cli-jaw 2.17.43 → 2.17.44

package/dist/src/slack/action-runtime.js

@@ -0,0 +1,243 @@
+import { slackDataForAgent } from './history.js';
+import { getRtsOutputStore, isRtsOutput } from './rts-output-store.js';
+import { createHash } from 'node:crypto';
+import { SlackActionRateLimiter } from './action-rate.js';
+import { slackApi, addSlackReaction, removeSlackReaction, deleteSlackMessage, readBoundedResponse } from './api.js';
+import { readSlackAuthSnapshot } from './verified-workspace.js';
+import { slackCredentialKey } from './tool-context.js';
+import { slackToolDenied, withSlackToolAccess } from './tool-access.js';
+import { redactOutboundPayload } from '../messaging/redact.js';
+import { validateSlackDownloadUrl } from './inbound-url.js';
+const WRITE_METHODS = new Set(['reactions.add', 'reactions.remove', 'chat.update', 'chat.delete', 'chat.postMessage', 'chat.scheduleMessage', 'chat.deleteScheduledMessage', 'pins.add', 'pins.remove', 'bookmarks.add', 'bookmarks.edit', 'bookmarks.remove', 'canvases.create', 'canvases.edit', 'canvases.access.set', 'slackLists.create', 'slackLists.items.create', 'slackLists.items.update', 'slackLists.access.set']);
+const SAFE_ERRORS = new Set(['missing_scope', 'invalid_auth', 'not_authed', 'not_in_channel', 'channel_not_found', 'message_not_found', 'invalid_scheduled_message_id', 'already_reacted', 'no_reaction', 'not_pinned', 'already_pinned', 'bookmark_not_found', 'invalid_arguments', 'invalid_name', 'permission_denied', 'restricted_action', 'list_not_found', 'row_not_found', 'canvas_not_found']);
+export class SlackActionRuntime {
+    options;
+    rate;
+    constructor(options) {
+        this.options = options;
+        this.rate = options.rateLimiter ?? new SlackActionRateLimiter();
+    }
+    async execute(definition, raw, principal, requestSignal) {
+        if (principal.kind === 'turn' && definition.mutates) {
+            const thread = principal.grant.destination.threadId ?? '';
+            if (raw['threadTs'] !== undefined && raw['threadTs'] !== thread)
+                throw slackToolDenied('slack_destination_thread_mismatch');
+            if (['schedule.create', 'schedule.update', 'interaction.url', 'interaction.choice'].includes(definition.operation) && thread)
+                raw = { ...raw, threadTs: thread };
+        }
+        const prepared = definition.prepare(raw);
+        const args = prepared.args;
+        const token = this.options.getToken();
+        if (!token)
+            throw slackToolDenied('slack_unavailable', 503);
+        if (definition.requiresInbound && !this.options.inboundReady?.())
+            throw slackToolDenied('slack_interaction_inbound_unavailable', 409);
+        if (definition.mutates && !args.invocationId)
+            throw slackToolDenied('slack_invocation_required', 400);
+        if (definition.mutates && principal.kind === 'turn' && args.channel !== principal.grant.destination.targetId)
+            throw slackToolDenied('slack_destination_mismatch');
+        const identity = await readSlackAuthSnapshot(token, { ...(this.options.fetchImpl ? { fetchImpl: this.options.fetchImpl } : {}), ...(requestSignal ? { signal: requestSignal } : {}) });
+        if (!identity?.userId)
+            throw slackToolDenied('slack_bot_identity_unverified', 409);
+        if (definition.scopes.length && identity.scopes === null)
+            throw slackToolDenied('slack_action_scopes_unverified', 403);
+        if (definition.scopes.some(scope => !identity.scopes?.includes(scope)))
+            throw slackToolDenied('slack_action_scopes_missing', 403);
+        const workspace = identity.teamId;
+        const actor = principal.kind === 'turn' ? principal.grant.actorId : 'operator';
+        const credentialKey = slackCredentialKey(token);
+        const store = this.options.store;
+        const hash = createHash('sha256').update(JSON.stringify({ credentialKey, operation: definition.operation, args: prepared.canonical })).digest('hex');
+        const existing = definition.mutates ? store.invocation(workspace, actor, args.invocationId) : undefined;
+        const ids = new Set();
+        let dispatched = false;
+        const base = (verification, data, resourceIds = [...ids]) => {
+            const projected = data === undefined ? undefined : slackDataForAgent(data);
+            const state = projected?.truncated && verification === 'verified' ? 'partial' : verification;
+            return { ok: state === 'verified', operation: definition.operation, verification: state, retryable: false, resourceIds,
+                ...(projected ? { data: projected.value } : {}), ...(state === 'partial' ? { partial: true } : {}) };
+        };
+        return withSlackToolAccess(token, principal, args.channel, async (grantSignal) => {
+            const signal = requestSignal ? (grantSignal ? AbortSignal.any([requestSignal, grantSignal]) : requestSignal) : grantSignal;
+            const checkCurrent = () => {
+                if (signal?.aborted)
+                    throw slackToolDenied('slack_action_cancelled', 499);
+                if (this.options.getToken() !== token)
+                    throw slackToolDenied('slack_credential_changed', 409);
+            };
+            checkCurrent();
+            if (principal.kind === 'turn' && /^(canvas|list)\./.test(definition.operation)) {
+                // File ACLs describe the requester, not every recipient in a group.
+                // Until a complete audience ACL proof is available, resource tools
+                // run only in the freshly verified requester/bot DM.
+                const conversation = await slackApi(token, 'conversations.info', { channel: args.channel }, {
+                    ...(this.options.fetchImpl ? { fetchImpl: this.options.fetchImpl } : {}), ...(signal ? { signal } : {}), sensitiveResponse: true, form: true,
+                });
+                checkCurrent();
+                if (!conversation.ok || conversation.data?.channel?.id !== args.channel || conversation.data.channel.is_im !== true
+                    || conversation.data.channel.user !== actor)
+                    throw slackToolDenied('slack_resource_requester_dm_required');
+            }
+            if (existing) {
+                if (existing.request_hash !== hash || !['completed', 'failed'].includes(existing.status) || !existing.receipt_json)
+                    throw slackToolDenied('slack_invocation_conflict_or_unknown', 409);
+                const receipt = JSON.parse(existing.receipt_json);
+                if (!receipt || typeof receipt !== 'object' || Array.isArray(receipt))
+                    throw slackToolDenied('slack_invocation_receipt_invalid', 409);
+                return receipt;
+            }
+            if (definition.mutates && !store.reserve(workspace, actor, args.invocationId, hash))
+                throw slackToolDenied('slack_invocation_capacity_or_conflict', 409);
+            let calls = 0;
+            const context = {
+                token, workspace, botUserId: identity.userId, actor, channel: args.channel, credentialKey, operator: principal.kind === 'operator', ...(signal ? { signal } : {}),
+                checkCurrent, now: this.options.now ?? (() => Date.now()),
+                api: async (method, body, beforeDispatch) => {
+                    checkCurrent();
+                    if (!definition.methods.includes(method) || ++calls > 100 || (WRITE_METHODS.has(method) && !definition.mutates))
+                        throw slackToolDenied('slack_action_method_contract', 500);
+                    for (const key of ['channel', 'channel_id'])
+                        if (body[key] !== undefined && body[key] !== args.channel)
+                            throw slackToolDenied('slack_action_target_contract', 400);
+                    if (Array.isArray(body['channel_ids']) && body['channel_ids'].some(value => value !== args.channel))
+                        throw slackToolDenied('slack_action_target_contract', 400);
+                    await this.rate.admit(workspace, method, signal);
+                    checkCurrent();
+                    if (WRITE_METHODS.has(method)) {
+                        if (principal.kind === 'turn') {
+                            const thread = principal.grant.destination.threadId ?? '';
+                            if (['chat.postMessage', 'chat.scheduleMessage'].includes(method)) {
+                                if (body['thread_ts'] !== undefined && body['thread_ts'] !== thread)
+                                    throw slackToolDenied('slack_destination_thread_mismatch');
+                                body = { ...body, ...(thread ? { thread_ts: thread } : {}) };
+                            }
+                            const protectedResource = method === 'chat.update' || method === 'chat.delete' ? ['message', body['ts']]
+                                : method === 'bookmarks.edit' || method === 'bookmarks.remove' ? ['bookmark', body['bookmark_id']]
+                                    : method === 'pins.remove' ? ['pin', body['timestamp']] : undefined;
+                            if (protectedResource) {
+                                const owned = context.resource(protectedResource[0], String(protectedResource[1]));
+                                if (!owned || owned.status !== 'active' || owned.credentialKey !== credentialKey)
+                                    throw slackToolDenied('slack_resource_ownership_unverified');
+                            }
+                        }
+                        await withSlackToolAccess(token, principal, args.channel, async () => true, this.options.fetchImpl, undefined, true);
+                        if (beforeDispatch)
+                            await beforeDispatch();
+                        checkCurrent();
+                        store.dispatched(workspace, actor, args.invocationId);
+                        dispatched = true;
+                    }
+                    if (!WRITE_METHODS.has(method) && beforeDispatch) {
+                        await beforeDispatch();
+                        checkCurrent();
+                    }
+                    const options = { ...(this.options.fetchImpl ? { fetchImpl: this.options.fetchImpl } : {}), ...(signal ? { signal } : {}), sensitiveResponse: true, maxResponseBytes: 1048576, timeoutMs: 10000 };
+                    const result = method === 'reactions.add' ? await addSlackReaction(token, String(body['channel']), String(body['timestamp']), String(body['name']), options)
+                        : method === 'reactions.remove' ? await removeSlackReaction(token, String(body['channel']), String(body['timestamp']), String(body['name']), options)
+                            : method === 'chat.delete' ? await deleteSlackMessage(token, String(body['channel']), String(body['ts']), options)
+                                : await slackApi(token, method, body, { ...options, form: !WRITE_METHODS.has(method) && !method.startsWith('slackLists.') });
+                    if (result.ok && WRITE_METHODS.has(method) && result.data && typeof result.data === 'object') {
+                        const data = result.data;
+                        const nestedId = (value) => value && typeof value === 'object' ? value['id'] : undefined;
+                        for (const id of [data['ts'], data['scheduled_message_id'], data['canvas_id'], data['list_id'], nestedId(data['bookmark']), nestedId(data['item'])]) {
+                            if ((typeof id === 'string' || typeof id === 'number') && /^[A-Za-z0-9_.:-]{1,128}$/.test(String(id)))
+                                ids.add(String(id));
+                        }
+                    }
+                    if (result.ok && principal.kind === 'turn') {
+                        const data = result.data;
+                        if (method === 'chat.postMessage' && typeof data?.['ts'] === 'string')
+                            context.remember('message', data['ts']);
+                        if (method === 'pins.add' && typeof body['timestamp'] === 'string')
+                            context.remember('pin', body['timestamp']);
+                    }
+                    if (!WRITE_METHODS.has(method))
+                        checkCurrent();
+                    if (result.error === 'ratelimited' || result.error === 'rate_limited')
+                        throw Object.assign(slackToolDenied('slack_action_rate_limited', 429), { retryAfterMs: result.retryAfterMs });
+                    if (!WRITE_METHODS.has(method) && definition.operation !== 'rts.reconcile' && result.data !== undefined)
+                        return { ...result, data: maskRtsActionMessages(workspace, args.channel, result.data) };
+                    return result;
+                },
+                remember(kind, id, metadata = {}) {
+                    ids.add(id);
+                    store.remember({ workspace, kind, id, actor, channel: args.channel, botUserId: identity.userId, credentialKey, metadata: redactOutboundPayload({ ...metadata, ...(principal.kind === 'turn' ? { threadTs: principal.grant.destination.threadId ?? '' } : {}) }) });
+                },
+                resource(kind, id) {
+                    const row = store.resource(workspace, kind, id);
+                    if (!row || row.channel !== args.channel || row.botUserId !== identity.userId || (principal.kind !== 'operator' && row.actor !== actor))
+                        return undefined;
+                    if (principal.kind === 'turn' && (row.metadata['threadTs'] ?? '') !== (principal.grant.destination.threadId ?? ''))
+                        return undefined;
+                    if (kind === 'schedule' && row.credentialKey !== credentialKey)
+                        throw slackToolDenied('slack_schedule_credential_changed', 409);
+                    return row;
+                },
+                resources: kind => store.resources(workspace, kind, args.channel, principal.kind === 'operator' ? undefined : actor).filter(row => row.botUserId === identity.userId),
+                retire(kind, id) { if (!context.resource(kind, id))
+                    throw slackToolDenied('slack_resource_ownership_unverified'); store.retire(workspace, kind, id); ids.add(id); },
+                download: async (url) => {
+                    let next = url;
+                    for (let hop = 0; hop <= 3; hop++) {
+                        checkCurrent();
+                        const safe = await validateSlackDownloadUrl(next, this.options.resolveHost ? { resolveHost: this.options.resolveHost } : {});
+                        checkCurrent();
+                        const downloadSignal = signal ? AbortSignal.any([signal, AbortSignal.timeout(10000)]) : AbortSignal.timeout(10000);
+                        const response = await (this.options.fetchImpl ?? fetch)(safe, { headers: { Authorization: `Bearer ${token}` }, redirect: 'manual', signal: downloadSignal });
+                        if (response.status >= 300 && response.status < 400) {
+                            const location = response.headers.get('location');
+                            void response.body?.cancel().catch(() => { });
+                            if (!location)
+                                throw slackToolDenied('slack_download_redirect_invalid', 502);
+                            next = new URL(location, safe).href;
+                            continue;
+                        }
+                        if (!response.ok)
+                            throw slackToolDenied('slack_download_failed', 502);
+                        const content = await readBoundedResponse(response, 1048576, downloadSignal);
+                        checkCurrent();
+                        return { content: redactOutboundPayload(content), contentType: response.headers.get('content-type') ?? '' };
+                    }
+                    throw slackToolDenied('slack_download_redirect_limit', 502);
+                },
+                result: base,
+                fail: (code, status = 409, resourceIds = [...ids]) => ({ ...base(dispatched ? 'unknown' : 'failed', undefined, resourceIds), error: code, status: status >= 400 && status <= 599 ? status : 502 }),
+            };
+            let result;
+            try {
+                result = await prepared.execute(context);
+                checkCurrent();
+            }
+            catch (error) {
+                const code = error.code;
+                result = { ...base(dispatched ? 'unknown' : 'failed'), error: typeof code === 'string' && (code.startsWith('slack_') || SAFE_ERRORS.has(code)) ? code : 'slack_action_failed', status: error.statusCode ?? 502 };
+            }
+            if (definition.mutates && Buffer.byteLength(JSON.stringify(result)) > 15000) {
+                // Durable replay must retain acknowledged addresses even when a
+                // provider's readback is larger than the receipt budget.
+                result = { ...result, ok: false, verification: result.verification === 'verified' ? 'partial' : result.verification,
+                    partial: true, data: { omitted: true, reason: 'receipt_byte_limit' } };
+            }
+            if (result.verification === 'verified' && this.options.evidenceSource === 'slack_api')
+                store.recordVerified(workspace, credentialKey, definition.operation);
+            if (definition.mutates)
+                store.finish(workspace, actor, args.invocationId, result.verification === 'unknown' || result.verification === 'partial' ? 'unknown' : result.ok ? 'completed' : 'failed', result);
+            return result;
+        }, this.options.fetchImpl, result => ({ ...result, ok: false, verification: 'unknown', error: 'slack_action_cancelled_after_dispatch' }), true);
+    }
+}
+function maskRtsActionMessages(workspace, channel, value, depth = 0) {
+    if (depth > 16)
+        throw slackToolDenied('slack_action_response_depth', 502);
+    if (Array.isArray(value))
+        return value.map(item => maskRtsActionMessages(workspace, channel, item, depth + 1));
+    if (!value || typeof value !== 'object')
+        return value;
+    const item = value;
+    const store = getRtsOutputStore();
+    if (typeof item['ts'] === 'string' && (!store || isRtsOutput(item['blocks']) || store.held(workspace, channel) || store.contains(workspace, channel, item['ts']))) {
+        return { ts: item['ts'], user: item['user'], bot_id: item['bot_id'], reactions: item['reactions'], contentExcluded: true, text: '[검색 응답 내용 제외]', blocks: [] };
+    }
+    return Object.fromEntries(Object.entries(item).filter(([key]) => !['__proto__', 'constructor', 'prototype'].includes(key)).map(([key, child]) => [key, maskRtsActionMessages(workspace, channel, child, depth + 1)]));
+}
+//# sourceMappingURL=action-runtime.js.map

package/dist/src/slack/action-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-runtime.js","sourceRoot":"","sources":["../../../src/slack/action-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAwC,MAAM,UAAU,CAAC;AAC1J,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAA2B,MAAM,kBAAkB,CAAC;AACjG,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAA+B,MAAM,kBAAkB,CAAC;AACzF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAC,kBAAkB,EAAC,aAAa,EAAC,aAAa,EAAC,kBAAkB,EAAC,sBAAsB,EAAC,6BAA6B,EAAC,UAAU,EAAC,aAAa,EAAC,eAAe,EAAC,gBAAgB,EAAC,kBAAkB,EAAC,iBAAiB,EAAC,eAAe,EAAC,qBAAqB,EAAC,mBAAmB,EAAC,yBAAyB,EAAC,yBAAyB,EAAC,uBAAuB,CAAC,CAAC,CAAC;AAC7Y,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAC,cAAc,EAAC,YAAY,EAAC,gBAAgB,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,8BAA8B,EAAC,iBAAiB,EAAC,aAAa,EAAC,YAAY,EAAC,gBAAgB,EAAC,oBAAoB,EAAC,mBAAmB,EAAC,cAAc,EAAC,mBAAmB,EAAC,mBAAmB,EAAC,gBAAgB,EAAC,eAAe,EAAC,kBAAkB,CAAC,CAAC,CAAC;AAErX,MAAM,OAAO,kBAAkB;IAEE;IADZ,IAAI,CAAyB;IAC9C,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QAAI,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAAC,CAAC;IAChI,KAAK,CAAC,OAAO,CAAC,UAA4B,EAAE,GAA4B,EAAE,SAA6B,EAAE,aAA2B;QAChI,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC1D,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM;gBAAE,MAAM,eAAe,CAAC,mCAAmC,CAAC,CAAC;YAC5H,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM;gBAAE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QACrK,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,MAAM,eAAe,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,UAAU,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE;YAAE,MAAM,eAAe,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QACtI,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,MAAM,eAAe,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;QACtG,IAAI,UAAU,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ;YAAE,MAAM,eAAe,CAAC,4BAA4B,CAAC,CAAC;QAClK,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvL,IAAI,CAAC,QAAQ,EAAE,MAAM;YAAE,MAAM,eAAe,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;QACnF,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,eAAe,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACvH,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,eAAe,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClI,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;QAAC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAClH,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAClF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrJ,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAAC,IAAI,UAAU,GAAG,KAAK,CAAC;QACtD,MAAM,IAAI,GAAG,CAAC,YAA0C,EAAE,IAAc,EAAE,cAAwB,CAAC,GAAG,GAAG,CAAC,EAAgB,EAAE;YACxH,MAAM,SAAS,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,SAAS,EAAE,SAAS,IAAI,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;YAC7F,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW;gBAClH,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7G,CAAC,CAAC;QACF,OAAO,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAC,WAAW,EAAC,EAAE;YAC3E,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;YAC3H,MAAM,YAAY,GAAG,GAAG,EAAE;gBACtB,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,eAAe,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;gBAC1E,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,KAAK;oBAAE,MAAM,eAAe,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAAC;YAClG,CAAC,CAAC;YACF,YAAY,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7E,oEAAoE;gBACpE,mEAAmE;gBACnE,qDAAqD;gBACrD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAgE,KAAK,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;oBACvJ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;iBAC/I,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC;gBACf,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI;uBAC5G,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,eAAe,CAAC,sCAAsC,CAAC,CAAC;YACnH,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACX,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY;oBAAE,MAAM,eAAe,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBACtL,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gBAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,eAAe,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;gBACtI,OAAO,OAAuB,CAAC;YACnC,CAAC;YACD,IAAI,UAAU,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,YAAa,EAAE,IAAI,CAAC;gBAAE,MAAM,eAAe,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC1J,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,OAAO,GAAkB;gBAC3B,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClK,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzD,GAAG,EAAE,KAAK,EAAK,MAAc,EAAE,IAA6B,EAAE,cAA2C,EAA8B,EAAE;oBACrI,YAAY,EAAE,CAAC;oBACf,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;wBAAE,MAAM,eAAe,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;oBAC5K,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;wBAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO;4BAAE,MAAM,eAAe,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;oBACnK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC;wBAAE,MAAM,eAAe,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;oBAChK,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;oBAAC,YAAY,EAAE,CAAC;oBACjE,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC5B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;4BAC1D,IAAI,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gCAChE,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,MAAM;oCAAE,MAAM,eAAe,CAAC,mCAAmC,CAAC,CAAC;gCAChI,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;4BACjE,CAAC;4BACD,MAAM,iBAAiB,GAAG,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;gCACpG,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oCAClG,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;4BACxE,IAAI,iBAAiB,EAAE,CAAC;gCACpB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAW,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gCAC7F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa;oCAAE,MAAM,eAAe,CAAC,qCAAqC,CAAC,CAAC;4BACnJ,CAAC;wBACL,CAAC;wBACD,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;wBACrH,IAAI,cAAc;4BAAE,MAAM,cAAc,EAAE,CAAC;wBAC3C,YAAY,EAAE,CAAC;wBAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC;wBAAC,UAAU,GAAG,IAAI,CAAC;oBAC9F,CAAC;oBACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;wBAAC,MAAM,cAAc,EAAE,CAAC;wBAAC,YAAY,EAAE,CAAC;oBAAC,CAAC;oBAC7F,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;oBAClM,MAAM,MAAM,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;wBACxJ,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;4BACrJ,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;gCAClH,CAAC,CAAC,MAAM,QAAQ,CAAI,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;oBACpI,IAAI,MAAM,CAAC,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAC;wBACpD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBAC/H,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,sBAAsB,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;4BAClJ,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gCAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC/H,CAAC;oBACL,CAAC;oBACD,IAAI,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACzC,MAAM,IAAI,GAAG,MAAM,CAAC,IAA2C,CAAC;wBAChE,IAAI,MAAM,KAAK,kBAAkB,IAAI,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,QAAQ;4BAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC/G,IAAI,MAAM,KAAK,UAAU,IAAI,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ;4BAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;oBACnH,CAAC;oBACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;wBAAE,YAAY,EAAE,CAAC;oBAC/C,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc;wBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,2BAA2B,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;oBACrL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,SAAS,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;wBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAM,EAAE,CAAC;oBACtM,OAAO,MAA2B,CAAC;gBACvC,CAAC;gBACD,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,GAAG,EAAE;oBAC5B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACrR,CAAC;gBACD,QAAQ,CAAC,IAAI,EAAE,EAAE;oBACb,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC;wBAAE,OAAO,SAAS,CAAC;oBAC1J,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;wBAAE,OAAO,SAAS,CAAC;oBACrI,IAAI,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,aAAa,KAAK,aAAa;wBAAE,MAAM,eAAe,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBAChI,OAAO,GAAG,CAAC;gBACf,CAAC;gBACD,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,CAAC;gBACrK,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;oBAAE,MAAM,eAAe,CAAC,qCAAqC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnK,QAAQ,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;oBAClB,IAAI,IAAI,GAAG,GAAG,CAAC;oBACf,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;wBAChC,YAAY,EAAE,CAAC;wBAAC,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAAC,YAAY,EAAE,CAAC;wBAC7J,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBACnH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;wBAC9J,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;4BAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;4BAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;4BAChG,IAAI,CAAC,QAAQ;gCAAE,MAAM,eAAe,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;4BAAC,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;4BAAC,SAAS;wBAChI,CAAC;wBACD,IAAI,CAAC,QAAQ,CAAC,EAAE;4BAAE,MAAM,eAAe,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;wBACtE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;wBAAC,YAAY,EAAE,CAAC;wBAC7F,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChH,CAAC;oBACD,MAAM,eAAe,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;gBACD,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,EAAE,WAAW,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;aACrM,CAAC;YACF,IAAI,MAAoB,CAAC;YACzB,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAAC,YAAY,EAAE,CAAC;YAAC,CAAC;YACjE,OAAO,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;gBAC/C,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,MAAM,EAAG,KAAiC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAClP,CAAC;YACD,IAAI,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;gBAC1E,gEAAgE;gBAChE,yDAAyD;gBACzD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;oBAC/G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK,WAAW;gBAAE,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YAC5J,IAAI,UAAU,CAAC,OAAO;gBAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,YAAa,EAAE,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC5M,OAAO,MAAM,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpJ,CAAC;CACJ;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,OAAe,EAAE,KAAc,EAAE,KAAK,GAAG,CAAC;IACxF,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,eAAe,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,KAAgC,CAAC;IAAC,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IACjF,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAChK,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClK,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,qBAAqB,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1N,CAAC"}

package/dist/src/slack/action-store.js

@@ -0,0 +1,84 @@
+const INVOCATION_CAP = 100000;
+const RESOURCE_CAP = 10000;
+export class SlackActionStore {
+    database;
+    constructor(database) {
+        this.database = database;
+        database.exec(`CREATE TABLE IF NOT EXISTS slack_tool_invocations (
+            workspace TEXT NOT NULL, actor TEXT NOT NULL, invocation_id TEXT NOT NULL,
+            request_hash TEXT NOT NULL, status TEXT NOT NULL, receipt_json TEXT,
+            created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL,
+            PRIMARY KEY(workspace,actor,invocation_id));
+            CREATE TABLE IF NOT EXISTS slack_tool_resources (
+            workspace TEXT NOT NULL, kind TEXT NOT NULL, resource_id TEXT NOT NULL,
+            actor TEXT NOT NULL, channel TEXT NOT NULL, bot_user_id TEXT NOT NULL,
+            credential_key TEXT NOT NULL, status TEXT NOT NULL, metadata_json TEXT NOT NULL,
+            PRIMARY KEY(workspace,kind,resource_id));
+            CREATE TABLE IF NOT EXISTS slack_tool_verified (
+            workspace TEXT NOT NULL, credential_key TEXT NOT NULL, operation TEXT NOT NULL,
+            verified_at INTEGER NOT NULL, PRIMARY KEY(workspace,credential_key,operation));`);
+    }
+    invocation(workspace, actor, id) {
+        return this.database.prepare('SELECT request_hash,status,receipt_json FROM slack_tool_invocations WHERE workspace=? AND actor=? AND invocation_id=?').get(workspace, actor, id);
+    }
+    reserve(workspace, actor, id, hash) {
+        return this.database.transaction(() => {
+            const count = this.database.prepare('SELECT count(*) AS n FROM slack_tool_invocations').get();
+            if (count.n >= INVOCATION_CAP)
+                return false;
+            const now = Date.now();
+            return this.database.prepare('INSERT OR IGNORE INTO slack_tool_invocations VALUES (?,?,?,?,?,?,?,?)').run(workspace, actor, id, hash, 'reserved', null, now, now).changes === 1;
+        })();
+    }
+    dispatched(workspace, actor, id) {
+        this.database.prepare("UPDATE slack_tool_invocations SET status='dispatched',updated_at=? WHERE workspace=? AND actor=? AND invocation_id=? AND status IN ('reserved','dispatched')").run(Date.now(), workspace, actor, id);
+    }
+    finish(workspace, actor, id, status, receipt) {
+        const json = JSON.stringify(receipt);
+        if (Buffer.byteLength(json) > 16384)
+            throw new Error('slack_action_receipt_too_large');
+        this.database.prepare('UPDATE slack_tool_invocations SET status=?,receipt_json=?,updated_at=? WHERE workspace=? AND actor=? AND invocation_id=?').run(status, json, Date.now(), workspace, actor, id);
+    }
+    resource(workspace, kind, id) {
+        const row = this.database.prepare('SELECT workspace,kind,resource_id,actor,channel,bot_user_id,credential_key,status,metadata_json FROM slack_tool_resources WHERE workspace=? AND kind=? AND resource_id=?').get(workspace, kind, id);
+        if (!row)
+            return undefined;
+        const metadata = JSON.parse(String(row['metadata_json']));
+        if (!metadata || typeof metadata !== 'object' || Array.isArray(metadata) || !['active', 'retired'].includes(String(row['status'])))
+            throw new Error('slack_action_resource_invalid');
+        return { workspace: String(row['workspace']), kind: String(row['kind']), id: String(row['resource_id']), actor: String(row['actor']), channel: String(row['channel']), botUserId: String(row['bot_user_id']), credentialKey: String(row['credential_key']), status: row['status'], metadata: metadata };
+    }
+    resources(workspace, kind, channel, actor) {
+        const rows = (actor === undefined
+            ? this.database.prepare('SELECT resource_id FROM slack_tool_resources WHERE workspace=? AND kind=? AND channel=? LIMIT 1001').all(workspace, kind, channel)
+            : this.database.prepare('SELECT resource_id FROM slack_tool_resources WHERE workspace=? AND kind=? AND channel=? AND actor=? LIMIT 1001').all(workspace, kind, channel, actor));
+        if (rows.length > 1000)
+            throw new Error('slack_action_resource_list_incomplete');
+        return rows.map(row => this.resource(workspace, kind, row.resource_id));
+    }
+    remember(value) {
+        const metadata = JSON.stringify(value.metadata);
+        if (Buffer.byteLength(metadata) > 262144)
+            throw new Error('slack_action_resource_too_large');
+        const existing = this.resource(value.workspace, value.kind, value.id);
+        if (existing && (existing.actor !== value.actor || existing.channel !== value.channel || existing.botUserId !== value.botUserId
+            || (value.kind === 'schedule' && existing.credentialKey !== value.credentialKey)))
+            throw new Error('slack_action_resource_collision');
+        const count = this.database.prepare('SELECT count(*) AS n FROM slack_tool_resources').get();
+        if (!existing && count.n >= RESOURCE_CAP)
+            throw new Error('slack_action_resource_capacity');
+        this.database.prepare(`INSERT INTO slack_tool_resources VALUES (?,?,?,?,?,?,?,?,?)
+            ON CONFLICT(workspace,kind,resource_id) DO UPDATE SET metadata_json=excluded.metadata_json,status='active'`).run(value.workspace, value.kind, value.id, value.actor, value.channel, value.botUserId, value.credentialKey, 'active', metadata);
+    }
+    retire(workspace, kind, id) {
+        this.database.prepare("UPDATE slack_tool_resources SET status='retired',metadata_json='{}' WHERE workspace=? AND kind=? AND resource_id=?").run(workspace, kind, id);
+    }
+    verified(workspace, credentialKey, operation) {
+        const row = this.database.prepare('SELECT verified_at FROM slack_tool_verified WHERE workspace=? AND credential_key=? AND operation=?').get(workspace, credentialKey, operation);
+        return row?.verified_at ?? null;
+    }
+    recordVerified(workspace, credentialKey, operation) {
+        this.database.prepare('INSERT INTO slack_tool_verified VALUES (?,?,?,?) ON CONFLICT(workspace,credential_key,operation) DO UPDATE SET verified_at=excluded.verified_at').run(workspace, credentialKey, operation, Date.now());
+    }
+}
+//# sourceMappingURL=action-store.js.map

package/dist/src/slack/action-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-store.js","sourceRoot":"","sources":["../../../src/slack/action-store.ts"],"names":[],"mappings":"AAIA,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,OAAO,gBAAgB;IACI;IAA7B,YAA6B,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;QACjD,QAAQ,CAAC,IAAI,CAAC;;;;;;;;;;;;4FAYsE,CAAC,CAAC;IAC1F,CAAC;IACD,UAAU,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAU;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uHAAuH,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAA6B,CAAC;IAChN,CAAC;IACD,OAAO,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAU,EAAE,IAAY;QAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,EAAmB,CAAC;YAC/G,IAAI,KAAK,CAAC,CAAC,IAAI,cAAc;gBAAE,OAAO,KAAK,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;QACpL,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,UAAU,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAU;QACnD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,8JAA8J,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAChO,CAAC;IACD,MAAM,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAU,EAAE,MAA0C,EAAE,OAAgB;QAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,0HAA0H,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1M,CAAC;IACD,QAAQ,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAU;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,0KAA0K,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAwC,CAAC;QAC9Q,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrL,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAyB,EAAE,QAAQ,EAAE,QAAmC,EAAE,CAAC;IAC/V,CAAC;IACD,SAAS,CAAC,SAAiB,EAAE,IAAY,EAAE,OAAe,EAAE,KAAc;QACtE,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC;YAC3J,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gHAAgH,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAmC,CAAC;QACtN,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,CAAE,CAAC,CAAC;IAC7E,CAAC;IACD,QAAQ,CAAC,KAAqC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;eACxH,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC1I,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,EAAmB,CAAC;QAC7G,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;uHACyF,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtP,CAAC;IACD,MAAM,CAAC,SAAiB,EAAE,IAAY,EAAE,EAAU;QAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oHAAoH,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACzK,CAAC;IACD,QAAQ,CAAC,SAAiB,EAAE,aAAqB,EAAE,SAAiB;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,oGAAoG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAwC,CAAC;QACxN,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;IACpC,CAAC;IACD,cAAc,CAAC,SAAiB,EAAE,aAAqB,EAAE,SAAiB;QACtE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iJAAiJ,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClO,CAAC;CACJ"}

package/dist/src/slack/action-types.js

@@ -0,0 +1,6 @@
+export function defineAction(definition) {
+    return { operation: definition.operation, scopes: definition.scopes, methods: definition.methods, mutates: definition.mutates,
+        ...(definition.requiresInbound ? { requiresInbound: true } : {}),
+        prepare(raw) { const args = definition.parse(raw); return { args, canonical: args, execute: ctx => definition.execute(ctx, args) }; } };
+}
+//# sourceMappingURL=action-types.js.map

package/dist/src/slack/action-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-types.js","sourceRoot":"","sources":["../../../src/slack/action-types.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,YAAY,CAAuB,UAGlD;IACG,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO;QACzH,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,GAAG,IAAI,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChJ,CAAC"}

package/dist/src/slack/actions-canvas.js

@@ -0,0 +1,108 @@
+import { defineAction } from './action-types.js';
+import { baseAction, enumValue, opaqueId, requiredText } from './task-input.js';
+import { acknowledgedFailure, fileAccess, preserve, responseId } from './actions-resources.js';
+import { redactOutboundText } from '../messaging/redact.js';
+import { slackToolDenied } from './tool-access.js';
+const aclMethods = ['files.info', 'users.info'];
+const aclScopes = ['files:read', 'users:read'];
+async function readCanvas(ctx, id, expected) {
+    const file = await fileAccess(ctx, 'canvas', id, false);
+    if (!file)
+        return ctx.fail('resource_requester_access_denied', 403, [id]);
+    const url = file['url_private_download'] ?? file['url_private'];
+    const metadata = { id, title: typeof file['title'] === 'string' ? redactOutboundText(file['title']).slice(0, 512) : undefined };
+    if (typeof url !== 'string')
+        return ctx.result('partial', { ...metadata, content: 'not_checked', requesterView: 'not_checked' }, [id]);
+    const exported = await ctx.download(url);
+    ctx.checkCurrent();
+    if (!await fileAccess(ctx, 'canvas', id, false))
+        return ctx.fail('resource_requester_access_denied', 403, [id]);
+    // The file endpoint supplies no documented completeness/version receipt for Canvas.
+    // A bounded supported export may be displayed, but is never labelled a full snapshot.
+    const mime = exported.contentType.split(';')[0]?.trim().toLowerCase();
+    if (!['text/markdown', 'text/plain'].includes(mime ?? '') || Buffer.byteLength(exported.content) > 1048576) {
+        return ctx.result('partial', { ...metadata, content: 'not_checked', export: 'unsupported_format', requesterView: 'not_checked' }, [id]);
+    }
+    return ctx.result('partial', { ...metadata, content: 'partial', exportText: redactOutboundText(exported.content).slice(0, 8000),
+        exportTruncated: exported.content.length > 8000, ...(expected !== undefined ? { exportMatchesRequested: exported.content === expected } : {}), requesterView: 'not_checked' }, [id]);
+}
+export const canvasActions = [
+    defineAction({ operation: 'canvas.create', scopes: ['canvases:write', ...aclScopes], methods: ['canvases.create', 'canvases.access.set', ...aclMethods], mutates: true,
+        parse(raw) { return { ...baseAction(raw, ['title', 'markdown'], true), title: requiredText(raw['title'], 256), markdown: redactOutboundText(requiredText(raw['markdown'], 64000)) }; },
+        async execute(ctx, args) {
+            const ids = [];
+            return preserve(ctx, ids, async () => {
+                const direct = args.channel.startsWith('D');
+                if (args.channel !== ctx.channel)
+                    return ctx.fail('canvas_destination_mismatch', 403);
+                if (direct && (ctx.operator || !/^[UW][A-Z0-9]+$/.test(ctx.actor)))
+                    return ctx.fail('canvas_requester_identity_required', 403);
+                ctx.checkCurrent();
+                const created = await ctx.api('canvases.create', { title: redactOutboundText(args.title), document_content: { type: 'markdown', markdown: args.markdown }, ...(direct ? {} : { channel_id: args.channel }) });
+                const id = responseId(created.data?.['canvas_id']);
+                if (id) {
+                    ids.push(id);
+                    ctx.remember('canvas', id);
+                }
+                ctx.checkCurrent();
+                if (!created.ok || !id) {
+                    if (ids.length)
+                        return acknowledgedFailure(ctx, ids, 'create_unconfirmed');
+                    if (['free_teams_cannot_create_standalone_canvases', 'free_teams_cannot_create_non_tabbed_canvases', 'invalid_arguments', 'canvas_disabled_user_team', 'missing_scope'].includes(created.error ?? ''))
+                        return ctx.fail(created.error, created.status ?? 400);
+                    return ctx.result('unknown', { creation: 'unconfirmed' });
+                }
+                let sharing = 'not_requested';
+                if (direct) {
+                    // Slack may require prior direct sharing; failure remains partial, never a wider share fallback.
+                    const shared = await ctx.api('canvases.access.set', { canvas_id: id, access_level: 'write', user_ids: [ctx.actor] });
+                    ctx.checkCurrent();
+                    if (!shared.ok)
+                        return acknowledgedFailure(ctx, ids, 'canvas_sharing_unconfirmed');
+                    sharing = 'acknowledged';
+                    if (!await fileAccess(ctx, 'canvas', id, true))
+                        return acknowledgedFailure(ctx, ids, 'requester_write_unverified');
+                }
+                const read = await readCanvas(ctx, id, args.markdown);
+                if (!read.ok)
+                    return acknowledgedFailure(ctx, ids, 'requester_visibility_unverified');
+                return ctx.result('partial', { creation: 'acknowledged', sharing, readback: read.data, requesterView: 'not_checked' }, ids);
+            });
+        } }),
+    defineAction({ operation: 'canvas.read', scopes: aclScopes, methods: aclMethods, mutates: false,
+        parse(raw) { return { ...baseAction(raw, ['canvasId'], false), canvasId: opaqueId(raw['canvasId']) }; },
+        execute(ctx, args) { return preserve(ctx, [], () => readCanvas(ctx, args.canvasId)); } }),
+    defineAction({ operation: 'canvas.edit', scopes: ['canvases:write', ...aclScopes], methods: ['canvases.edit', ...aclMethods], mutates: true,
+        parse(raw) {
+            const base = baseAction(raw, ['canvasId', 'mode', 'markdown', 'sectionId', 'replaceAll'], true);
+            const mode = enumValue(raw['mode'], ['append', 'replace']);
+            const sectionId = raw['sectionId'] === undefined ? undefined : opaqueId(raw['sectionId']);
+            const replaceAll = raw['replaceAll'] === undefined ? false : raw['replaceAll'];
+            if (typeof replaceAll !== 'boolean' || (mode === 'append' && (sectionId || replaceAll))
+                || (mode === 'replace' && (!!sectionId === replaceAll))) {
+                throw slackToolDenied('invalid_canvas_edit', 400);
+            }
+            return { ...base, canvasId: opaqueId(raw['canvasId']), mode, sectionId, replaceAll, markdown: redactOutboundText(requiredText(raw['markdown'], 64000)) };
+        },
+        async execute(ctx, args) {
+            const ids = [];
+            return preserve(ctx, ids, async () => {
+                if (!await fileAccess(ctx, 'canvas', args.canvasId, true))
+                    return ctx.fail('resource_requester_write_denied', 403);
+                ctx.checkCurrent();
+                ids.push(args.canvasId);
+                const edited = await ctx.api('canvases.edit', { canvas_id: args.canvasId, changes: [{ operation: args.mode === 'append' ? 'insert_at_end' : 'replace',
+                            document_content: { type: 'markdown', markdown: args.markdown }, ...(args.sectionId ? { section_id: args.sectionId } : {}) }] }, async () => {
+                    if (!await fileAccess(ctx, 'canvas', args.canvasId, true))
+                        throw slackToolDenied('resource_requester_write_denied', 403);
+                    ctx.checkCurrent();
+                });
+                ctx.checkCurrent();
+                if (!edited.ok)
+                    return ctx.result('unknown', { edit: 'unconfirmed' }, ids);
+                const read = await readCanvas(ctx, args.canvasId, args.replaceAll ? args.markdown : undefined);
+                return read.ok ? ctx.result('partial', { edit: 'acknowledged', readback: read.data, requesterView: 'not_checked' }, ids) : acknowledgedFailure(ctx, ids, 'readback_unavailable');
+            });
+        } }),
+];
+//# sourceMappingURL=actions-canvas.js.map

package/dist/src/slack/actions-canvas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions-canvas.js","sourceRoot":"","sources":["../../../src/slack/actions-canvas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAyC,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,UAAU,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AAChD,MAAM,SAAS,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AAC/C,KAAK,UAAU,UAAU,CAAC,GAAkB,EAAE,EAAU,EAAE,QAAiB;IACvE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAChI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvI,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAAC,GAAG,CAAC,YAAY,EAAE,CAAC;IAC7D,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAChH,oFAAoF;IACpF,sFAAsF;IACtF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC;QACzG,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QAC3H,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7L,CAAC;AACD,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,YAAY,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,gBAAgB,EAAE,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI;QAClK,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtL,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI;YACnB,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;gBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC5C,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;gBACtF,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBAC/H,GAAG,CAAC,YAAY,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9M,MAAM,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;gBACnD,IAAI,EAAE,EAAE,CAAC;oBAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACrD,GAAG,CAAC,YAAY,EAAE,CAAC;gBACnB,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;oBACrB,IAAI,GAAG,CAAC,MAAM;wBAAE,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;oBAC3E,IAAI,CAAC,8CAA8C,EAAE,8CAA8C,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;wBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;oBAC9P,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,OAAO,GAAqC,eAAe,CAAC;gBAChE,IAAI,MAAM,EAAE,CAAC;oBACT,iGAAiG;oBACjG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACrH,GAAG,CAAC,YAAY,EAAE,CAAC;oBACnB,IAAI,CAAC,MAAM,CAAC,EAAE;wBAAE,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;oBACnF,OAAO,GAAG,cAAc,CAAC;oBACzB,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC;wBAAE,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;gBACvH,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAC;gBACtF,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;YAChI,CAAC,CAAC,CAAC;QACP,CAAC,EAAE,CAAC;IACR,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK;QAC3F,KAAK,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,EAAE,IAAI,IAAI,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,YAAY,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,gBAAgB,EAAE,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,GAAG,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI;QACvI,KAAK,CAAC,GAAG;YACL,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;YAChG,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAU,CAAC,CAAC;YACpE,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1F,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,IAAI,OAAO,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;mBAChF,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC;gBAAC,MAAM,eAAe,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YACnH,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7J,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI;YACnB,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE;gBACjC,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAAE,OAAO,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;gBACnH,GAAG,CAAC,YAAY,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;4BACjJ,gBAAgB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;oBAC5I,IAAI,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;wBAAE,MAAM,eAAe,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;oBACzH,GAAG,CAAC,YAAY,EAAE,CAAC;gBACvB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,YAAY,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC3E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC/F,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACrL,CAAC,CAAC,CAAC;QACP,CAAC,EAAE,CAAC;CACX,CAAC"}

package/dist/src/slack/actions-channel.js

@@ -0,0 +1,88 @@
+import { defineAction } from './action-types.js';
+import { baseAction, messageTs, opaqueId, requiredText, optionalText } from './task-input.js';
+import { redactChannelSecrets } from '../messaging/redact.js';
+import { slackToolDenied } from './tool-access.js';
+function safeLink(value) {
+    const link = requiredText(value, 2048);
+    let url;
+    try {
+        url = new URL(link);
+    }
+    catch {
+        throw slackToolDenied('slack_link_invalid', 400);
+    }
+    if (url.protocol !== 'https:' || url.username || url.password || redactChannelSecrets(link) !== link)
+        throw slackToolDenied('slack_link_unsafe', 400);
+    return link;
+}
+export const channelActions = [];
+for (const operation of ['pin.add', 'pin.remove', 'pin.list']) {
+    const mutates = operation !== 'pin.list';
+    channelActions.push(defineAction({ operation, scopes: mutates ? ['pins:write', 'pins:read'] : ['pins:read'],
+        methods: mutates ? [operation === 'pin.add' ? 'pins.add' : 'pins.remove', 'pins.list'] : ['pins.list'], mutates,
+        parse(raw) { return { ...baseAction(raw, mutates ? ['ts'] : [], mutates), ...(mutates ? { ts: messageTs(raw['ts']) } : {}) }; },
+        async execute(ctx, args) {
+            if (mutates) {
+                const changed = await ctx.api(operation === 'pin.add' ? 'pins.add' : 'pins.remove', { channel: args.channel, timestamp: args.ts });
+                const converged = operation === 'pin.add' ? changed.error === 'already_pinned' : changed.error === 'not_pinned';
+                if (!changed.ok && !converged)
+                    return ctx.fail(changed.error ?? 'slack_pin_failed', changed.status);
+            }
+            const read = await ctx.api('pins.list', { channel: args.channel });
+            if (!read.ok || !Array.isArray(read.data?.items) || read.data.items.length > 1000)
+                return ctx.fail('slack_pins_readback_failed', 502, mutates ? [args.ts] : []);
+            if (read.data.items.some(item => item.channel && item.channel !== args.channel))
+                return ctx.fail('slack_pins_target_mismatch', 502, mutates ? [args.ts] : []);
+            const items = read.data.items.filter(item => item.type === 'message' && typeof item.message?.ts === 'string').map(item => ({ ts: item.message.ts, text: item.message?.text ?? '', contentExcluded: item.message?.contentExcluded === true }));
+            if (mutates && items.some(item => item.ts === args.ts) !== (operation === 'pin.add'))
+                return ctx.fail('slack_pin_state_mismatch', 409, [args.ts]);
+            return ctx.result(read.data.items.length !== items.length ? 'partial' : 'verified', { items, scope: 'conversation' }, mutates ? [args.ts] : []);
+        },
+    }));
+}
+for (const operation of ['bookmark.add', 'bookmark.edit', 'bookmark.remove', 'bookmark.list']) {
+    const mutates = operation !== 'bookmark.list';
+    channelActions.push(defineAction({ operation, scopes: mutates ? ['bookmarks:write', 'bookmarks:read'] : ['bookmarks:read'],
+        methods: mutates ? [operation.replace('bookmark.', 'bookmarks.'), 'bookmarks.list'] : ['bookmarks.list'], mutates,
+        parse(raw) {
+            const allowed = operation === 'bookmark.add' ? ['title', 'link', 'emoji'] : operation === 'bookmark.edit' ? ['bookmarkId', 'title', 'link', 'emoji'] : operation === 'bookmark.remove' ? ['bookmarkId'] : [];
+            const base = baseAction(raw, allowed, mutates);
+            const title = operation === 'bookmark.add' ? requiredText(raw['title'], 100) : optionalText(raw['title'], 100);
+            const link = raw['link'] !== undefined || operation === 'bookmark.add' ? safeLink(raw['link']) : undefined;
+            const emoji = optionalText(raw['emoji'], 100);
+            if (operation === 'bookmark.edit' && title === undefined && link === undefined && emoji === undefined)
+                throw slackToolDenied('slack_bookmark_edit_empty', 400);
+            return { ...base, ...(title !== undefined ? { title: redactChannelSecrets(title) } : {}), ...(link ? { link } : {}), ...(emoji ? { emoji } : {}),
+                ...(['bookmark.edit', 'bookmark.remove'].includes(operation) ? { bookmarkId: opaqueId(raw['bookmarkId']) } : {}) };
+        },
+        async execute(ctx, args) {
+            let id = args.bookmarkId;
+            if (mutates) {
+                const changed = await ctx.api(operation.replace('bookmark.', 'bookmarks.'), { channel_id: args.channel,
+                    ...(id ? { bookmark_id: id } : {}), ...(operation === 'bookmark.add' ? { type: 'link' } : {}),
+                    ...(args.title !== undefined ? { title: args.title } : {}), ...(args.link ? { link: args.link } : {}), ...(args.emoji ? { emoji: args.emoji } : {}) });
+                if (!changed.ok)
+                    return ctx.fail(changed.error ?? 'slack_bookmark_failed', changed.status, id ? [id] : []);
+                if (operation === 'bookmark.add') {
+                    id = changed.data?.bookmark?.id;
+                    if (!id || changed.data?.bookmark?.channel_id !== args.channel)
+                        return ctx.fail('slack_bookmark_id_unverified');
+                    ctx.remember('bookmark', id);
+                }
+            }
+            const read = await ctx.api('bookmarks.list', { channel_id: args.channel });
+            if (!read.ok || !Array.isArray(read.data?.bookmarks) || read.data.bookmarks.length > 100)
+                return ctx.fail('slack_bookmark_readback_failed', 502, id ? [id] : []);
+            if (read.data.bookmarks.some(bookmark => bookmark.channel_id !== args.channel || typeof bookmark.id !== 'string')
+                || new Set(read.data.bookmarks.map(bookmark => bookmark.id)).size !== read.data.bookmarks.length)
+                return ctx.fail('slack_bookmark_response_invalid', 502, id ? [id] : []);
+            const bookmark = read.data.bookmarks.find(item => item.id === id);
+            if (operation === 'bookmark.remove' && bookmark)
+                return ctx.fail('slack_bookmark_still_present', 409, [id]);
+            if ((operation === 'bookmark.add' || operation === 'bookmark.edit') && (!bookmark || bookmark.type !== 'link' || (args.title !== undefined && bookmark.title !== args.title) || (args.link !== undefined && bookmark.link !== args.link) || (args.emoji !== undefined && bookmark.emoji !== args.emoji)))
+                return ctx.fail('slack_bookmark_content_mismatch', 409, id ? [id] : []);
+            return ctx.result('verified', { bookmarks: read.data.bookmarks.map(item => ({ id: item.id, title: item.title, link: item.link, type: item.type })) }, id ? [id] : []);
+        },
+    }));
+}
+//# sourceMappingURL=actions-channel.js.map