lastlight 0.3.0 → 0.5.1

package/dist/connectors/slack/connector.js

@@ -1,4 +1,6 @@
 import { App } from "@slack/bolt";
+import { WebClient } from "@slack/web-api";
+import { createHmac, timingSafeEqual } from "crypto";
 import { MessagingConnector } from "../messaging/base.js";
 import { markdownToSlackMrkdwn } from "./mrkdwn.js";
 /** Rotating status messages shown while the agent is thinking */
@@ -15,38 +17,77 @@ const THINKING_MESSAGES = [
     "Almost there...",
 ];
 /**
- * Slack connector using Socket Mode (WebSocket, no public URL needed).
+ * Slack connector. Two receive modes:
+ *
+ * - **webhook** (default/prod): the HTTP Events API. Slack POSTs to
+ *   `/webhooks/slack`; we verify the signing-secret signature, answer the
+ *   one-time url_verification handshake, dedup retries by `event_id`, and ack
+ *   within Slack's 3s window while processing async. Slack retries failed
+ *   deliveries, so this is at-least-once — it does not silently drop messages
+ *   the way Socket Mode does.
+ * - **socket** (dev fallback): Socket Mode over a WebSocket, no public URL
+ *   needed. At-most-once; kept only for local development.
+ *
+ * Sending is identical in both modes via a `WebClient`.
  *
  * Behaviors:
- * - DMs: responds to every message
- * - Channels: only responds when @mentioned, replies in threads
- * - Supports multi-turn conversations via SessionManager
+ * - DMs: responds to every message (subscribe `message.im` in webhook mode)
+ * - Channels: only responds when @mentioned (subscribe `app_mention`)
  */
 export class SlackConnector extends MessagingConnector {
     name = "slack";
-    app;
+    /** Web API client for sending — used in both modes. */
+    web;
+    /** Bolt app — constructed only in socket mode, purely as the receiver. */
+    bolt = null;
     slackConfig;
     userCache = new Map(); // userId → username
+    /** Bounded set of processed Events API delivery ids, to drop Slack retries. */
+    seenEventIds = new Set();
+    seenEventOrder = [];
     constructor(config, sessionManager) {
         super(config, sessionManager);
         this.slackConfig = config;
-        this.app = new App({
-            token: config.botToken,
-            appToken: config.appToken,
-            socketMode: true,
-        });
-        this.setupListeners();
+        this.web = new WebClient(config.botToken);
+        if (config.mode === "socket") {
+            if (!config.appToken)
+                throw new Error("[slack] socket mode requires appToken");
+            this.bolt = new App({
+                token: config.botToken,
+                appToken: config.appToken,
+                socketMode: true,
+            });
+            this.setupSocketListeners();
+        }
+        else {
+            if (!config.honoApp) {
+                throw new Error("[slack] webhook mode requires an HTTP server to mount /webhooks/slack on " +
+                    "(none available — is the GitHub webhook connector configured?). " +
+                    "Set SLACK_MODE=socket for a standalone Slack deployment.");
+            }
+            if (!config.signingSecret)
+                throw new Error("[slack] webhook mode requires signingSecret");
+            this.mountWebhookRoute(config.honoApp);
+        }
     }
     async start() {
-        await this.app.start();
-        console.log(`[slack] Connected via Socket Mode`);
+        if (this.bolt) {
+            await this.bolt.start();
+            console.log(`[slack] Connected via Socket Mode`);
+        }
+        else {
+            console.log(`[slack] Listening via HTTP Events API at /webhooks/slack`);
+        }
     }
     async stop() {
-        await this.app.stop();
-        console.log(`[slack] Disconnected`);
+        if (this.bolt) {
+            await this.bolt.stop();
+            console.log(`[slack] Disconnected`);
+        }
+        // Webhook mode shares the GitHub connector's HTTP server; nothing to stop.
     }
     async sendMessage(channelId, threadId, text) {
-        const result = await this.app.client.chat.postMessage({
+        const result = await this.web.chat.postMessage({
             channel: channelId,
             text: markdownToSlackMrkdwn(text),
             thread_ts: threadId || undefined,
@@ -62,7 +103,7 @@ export class SlackConnector extends MessagingConnector {
      * at the end for an actual ping.
      */
     async updateMessage(channelId, ts, text) {
-        await this.app.client.chat.update({
+        await this.web.chat.update({
             channel: channelId,
             ts,
             text: markdownToSlackMrkdwn(text),
@@ -70,7 +111,7 @@ export class SlackConnector extends MessagingConnector {
     }
     async addReaction(channelId, messageId, emoji) {
         try {
-            await this.app.client.reactions.add({
+            await this.web.reactions.add({
                 channel: channelId,
                 timestamp: messageId,
                 name: emoji,
@@ -85,7 +126,7 @@ export class SlackConnector extends MessagingConnector {
         // thread_ts MUST be the thread root — passing the new reply's ts in an
         // existing thread silently errors and the indicator never shows.
         try {
-            await this.app.client.assistant.threads.setStatus({
+            await this.web.assistant.threads.setStatus({
                 channel_id: channelId,
                 thread_ts: threadRootId,
                 status: "Thinking...",
@@ -101,7 +142,7 @@ export class SlackConnector extends MessagingConnector {
     /** Clear the thinking status after processing completes */
     async clearTyping(channelId, threadId) {
         try {
-            await this.app.client.assistant.threads.setStatus({
+            await this.web.assistant.threads.setStatus({
                 channel_id: channelId,
                 thread_ts: threadId,
                 status: "",
@@ -122,51 +163,137 @@ export class SlackConnector extends MessagingConnector {
             await this.sendMessage(this.slackConfig.deliveryChannel, null, chunk);
         }
     }
-    setupListeners() {
+    // ── Webhook (HTTP Events API) receiver ─────────────────────────────────
+    /**
+     * Mount `POST /webhooks/slack` on the shared Hono app. Verifies the request
+     * signature, handles the url_verification handshake, dedups retries, and
+     * acks fast while processing the event asynchronously.
+     */
+    mountWebhookRoute(app) {
+        app.post("/webhooks/slack", async (c) => {
+            const body = await c.req.text();
+            const timestamp = c.req.header("x-slack-request-timestamp") || "";
+            const signature = c.req.header("x-slack-signature") || "";
+            if (!verifySlackSignature(body, timestamp, signature, this.slackConfig.signingSecret)) {
+                return c.json({ error: "Invalid signature" }, 401);
+            }
+            let payload;
+            try {
+                payload = JSON.parse(body);
+            }
+            catch {
+                return c.json({ error: "Invalid JSON" }, 400);
+            }
+            // One-time handshake when (re)configuring the Request URL in the Slack app.
+            if (payload.type === "url_verification") {
+                return c.json({ challenge: payload.challenge });
+            }
+            if (payload.type === "event_callback") {
+                const eventId = typeof payload.event_id === "string" ? payload.event_id : undefined;
+                // Slack retries on any non-200 / >3s; dedup so a retry of an event we
+                // already accepted is a no-op rather than a double-processed message.
+                if (eventId && this.markSeen(eventId)) {
+                    return c.body(null, 200);
+                }
+                const event = payload.event;
+                // Ack immediately, process async — never hold the response past 3s or
+                // Slack will retry (and we'd handle it twice if it slipped past dedup).
+                setImmediate(() => {
+                    this.dispatchSlackEvent(event).catch((err) => console.error("[slack] event handler error:", err));
+                });
+            }
+            return c.body(null, 200);
+        });
+    }
+    /** Route a raw Events API `event` object to the right handler. */
+    async dispatchSlackEvent(event) {
+        if (!event || typeof event !== "object")
+            return;
+        if (event.type === "message") {
+            await this.onMessageEvent(event);
+        }
+        else if (event.type === "app_mention") {
+            await this.onAppMention(event);
+        }
+    }
+    /**
+     * Record an Events API delivery id as seen. Returns true if it was already
+     * seen (a Slack retry). Bounded to the most recent ~1000 ids.
+     */
+    markSeen(eventId) {
+        if (this.seenEventIds.has(eventId))
+            return true;
+        this.seenEventIds.add(eventId);
+        this.seenEventOrder.push(eventId);
+        if (this.seenEventOrder.length > 1000) {
+            const evicted = this.seenEventOrder.shift();
+            if (evicted)
+                this.seenEventIds.delete(evicted);
+        }
+        return false;
+    }
+    // ── Socket Mode receiver (dev fallback) ────────────────────────────────
+    setupSocketListeners() {
         // Handle all message events (DMs, channels, groups)
-        this.app.message(async ({ message }) => {
-            // Filter out non-standard message subtypes (edits, deletes, joins, etc.)
-            const msg = message;
-            if (msg.subtype)
-                return;
-            if (!msg.user || !msg.text)
-                return;
-            // Ignore bot messages
-            if (msg.bot_id)
-                return;
-            const username = await this.resolveUsername(msg.user);
-            const isDM = msg.channel_type === "im";
-            const isMention = this.config.botIdentifier
-                ? msg.text.includes(`<@${this.config.botIdentifier}>`)
-                : false;
-            await this.handleIncomingMessage({
-                platformUserId: msg.user,
-                platformUsername: username,
-                channelId: msg.channel,
-                threadId: msg.thread_ts || null,
-                messageId: msg.ts,
-                text: msg.text,
-                isDM,
-                isMention,
-                raw: msg,
-            });
+        this.bolt.message(async ({ message }) => {
+            await this.onMessageEvent(message);
         });
         // Handle explicit @mentions (app_mention event)
-        this.app.event("app_mention", async ({ event }) => {
-            if (!event.user || !event.text)
-                return;
-            const username = await this.resolveUsername(event.user);
-            await this.handleIncomingMessage({
-                platformUserId: event.user,
-                platformUsername: username,
-                channelId: event.channel,
-                threadId: event.thread_ts || null,
-                messageId: event.ts,
-                text: event.text,
-                isDM: false,
-                isMention: true,
-                raw: event,
-            });
+        this.bolt.event("app_mention", async ({ event }) => {
+            await this.onAppMention(event);
+        });
+    }
+    // ── Shared event handling (both modes feed these) ──────────────────────
+    /** A raw Slack `message` event (DM or channel). */
+    async onMessageEvent(msg) {
+        // Log EVERY inbound message before any filtering. When a DM looks like it
+        // "dropped" messages, this line tells us whether Slack delivered the event
+        // at all and, if so, why we ignored it (a subtype like message_changed, a
+        // bot_id, or empty text) — versus Slack never sending it.
+        console.log(`[slack] inbound msg ch=${msg.channel ?? "-"} ts=${msg.ts ?? "-"} ` +
+            `thread_ts=${msg.thread_ts ?? "-"} subtype=${msg.subtype ?? "-"} ` +
+            `bot_id=${msg.bot_id ?? "-"} channel_type=${msg.channel_type ?? "-"} ` +
+            `user=${msg.user ?? "-"} hasText=${msg.text ? "y" : "n"}`);
+        // Filter out non-standard message subtypes (edits, deletes, joins, etc.)
+        if (msg.subtype)
+            return;
+        if (!msg.user || !msg.text)
+            return;
+        // Ignore bot messages
+        if (msg.bot_id)
+            return;
+        const username = await this.resolveUsername(msg.user);
+        const isDM = msg.channel_type === "im";
+        const isMention = this.config.botIdentifier
+            ? msg.text.includes(`<@${this.config.botIdentifier}>`)
+            : false;
+        await this.handleIncomingMessage({
+            platformUserId: msg.user,
+            platformUsername: username,
+            channelId: msg.channel,
+            threadId: msg.thread_ts || null,
+            messageId: msg.ts,
+            text: msg.text,
+            isDM,
+            isMention,
+            raw: msg,
+        });
+    }
+    /** A raw Slack `app_mention` event (always a channel mention). */
+    async onAppMention(event) {
+        if (!event.user || !event.text)
+            return;
+        const username = await this.resolveUsername(event.user);
+        await this.handleIncomingMessage({
+            platformUserId: event.user,
+            platformUsername: username,
+            channelId: event.channel,
+            threadId: event.thread_ts || null,
+            messageId: event.ts,
+            text: event.text,
+            isDM: false,
+            isMention: true,
+            raw: event,
         });
     }
     /** Resolve a Slack user ID to a username (cached) */
@@ -175,7 +302,7 @@ export class SlackConnector extends MessagingConnector {
         if (cached)
             return cached;
         try {
-            const result = await this.app.client.users.info({ user: userId });
+            const result = await this.web.users.info({ user: userId });
             const username = result.user?.name || result.user?.real_name || userId;
             this.userCache.set(userId, username);
             return username;
@@ -185,4 +312,30 @@ export class SlackConnector extends MessagingConnector {
         }
     }
 }
+/**
+ * Verify a Slack Events API request signature.
+ *
+ * Slack signs `v0:{timestamp}:{rawBody}` with the app's signing secret and
+ * sends it as `x-slack-signature: v0=…`. We recompute and compare in constant
+ * time, and reject requests whose timestamp is more than 5 minutes off (replay
+ * protection). `now` is injectable for tests. Exported for unit testing.
+ */
+export function verifySlackSignature(body, timestamp, signature, signingSecret, now = Date.now()) {
+    if (!timestamp || !signature || !signingSecret)
+        return false;
+    const ts = Number.parseInt(timestamp, 10);
+    if (!Number.isFinite(ts))
+        return false;
+    if (Math.abs(now / 1000 - ts) > 300)
+        return false; // 5-minute replay window
+    const expected = "v0=" + createHmac("sha256", signingSecret)
+        .update(`v0:${timestamp}:${body}`)
+        .digest("hex");
+    try {
+        return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+    }
+    catch {
+        return false;
+    }
+}
 //# sourceMappingURL=connector.js.map

package/dist/connectors/slack/connector.js.map

@@ -1 +1 @@
-{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/connectors/slack/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,iEAAiE;AACjE,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,yBAAyB;IACzB,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,8BAA8B;IAC9B,2BAA2B;IAC3B,wBAAwB;IACxB,iBAAiB;CAClB,CAAC;AAWF;;;;;;;GAOG;AACH,MAAM,OAAO,cAAe,SAAQ,kBAAkB;IAC3C,IAAI,GAAG,OAAO,CAAC;IAChB,GAAG,CAAM;IACT,WAAW,CAAuB;IAClC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,oBAAoB;IAEnE,YAAY,MAA4B,EAAE,cAA8B;QACtE,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAE1B,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC,QAAQ;YACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,QAAuB,EAAE,IAAY;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACpD,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;YACjC,SAAS,EAAE,QAAQ,IAAI,SAAS;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,EAAU,EAAE,IAAY;QAC7D,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,SAAS;YAClB,EAAE;YACF,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAa;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;gBAClC,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAoB;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBAChD,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,aAAa;gBACrB,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,mDAAmD;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,QAAgB;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBAChD,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,oDAAoD;QACpD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACrC,yEAAyE;YACzE,MAAM,GAAG,GAAG,OAAc,CAAC;YAC3B,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO;YACnC,sBAAsB;YACtB,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO;YAEvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;gBACzC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC;gBACtD,CAAC,CAAC,KAAK,CAAC;YAEV,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,cAAc,EAAE,GAAG,CAAC,IAAI;gBACxB,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS,EAAE,GAAG,CAAC,OAAO;gBACtB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;gBAC/B,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI;gBACJ,SAAS;gBACT,GAAG,EAAE,GAAG;aACT,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,gDAAgD;QAChD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,OAAO;YAEvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAExD,MAAM,IAAI,CAAC,qBAAqB,CAAC;gBAC/B,cAAc,EAAE,KAAK,CAAC,IAAI;gBAC1B,gBAAgB,EAAE,QAAQ;gBAC1B,SAAS,EAAE,KAAK,CAAC,OAAO;gBACxB,QAAQ,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBACjC,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK;gBACX,SAAS,EAAE,IAAI;gBACf,GAAG,EAAE,KAAK;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IAC7C,KAAK,CAAC,eAAe,CAAC,MAAc;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/connectors/slack/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,iEAAiE;AACjE,MAAM,iBAAiB,GAAG;IACxB,aAAa;IACb,yBAAyB;IACzB,4BAA4B;IAC5B,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB;IACtB,8BAA8B;IAC9B,2BAA2B;IAC3B,wBAAwB;IACxB,iBAAiB;CAClB,CAAC;AAqBF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,cAAe,SAAQ,kBAAkB;IAC3C,IAAI,GAAG,OAAO,CAAC;IACxB,uDAAuD;IAC/C,GAAG,CAAY;IACvB,0EAA0E;IAClE,IAAI,GAAe,IAAI,CAAC;IACxB,WAAW,CAAuB;IAClC,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,oBAAoB;IACnE,+EAA+E;IACvE,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,cAAc,GAAa,EAAE,CAAC;IAEtC,YAAY,MAA4B,EAAE,cAA8B;QACtE,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC;gBAClB,KAAK,EAAE,MAAM,CAAC,QAAQ;gBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACb,2EAA2E;oBAC3E,kEAAkE;oBAClE,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC1F,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QACD,2EAA2E;IAC7E,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,QAAuB,EAAE,IAAY;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAC7C,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;YACjC,SAAS,EAAE,QAAQ,IAAI,SAAS;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,EAAU,EAAE,IAAY;QAC7D,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,SAAS;YAClB,EAAE;YACF,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAa;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;gBAC3B,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAoB;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,iEAAiE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBACzC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,aAAa;gBACrB,gBAAgB,EAAE,iBAAiB;aACpC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,mDAAmD;YACnD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,QAAgB;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;gBACzC,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,0EAA0E;IAE1E;;;;OAIG;IACK,iBAAiB,CAAC,GAAS;QACjC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;YAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,aAAc,CAAC,EAAE,CAAC;gBACvF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,4EAA4E;YAC5E,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,sEAAsE;gBACtE,sEAAsE;gBACtE,IAAI,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC3B,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC5B,sEAAsE;gBACtE,wEAAwE;gBACxE,YAAY,CAAC,GAAG,EAAE;oBAChB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CACnD,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,kBAAkB,CAAC,KAAU;QACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,QAAQ,CAAC,OAAe;QAC9B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC5C,IAAI,OAAO;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0EAA0E;IAElE,oBAAoB;QAC1B,oDAAoD;QACpD,IAAI,CAAC,IAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAc,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,gDAAgD;QAChD,IAAI,CAAC,IAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAClD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAY,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAE1E,mDAAmD;IAC3C,KAAK,CAAC,cAAc,CAAC,GAAQ;QACnC,0EAA0E;QAC1E,2EAA2E;QAC3E,0EAA0E;QAC1E,0DAA0D;QAC1D,OAAO,CAAC,GAAG,CACT,0BAA0B,GAAG,CAAC,OAAO,IAAI,GAAG,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,GAAG;YACnE,aAAa,GAAG,CAAC,SAAS,IAAI,GAAG,YAAY,GAAG,CAAC,OAAO,IAAI,GAAG,GAAG;YAClE,UAAU,GAAG,CAAC,MAAM,IAAI,GAAG,iBAAiB,GAAG,CAAC,YAAY,IAAI,GAAG,GAAG;YACtE,QAAQ,GAAG,CAAC,IAAI,IAAI,GAAG,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAC1D,CAAC;QACF,yEAAyE;QACzE,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO;QACnC,sBAAsB;QACtB,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO;QAEvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa;YACzC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC;YACtD,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC/B,cAAc,EAAE,GAAG,CAAC,IAAI;YACxB,gBAAgB,EAAE,QAAQ;YAC1B,SAAS,EAAE,GAAG,CAAC,OAAO;YACtB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;YAC/B,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI;YACJ,SAAS;YACT,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAC1D,KAAK,CAAC,YAAY,CAAC,KAAU;QACnC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO;QAEvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExD,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC/B,cAAc,EAAE,KAAK,CAAC,IAAI;YAC1B,gBAAgB,EAAE,QAAQ;YAC1B,SAAS,EAAE,KAAK,CAAC,OAAO;YACxB,QAAQ,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YACjC,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,KAAK;SACX,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IAC7C,KAAK,CAAC,eAAe,CAAC,MAAc;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;YACvE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,aAAqB,EACrB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,yBAAyB;IAE5E,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC;SACzD,MAAM,CAAC,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/connectors/slack/connector.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/connectors/slack/connector.test.js

@@ -0,0 +1,135 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { createHmac } from "crypto";
+import { Hono } from "hono";
+import Database from "better-sqlite3";
+import { SlackConnector, verifySlackSignature } from "./connector.js";
+import { SessionManager } from "../messaging/session-manager.js";
+function sign(secret, ts, body) {
+    return "v0=" + createHmac("sha256", secret).update(`v0:${ts}:${body}`).digest("hex");
+}
+describe("verifySlackSignature", () => {
+    const secret = "shhh-signing-secret";
+    const body = JSON.stringify({ type: "event_callback", event: { type: "message" } });
+    const now = 1_700_000_000_000; // fixed clock (ms)
+    const ts = String(Math.floor(now / 1000));
+    it("accepts a correctly signed, fresh request", () => {
+        expect(verifySlackSignature(body, ts, sign(secret, ts, body), secret, now)).toBe(true);
+    });
+    it("rejects a signature made with the wrong secret", () => {
+        expect(verifySlackSignature(body, ts, sign("other-secret", ts, body), secret, now)).toBe(false);
+    });
+    it("rejects a tampered body", () => {
+        expect(verifySlackSignature(body + "x", ts, sign(secret, ts, body), secret, now)).toBe(false);
+    });
+    it("rejects a stale timestamp (replay protection)", () => {
+        const stale = String(Math.floor(now / 1000) - 600); // 10 minutes old
+        expect(verifySlackSignature(body, stale, sign(secret, stale, body), secret, now)).toBe(false);
+    });
+    it("rejects missing signature or timestamp", () => {
+        expect(verifySlackSignature(body, "", "", secret, now)).toBe(false);
+        expect(verifySlackSignature(body, ts, "", secret, now)).toBe(false);
+    });
+});
+describe("SlackConnector webhook receiver", () => {
+    const secret = "shhh-signing-secret";
+    let app;
+    let conn;
+    let db;
+    let events;
+    function headers(body) {
+        const ts = String(Math.floor(Date.now() / 1000));
+        return {
+            "content-type": "application/json",
+            "x-slack-request-timestamp": ts,
+            "x-slack-signature": sign(secret, ts, body),
+        };
+    }
+    const post = (body, hdrs) => app.request("/webhooks/slack", { method: "POST", headers: hdrs ?? headers(body), body });
+    beforeEach(() => {
+        app = new Hono();
+        db = new Database(":memory:");
+        const sm = new SessionManager(db);
+        conn = new SlackConnector({
+            botToken: "xoxb-test",
+            mode: "webhook",
+            signingSecret: secret,
+            honoApp: app,
+            allowedUsers: [],
+            botIdentifier: "",
+        }, sm);
+        // Stub the Web API client so nothing hits the network during processing.
+        conn.web = {
+            users: { info: async () => ({ user: { name: "alice" } }) },
+            assistant: { threads: { setStatus: async () => { } } },
+            reactions: { add: async () => { } },
+            chat: { postMessage: async () => ({ ts: "x" }), update: async () => { } },
+        };
+        events = [];
+        conn.on("event", (e) => events.push(e));
+    });
+    afterEach(() => db.close());
+    it("answers the url_verification handshake", async () => {
+        const body = JSON.stringify({ type: "url_verification", challenge: "abc123" });
+        const res = await post(body);
+        expect(res.status).toBe(200);
+        expect(await res.json()).toEqual({ challenge: "abc123" });
+    });
+    it("rejects a request with a bad signature", async () => {
+        const body = JSON.stringify({ type: "url_verification", challenge: "x" });
+        const res = await post(body, {
+            "content-type": "application/json",
+            "x-slack-request-timestamp": String(Math.floor(Date.now() / 1000)),
+            "x-slack-signature": "v0=deadbeef",
+        });
+        expect(res.status).toBe(401);
+    });
+    it("acks and emits an EventEnvelope for a DM message event", async () => {
+        const body = JSON.stringify({
+            type: "event_callback",
+            event_id: "Ev1",
+            event: { type: "message", channel: "D1", channel_type: "im", user: "U1", ts: "1.1", text: "hello" },
+        });
+        const res = await post(body);
+        expect(res.status).toBe(200);
+        // Processing is async (setImmediate) — let it run.
+        await new Promise((r) => setImmediate(r));
+        await new Promise((r) => setImmediate(r));
+        expect(events).toHaveLength(1);
+        expect(events[0].source).toBe("slack");
+        expect(events[0].body).toBe("hello");
+    });
+    it("dedupes Slack retries by event_id", async () => {
+        const body = JSON.stringify({
+            type: "event_callback",
+            event_id: "Ev-dup",
+            event: { type: "message", channel: "D1", channel_type: "im", user: "U1", ts: "2.2", text: "once" },
+        });
+        expect((await post(body)).status).toBe(200);
+        await new Promise((r) => setImmediate(r));
+        await new Promise((r) => setImmediate(r));
+        expect(events).toHaveLength(1);
+        // Same event_id again (a Slack retry) → acked but NOT reprocessed.
+        expect((await post(body)).status).toBe(200);
+        await new Promise((r) => setImmediate(r));
+        await new Promise((r) => setImmediate(r));
+        expect(events).toHaveLength(1);
+    });
+    it("ignores message subtypes and bot messages", async () => {
+        const edited = JSON.stringify({
+            type: "event_callback",
+            event_id: "Ev2",
+            event: { type: "message", subtype: "message_changed", channel: "D1", channel_type: "im", user: "U1", ts: "3.3", text: "edit" },
+        });
+        const bot = JSON.stringify({
+            type: "event_callback",
+            event_id: "Ev3",
+            event: { type: "message", channel: "D1", channel_type: "im", bot_id: "B1", ts: "4.4", text: "from a bot" },
+        });
+        await post(edited);
+        await post(bot);
+        await new Promise((r) => setImmediate(r));
+        await new Promise((r) => setImmediate(r));
+        expect(events).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=connector.test.js.map

package/dist/connectors/slack/connector.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.test.js","sourceRoot":"","sources":["../../../src/connectors/slack/connector.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,SAAS,IAAI,CAAC,MAAc,EAAE,EAAU,EAAE,IAAY;IACpD,OAAO,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,MAAM,GAAG,qBAAqB,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,mBAAmB;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAE1C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,oBAAoB,CAAC,IAAI,GAAG,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB;QACrE,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,MAAM,GAAG,qBAAqB,CAAC;IACrC,IAAI,GAAS,CAAC;IACd,IAAI,IAAoB,CAAC;IACzB,IAAI,EAAqB,CAAC;IAC1B,IAAI,MAAuB,CAAC;IAE5B,SAAS,OAAO,CAAC,IAAY;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACjD,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,2BAA2B,EAAE,EAAE;YAC/B,mBAAmB,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAA6B,EAAE,EAAE,CAC3D,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3F,UAAU,CAAC,GAAG,EAAE;QACd,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACjB,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,cAAc,CACvB;YACE,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,MAAM;YACrB,OAAO,EAAE,GAAG;YACZ,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;SAClB,EACD,EAAE,CACH,CAAC;QACF,yEAAyE;QACxE,IAAY,CAAC,GAAG,GAAG;YAClB,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE;YAC1D,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE;YACrD,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;YAClC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE;SACzE,CAAC;QACF,MAAM,GAAG,EAAE,CAAC;QACZ,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAgB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAE5B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE;YAC3B,cAAc,EAAE,kBAAkB;YAClC,2BAA2B,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAClE,mBAAmB,EAAE,aAAa;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;SACpG,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,mDAAmD;QACnD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1C,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SACnG,CAAC,CAAC;QAEH,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE/B,mEAAmE;QACnE,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SAC/H,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE;SAC3G,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/connectors/types.d.ts

@@ -33,6 +33,13 @@ export interface EventEnvelope {
     raw: unknown;
     /** Reply on the same platform/thread */
     reply: (msg: string) => Promise<void>;
+    /**
+     * Re-assert a "thinking" indicator for this thread, if the platform has one.
+     * Called at the start of each turn so a batched burst that drains as multiple
+     * turns shows the indicator for every turn — the per-arrival show is cleared
+     * by the first turn's reply. No-op for sources without an indicator (CLI).
+     */
+    typing?: () => Promise<void>;
     /** Timestamp of the event */
     timestamp: Date;
 }

package/dist/engine/agent-executor.d.ts

@@ -34,16 +34,6 @@ export declare function stageSkillBundle(workspaceRoot: string, phaseKey: string
  * sibling. No-op when `repoDir` isn't a git checkout (e.g. the workspace root).
  */
 export declare function excludeFromGit(repoDir: string, entry: string): void;
-/**
- * Execute one workflow-phase agent task via agentic-pi.
- *
- * Sandbox backend (decided per call):
- *  1. gondolin — agentic-pi's QEMU micro-VM. cwd is the host worktree,
- *     mounted at /workspace inside the VM.
- *  2. docker — the legacy container path (`src/sandbox/docker.ts`). The
- *     entrypoint inside the container execs `agentic-pi run --sandbox none`.
- *  3. none — agentic-pi in-process with cwd = the host worktree.
- */
 export declare function executeAgent(prompt: string, config: ExecutorConfig, opts?: {
     taskId?: string;
     /**
@@ -54,6 +44,37 @@ export declare function executeAgent(prompt: string, config: ExecutorConfig, opt
     onSessionId?: (sessionId: string) => void;
     githubAccess?: GitSandboxAccess;
 }): Promise<ExecutionResult>;
+/** What a command phase runs. */
+export type CommandSpec = {
+    kind: "bash";
+    command: string;
+} | {
+    kind: "script";
+    script: string;
+    runtime: "js" | "ts" | "python";
+    name: string;
+};
+/**
+ * Execute a deterministic command/script. Mirrors {@link executeDocker} /
+ * {@link executeInProcess} for sandbox setup but runs `runCommand` (docker) or
+ * `spawnSync` (gondolin/none) instead of an agent, and writes a session jsonl
+ * so the output is visible in the dashboard + CLI.
+ */
+export declare function executeCommand(spec: CommandSpec, config: ExecutorConfig, opts?: {
+    taskId?: string;
+    githubAccess?: GitSandboxAccess;
+    /** Per-step timeout in seconds. */
+    timeoutSeconds?: number;
+    /** Extra env forwarded into the command (e.g. upstream phase outputs). */
+    sandboxEnv?: Record<string, string>;
+    onSessionId?: (sessionId: string) => void;
+    /**
+     * Mirror the command output to a session jsonl (visible in the dashboard +
+     * CLI). Default true. Set false for internal checks like `until_bash` that
+     * shouldn't create a user-facing session log.
+     */
+    writeSession?: boolean;
+}): Promise<ExecutionResult>;
 /**
  * Build a RunResult-shaped tally from the JSONL event stream emitted by
  * `agentic-pi run` inside the docker sandbox. Mirrors what agentic-pi's
@@ -75,6 +96,7 @@ export declare class RunResultAccumulator {
     private finalText;
     private agentEnded;
     private toolErrors;
+    private maxStepsReached;
     private lastToolError?;
     private lastAssistantHadToolCall;
     private fatalError?;