1.WebClient(cliBotTokenOverride || token, this.clientOptions);
+        this.client = new web_api_1.WebClient(token, this.clientOptions);
         this.axios = axios_1.default.create({
             httpAgent: agent,
             httpsAgent: agent,
@@ -138,11 +164,11 @@ class App {
                 failure: (error, _installOptions, _req, res) => {
                     this.logger.debug(error);
                     res.writeHead(500, { 'Content-Type': 'text/html' });
-                    res.end(`<html><body><h1>OAuth failed!</h1><div>${error}</div></body></html>`);
+                    res.end(`<html><body><h1>OAuth failed!</h1><div>${escapeHtml(error.code)}</div></body></html>`);
                 },
             };
         }
-        this.receiver = this.initReceiver(receiver, signingSecret, endpoints, port, customRoutes, processBeforeResponse, signatureVerification, clientId, clientSecret, stateSecret, redirectUri, installationStore, scopes, cliAppTokenOverride || appToken, logger);
+        this.receiver = this.initReceiver(receiver, signingSecret, endpoints, port, customRoutes, processBeforeResponse, signatureVerification, clientId, clientSecret, stateSecret, redirectUri, installationStore, scopes, appToken, logger);
         /* ------------------------ Set authorize ----------------------------- */
         this.tokenVerificationEnabled = tokenVerificationEnabled;
         let argAuthorization;
@@ -153,15 +179,7 @@ class App {
                 botToken: token,
             };
         }
-        if (cliBotTokenOverride !== undefined) {
-            argAuthorization = {
-                botId,
-                botUserId,
-                botToken: cliBotTokenOverride,
-            };
-        }
         if (deferInitialization) {
-            // TODO: Deal with this
             this.argToken = token;
             this.argAuthorize = authorize;
             this.argAuthorization = argAuthorization;
@@ -169,12 +187,12 @@ class App {
             // You need to run `await app.init();` on your own
         }
         else {
-            this.authorize = this.initAuthorizeInConstructor(cliBotTokenOverride || token, authorize, argAuthorization);
+            this.authorize = this.initAuthorizeInConstructor(token, authorize, argAuthorization);
             this.initialized = true;
         }
         // Conditionally use a global middleware that ignores events (including messages) that are sent from this app
         if (ignoreSelf) {
-            this.use((0, builtin_1.ignoreSelf)());
+            this.use(builtin_1.ignoreSelf);
         }
         // Use conversation state global middleware
         if (convoStore !== false) {
@@ -220,6 +238,9 @@ class App {
             throw e;
         }
     }
+    get webClientOptions() {
+        return this.clientOptions;
+    }
     /**
      * Register a new middleware, processed in the order registered.
      *
@@ -229,6 +250,27 @@ class App {
         this.middleware.push(m);
         return this;
     }
+    /**
+     * Register WorkflowStep middleware
+     *
+     * @param workflowStep global workflow step middleware function
+     * @deprecated Steps from Apps are no longer supported and support for them will be removed in the next major bolt-js
+     * version.
+     */
+    step(workflowStep) {
+        const m = workflowStep.getMiddleware();
+        this.middleware.push(m);
+        return this;
+    }
+    /**
+     * Register CustomFunction middleware
+     */
+    function(callbackId, ...listeners) {
+        const fn = new CustomFunction_1.CustomFunction(callbackId, listeners, this.webClientOptions);
+        const m = fn.getMiddleware();
+        this.middleware.push(m);
+        return this;
+    }
     /**
      * Convenience method to call start on the receiver
      *
@@ -243,38 +285,10 @@ class App {
         // TODO: HTTPReceiver['start'] should be the actual receiver's return type
         return this.receiver.start(...args);
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    // biome-ignore lint/suspicious/noExplicitAny: receivers could accept anything as arguments for stop
     stop(...args) {
         return this.receiver.stop(...args);
     }
-    /**
-     * Register WorkflowStep middleware
-     *
-     * Not to be confused with next-gen platform Workflows + Functions
-     *
-     * @param workflowStep global workflow step middleware function
-     */
-    step(workflowStep) {
-        const m = workflowStep.getMiddleware();
-        this.middleware.push(m);
-        return this;
-    }
-    /**
-     * Process a subscription event
-     *
-     * @param listeners middleware that process and react to subscription payloads
-     */
-    subscription(options) {
-        /*
-         * TODO If it becomes possible for users to set a custom unique resource id,
-         * custom id should be supplied in place of the default.
-         * */
-        const defaultId = 'DEFAULTID';
-        const s = new Subscription_1.Subscription(defaultId, options);
-        const m = s.getMiddleware();
-        this.middleware.push(m);
-        return this;
-    }
     event(eventNameOrPattern, ...listeners) {
         let invalidEventName = false;
         if (typeof eventNameOrPattern === 'string') {
@@ -286,36 +300,25 @@ class App {
             invalidEventName = name.startsWith('message\\.');
         }
         if (invalidEventName) {
-            throw new errors_1.AppInitializationError(`Although the document mentions "${eventNameOrPattern}",` +
-                'it is not a valid event type. Use "message" instead. ' +
-                'If you want to filter message events, you can use event.channel_type for it.');
+            throw new errors_1.AppInitializationError(`Although the document mentions "${eventNameOrPattern}", it is not a valid event type. Use "message" instead. If you want to filter message events, you can use event.channel_type for it.`);
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([
             builtin_1.onlyEvents,
             (0, builtin_1.matchEventType)(eventNameOrPattern),
             ..._listeners,
         ]);
     }
-    /**
-     * Register a Slack Function
-     *
-     * @param slackFn a main function to register
-     *
-     * */
-    function(slackFn) {
-        const m = slackFn.getMiddleware();
-        this.middleware.push(m);
-    }
+    // TODO: expose a type parameter for overriding the MessageEvent type (just like shortcut() and action() does) https://github.com/slackapi/bolt-js/issues/796
     message(...patternsOrMiddleware) {
         const messageMiddleware = patternsOrMiddleware.map((patternOrMiddleware) => {
-            if (typeof patternOrMiddleware === 'string' || util_1.default.types.isRegExp(patternOrMiddleware)) {
+            if (typeof patternOrMiddleware === 'string' || node_util_1.default.types.isRegExp(patternOrMiddleware)) {
                 return (0, builtin_1.matchMessage)(patternOrMiddleware);
             }
             return patternOrMiddleware;
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        }); // FIXME: workaround for TypeScript 4.7 breaking changes
+            // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        });
         this.listeners.push([
             builtin_1.onlyEvents,
             (0, builtin_1.matchEventType)('message'),
@@ -323,17 +326,18 @@ class App {
         ]);
     }
     shortcut(callbackIdOrConstraints, ...listeners) {
-        const constraints = typeof callbackIdOrConstraints === 'string' || util_1.default.types.isRegExp(callbackIdOrConstraints) ?
-            { callback_id: callbackIdOrConstraints } :
-            callbackIdOrConstraints;
+        const constraints = typeof callbackIdOrConstraints === 'string' || node_util_1.default.types.isRegExp(callbackIdOrConstraints)
+            ? { callback_id: callbackIdOrConstraints }
+            : callbackIdOrConstraints;
         // Fail early if the constraints contain invalid keys
         const unknownConstraintKeys = Object.keys(constraints).filter((k) => k !== 'callback_id' && k !== 'type');
         if (unknownConstraintKeys.length > 0) {
+            // TODO:event() will throw an error if you provide an invalid event name; we should align this behaviour.
             this.logger.error(`Slack listener cannot be attached using unknown constraint keys: ${unknownConstraintKeys.join(', ')}`);
             return;
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([
             builtin_1.onlyShortcuts,
             (0, builtin_1.matchConstraints)(constraints),
@@ -342,22 +346,23 @@ class App {
     }
     action(actionIdOrConstraints, ...listeners) {
         // Normalize Constraints
-        const constraints = typeof actionIdOrConstraints === 'string' || util_1.default.types.isRegExp(actionIdOrConstraints) ?
-            { action_id: actionIdOrConstraints } :
-            actionIdOrConstraints;
+        const constraints = typeof actionIdOrConstraints === 'string' || node_util_1.default.types.isRegExp(actionIdOrConstraints)
+            ? { action_id: actionIdOrConstraints }
+            : actionIdOrConstraints;
         // Fail early if the constraints contain invalid keys
         const unknownConstraintKeys = Object.keys(constraints).filter((k) => k !== 'action_id' && k !== 'block_id' && k !== 'callback_id' && k !== 'type');
         if (unknownConstraintKeys.length > 0) {
+            // TODO:event() will throw an error if you provide an invalid event name; we should align this behaviour.
             this.logger.error(`Action listener cannot be attached using unknown constraint keys: ${unknownConstraintKeys.join(', ')}`);
             return;
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([builtin_1.onlyActions, (0, builtin_1.matchConstraints)(constraints), ..._listeners]);
     }
     command(commandName, ...listeners) {
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([
             builtin_1.onlyCommands,
             (0, builtin_1.matchCommandName)(commandName),
@@ -366,17 +371,17 @@ class App {
     }
     // TODO: reflect the type in constraints to Source
     options(actionIdOrConstraints, ...listeners) {
-        const constraints = typeof actionIdOrConstraints === 'string' || util_1.default.types.isRegExp(actionIdOrConstraints) ?
-            { action_id: actionIdOrConstraints } :
-            actionIdOrConstraints;
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        const constraints = typeof actionIdOrConstraints === 'string' || node_util_1.default.types.isRegExp(actionIdOrConstraints)
+            ? { action_id: actionIdOrConstraints }
+            : actionIdOrConstraints;
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([builtin_1.onlyOptions, (0, builtin_1.matchConstraints)(constraints), ..._listeners]);
     }
     view(callbackIdOrConstraints, ...listeners) {
-        const constraints = typeof callbackIdOrConstraints === 'string' || util_1.default.types.isRegExp(callbackIdOrConstraints) ?
-            { callback_id: callbackIdOrConstraints, type: 'view_submission' } :
-            callbackIdOrConstraints;
+        const constraints = typeof callbackIdOrConstraints === 'string' || node_util_1.default.types.isRegExp(callbackIdOrConstraints)
+            ? { callback_id: callbackIdOrConstraints, type: 'view_submission' }
+            : callbackIdOrConstraints;
         // Fail early if the constraints contain invalid keys
         const unknownConstraintKeys = Object.keys(constraints).filter((k) => k !== 'callback_id' && k !== 'type');
         if (unknownConstraintKeys.length > 0) {
@@ -387,8 +392,8 @@ class App {
             this.logger.error(`View listener cannot be attached using unknown view event type: ${constraints.type}`);
             return;
         }
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
-        const _listeners = listeners; // FIXME: workaround for TypeScript 4.7 breaking changes
+        // biome-ignore lint/suspicious/noExplicitAny: FIXME: workaround for TypeScript 4.7 breaking changes
+        const _listeners = listeners;
         this.listeners.push([
             builtin_1.onlyViewActions,
             (0, builtin_1.matchConstraints)(constraints),
@@ -422,11 +427,10 @@ class App {
         // From this point on, we assume that body is not just a key-value map, but one of the types of bodies we expect
         const bodyArg = body;
         // Check if type event with the authorizations object or if it has a top level is_enterprise_install property
-        const isEnterpriseInstall = isBodyWithTypeEnterpriseInstall(bodyArg, type);
+        const isEnterpriseInstall = (0, helpers_1.isBodyWithTypeEnterpriseInstall)(bodyArg, type);
         const source = buildSource(type, conversationId, bodyArg, isEnterpriseInstall);
-        // Get the result of any custom authorize provided
         let authorizeResult;
-        if (type === helpers_1.IncomingEventType.Event && isEventTypeToSkipAuthorize(event.body.event.type)) {
+        if (type === helpers_1.IncomingEventType.Event && (0, helpers_1.isEventTypeToSkipAuthorize)(event)) {
             authorizeResult = {
                 enterpriseId: source.enterpriseId,
                 teamId: source.teamId,
@@ -437,12 +441,10 @@ class App {
                 authorizeResult = await this.authorize(source, bodyArg);
             }
             catch (error) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                // biome-ignore lint/suspicious/noExplicitAny: errors can be anything
                 const e = error;
                 this.logger.warn('Authorization of incoming event did not succeed. No listeners will be called.');
                 e.code = errors_1.ErrorCode.AuthorizationError;
-                // disabling due to https://github.com/typescript-eslint/typescript-eslint/issues/1277
-                // eslint-disable-next-line consistent-return
                 return this.handleError({
                     error: e,
                     logger: this.logger,
@@ -453,6 +455,10 @@ class App {
                 });
             }
         }
+        // Try to set userId from AuthorizeResult before using one from source
+        if (authorizeResult.userId === undefined && source.userId !== undefined) {
+            authorizeResult.userId = source.userId;
+        }
         // Try to set teamId from AuthorizeResult before using one from source
         if (authorizeResult.teamId === undefined && source.teamId !== undefined) {
             authorizeResult.teamId = source.teamId;
@@ -461,7 +467,6 @@ class App {
         if (authorizeResult.enterpriseId === undefined && source.enterpriseId !== undefined) {
             authorizeResult.enterpriseId = source.enterpriseId;
         }
-        // Try to set custom properties if they exist
         if (typeof event.customProperties !== 'undefined') {
             const customProps = event.customProperties;
             const builtinKeyDetected = middleware_1.contextBuiltinKeys.find((key) => key in customProps);
@@ -469,49 +474,45 @@ class App {
                 throw new errors_1.InvalidCustomPropertyError('customProperties cannot have the same names with the built-in ones');
             }
         }
-        /**
-         * Set the Slack Function Bot Access Token if it exists in event payload to the context.
-         *
-         * A bot_access_token will exist in any payload that has been generated
-         * in the context of a Slack Function execution. This includes function_execution
-         * events themselves, as well as interactivity payloads (e.g. block_actions, views).
-         *
-         * This token must be used for further Slack API calls which are relevant to this
-         * Slack Function execution in order for any interactivity context data to be
-         * properly sent by Slack.
-         *
-         * Bolt will set this value in the event Context and
-         * use this token in place of any other token (for example the token
-         * that the App was configured with) to initialize the Web Client.
-         *
-         * Sometimes the bot_access_token is located in the event
-         * Sometimes it is located directly in the body.
-         */
-        let slackFunctionBotAccessToken = body.bot_access_token;
-        if (slackFunctionBotAccessToken === undefined && 'event' in body) {
-            slackFunctionBotAccessToken = body.event.bot_access_token;
-        }
-        // Declare the event context
         const context = {
             ...authorizeResult,
             ...event.customProperties,
-            slackFunctionBotAccessToken,
             isEnterpriseInstall,
             retryNum: event.retryNum,
             retryReason: event.retryReason,
         };
+        // Extract function-related information and augment context
+        const { functionExecutionId, functionBotAccessToken, functionInputs } = extractFunctionContext(body);
+        if (functionExecutionId) {
+            context.functionExecutionId = functionExecutionId;
+            if (functionInputs) {
+                context.functionInputs = functionInputs;
+            }
+        }
+        // Attach and make available the JIT/function-related token on context
+        if (this.attachFunctionToken) {
+            if (functionBotAccessToken) {
+                context.functionBotAccessToken = functionBotAccessToken;
+            }
+        }
         // Factory for say() utility
         const createSay = (channelId) => {
             const token = selectToken(context);
             return (message) => {
-                const postMessageArguments = typeof message === 'string' ?
-                    { token, text: message, channel: channelId } :
-                    { ...message, token, channel: channelId };
+                let postMessageArguments;
+                if (typeof message === 'string') {
+                    postMessageArguments = { token, text: message, channel: channelId };
+                }
+                else {
+                    postMessageArguments = { ...message, token, channel: channelId };
+                }
                 return this.client.chat.postMessage(postMessageArguments);
             };
         };
         // Set body and payload
         // TODO: this value should eventually conform to AnyMiddlewareArgs
+        // TODO: remove workflow step stuff in bolt v5
+        // TODO: can we instead use type predicates in these switch cases to allow for narrowing of the body simultaneously? we have isEvent, isView, isShortcut, isAction already in types/utilities / helpers
         let payload;
         switch (type) {
             case helpers_1.IncomingEventType.Event:
@@ -523,8 +524,7 @@ class App {
             case helpers_1.IncomingEventType.Shortcut:
                 payload = bodyArg;
                 break;
-            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-            // @ts-ignore: Fallthrough case in switch
+            // biome-ignore lint/suspicious/noFallthroughSwitchClause: usually not great, but we do it here
             case helpers_1.IncomingEventType.Action:
                 if (isBlockActionOrInteractiveMessageBody(bodyArg)) {
                     const { actions } = bodyArg;
@@ -536,10 +536,13 @@ class App {
                 payload = bodyArg;
                 break;
         }
+        // NOTE: the following doesn't work because... distributive?
+        // const listenerArgs: Partial<AnyMiddlewareArgs> = {
         const listenerArgs = {
             body: bodyArg,
             payload,
         };
+        // TODO: can we instead use type predicates in these switch cases to allow for narrowing of the body simultaneously? we have isEvent, isView, isShortcut, isAction already in types/utilities / helpers
         // Set aliases
         if (type === helpers_1.IncomingEventType.Event) {
             const eventListenerArgs = listenerArgs;
@@ -589,16 +592,24 @@ class App {
             // Events API requests are acknowledged right away, since there's no data expected
             await ack();
         }
-        // Get or create the client
+        // Get the client arg
         let { client } = this;
-        const token = selectToken(context);
+        // If functionBotAccessToken exists on context, the incoming event is function-related *and* the
+        // user has `attachFunctionToken` enabled. In that case, subsequent calls with the client should
+        // use the function-related/JIT token in lieu of the botToken or userToken.
+        const token = context.functionBotAccessToken ? context.functionBotAccessToken : selectToken(context);
+        // Add complete() and fail() utilities for function-related interactivity
+        if (type === helpers_1.IncomingEventType.Action && context.functionExecutionId !== undefined) {
+            listenerArgs.complete = CustomFunction_1.CustomFunction.createFunctionComplete(context, client);
+            listenerArgs.fail = CustomFunction_1.CustomFunction.createFunctionFail(context, client);
+            listenerArgs.inputs = context.functionInputs;
+        }
         if (token !== undefined) {
-            let pool;
+            let pool = undefined;
             const clientOptionsCopy = { ...this.clientOptions };
             if (authorizeResult.teamId !== undefined) {
                 pool = this.clients[authorizeResult.teamId];
                 if (pool === undefined) {
-                    // eslint-disable-next-line no-multi-assign
                     pool = this.clients[authorizeResult.teamId] = new WebClientPool();
                 }
                 // Add teamId to clientOptions so it can be automatically added to web-api calls
@@ -607,7 +618,6 @@ class App {
             else if (authorizeResult.enterpriseId !== undefined) {
                 pool = this.clients[authorizeResult.enterpriseId];
                 if (pool === undefined) {
-                    // eslint-disable-next-line no-multi-assign
                     pool = this.clients[authorizeResult.enterpriseId] = new WebClientPool();
                 }
             }
@@ -623,26 +633,27 @@ class App {
                 const listenerResults = this.listeners.map(async (origListenerMiddleware) => {
                     // Copy the array so modifications don't affect the original
                     const listenerMiddleware = [...origListenerMiddleware];
-                    // Don't process the last item in the listenerMiddleware array - it shouldn't get a next fn
+                    // Don't process the last item in the listenerMiddleware array - it will be passed a no-op next fn
                     const listener = listenerMiddleware.pop();
                     if (listener === undefined) {
                         return undefined;
                     }
                     return (0, process_1.default)(listenerMiddleware, listenerArgs, context, client, this.logger, 
                     // When all the listener middleware are done processing,
-                    // `listener` here will be called without a `next` execution
+                    // `listener` here will be called with a noop `next` fn
                     async () => listener({
                         ...listenerArgs,
                         context,
                         client,
                         logger: this.logger,
-                        // `next` is already set in the outer processMiddleware
+                        next: () => { },
                     }));
                 });
-                const settledListenerResults = await allSettled(listenerResults);
-                const rejectedListenerResults = settledListenerResults.filter((lr) => lr.status === 'rejected');
+                const settledListenerResults = await Promise.allSettled(listenerResults);
+                const rejectedListenerResults = settledListenerResults.filter(utilities_1.isRejected);
                 if (rejectedListenerResults.length === 1) {
                     throw rejectedListenerResults[0].reason;
+                    // biome-ignore lint/style/noUselessElse: I think this is a biome issue actually...
                 }
                 else if (rejectedListenerResults.length > 1) {
                     throw new errors_1.MultipleListenerError(rejectedListenerResults.map((rlr) => rlr.reason));
@@ -650,10 +661,8 @@ class App {
             });
         }
         catch (error) {
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            // biome-ignore lint/suspicious/noExplicitAny: errors can be anything
             const e = error;
-            // disabling due to https://github.com/typescript-eslint/typescript-eslint/issues/1277
-            // eslint-disable-next-line consistent-return
             return this.handleError({
                 context,
                 error: e,
@@ -667,9 +676,9 @@ class App {
      */
     handleError(args) {
         const { error, ...rest } = args;
-        return this.extendedErrorHandler && this.hasCustomErrorHandler ?
-            this.errorHandler({ error: (0, errors_1.asCodedError)(error), ...rest }) :
-            this.errorHandler((0, errors_1.asCodedError)(error));
+        return this.extendedErrorHandler && this.hasCustomErrorHandler
+            ? this.errorHandler({ error: (0, errors_1.asCodedError)(error), ...rest })
+            : this.errorHandler((0, errors_1.asCodedError)(error));
     }
     // ---------------------
     // Private methods for initialization
@@ -677,35 +686,29 @@ class App {
     initReceiver(receiver, signingSecret, endpoints, port, customRoutes, processBeforeResponse, signatureVerification, clientId, clientSecret, stateSecret, redirectUri, installationStore, scopes, appToken, logger) {
         if (receiver !== undefined) {
             // Custom receiver supplied
-            if (this.socketMode === true) {
-                // socketMode = true should result in SocketModeReceiver being used as receiver
-                // TODO: Add case for when socketMode = true and receiver = SocketModeReceiver
-                // as this should not result in an error
+            if (this.socketMode === true && !(receiver instanceof SocketModeReceiver_1.default)) {
                 throw new errors_1.AppInitializationError('You cannot supply a custom receiver when socketMode is set to true.');
             }
             return receiver;
         }
         if (this.socketMode === true) {
-            if (cliAppTokenOverride === undefined && appToken === undefined) {
+            if (appToken === undefined) {
                 throw new errors_1.AppInitializationError('You must provide an appToken when socketMode is set to true. To generate an appToken see: https://api.slack.com/apis/connections/socket#token');
             }
             this.logger.debug('Initializing SocketModeReceiver');
-            const xaxpToken = cliAppTokenOverride || appToken;
-            if (xaxpToken !== undefined) {
-                return new SocketModeReceiver_1.default({
-                    appToken: xaxpToken,
-                    clientId,
-                    clientSecret,
-                    stateSecret,
-                    redirectUri,
-                    installationStore,
-                    scopes,
-                    logger,
-                    logLevel: this.logLevel,
-                    installerOptions: this.installerOptions,
-                    customRoutes,
-                });
-            }
+            return new SocketModeReceiver_1.default({
+                appToken,
+                clientId,
+                clientSecret,
+                stateSecret,
+                redirectUri,
+                installationStore,
+                scopes,
+                logger,
+                logLevel: this.logLevel,
+                installerOptions: this.installerOptions,
+                customRoutes,
+            });
         }
         if (signatureVerification === true && signingSecret === undefined) {
             // Using default receiver HTTPReceiver, signature verification enabled, missing signingSecret
@@ -734,8 +737,7 @@ class App {
     initAuthorizeIfNoTokenIsGiven(token, authorize) {
         let usingOauth = false;
         const httpReceiver = this.receiver;
-        if (httpReceiver.installer !== undefined &&
-            httpReceiver.installer.authorize !== undefined) {
+        if (httpReceiver.installer !== undefined && httpReceiver.installer.authorize !== undefined) {
             // This supports using the built-in HTTPReceiver, declaring your own HTTPReceiver
             // and theoretically, doing a fully custom (non-Express.js) receiver that implements OAuth
             usingOauth = true;
@@ -747,14 +749,17 @@ class App {
             return undefined;
         }
         if (authorize === undefined && !usingOauth) {
-            throw new errors_1.AppInitializationError(`${tokenUsage} \n\nSince you have not provided a token or authorize, you might be missing one or more required oauth installer options. See https://slack.dev/bolt-js/concepts#authenticating-oauth for these required fields.\n`);
+            throw new errors_1.AppInitializationError(`${tokenUsage} \n\nSince you have not provided a token or authorize, you might be missing one or more required oauth installer options. See https://slack.dev/bolt-js/concepts/authenticating-oauth for these required fields.\n`);
+            // biome-ignore lint/style/noUselessElse: I think this is a biome issue actually...
         }
         else if (authorize !== undefined && usingOauth) {
             throw new errors_1.AppInitializationError(`You cannot provide both authorize and oauth installer options. ${tokenUsage}`);
+            // biome-ignore lint/style/noUselessElse: I think this is a biome issue actually...
         }
         else if (authorize === undefined && usingOauth) {
-            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+            // biome-ignore lint/style/noNonNullAssertion: we know installer is truthy here
             return httpReceiver.installer.authorize;
+            // biome-ignore lint/style/noUselessElse: I think this is a biome issue actually...
         }
         else if (authorize !== undefined && !usingOauth) {
             return authorize;
@@ -786,9 +791,9 @@ function defaultErrorHandler(logger) {
 // singleAuthorization
 function runAuthTestForBotToken(client, authorization) {
     // TODO: warn when something needed isn't found
-    return authorization.botUserId !== undefined && authorization.botId !== undefined ?
-        Promise.resolve({ botUserId: authorization.botUserId, botId: authorization.botId }) :
-        client.auth.test({ token: authorization.botToken }).then((result) => ({
+    return authorization.botUserId !== undefined && authorization.botId !== undefined
+        ? Promise.resolve({ botUserId: authorization.botUserId, botId: authorization.botId })
+        : client.auth.test({ token: authorization.botToken }).then((result) => ({
             botUserId: result.user_id,
             botId: result.bot_id,
         }));
@@ -832,10 +837,6 @@ function buildSource(type, channelId, body, isEnterpriseInstall) {
         if (type === helpers_1.IncomingEventType.Command) {
             return body.team_id;
         }
-        if (type === helpers_1.IncomingEventType.Subscription) {
-            const bodyAsSubscriptionInteraction = body;
-            return bodyAsSubscriptionInteraction.team.id;
-        }
         const parseTeamId = (bodyAs) => {
             // When the app is installed using org-wide deployment, team property will be null
             if (typeof bodyAs.team !== 'undefined' && bodyAs.team !== null) {
@@ -874,10 +875,6 @@ function buildSource(type, channelId, body, isEnterpriseInstall) {
         if (type === helpers_1.IncomingEventType.Command) {
             return body.enterprise_id;
         }
-        if (type === helpers_1.IncomingEventType.Subscription) {
-            const bodyAsSubscriptionInteraction = body;
-            return bodyAsSubscriptionInteraction.team.enterprise_id;
-        }
         if (type === helpers_1.IncomingEventType.Action ||
             type === helpers_1.IncomingEventType.Options ||
             type === helpers_1.IncomingEventType.ViewAction ||
@@ -917,10 +914,6 @@ function buildSource(type, channelId, body, isEnterpriseInstall) {
             }
             return undefined;
         }
-        if (type === helpers_1.IncomingEventType.Subscription) {
-            const bodyAsSubscriptionInteraction = body;
-            return bodyAsSubscriptionInteraction.user.id;
-        }
         if (type === helpers_1.IncomingEventType.Action ||
             type === helpers_1.IncomingEventType.Options ||
             type === helpers_1.IncomingEventType.ViewAction ||
@@ -942,38 +935,12 @@ function buildSource(type, channelId, body, isEnterpriseInstall) {
         conversationId: channelId,
     };
 }
-function isBodyWithTypeEnterpriseInstall(body, type) {
-    if (type === helpers_1.IncomingEventType.Event) {
-        const bodyAsEvent = body;
-        if (Array.isArray(bodyAsEvent.authorizations) && bodyAsEvent.authorizations[0] !== undefined) {
-            return !!bodyAsEvent.authorizations[0].is_enterprise_install;
-        }
-    }
-    if (type === helpers_1.IncomingEventType.Subscription) {
-        return body.team.enterprise_id !== undefined;
-    }
-    if ('is_enterprise_install' in body) {
-        // command payloads have this property set as a string
-        if (typeof body.is_enterprise_install === 'string') {
-            return body.is_enterprise_install === 'true';
-        }
-        // all remaining types have a boolean property
-        if (body.is_enterprise_install !== undefined) {
-            return body.is_enterprise_install;
-        }
-    }
-    // as a fallback we assume it's a single team installation (but this should never happen)
-    return false;
-}
 function isBlockActionOrInteractiveMessageBody(body) {
     return body.actions !== undefined;
 }
-/**
- * Returns in order of preference, a bot token, bot access token or user token for client, say()
- * */
+// Returns either a bot token or a user token for client, say()
 function selectToken(context) {
-    var _a, _b;
-    return (_b = (_a = context.slackFunctionBotAccessToken) !== null && _a !== void 0 ? _a : context.botToken) !== null && _b !== void 0 ? _b : context.userToken;
+    return context.botToken !== undefined ? context.botToken : context.userToken;
 }
 function buildRespondFn(axiosInstance, responseUrl) {
     return async (message) => {
@@ -981,11 +948,33 @@ function buildRespondFn(axiosInstance, responseUrl) {
         return axiosInstance.post(responseUrl, normalizedArgs);
     };
 }
-// token revocation use cases
-// https://github.com/slackapi/bolt-js/issues/674
-const eventTypesToSkipAuthorize = ['app_uninstalled', 'tokens_revoked'];
-function isEventTypeToSkipAuthorize(eventType) {
-    return eventTypesToSkipAuthorize.includes(eventType);
+function escapeHtml(input) {
+    if (input) {
+        return input
+            .replace(/&/g, '&amp;')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;')
+            .replace(/'/g, '&#x27;');
+    }
+    return '';
+}
+function extractFunctionContext(body) {
+    let functionExecutionId = undefined;
+    let functionBotAccessToken = undefined;
+    let functionInputs = undefined;
+    // function_executed event
+    if (body.event && body.event.type === 'function_executed' && body.event.function_execution_id) {
+        functionExecutionId = body.event.function_execution_id;
+        functionBotAccessToken = body.event.bot_access_token;
+    }
+    // interactivity (block_actions)
+    if (body.function_data) {
+        functionExecutionId = body.function_data.execution_id;
+        functionBotAccessToken = body.bot_access_token;
+        functionInputs = body.function_data.inputs;
+    }
+    return { functionExecutionId, functionBotAccessToken, functionInputs };
 }
 // ----------------------------
 // Instrumentation