@vercel/factory 0.0.14 → 0.0.16

package/dist/connectors/slack-approvals.mjs

@@ -0,0 +1,346 @@
+import { outboxIdSchema, receiptIdSchema, taskIdSchema } from "../schema/id.mjs";
+import { ApprovalAccessError, createApprovalAccess } from "../approval-access.mjs";
+import { ApprovalError } from "../store/engine.mjs";
+import { createOutboxCommunicationRouter } from "./outbox.mjs";
+import { slackApprovalMessage, slackApprovalModal, slackApprovalPrefix, slackReasonAction, slackReasonBlock } from "./slack-approval-blocks.mjs";
+import { createHash } from "node:crypto";
+import { z } from "zod";
+//#region src/connectors/slack-approvals.ts
+const slackId = z.string().regex(/^[A-Z][A-Z0-9]+$/u).describe("Slack provider identifier.");
+const timestamp = z.string().regex(/^\d+\.\d+$/u).describe("Slack message timestamp.");
+const targetSchema = z.strictObject({
+	channelId: slackId.describe("Channel receiving the approval message."),
+	threadTs: timestamp.optional().describe("Original thread, when work started in Slack.")
+});
+const metadataSchema = z.strictObject({
+	taskId: taskIdSchema.describe("Task addressed by the rejection modal."),
+	actor: z.string().min(1).describe("Actor that opened the modal; rechecked against the signed submitting actor."),
+	channelId: slackId,
+	messageTs: timestamp
+});
+const callbackSchema = z.looseObject({
+	type: z.enum(["block_actions", "view_submission"]).describe("Supported approval interaction."),
+	team: z.looseObject({ id: slackId }).describe("Workspace that hosts the app installation."),
+	user: z.looseObject({ id: slackId }).describe("Verified Slack user who interacted."),
+	channel: z.looseObject({ id: slackId }).optional().describe("Channel containing the clicked message."),
+	message: z.looseObject({ ts: timestamp }).optional().describe("Clicked message."),
+	trigger_id: z.string().min(1).optional().describe("Short-lived Slack modal trigger."),
+	actions: z.array(z.looseObject({
+		action_id: z.string().describe("Factory approval action."),
+		value: taskIdSchema.describe("Task associated with the clicked action.")
+	})).length(1).optional().describe("One explicit approval action."),
+	view: z.looseObject({
+		callback_id: z.string().describe("Modal callback identifier."),
+		private_metadata: z.string().describe("Task and originating message binding."),
+		state: z.looseObject({ values: z.record(z.string(), z.record(z.string(), z.looseObject({ value: z.string().nullable().optional().describe("Text input value.") }))) }).describe("Submitted modal fields.")
+	}).optional().describe("Submitted rejection modal.")
+});
+const receiptKey = (id) => `slack:approval:${id}`;
+const receiptId = (key) => receiptIdSchema.parse(`rcpt_${createHash("sha256").update(`custom:${key}`).digest("hex").slice(0, 32)}`);
+const outboxId = (key) => outboxIdSchema.parse(`out_${createHash("sha256").update(key).digest("hex").slice(0, 32)}`);
+const waiting = (task) => task.approval === "required" && task.state === "queued";
+const acknowledgement = () => new Response(null, { status: 200 });
+/** Slack is a projection of the same Task decision used by HTTP clients. */
+function createSlackApprovals(options) {
+	const { stores } = options;
+	const access = createApprovalAccess(options);
+	async function request(operation, body) {
+		const result = z.looseObject({ ok: z.literal(true) }).safeParse(await options.request(operation, body));
+		if (!result.success) throw new Error(`Slack ${operation} did not succeed`);
+		return result.data;
+	}
+	async function presented(id) {
+		return stores.receipts.get(receiptId(receiptKey(id)));
+	}
+	function target(task) {
+		if (task.replyTo.channel === "slack") {
+			const [channelId, threadTs] = task.replyTo.address.split(":");
+			return targetSchema.parse({
+				channelId,
+				threadTs
+			});
+		}
+		return options.approvalChannel ? targetSchema.parse({ channelId: options.approvalChannel }) : null;
+	}
+	async function enqueue(task, existing) {
+		const destination = existing?.delivery ? targetSchema.parse({ channelId: existing.delivery.replyTo.address.split(":")[0] }) : target(task);
+		if (!destination) return null;
+		const decision = await stores.tasks.approvalReceipt(task.id);
+		const suffix = existing ? `${decision?.receiptId ?? "closed"}:${task.approval}:${task.state}` : "present";
+		return (await stores.outbox.enqueue({
+			eventId: `${receiptKey(task.id)}:${suffix}`,
+			repositoryIds: task.repositoryIds,
+			taskId: task.id,
+			replyTo: {
+				channel: "slack",
+				address: existing?.delivery?.replyTo.address ?? `${destination.channelId}:${destination.threadTs ?? ""}`
+			},
+			outcome: "needs_human",
+			data: {
+				factoryApproval: true,
+				target: destination
+			}
+		})).event;
+	}
+	async function reconcile(tasks) {
+		let queued = 0;
+		for (const task of tasks) {
+			if (task.approval === void 0) continue;
+			try {
+				await access.view(task);
+			} catch (error) {
+				if (error instanceof ApprovalAccessError) continue;
+				throw error;
+			}
+			const existing = await presented(task.id);
+			if ((existing || waiting(task)) && await enqueue(task, existing)) queued++;
+		}
+		return queued;
+	}
+	async function deliver(event) {
+		if (event.data.factoryApproval !== true || event.replyTo.channel !== "slack" || !event.taskId) throw new Error("Expected a Slack approval notification");
+		const task = await stores.tasks.get(event.taskId);
+		if (!task || task.approval === void 0) return;
+		let view;
+		try {
+			view = await access.view(task);
+		} catch (error) {
+			if (error instanceof ApprovalAccessError) return;
+			throw error;
+		}
+		const existing = await presented(task.id);
+		if (existing?.delivery) {
+			if (z.looseObject({ team_id: slackId }).parse(await request("auth.test", {})).team_id !== existing.delivery.workspaceId) throw new Error("Slack approval message belongs to another workspace");
+			for (let attempt = 0; attempt < 3; attempt++) {
+				await request("chat.update", {
+					channel: existing.delivery.replyTo.address.split(":")[0],
+					ts: existing.delivery.messageId,
+					...slackApprovalMessage(view),
+					unfurl_links: false,
+					unfurl_media: false
+				});
+				const latest = await stores.tasks.get(task.id);
+				if (!latest) return;
+				let current;
+				try {
+					current = await access.view(latest);
+				} catch (error) {
+					if (error instanceof ApprovalAccessError) return;
+					throw error;
+				}
+				if (current.decision?.receiptId === view.decision?.receiptId && latest.state === view.task.state && latest.approval === view.task.approval) return;
+				view = current;
+			}
+			throw new Error("Task changed while updating its approval message; retry the current projection");
+		}
+		const delivery = await stores.outbox.get(outboxId(event.eventId));
+		if (!waiting(task) && (!delivery || delivery.attempt < 2)) return;
+		const destination = targetSchema.parse(event.data.target);
+		const configured = target(task);
+		if (!configured || configured.channelId !== destination.channelId || configured.threadTs !== destination.threadTs) throw new Error("Approval destination changed; the recorded notification cannot be rerouted");
+		const identity = z.looseObject({ team_id: slackId }).parse(await request("auth.test", {}));
+		const hash = createHash("sha256").update(receiptKey(task.id)).digest("hex").slice(0, 32);
+		const clientMessageId = `${hash.slice(0, 8)}-${hash.slice(8, 12)}-${hash.slice(12, 16)}-${hash.slice(16, 20)}-${hash.slice(20)}`;
+		let messageId;
+		if (delivery && delivery.attempt > 1) {
+			let cursor;
+			for (let page = 0; page < 5; page++) {
+				const history = z.looseObject({
+					messages: z.array(z.looseObject({
+						ts: timestamp,
+						client_msg_id: z.string().optional()
+					})),
+					response_metadata: z.looseObject({ next_cursor: z.string().optional() }).optional(),
+					has_more: z.boolean().optional()
+				}).parse(await request(destination.threadTs ? "conversations.replies" : "conversations.history", {
+					channel: destination.channelId,
+					...destination.threadTs ? { ts: destination.threadTs } : {},
+					oldest: String(Date.parse(delivery.createdAt) / 1e3 - 5),
+					limit: 100,
+					...cursor ? { cursor } : {}
+				}));
+				messageId = history.messages.find((message) => message.client_msg_id === clientMessageId)?.ts;
+				if (messageId) break;
+				cursor = history.response_metadata?.next_cursor || void 0;
+				if (!cursor) {
+					if (history.has_more) throw new Error("Slack approval history was incomplete; retry before posting again");
+					break;
+				}
+				if (page === 4) throw new Error("Slack approval recovery exceeded its history window; retry before posting again");
+			}
+		}
+		if (!messageId && !waiting(task)) return;
+		const result = messageId ? { ts: messageId } : z.looseObject({ ts: timestamp }).parse(await request("chat.postMessage", {
+			channel: destination.channelId,
+			...destination.threadTs ? { thread_ts: destination.threadTs } : {},
+			...slackApprovalMessage(view),
+			unfurl_links: false,
+			unfurl_media: false,
+			client_msg_id: clientMessageId
+		}));
+		await stores.receipts.append({
+			dedupeKey: receiptKey(task.id),
+			repositoryIds: task.repositoryIds,
+			taskId: task.id,
+			kind: task.kind,
+			state: "approval_presented",
+			phase: "communication",
+			delivery: {
+				replyTo: {
+					channel: "slack",
+					address: `${destination.channelId}:${destination.threadTs ?? result.ts}`
+				},
+				messageId: result.ts,
+				workspaceId: identity.team_id
+			}
+		});
+		await deliver(event);
+	}
+	async function binding(payload, id, channelId, messageTs) {
+		const actor = `slack:${payload.team.id}:${payload.user.id}`;
+		const taskId = taskIdSchema.parse(id);
+		const view = await access.get(actor, taskId);
+		const receipt = await presented(taskId);
+		if (!receipt?.delivery || receipt.delivery.workspaceId !== payload.team.id || receipt.delivery.replyTo.channel !== "slack" || receipt.delivery.replyTo.address.split(":")[0] !== channelId || receipt.delivery.messageId !== messageTs) throw new ApprovalAccessError(403, "This interaction does not match the recorded approval message");
+		return view;
+	}
+	const deliveryRouter = createOutboxCommunicationRouter({
+		stores,
+		router: {
+			channels: ["slack"],
+			deliver
+		}
+	});
+	async function refresh(task) {
+		const event = await enqueue(task, await presented(task.id));
+		if (event) await deliveryRouter.deliver(event);
+	}
+	async function updatePresented(taskId) {
+		if (!(await presented(taskId))?.delivery) return false;
+		const task = await stores.tasks.get(taskId);
+		if (!task) return false;
+		await refresh(task);
+		return true;
+	}
+	async function click(payload) {
+		const actor = `slack:${payload.team.id}:${payload.user.id}`;
+		const action = payload.actions?.[0];
+		if (!action || !payload.channel || !payload.message) throw new ApprovalAccessError(400, "Approval action is missing its message binding");
+		const view = await binding(payload, action.value, payload.channel.id, payload.message.ts);
+		const kind = action.action_id.slice(slackApprovalPrefix.length);
+		if (kind === "approve" || kind === "retry") {
+			const decision = kind === "retry" ? view.decision : null;
+			if (kind === "retry" && (!decision || decision.decidedBy !== actor)) throw new ApprovalAccessError(403, "Only the original operator can finish this decision");
+			await refresh((await access.decide({
+				actor,
+				taskId: view.task.id,
+				action: decision?.state === "rejected" ? "reject" : "approve",
+				input: { reason: decision?.reason }
+			})).task);
+			return;
+		}
+		if (![
+			"reject",
+			"evidence",
+			"decision"
+		].includes(kind) || !payload.trigger_id) throw new ApprovalAccessError(400, "Unsupported approval action or missing modal trigger");
+		if (kind === "reject" && !waiting(view.task)) {
+			await refresh(view.task);
+			throw new ApprovalAccessError(409, "This proposal already has a decision or is no longer awaiting approval");
+		}
+		const metadata = JSON.stringify({
+			taskId: view.task.id,
+			actor,
+			channelId: payload.channel.id,
+			messageTs: payload.message.ts
+		});
+		await request("views.open", {
+			trigger_id: payload.trigger_id,
+			view: slackApprovalModal(view, kind === "reject" ? "reject" : kind === "decision" ? "decision" : "evidence", metadata)
+		});
+	}
+	async function clickWithFeedback(payload) {
+		try {
+			await click(payload);
+		} catch (error) {
+			options.reportError?.(error);
+			if (!payload.channel) return;
+			const known = error instanceof ApprovalAccessError || error instanceof ApprovalError;
+			try {
+				await request("chat.postEphemeral", {
+					channel: payload.channel.id,
+					user: payload.user.id,
+					text: known ? error.message : "The request could not finish. Retry the same action; an already recorded decision will not be duplicated."
+				});
+			} catch (feedbackError) {
+				options.reportError?.(feedbackError);
+			}
+		}
+	}
+	async function submit(payload, waitUntil) {
+		try {
+			if (!payload.view) throw new ApprovalAccessError(400, "Missing rejection modal");
+			const metadata = metadataSchema.parse(JSON.parse(payload.view.private_metadata));
+			const actor = `slack:${payload.team.id}:${payload.user.id}`;
+			if (metadata.actor !== actor) throw new ApprovalAccessError(403, "Only the operator who opened this modal can submit it");
+			await binding(payload, metadata.taskId, metadata.channelId, metadata.messageTs);
+			const reason = payload.view.state.values[slackReasonBlock]?.[slackReasonAction]?.value?.trim();
+			if (!reason) throw new ApprovalAccessError(400, "Add a reason before rejecting this proposal");
+			const updated = await access.decide({
+				actor,
+				taskId: metadata.taskId,
+				action: "reject",
+				input: { reason }
+			});
+			const event = await enqueue(updated.task, await presented(updated.task.id));
+			if (event) waitUntil(deliveryRouter.deliver(event).catch((error) => {
+				options.reportError?.(error);
+			}));
+			return acknowledgement();
+		} catch (error) {
+			options.reportError?.(error);
+			return Response.json({
+				response_action: "errors",
+				errors: { [slackReasonBlock]: error instanceof ApprovalAccessError || error instanceof ApprovalError ? error.message : "Could not finish. Submit again with the same reason to recover the decision." }
+			});
+		}
+	}
+	async function handle(request, waitUntil) {
+		if (request.method !== "POST" || !request.headers.get("content-type")?.includes("application/x-www-form-urlencoded")) return null;
+		const raw = await request.clone().text();
+		if (raw.length > 256e3) return new Response("Payload too large", { status: 413 });
+		let input;
+		try {
+			input = JSON.parse(new URLSearchParams(raw).get("payload") ?? "null");
+		} catch {
+			return null;
+		}
+		const route = z.looseObject({
+			type: z.string().optional(),
+			actions: z.array(z.looseObject({ action_id: z.string() })).optional(),
+			view: z.looseObject({ callback_id: z.string() }).optional()
+		}).safeParse(input);
+		if (!route.success || !(route.data.actions?.some((action) => action.action_id.startsWith("factory_approval:")) || route.data.view?.callback_id === "factory_approval_reject")) return null;
+		try {
+			await options.verify(request, raw);
+		} catch {
+			return new Response("unauthorized", { status: 401 });
+		}
+		const parsed = callbackSchema.safeParse(input);
+		if (!parsed.success) return new Response("Invalid approval interaction", { status: 400 });
+		const payload = parsed.data;
+		if (payload.type === "view_submission") return submit(payload, waitUntil);
+		waitUntil(clickWithFeedback(payload));
+		return acknowledgement();
+	}
+	return {
+		handle,
+		reconcile,
+		deliver,
+		updatePresented
+	};
+}
+//#endregion
+export { createSlackApprovals };
+
+//# sourceMappingURL=slack-approvals.mjs.map

package/dist/connectors/slack-approvals.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-approvals.mjs","names":[],"sources":["../../src/connectors/slack-approvals.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\nimport {\n  ApprovalAccessError,\n  createApprovalAccess,\n  type ApprovalAccessOptions,\n  type ApprovalAccessStores,\n} from \"../approval-access\";\nimport type { ApprovalView } from \"../approval-contracts\";\nimport type { CommunicationEvent } from \"../schema/communication\";\nimport { taskIdSchema, type TaskId } from \"../schema/id\";\nimport { outboxIdSchema, receiptIdSchema, type OutboxId, type ReceiptId } from \"../schema/id\";\nimport type { Receipt } from \"../schema/receipt\";\nimport type { Task } from \"../schema/task\";\nimport { ApprovalError } from \"../store/engine\";\nimport type { FactoryStores } from \"../store/engine\";\nimport {\n  slackApprovalMessage,\n  slackApprovalModal,\n  slackApprovalPrefix,\n  slackRejectionCallback,\n  slackReasonAction,\n  slackReasonBlock,\n} from \"./slack-approval-blocks\";\nimport { createOutboxCommunicationRouter } from \"./outbox\";\n\nconst slackId = z\n  .string()\n  .regex(/^[A-Z][A-Z0-9]+$/u)\n  .describe(\"Slack provider identifier.\");\nconst timestamp = z\n  .string()\n  .regex(/^\\d+\\.\\d+$/u)\n  .describe(\"Slack message timestamp.\");\nconst targetSchema = z.strictObject({\n  channelId: slackId.describe(\"Channel receiving the approval message.\"),\n  threadTs: timestamp.optional().describe(\"Original thread, when work started in Slack.\"),\n});\nconst metadataSchema = z.strictObject({\n  taskId: taskIdSchema.describe(\"Task addressed by the rejection modal.\"),\n  actor: z\n    .string()\n    .min(1)\n    .describe(\"Actor that opened the modal; rechecked against the signed submitting actor.\"),\n  channelId: slackId,\n  messageTs: timestamp,\n});\nconst callbackSchema = z.looseObject({\n  type: z.enum([\"block_actions\", \"view_submission\"]).describe(\"Supported approval interaction.\"),\n  team: z.looseObject({ id: slackId }).describe(\"Workspace that hosts the app installation.\"),\n  user: z.looseObject({ id: slackId }).describe(\"Verified Slack user who interacted.\"),\n  channel: z\n    .looseObject({ id: slackId })\n    .optional()\n    .describe(\"Channel containing the clicked message.\"),\n  message: z.looseObject({ ts: timestamp }).optional().describe(\"Clicked message.\"),\n  trigger_id: z.string().min(1).optional().describe(\"Short-lived Slack modal trigger.\"),\n  actions: z\n    .array(\n      z.looseObject({\n        action_id: z.string().describe(\"Factory approval action.\"),\n        value: taskIdSchema.describe(\"Task associated with the clicked action.\"),\n      }),\n    )\n    .length(1)\n    .optional()\n    .describe(\"One explicit approval action.\"),\n  view: z\n    .looseObject({\n      callback_id: z.string().describe(\"Modal callback identifier.\"),\n      private_metadata: z.string().describe(\"Task and originating message binding.\"),\n      state: z\n        .looseObject({\n          values: z.record(\n            z.string(),\n            z.record(\n              z.string(),\n              z.looseObject({\n                value: z.string().nullable().optional().describe(\"Text input value.\"),\n              }),\n            ),\n          ),\n        })\n        .describe(\"Submitted modal fields.\"),\n    })\n    .optional()\n    .describe(\"Submitted rejection modal.\"),\n});\ntype Callback = z.infer<typeof callbackSchema>;\ntype Target = z.infer<typeof targetSchema>;\n\n/** Store capabilities required to present and decide Slack approvals. */\nexport type SlackApprovalsStores = ApprovalAccessStores &\n  Pick<FactoryStores, \"outbox\" | \"receipts\">;\n\n/** Configures authenticated Slack presentation and handling for durable Task approvals. */\nexport interface SlackApprovalsOptions extends Omit<ApprovalAccessOptions, \"stores\"> {\n  readonly stores: SlackApprovalsStores;\n  /** Explicit fallback destination for work with no Slack reply thread. */\n  approvalChannel?: string;\n  request(operation: string, body: unknown): Promise<unknown>;\n  /** Authenticate the original request and body before accepting any interaction. */\n  verify(request: Request, body: string): Promise<void>;\n  reportError?(error: unknown): void;\n}\n\n/** Slack approval projection, interaction handler, and reconciliation operations. */\nexport interface SlackApprovals {\n  handle(request: Request, waitUntil: (task: Promise<unknown>) => void): Promise<Response | null>;\n  reconcile(tasks: readonly Task[]): Promise<number>;\n  deliver(event: CommunicationEvent): Promise<void>;\n  updatePresented(taskId: Task[\"id\"]): Promise<boolean>;\n}\n\nconst receiptKey = (id: string) => `slack:approval:${id}`;\nconst receiptId = (key: string): ReceiptId =>\n  receiptIdSchema.parse(\n    `rcpt_${createHash(\"sha256\").update(`custom:${key}`).digest(\"hex\").slice(0, 32)}`,\n  );\nconst outboxId = (key: string): OutboxId =>\n  outboxIdSchema.parse(`out_${createHash(\"sha256\").update(key).digest(\"hex\").slice(0, 32)}`);\nconst waiting = (task: Task) => task.approval === \"required\" && task.state === \"queued\";\nconst acknowledgement = () => new Response(null, { status: 200 });\n\n/** Slack is a projection of the same Task decision used by HTTP clients. */\nexport function createSlackApprovals(options: SlackApprovalsOptions): SlackApprovals {\n  const { stores } = options;\n  const access = createApprovalAccess(options);\n  async function request(operation: string, body: unknown) {\n    const result = z\n      .looseObject({ ok: z.literal(true) })\n      .safeParse(await options.request(operation, body));\n    if (!result.success) throw new Error(`Slack ${operation} did not succeed`);\n    return result.data;\n  }\n  async function presented(id: TaskId) {\n    return stores.receipts.get(receiptId(receiptKey(id)));\n  }\n  function target(task: Task): Target | null {\n    if (task.replyTo.channel === \"slack\") {\n      const [channelId, threadTs] = task.replyTo.address.split(\":\");\n      return targetSchema.parse({ channelId, threadTs });\n    }\n    return options.approvalChannel\n      ? targetSchema.parse({ channelId: options.approvalChannel })\n      : null;\n  }\n  async function enqueue(task: Task, existing: Receipt | null) {\n    const destination = existing?.delivery\n      ? targetSchema.parse({ channelId: existing.delivery.replyTo.address.split(\":\")[0] })\n      : target(task);\n    if (!destination) return null;\n    const decision = await stores.tasks.approvalReceipt(task.id);\n    const suffix = existing\n      ? `${decision?.receiptId ?? \"closed\"}:${task.approval}:${task.state}`\n      : \"present\";\n    const saved = await stores.outbox.enqueue({\n      eventId: `${receiptKey(task.id)}:${suffix}`,\n      repositoryIds: task.repositoryIds,\n      taskId: task.id,\n      replyTo: {\n        channel: \"slack\",\n        address:\n          existing?.delivery?.replyTo.address ??\n          `${destination.channelId}:${destination.threadTs ?? \"\"}`,\n      },\n      outcome: \"needs_human\",\n      data: { factoryApproval: true, target: destination },\n    });\n    return saved.event;\n  }\n  async function reconcile(tasks: readonly Task[]) {\n    let queued = 0;\n    for (const task of tasks) {\n      if (task.approval === undefined) continue;\n      try {\n        await access.view(task);\n      } catch (error) {\n        if (error instanceof ApprovalAccessError) continue;\n        throw error;\n      }\n      const existing = await presented(task.id);\n      if ((existing || waiting(task)) && (await enqueue(task, existing))) queued++;\n    }\n    return queued;\n  }\n  async function deliver(event: CommunicationEvent): Promise<void> {\n    if (event.data.factoryApproval !== true || event.replyTo.channel !== \"slack\" || !event.taskId)\n      throw new Error(\"Expected a Slack approval notification\");\n    const task = await stores.tasks.get(event.taskId);\n    if (!task || task.approval === undefined) return;\n    let view: ApprovalView;\n    try {\n      view = await access.view(task);\n    } catch (error) {\n      if (error instanceof ApprovalAccessError) return;\n      throw error;\n    }\n    const existing = await presented(task.id);\n    if (existing?.delivery) {\n      const identity = z.looseObject({ team_id: slackId }).parse(await request(\"auth.test\", {}));\n      if (identity.team_id !== existing.delivery.workspaceId)\n        throw new Error(\"Slack approval message belongs to another workspace\");\n      for (let attempt = 0; attempt < 3; attempt++) {\n        await request(\"chat.update\", {\n          channel: existing.delivery.replyTo.address.split(\":\")[0],\n          ts: existing.delivery.messageId,\n          ...slackApprovalMessage(view),\n          unfurl_links: false,\n          unfurl_media: false,\n        });\n        const latest = await stores.tasks.get(task.id);\n        if (!latest) return;\n        let current: ApprovalView;\n        try {\n          current = await access.view(latest);\n        } catch (error) {\n          if (error instanceof ApprovalAccessError) return;\n          throw error;\n        }\n        if (\n          current.decision?.receiptId === view.decision?.receiptId &&\n          latest.state === view.task.state &&\n          latest.approval === view.task.approval\n        )\n          return;\n        view = current;\n      }\n      throw new Error(\n        \"Task changed while updating its approval message; retry the current projection\",\n      );\n    }\n    const delivery = await stores.outbox.get(outboxId(event.eventId));\n    if (!waiting(task) && (!delivery || delivery.attempt < 2)) return;\n    const destination = targetSchema.parse(event.data.target);\n    const configured = target(task);\n    if (\n      !configured ||\n      configured.channelId !== destination.channelId ||\n      configured.threadTs !== destination.threadTs\n    )\n      throw new Error(\"Approval destination changed; the recorded notification cannot be rerouted\");\n    const identity = z.looseObject({ team_id: slackId }).parse(await request(\"auth.test\", {}));\n    const hash = createHash(\"sha256\").update(receiptKey(task.id)).digest(\"hex\").slice(0, 32);\n    const clientMessageId = `${hash.slice(0, 8)}-${hash.slice(8, 12)}-${hash.slice(12, 16)}-${hash.slice(16, 20)}-${hash.slice(20)}`;\n    let messageId: string | undefined;\n    if (delivery && delivery.attempt > 1) {\n      let cursor: string | undefined;\n      for (let page = 0; page < 5; page++) {\n        const history = z\n          .looseObject({\n            messages: z.array(\n              z.looseObject({ ts: timestamp, client_msg_id: z.string().optional() }),\n            ),\n            response_metadata: z.looseObject({ next_cursor: z.string().optional() }).optional(),\n            has_more: z.boolean().optional(),\n          })\n          .parse(\n            await request(\n              destination.threadTs ? \"conversations.replies\" : \"conversations.history\",\n              {\n                channel: destination.channelId,\n                ...(destination.threadTs ? { ts: destination.threadTs } : {}),\n                oldest: String(Date.parse(delivery.createdAt) / 1000 - 5),\n                limit: 100,\n                ...(cursor ? { cursor } : {}),\n              },\n            ),\n          );\n        messageId = history.messages.find(\n          (message) => message.client_msg_id === clientMessageId,\n        )?.ts;\n        if (messageId) break;\n        cursor = history.response_metadata?.next_cursor || undefined;\n        if (!cursor) {\n          if (history.has_more)\n            throw new Error(\"Slack approval history was incomplete; retry before posting again\");\n          break;\n        }\n        if (page === 4)\n          throw new Error(\n            \"Slack approval recovery exceeded its history window; retry before posting again\",\n          );\n      }\n    }\n    if (!messageId && !waiting(task)) return;\n    const result = messageId\n      ? { ts: messageId }\n      : z.looseObject({ ts: timestamp }).parse(\n          await request(\"chat.postMessage\", {\n            channel: destination.channelId,\n            ...(destination.threadTs ? { thread_ts: destination.threadTs } : {}),\n            ...slackApprovalMessage(view),\n            unfurl_links: false,\n            unfurl_media: false,\n            client_msg_id: clientMessageId,\n          }),\n        );\n    await stores.receipts.append({\n      dedupeKey: receiptKey(task.id),\n      repositoryIds: task.repositoryIds,\n      taskId: task.id,\n      kind: task.kind,\n      state: \"approval_presented\",\n      phase: \"communication\",\n      delivery: {\n        replyTo: {\n          channel: \"slack\",\n          address: `${destination.channelId}:${destination.threadTs ?? result.ts}`,\n        },\n        messageId: result.ts,\n        workspaceId: identity.team_id,\n      },\n    });\n    await deliver(event);\n  }\n  async function binding(\n    payload: Callback,\n    id: string,\n    channelId: string,\n    messageTs: string,\n  ): Promise<ApprovalView> {\n    const actor = `slack:${payload.team.id}:${payload.user.id}`;\n    const taskId = taskIdSchema.parse(id);\n    const view = await access.get(actor, taskId);\n    const receipt = await presented(taskId);\n    if (\n      !receipt?.delivery ||\n      receipt.delivery.workspaceId !== payload.team.id ||\n      receipt.delivery.replyTo.channel !== \"slack\" ||\n      receipt.delivery.replyTo.address.split(\":\")[0] !== channelId ||\n      receipt.delivery.messageId !== messageTs\n    ) {\n      throw new ApprovalAccessError(\n        403,\n        \"This interaction does not match the recorded approval message\",\n      );\n    }\n    return view;\n  }\n  const deliveryRouter = createOutboxCommunicationRouter({\n    stores,\n    router: { channels: [\"slack\"], deliver },\n  });\n  async function refresh(task: Task) {\n    const event = await enqueue(task, await presented(task.id));\n    if (event) await deliveryRouter.deliver(event);\n  }\n  async function updatePresented(taskId: Task[\"id\"]): Promise<boolean> {\n    if (!(await presented(taskId))?.delivery) return false;\n    const task = await stores.tasks.get(taskId);\n    if (!task) return false;\n    await refresh(task);\n    return true;\n  }\n  async function click(payload: Callback) {\n    const actor = `slack:${payload.team.id}:${payload.user.id}`;\n    const action = payload.actions?.[0];\n    if (!action || !payload.channel || !payload.message)\n      throw new ApprovalAccessError(400, \"Approval action is missing its message binding\");\n    const view = await binding(payload, action.value, payload.channel.id, payload.message.ts);\n    const kind = action.action_id.slice(slackApprovalPrefix.length);\n    if (kind === \"approve\" || kind === \"retry\") {\n      const decision = kind === \"retry\" ? view.decision : null;\n      if (kind === \"retry\" && (!decision || decision.decidedBy !== actor))\n        throw new ApprovalAccessError(403, \"Only the original operator can finish this decision\");\n      const updated = await access.decide({\n        actor,\n        taskId: view.task.id,\n        action: decision?.state === \"rejected\" ? \"reject\" : \"approve\",\n        input: { reason: decision?.reason },\n      });\n      await refresh(updated.task);\n      return;\n    }\n    if (![\"reject\", \"evidence\", \"decision\"].includes(kind) || !payload.trigger_id)\n      throw new ApprovalAccessError(400, \"Unsupported approval action or missing modal trigger\");\n    if (kind === \"reject\" && !waiting(view.task)) {\n      await refresh(view.task);\n      throw new ApprovalAccessError(\n        409,\n        \"This proposal already has a decision or is no longer awaiting approval\",\n      );\n    }\n    const metadata = JSON.stringify({\n      taskId: view.task.id,\n      actor,\n      channelId: payload.channel.id,\n      messageTs: payload.message.ts,\n    });\n    await request(\"views.open\", {\n      trigger_id: payload.trigger_id,\n      view: slackApprovalModal(\n        view,\n        kind === \"reject\" ? \"reject\" : kind === \"decision\" ? \"decision\" : \"evidence\",\n        metadata,\n      ),\n    });\n  }\n  async function clickWithFeedback(payload: Callback) {\n    try {\n      await click(payload);\n    } catch (error) {\n      options.reportError?.(error);\n      if (!payload.channel) return;\n      const known = error instanceof ApprovalAccessError || error instanceof ApprovalError;\n      try {\n        await request(\"chat.postEphemeral\", {\n          channel: payload.channel.id,\n          user: payload.user.id,\n          text: known\n            ? error.message\n            : \"The request could not finish. Retry the same action; an already recorded decision will not be duplicated.\",\n        });\n      } catch (feedbackError) {\n        options.reportError?.(feedbackError);\n      }\n    }\n  }\n  async function submit(\n    payload: Callback,\n    waitUntil: (task: Promise<unknown>) => void,\n  ): Promise<Response> {\n    try {\n      if (!payload.view) throw new ApprovalAccessError(400, \"Missing rejection modal\");\n      const metadata = metadataSchema.parse(JSON.parse(payload.view.private_metadata));\n      const actor = `slack:${payload.team.id}:${payload.user.id}`;\n      if (metadata.actor !== actor)\n        throw new ApprovalAccessError(403, \"Only the operator who opened this modal can submit it\");\n      await binding(payload, metadata.taskId, metadata.channelId, metadata.messageTs);\n      const reason =\n        payload.view.state.values[slackReasonBlock]?.[slackReasonAction]?.value?.trim();\n      if (!reason)\n        throw new ApprovalAccessError(400, \"Add a reason before rejecting this proposal\");\n      const updated = await access.decide({\n        actor,\n        taskId: metadata.taskId,\n        action: \"reject\",\n        input: { reason },\n      });\n      const event = await enqueue(updated.task, await presented(updated.task.id));\n      if (event)\n        waitUntil(\n          deliveryRouter.deliver(event).catch((error: unknown) => {\n            options.reportError?.(error);\n          }),\n        );\n      return acknowledgement();\n    } catch (error) {\n      options.reportError?.(error);\n      return Response.json({\n        response_action: \"errors\",\n        errors: {\n          [slackReasonBlock]:\n            error instanceof ApprovalAccessError || error instanceof ApprovalError\n              ? error.message\n              : \"Could not finish. Submit again with the same reason to recover the decision.\",\n        },\n      });\n    }\n  }\n  async function handle(\n    request: Request,\n    waitUntil: (task: Promise<unknown>) => void,\n  ): Promise<Response | null> {\n    if (\n      request.method !== \"POST\" ||\n      !request.headers.get(\"content-type\")?.includes(\"application/x-www-form-urlencoded\")\n    )\n      return null;\n    const raw = await request.clone().text();\n    if (raw.length > 256_000) return new Response(\"Payload too large\", { status: 413 });\n    let input: unknown;\n    try {\n      input = JSON.parse(new URLSearchParams(raw).get(\"payload\") ?? \"null\");\n    } catch {\n      return null;\n    }\n    const route = z\n      .looseObject({\n        type: z.string().optional(),\n        actions: z.array(z.looseObject({ action_id: z.string() })).optional(),\n        view: z.looseObject({ callback_id: z.string() }).optional(),\n      })\n      .safeParse(input);\n    if (\n      !route.success ||\n      !(\n        route.data.actions?.some((action) => action.action_id.startsWith(slackApprovalPrefix)) ||\n        route.data.view?.callback_id === slackRejectionCallback\n      )\n    )\n      return null;\n    try {\n      await options.verify(request, raw);\n    } catch {\n      return new Response(\"unauthorized\", { status: 401 });\n    }\n    const parsed = callbackSchema.safeParse(input);\n    if (!parsed.success) return new Response(\"Invalid approval interaction\", { status: 400 });\n    const payload = parsed.data;\n    if (payload.type === \"view_submission\") return submit(payload, waitUntil);\n    waitUntil(clickWithFeedback(payload));\n    return acknowledgement();\n  }\n  return { handle, reconcile, deliver, updatePresented };\n}\n"],"mappings":";;;;;;;;AA0BA,MAAM,UAAU,EACb,OAAO,CAAC,CACR,MAAM,mBAAmB,CAAC,CAC1B,SAAS,4BAA4B;AACxC,MAAM,YAAY,EACf,OAAO,CAAC,CACR,MAAM,aAAa,CAAC,CACpB,SAAS,0BAA0B;AACtC,MAAM,eAAe,EAAE,aAAa;CAClC,WAAW,QAAQ,SAAS,yCAAyC;CACrE,UAAU,UAAU,SAAS,CAAC,CAAC,SAAS,8CAA8C;AACxF,CAAC;AACD,MAAM,iBAAiB,EAAE,aAAa;CACpC,QAAQ,aAAa,SAAS,wCAAwC;CACtE,OAAO,EACJ,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,6EAA6E;CACzF,WAAW;CACX,WAAW;AACb,CAAC;AACD,MAAM,iBAAiB,EAAE,YAAY;CACnC,MAAM,EAAE,KAAK,CAAC,iBAAiB,iBAAiB,CAAC,CAAC,CAAC,SAAS,iCAAiC;CAC7F,MAAM,EAAE,YAAY,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,4CAA4C;CAC1F,MAAM,EAAE,YAAY,EAAE,IAAI,QAAQ,CAAC,CAAC,CAAC,SAAS,qCAAqC;CACnF,SAAS,EACN,YAAY,EAAE,IAAI,QAAQ,CAAC,CAAC,CAC5B,SAAS,CAAC,CACV,SAAS,yCAAyC;CACrD,SAAS,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,kBAAkB;CAChF,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,kCAAkC;CACpF,SAAS,EACN,MACC,EAAE,YAAY;EACZ,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,0BAA0B;EACzD,OAAO,aAAa,SAAS,0CAA0C;CACzE,CAAC,CACH,CAAC,CACA,OAAO,CAAC,CAAC,CACT,SAAS,CAAC,CACV,SAAS,+BAA+B;CAC3C,MAAM,EACH,YAAY;EACX,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,4BAA4B;EAC7D,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS,uCAAuC;EAC7E,OAAO,EACJ,YAAY,EACX,QAAQ,EAAE,OACR,EAAE,OAAO,GACT,EAAE,OACA,EAAE,OAAO,GACT,EAAE,YAAY,EACZ,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,mBAAmB,EACtE,CAAC,CACH,CACF,EACF,CAAC,CAAC,CACD,SAAS,yBAAyB;CACvC,CAAC,CAAC,CACD,SAAS,CAAC,CACV,SAAS,4BAA4B;AAC1C,CAAC;AA2BD,MAAM,cAAc,OAAe,kBAAkB;AACrD,MAAM,aAAa,QACjB,gBAAgB,MACd,QAAQ,WAAW,QAAQ,CAAC,CAAC,OAAO,UAAU,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,GAChF;AACF,MAAM,YAAY,QAChB,eAAe,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG;AAC3F,MAAM,WAAW,SAAe,KAAK,aAAa,cAAc,KAAK,UAAU;AAC/E,MAAM,wBAAwB,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;;AAGhE,SAAgB,qBAAqB,SAAgD;CACnF,MAAM,EAAE,WAAW;CACnB,MAAM,SAAS,qBAAqB,OAAO;CAC3C,eAAe,QAAQ,WAAmB,MAAe;EACvD,MAAM,SAAS,EACZ,YAAY,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CACpC,UAAU,MAAM,QAAQ,QAAQ,WAAW,IAAI,CAAC;EACnD,IAAI,CAAC,OAAO,SAAS,MAAM,IAAI,MAAM,SAAS,UAAU,iBAAiB;EACzE,OAAO,OAAO;CAChB;CACA,eAAe,UAAU,IAAY;EACnC,OAAO,OAAO,SAAS,IAAI,UAAU,WAAW,EAAE,CAAC,CAAC;CACtD;CACA,SAAS,OAAO,MAA2B;EACzC,IAAI,KAAK,QAAQ,YAAY,SAAS;GACpC,MAAM,CAAC,WAAW,YAAY,KAAK,QAAQ,QAAQ,MAAM,GAAG;GAC5D,OAAO,aAAa,MAAM;IAAE;IAAW;GAAS,CAAC;EACnD;EACA,OAAO,QAAQ,kBACX,aAAa,MAAM,EAAE,WAAW,QAAQ,gBAAgB,CAAC,IACzD;CACN;CACA,eAAe,QAAQ,MAAY,UAA0B;EAC3D,MAAM,cAAc,UAAU,WAC1B,aAAa,MAAM,EAAE,WAAW,SAAS,SAAS,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IACjF,OAAO,IAAI;EACf,IAAI,CAAC,aAAa,OAAO;EACzB,MAAM,WAAW,MAAM,OAAO,MAAM,gBAAgB,KAAK,EAAE;EAC3D,MAAM,SAAS,WACX,GAAG,UAAU,aAAa,SAAS,GAAG,KAAK,SAAS,GAAG,KAAK,UAC5D;EAcJ,QAAO,MAba,OAAO,OAAO,QAAQ;GACxC,SAAS,GAAG,WAAW,KAAK,EAAE,EAAE,GAAG;GACnC,eAAe,KAAK;GACpB,QAAQ,KAAK;GACb,SAAS;IACP,SAAS;IACT,SACE,UAAU,UAAU,QAAQ,WAC5B,GAAG,YAAY,UAAU,GAAG,YAAY,YAAY;GACxD;GACA,SAAS;GACT,MAAM;IAAE,iBAAiB;IAAM,QAAQ;GAAY;EACrD,CAAC,EAAA,CACY;CACf;CACA,eAAe,UAAU,OAAwB;EAC/C,IAAI,SAAS;EACb,KAAK,MAAM,QAAQ,OAAO;GACxB,IAAI,KAAK,aAAa,KAAA,GAAW;GACjC,IAAI;IACF,MAAM,OAAO,KAAK,IAAI;GACxB,SAAS,OAAO;IACd,IAAI,iBAAiB,qBAAqB;IAC1C,MAAM;GACR;GACA,MAAM,WAAW,MAAM,UAAU,KAAK,EAAE;GACxC,KAAK,YAAY,QAAQ,IAAI,MAAO,MAAM,QAAQ,MAAM,QAAQ,GAAI;EACtE;EACA,OAAO;CACT;CACA,eAAe,QAAQ,OAA0C;EAC/D,IAAI,MAAM,KAAK,oBAAoB,QAAQ,MAAM,QAAQ,YAAY,WAAW,CAAC,MAAM,QACrF,MAAM,IAAI,MAAM,wCAAwC;EAC1D,MAAM,OAAO,MAAM,OAAO,MAAM,IAAI,MAAM,MAAM;EAChD,IAAI,CAAC,QAAQ,KAAK,aAAa,KAAA,GAAW;EAC1C,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,OAAO,KAAK,IAAI;EAC/B,SAAS,OAAO;GACd,IAAI,iBAAiB,qBAAqB;GAC1C,MAAM;EACR;EACA,MAAM,WAAW,MAAM,UAAU,KAAK,EAAE;EACxC,IAAI,UAAU,UAAU;GAEtB,IADiB,EAAE,YAAY,EAAE,SAAS,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,QAAQ,aAAa,CAAC,CAAC,CAC7E,CAAC,CAAC,YAAY,SAAS,SAAS,aACzC,MAAM,IAAI,MAAM,qDAAqD;GACvE,KAAK,IAAI,UAAU,GAAG,UAAU,GAAG,WAAW;IAC5C,MAAM,QAAQ,eAAe;KAC3B,SAAS,SAAS,SAAS,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC;KACtD,IAAI,SAAS,SAAS;KACtB,GAAG,qBAAqB,IAAI;KAC5B,cAAc;KACd,cAAc;IAChB,CAAC;IACD,MAAM,SAAS,MAAM,OAAO,MAAM,IAAI,KAAK,EAAE;IAC7C,IAAI,CAAC,QAAQ;IACb,IAAI;IACJ,IAAI;KACF,UAAU,MAAM,OAAO,KAAK,MAAM;IACpC,SAAS,OAAO;KACd,IAAI,iBAAiB,qBAAqB;KAC1C,MAAM;IACR;IACA,IACE,QAAQ,UAAU,cAAc,KAAK,UAAU,aAC/C,OAAO,UAAU,KAAK,KAAK,SAC3B,OAAO,aAAa,KAAK,KAAK,UAE9B;IACF,OAAO;GACT;GACA,MAAM,IAAI,MACR,gFACF;EACF;EACA,MAAM,WAAW,MAAM,OAAO,OAAO,IAAI,SAAS,MAAM,OAAO,CAAC;EAChE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,SAAS,UAAU,IAAI;EAC3D,MAAM,cAAc,aAAa,MAAM,MAAM,KAAK,MAAM;EACxD,MAAM,aAAa,OAAO,IAAI;EAC9B,IACE,CAAC,cACD,WAAW,cAAc,YAAY,aACrC,WAAW,aAAa,YAAY,UAEpC,MAAM,IAAI,MAAM,4EAA4E;EAC9F,MAAM,WAAW,EAAE,YAAY,EAAE,SAAS,QAAQ,CAAC,CAAC,CAAC,MAAM,MAAM,QAAQ,aAAa,CAAC,CAAC,CAAC;EACzF,MAAM,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;EACvF,MAAM,kBAAkB,GAAG,KAAK,MAAM,GAAG,CAAC,EAAE,GAAG,KAAK,MAAM,GAAG,EAAE,EAAE,GAAG,KAAK,MAAM,IAAI,EAAE,EAAE,GAAG,KAAK,MAAM,IAAI,EAAE,EAAE,GAAG,KAAK,MAAM,EAAE;EAC7H,IAAI;EACJ,IAAI,YAAY,SAAS,UAAU,GAAG;GACpC,IAAI;GACJ,KAAK,IAAI,OAAO,GAAG,OAAO,GAAG,QAAQ;IACnC,MAAM,UAAU,EACb,YAAY;KACX,UAAU,EAAE,MACV,EAAE,YAAY;MAAE,IAAI;MAAW,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;KAAE,CAAC,CACvE;KACA,mBAAmB,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;KAClF,UAAU,EAAE,QAAQ,CAAC,CAAC,SAAS;IACjC,CAAC,CAAC,CACD,MACC,MAAM,QACJ,YAAY,WAAW,0BAA0B,yBACjD;KACE,SAAS,YAAY;KACrB,GAAI,YAAY,WAAW,EAAE,IAAI,YAAY,SAAS,IAAI,CAAC;KAC3D,QAAQ,OAAO,KAAK,MAAM,SAAS,SAAS,IAAI,MAAO,CAAC;KACxD,OAAO;KACP,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC7B,CACF,CACF;IACF,YAAY,QAAQ,SAAS,MAC1B,YAAY,QAAQ,kBAAkB,eACzC,CAAC,EAAE;IACH,IAAI,WAAW;IACf,SAAS,QAAQ,mBAAmB,eAAe,KAAA;IACnD,IAAI,CAAC,QAAQ;KACX,IAAI,QAAQ,UACV,MAAM,IAAI,MAAM,mEAAmE;KACrF;IACF;IACA,IAAI,SAAS,GACX,MAAM,IAAI,MACR,iFACF;GACJ;EACF;EACA,IAAI,CAAC,aAAa,CAAC,QAAQ,IAAI,GAAG;EAClC,MAAM,SAAS,YACX,EAAE,IAAI,UAAU,IAChB,EAAE,YAAY,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,MAC/B,MAAM,QAAQ,oBAAoB;GAChC,SAAS,YAAY;GACrB,GAAI,YAAY,WAAW,EAAE,WAAW,YAAY,SAAS,IAAI,CAAC;GAClE,GAAG,qBAAqB,IAAI;GAC5B,cAAc;GACd,cAAc;GACd,eAAe;EACjB,CAAC,CACH;EACJ,MAAM,OAAO,SAAS,OAAO;GAC3B,WAAW,WAAW,KAAK,EAAE;GAC7B,eAAe,KAAK;GACpB,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,OAAO;GACP,OAAO;GACP,UAAU;IACR,SAAS;KACP,SAAS;KACT,SAAS,GAAG,YAAY,UAAU,GAAG,YAAY,YAAY,OAAO;IACtE;IACA,WAAW,OAAO;IAClB,aAAa,SAAS;GACxB;EACF,CAAC;EACD,MAAM,QAAQ,KAAK;CACrB;CACA,eAAe,QACb,SACA,IACA,WACA,WACuB;EACvB,MAAM,QAAQ,SAAS,QAAQ,KAAK,GAAG,GAAG,QAAQ,KAAK;EACvD,MAAM,SAAS,aAAa,MAAM,EAAE;EACpC,MAAM,OAAO,MAAM,OAAO,IAAI,OAAO,MAAM;EAC3C,MAAM,UAAU,MAAM,UAAU,MAAM;EACtC,IACE,CAAC,SAAS,YACV,QAAQ,SAAS,gBAAgB,QAAQ,KAAK,MAC9C,QAAQ,SAAS,QAAQ,YAAY,WACrC,QAAQ,SAAS,QAAQ,QAAQ,MAAM,GAAG,CAAC,CAAC,OAAO,aACnD,QAAQ,SAAS,cAAc,WAE/B,MAAM,IAAI,oBACR,KACA,+DACF;EAEF,OAAO;CACT;CACA,MAAM,iBAAiB,gCAAgC;EACrD;EACA,QAAQ;GAAE,UAAU,CAAC,OAAO;GAAG;EAAQ;CACzC,CAAC;CACD,eAAe,QAAQ,MAAY;EACjC,MAAM,QAAQ,MAAM,QAAQ,MAAM,MAAM,UAAU,KAAK,EAAE,CAAC;EAC1D,IAAI,OAAO,MAAM,eAAe,QAAQ,KAAK;CAC/C;CACA,eAAe,gBAAgB,QAAsC;EACnE,IAAI,EAAE,MAAM,UAAU,MAAM,EAAA,EAAI,UAAU,OAAO;EACjD,MAAM,OAAO,MAAM,OAAO,MAAM,IAAI,MAAM;EAC1C,IAAI,CAAC,MAAM,OAAO;EAClB,MAAM,QAAQ,IAAI;EAClB,OAAO;CACT;CACA,eAAe,MAAM,SAAmB;EACtC,MAAM,QAAQ,SAAS,QAAQ,KAAK,GAAG,GAAG,QAAQ,KAAK;EACvD,MAAM,SAAS,QAAQ,UAAU;EACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,WAAW,CAAC,QAAQ,SAC1C,MAAM,IAAI,oBAAoB,KAAK,gDAAgD;EACrF,MAAM,OAAO,MAAM,QAAQ,SAAS,OAAO,OAAO,QAAQ,QAAQ,IAAI,QAAQ,QAAQ,EAAE;EACxF,MAAM,OAAO,OAAO,UAAU,MAAM,oBAAoB,MAAM;EAC9D,IAAI,SAAS,aAAa,SAAS,SAAS;GAC1C,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW;GACpD,IAAI,SAAS,YAAY,CAAC,YAAY,SAAS,cAAc,QAC3D,MAAM,IAAI,oBAAoB,KAAK,qDAAqD;GAO1F,MAAM,SAAQ,MANQ,OAAO,OAAO;IAClC;IACA,QAAQ,KAAK,KAAK;IAClB,QAAQ,UAAU,UAAU,aAAa,WAAW;IACpD,OAAO,EAAE,QAAQ,UAAU,OAAO;GACpC,CAAC,EAAA,CACqB,IAAI;GAC1B;EACF;EACA,IAAI,CAAC;GAAC;GAAU;GAAY;EAAU,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,YACjE,MAAM,IAAI,oBAAoB,KAAK,sDAAsD;EAC3F,IAAI,SAAS,YAAY,CAAC,QAAQ,KAAK,IAAI,GAAG;GAC5C,MAAM,QAAQ,KAAK,IAAI;GACvB,MAAM,IAAI,oBACR,KACA,wEACF;EACF;EACA,MAAM,WAAW,KAAK,UAAU;GAC9B,QAAQ,KAAK,KAAK;GAClB;GACA,WAAW,QAAQ,QAAQ;GAC3B,WAAW,QAAQ,QAAQ;EAC7B,CAAC;EACD,MAAM,QAAQ,cAAc;GAC1B,YAAY,QAAQ;GACpB,MAAM,mBACJ,MACA,SAAS,WAAW,WAAW,SAAS,aAAa,aAAa,YAClE,QACF;EACF,CAAC;CACH;CACA,eAAe,kBAAkB,SAAmB;EAClD,IAAI;GACF,MAAM,MAAM,OAAO;EACrB,SAAS,OAAO;GACd,QAAQ,cAAc,KAAK;GAC3B,IAAI,CAAC,QAAQ,SAAS;GACtB,MAAM,QAAQ,iBAAiB,uBAAuB,iBAAiB;GACvE,IAAI;IACF,MAAM,QAAQ,sBAAsB;KAClC,SAAS,QAAQ,QAAQ;KACzB,MAAM,QAAQ,KAAK;KACnB,MAAM,QACF,MAAM,UACN;IACN,CAAC;GACH,SAAS,eAAe;IACtB,QAAQ,cAAc,aAAa;GACrC;EACF;CACF;CACA,eAAe,OACb,SACA,WACmB;EACnB,IAAI;GACF,IAAI,CAAC,QAAQ,MAAM,MAAM,IAAI,oBAAoB,KAAK,yBAAyB;GAC/E,MAAM,WAAW,eAAe,MAAM,KAAK,MAAM,QAAQ,KAAK,gBAAgB,CAAC;GAC/E,MAAM,QAAQ,SAAS,QAAQ,KAAK,GAAG,GAAG,QAAQ,KAAK;GACvD,IAAI,SAAS,UAAU,OACrB,MAAM,IAAI,oBAAoB,KAAK,uDAAuD;GAC5F,MAAM,QAAQ,SAAS,SAAS,QAAQ,SAAS,WAAW,SAAS,SAAS;GAC9E,MAAM,SACJ,QAAQ,KAAK,MAAM,OAAO,iBAAiB,GAAG,kBAAkB,EAAE,OAAO,KAAK;GAChF,IAAI,CAAC,QACH,MAAM,IAAI,oBAAoB,KAAK,6CAA6C;GAClF,MAAM,UAAU,MAAM,OAAO,OAAO;IAClC;IACA,QAAQ,SAAS;IACjB,QAAQ;IACR,OAAO,EAAE,OAAO;GAClB,CAAC;GACD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,MAAM,MAAM,UAAU,QAAQ,KAAK,EAAE,CAAC;GAC1E,IAAI,OACF,UACE,eAAe,QAAQ,KAAK,CAAC,CAAC,OAAO,UAAmB;IACtD,QAAQ,cAAc,KAAK;GAC7B,CAAC,CACH;GACF,OAAO,gBAAgB;EACzB,SAAS,OAAO;GACd,QAAQ,cAAc,KAAK;GAC3B,OAAO,SAAS,KAAK;IACnB,iBAAiB;IACjB,QAAQ,GACL,mBACC,iBAAiB,uBAAuB,iBAAiB,gBACrD,MAAM,UACN,+EACR;GACF,CAAC;EACH;CACF;CACA,eAAe,OACb,SACA,WAC0B;EAC1B,IACE,QAAQ,WAAW,UACnB,CAAC,QAAQ,QAAQ,IAAI,cAAc,CAAC,EAAE,SAAS,mCAAmC,GAElF,OAAO;EACT,MAAM,MAAM,MAAM,QAAQ,MAAM,CAAC,CAAC,KAAK;EACvC,IAAI,IAAI,SAAS,OAAS,OAAO,IAAI,SAAS,qBAAqB,EAAE,QAAQ,IAAI,CAAC;EAClF,IAAI;EACJ,IAAI;GACF,QAAQ,KAAK,MAAM,IAAI,gBAAgB,GAAG,CAAC,CAAC,IAAI,SAAS,KAAK,MAAM;EACtE,QAAQ;GACN,OAAO;EACT;EACA,MAAM,QAAQ,EACX,YAAY;GACX,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;GAC1B,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;GACpE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;EAC5D,CAAC,CAAC,CACD,UAAU,KAAK;EAClB,IACE,CAAC,MAAM,WACP,EACE,MAAM,KAAK,SAAS,MAAM,WAAW,OAAO,UAAU,WAAA,mBAA8B,CAAC,KACrF,MAAM,KAAK,MAAM,gBAAA,4BAGnB,OAAO;EACT,IAAI;GACF,MAAM,QAAQ,OAAO,SAAS,GAAG;EACnC,QAAQ;GACN,OAAO,IAAI,SAAS,gBAAgB,EAAE,QAAQ,IAAI,CAAC;EACrD;EACA,MAAM,SAAS,eAAe,UAAU,KAAK;EAC7C,IAAI,CAAC,OAAO,SAAS,OAAO,IAAI,SAAS,gCAAgC,EAAE,QAAQ,IAAI,CAAC;EACxF,MAAM,UAAU,OAAO;EACvB,IAAI,QAAQ,SAAS,mBAAmB,OAAO,OAAO,SAAS,SAAS;EACxE,UAAU,kBAAkB,OAAO,CAAC;EACpC,OAAO,gBAAgB;CACzB;CACA,OAAO;EAAE;EAAQ;EAAW;EAAS;CAAgB;AACvD"}

package/dist/connectors/slack.d.mts

@@ -1,6 +1,10 @@
-import { st as CommunicationEvent } from "../engine-DFHU2Pe-.mjs";
-import { r as NormalizedSignal, t as CommunicationAdapter } from "../index-Bw6hggoH.mjs";
+import { RepositorySlug } from "../schema/repository.mjs";
+import { MaybePromise } from "../schema/common.mjs";
+import { CommunicationEvent } from "../schema/communication.mjs";
+import { CommunicationAdapter, NormalizedSignal } from "./index.mjs";
+import { SlackApprovals, SlackApprovalsOptions, SlackApprovalsStores, createSlackApprovals } from "./slack-approvals.mjs";
 //#region src/connectors/slack.d.ts
+/** Fully rendered Slack delivery with a stable idempotency key and resolved destination. */
 interface SlackCommunicationDelivery {
   eventId: string;
   clientMessageId: string;
@@ -13,80 +17,59 @@ interface SlackCommunicationDelivery {
     threadTs: string;
   };
 }
+/** Slack-specific communication adapter with an inspectable mrkdwn renderer. */
 interface SlackCommunicationAdapter extends CommunicationAdapter {
   readonly channel: "slack";
   render(event: CommunicationEvent): string;
 }
+/** Configures Slack rendering, provider delivery, and durable delivery projection. */
 interface SlackCommunicationAdapterOptions {
   send(delivery: SlackCommunicationDelivery): Promise<void>;
   render?: (event: CommunicationEvent) => string;
+  /**
+   * Runs once send() resolves without throwing, i.e. once Slack has
+   * confirmed delivery. Errors propagate so the outbox retries with the same
+   * client message ID until both the send and its durable projection succeed.
+   */
+  onDelivered?: (event: CommunicationEvent) => MaybePromise<void>;
 }
+/** The channel and thread extracted from a Slack reply address. */
 interface SlackReplyTarget {
   channelId: string;
   threadTs: string;
 }
-type SlackPullRequestSelection = {
-  status: "none";
-} | {
-  status: "ambiguous";
-} | {
-  status: "selected";
-  pullRequestNumber: number;
-};
-/** Resolve an explicit pull-request reference after the repository has been selected. */
-declare function selectSlackPullRequest(text: string, repositorySlug: string): SlackPullRequestSelection;
 /** Parse Eve's Slack continuation token into its channel and thread target. */
 declare function parseSlackReplyAddress(address: string): SlackReplyTarget;
 /** Render a provider-neutral communication event as Slack mrkdwn. */
 declare function renderSlackCommunicationEvent(input: CommunicationEvent): string;
 /** Bind Slack rendering and delivery to the channel-neutral communication contract. */
 declare function createSlackCommunicationAdapter(options: SlackCommunicationAdapterOptions): SlackCommunicationAdapter;
+/** Authenticated Slack message metadata after repository and reply context resolution. */
 interface SlackMessageEvent {
-  teamId: string;
-  channelId: string;
-  messageTs: string;
-  threadTs: string;
-  actorId: string;
-  text: string;
-  replyAddress: string;
-  repositorySlugs: readonly [string, ...string[]];
-  payload: unknown;
+  readonly teamId: string;
+  readonly channelId: string;
+  readonly messageTs: string;
+  readonly threadTs: string;
+  readonly actorId: string;
+  readonly text: string;
+  readonly replyAddress: string;
+  readonly repositorySlugs: readonly [RepositorySlug, ...RepositorySlug[]];
+  readonly payload: unknown;
 }
+/** A normalized Slack signal with the authenticated message and repository scope retained. */
 interface SlackMessageSignal extends NormalizedSignal<"slack"> {
-  repositorySlugs: readonly [string, ...string[]];
-  message: {
-    teamId: string;
-    channelId: string;
-    messageTs: string;
-    threadTs: string;
-    actorId: string;
-    text: string;
+  readonly repositorySlugs: readonly [RepositorySlug, ...RepositorySlug[]];
+  readonly message: {
+    readonly teamId: string;
+    readonly channelId: string;
+    readonly messageTs: string;
+    readonly threadTs: string;
+    readonly actorId: string;
+    readonly text: string;
   };
 }
 /** Normalize an Eve-verified Slack message after the caller resolves its repositories. */
 declare function normalizeSlackMessage(event: SlackMessageEvent): SlackMessageSignal;
-type SlackRepositorySelection = {
-  status: "selected";
-  repositorySlug: string;
-} | {
-  status: "required";
-} | {
-  status: "ambiguous";
-  repositorySlugs: readonly string[];
-};
-type SlackRepositoriesSelection = {
-  status: "selected";
-  repositorySlugs: readonly [string, ...string[]];
-} | {
-  status: "required";
-};
-/** Select every named configured repository, preserving configuration order. */
-declare function selectSlackRepositories(text: string, repositories: readonly string[]): SlackRepositoriesSelection;
-/**
- * Select the only configured repository, or match a full slug, unique short
- * name, or GitHub repository URL when a Slack surface fronts multiple repositories.
- */
-declare function selectSlackRepository(text: string, repositories: readonly string[]): SlackRepositorySelection;
 //#endregion
-export { SlackCommunicationAdapter, SlackCommunicationAdapterOptions, SlackCommunicationDelivery, SlackMessageEvent, SlackMessageSignal, SlackPullRequestSelection, SlackReplyTarget, SlackRepositoriesSelection, SlackRepositorySelection, createSlackCommunicationAdapter, normalizeSlackMessage, parseSlackReplyAddress, renderSlackCommunicationEvent, selectSlackPullRequest, selectSlackRepositories, selectSlackRepository };
+export { type SlackApprovals, type SlackApprovalsOptions, type SlackApprovalsStores, SlackCommunicationAdapter, SlackCommunicationAdapterOptions, SlackCommunicationDelivery, SlackMessageEvent, SlackMessageSignal, SlackReplyTarget, createSlackApprovals, createSlackCommunicationAdapter, normalizeSlackMessage, parseSlackReplyAddress, renderSlackCommunicationEvent };
 //# sourceMappingURL=slack.d.mts.map