slack-term 1.32.0 → 1.32.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slack-term",
-  "version": "1.32.0",
+  "version": "1.32.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/snomiao/slack-term.git"

package/ts/ask.ts

@@ -305,3 +305,109 @@ export function askParseMessage(text: string): AskParsed {
 
   return { kind: "open", question, reactable, overflow, threadOnly };
 }
+
+/** Did a free-text reply actually PICK one of the offered choices?
+ *
+ *  Reported from real use 2026-09-04: three options were offered, the answerer
+ *  replied 「没懂，能给我讲前因后果吗」 ("I don't follow — can you explain the
+ *  background?"), and `--waitFor` exited 0 with that stored AS the decision. Any
+ *  reply from an addressed person counted, because nothing compared the reply to
+ *  the candidates. A lane harvesting that unparks the work and proceeds with
+ *  nothing behind it, and the recorded answer reads as though he had chosen.
+ *
+ *  Deliberately NARROW. Every loosening here re-creates the same defect one step
+ *  further out, and the two error directions are not symmetric: calling a
+ *  non-answer an answer makes an automated flow act on a decision nobody took,
+ *  while calling an answer a non-answer parks it in front of a human who can
+ *  settle it with one reaction. So: an exact choice, a bare number, a keycap, or
+ *  a number introducing its own choice text. Nothing fuzzy, nothing partial —
+ *  "the second one" and "option B" are NOT matches, on purpose.
+ *
+ *  `choices` is the full candidate list, reactable and overflow together, in
+ *  presentation order. The overflow ones (11+) can only ever be answered as
+ *  text, so a matcher that ignored them would call every legitimate answer to a
+ *  long question "not chosen" — the failure the caller cannot see. */
+export type AskChoiceMatch =
+  | { kind: "chosen"; index: number }        // 1-based, matching the printed numbering
+  | { kind: "none" }
+  | { kind: "ambiguous"; indexes: number[] };
+
+/** Lowercase, NFKC-fold (full-width ７ and ７．become 7), strip decoration and
+ *  one trailing sentence mark, collapse runs of space. NFKC is what lets a reply
+ *  typed on a Japanese IME match a choice typed on an ASCII keyboard. */
+function askNormalizeChoice(s: string): string {
+  return s
+    .normalize("NFKC")
+    .replace(/[*_`~]/g, "")
+    .trim()
+    // Brackets and sentence marks are stripped in ONE class at each end rather
+    // than in two passes: 「中止」。 puts the full stop OUTSIDE the quote, so
+    // stripping quotes and then punctuation leaves the closing 」 behind and the
+    // reply stops matching a choice it plainly names.
+    .replace(/^[\s"'`「『（(\[]+/, "")
+    .replace(/[\s"'`」』）)\]。．.!！?？、,]+$/, "")
+    .replace(/\s+/g, " ")
+    .trim()
+    .toLowerCase();
+}
+
+export function askMatchChoice(reply: string, choices: string[]): AskChoiceMatch {
+  const norm = askNormalizeChoice(reply);
+  if (!norm) return { kind: "none" };
+  const normChoices = choices.map(askNormalizeChoice);
+
+  const hits = new Set<number>();
+
+  // 1. The reply IS the choice text.
+  normChoices.forEach((c, i) => { if (c && c === norm) hits.add(i + 1); });
+
+  // 2. A keycap glyph, which is what someone copies out of the message when they
+  //    cannot react (a thread on mobile, or a choice past the tenth).
+  ASK_KEYCAPS.forEach((k, i) => {
+    if (i < choices.length && reply.trim() === k.glyph) hits.add(i + 1);
+  });
+
+  // 3. A number: bare, or introducing the choice it names. `1` and `1. foo` are
+  //    the same act. A number followed by DIFFERENT text is not a match — that
+  //    is someone writing prose that happens to start with a digit.
+  //
+  //    The separator is REQUIRED once text follows, and matched as its own
+  //    alternative rather than as an optional group. With it optional, `100`
+  //    parsed as choice 10 followed by "0" — so a ten-option question whose
+  //    tenth choice is "0" matched a reply nobody meant as a choice. That is the
+  //    expensive direction of the error, invented while fixing the same one.
+  //    (cross-vendor review, 2026-09-05)
+  let n = 0;
+  let rest = "";
+  let m = norm.match(/^(\d{1,2})$/);
+  if (m) {
+    n = Number(m[1]);
+  } else if ((m = norm.match(/^(\d{1,2})(?:\s*[.):：、。\-\]]\s*|\s+)(.*)$/))) {
+    n = Number(m[1]);
+    // Normalised AGAIN, not merely trimmed: `1. (Release)` reaches here as
+    // `(release` — the number kept the opening bracket from being stripped at
+    // the head of the string while the closing one went at the tail, leaving an
+    // unbalanced remainder that matched nothing. Re-running the same normaliser
+    // on the remainder is what makes a bracketed choice answerable by number.
+    rest = askNormalizeChoice(m[2]!);
+    // A separator with NOTHING after it is not a choice: `1 -` is someone who
+    // started typing and stopped, and selecting option 1 for them is the
+    // expensive error. `1.` and `1)` still work — their punctuation is stripped
+    // at the tail, so they arrive at the bare-number branch above.
+    if (!rest) return { kind: "none" };
+    // An all-digit remainder is a range or a score (`1-2`), not a numbered
+    // choice. Without this, a question whose options are themselves numbers
+    // matched `1-2` as "option 1, whose text is 2". Rejecting it fails to the
+    // CHEAP side: a genuine `1. 2` re-asks, a false selection does not.
+    if (/^\d+$/.test(rest)) return { kind: "none" };
+  }
+  if (n >= 1 && n <= choices.length && (rest === "" || rest === normChoices[n - 1])) hits.add(n);
+
+  const indexes = [...hits].sort((a, b) => a - b);
+  if (!indexes.length) return { kind: "none" };
+  // Two distinct choices matched — the same refusal-to-guess the poller already
+  // applies when someone presses two pills. Identical choice TEXT is the usual
+  // cause, and picking the lower index would answer with a coin flip.
+  if (indexes.length > 1) return { kind: "ambiguous", indexes };
+  return { kind: "chosen", index: indexes[0]! };
+}

package/ts/cli.ts

@@ -23,6 +23,7 @@ import {
   askParseMessage,
   askExplainReject,
   askFlatten,
+  askMatchChoice,
   applyInvalidNotice,
   readInvalidNotice,
   type AskFound,
@@ -929,14 +930,27 @@ async function recipientTzFor(token: string, channelId: string, cookie?: string)
   }
 }
 
-function requireCode(provided: string | undefined, expected: string, contextLines: string[], recipientTz?: string | null): void {
+/** `when` is the moment the message will ACTUALLY reach the person — which is
+ *  now for a send, and `post_at` for a schedule. Judging a scheduled message by
+ *  the clock at schedule time answers a question nobody asked: `schedule send`
+ *  is the one command where the delivery time is stated outright, and reading
+ *  it off `Date.now()` warned about a message set for December because it was
+ *  scheduled after 23:00. A warning that is false on the command where the
+ *  answer is written in the arguments teaches people to ignore the warning. */
+function requireCode(
+  provided: string | undefined,
+  expected: string,
+  contextLines: string[],
+  recipientTz?: string | null,
+  when: Date = new Date(),
+): void {
   // The clock goes to stdout with the rest of the preview, not to stderr with
   // the code. The preview is what you are asked to LOOK at before committing,
   // and "what time is it where they are" is part of that picture — a caller
   // doing `send ... 2>/dev/null` to read the preview would otherwise drop the
   // one line added to stop a 01:00 send.
   for (const line of contextLines) console.log(line);
-  const clock = quietHoursNotice(new Date(), recipientTz);
+  const clock = quietHoursNotice(when, recipientTz);
   if (clock) console.log(clock);
   if (provided !== undefined) {
     console.error(`Code mismatch (got ${provided}, expected ${expected})`);
@@ -1629,12 +1643,18 @@ async function cmdSend(token: string, args: SendArgs): Promise<void> {
 // Exit codes are the contract for `--wait`, and a non-zero one must never be
 // mistakable for "an answer arrived":
 //   0  answered   (the answer text is on stdout, and nothing else is)
-//   2  timed out
+//   2  timed out   (nobody replied)
 //   3  transport/config failure
+//   4  replied, but chose none of the offered choices — stdout stays EMPTY
 // Everything human-facing goes to stderr, so `ANS=$(slack ask ... --wait)` is safe.
 
 const ASK_EXIT_TIMEOUT = 2;
 const ASK_EXIT_ERROR = 3;
+/** Somebody replied, and what they wrote picks none of the offered choices.
+ *  A THIRD state, distinct from both 0 and 2 on purpose: exit 0 would have an
+ *  automated caller act on a decision nobody took, and exit 2 ("nobody
+ *  answered") would hide that a human is standing there waiting for something. */
+const ASK_EXIT_UNCHOSEN = 4;
 
 const ASK_PHI = 1.618033988749895;
 const ASK_POLL_MIN_MS = 1000;
@@ -1717,6 +1737,11 @@ interface AskWaitCtx {
   threadParentTs?: string;
   question: string;
   reactable: string[];
+  /** Choices past the tenth. They carry NO reaction — text is the only way to
+   *  answer them — so they must be in the candidate list the reply is matched
+   *  against, or every legitimate answer to a long question reads as "chose
+   *  nothing". */
+  overflow: string[];
   threadOnly: boolean;
   /** Who may answer. Empty + broadcast=false would accept nobody, which is why
    *  posting an unaddressed question is refused up front. */
@@ -1750,6 +1775,12 @@ async function askWaitForAnswer(token: string, ctx: AskWaitCtx): Promise<never>
   const isAnswerer = (user: unknown): user is string =>
     typeof user === "string" && !!user && user !== askerUserId && (broadcast || audience.has(user));
 
+  /** The earliest reply from an answerer that picked none of the choices. Kept
+   *  across polls so the timeout can report it, and so the operator is told once
+   *  rather than on every tick. */
+  let unchosen: { text: string; who: string; ts: string; ambiguous: boolean } | undefined;
+  let unchosenReported = "";
+
   /** Every seed an answerer is on — not just the first. Changing your mind
    *  leaves BOTH reactions in place (Slack only drops one when you actively
    *  un-react), so taking the lowest index would answer with the abandoned
@@ -1809,6 +1840,10 @@ async function askWaitForAnswer(token: string, ctx: AskWaitCtx): Promise<never>
     return null;
   }
 
+  /** The full candidate list — reactable pills AND the text-only overflow —
+   *  empty when the question was asked free-text. */
+  const candidates = [...reactable, ...ctx.overflow];
+
   function answerFromMessages(messages: Record<string, Json>[], before = Infinity): AskFound | null {
     // Oldest first: if someone wrote twice, the first reply is the answer.
     const ordered = [...messages].sort((a, b) => Number(a.ts) - Number(b.ts));
@@ -1820,12 +1855,35 @@ async function askWaitForAnswer(token: string, ctx: AskWaitCtx): Promise<never>
       if (typeof m.subtype === "string" && !ASK_ANSWERABLE_SUBTYPES.has(m.subtype)) continue;
       if (Number(m.ts) >= before) break;
       const t = typeof m.text === "string" ? m.text.trim() : "";
-      if (t) return { answer: t, how: "返信", who: m.user };
+      if (!t) continue;
+      // A question asked WITHOUT choices is answered by whatever comes back —
+      // there is nothing to match against, and every reply is the answer.
+      if (!candidates.length) return { answer: t, how: "返信", who: m.user };
+      const match = askMatchChoice(t, candidates);
+      if (match.kind === "chosen") {
+        // Answer with the CHOICE, not with the reply that selected it: "2" and
+        // "2. 中止" have to reach the caller as the same decision a pill would
+        // have produced, or the same answer arrives in three spellings.
+        return { answer: candidates[match.index - 1]!, how: `返信 (${match.index})`, who: m.user };
+      }
+      // Replied, but picked nothing. Recorded rather than returned: a later
+      // reply may still choose, and the first one is what the operator needs to
+      // see — it is usually a question back.
+      if (!unchosen || Number(m.ts) < Number(unchosen.ts)) {
+        unchosen = { text: t, who: typeof m.user === "string" ? m.user : "", ts: String(m.ts), ambiguous: match.kind === "ambiguous" };
+      }
     }
     return null;
   }
 
   async function poll(): Promise<AskFound | null> {
+    // Recomputed every pass rather than accumulated. A reply that has since been
+    // DELETED must stop counting: carrying it forward would let the timeout
+    // report "somebody replied and chose nothing" about a message that is no
+    // longer there, and exit 4 where exit 2 is the truth. `unchosenReported`
+    // persists on purpose — it is what keeps the operator from being told the
+    // same thing on every tick.
+    unchosen = undefined;
     // A question that is itself a thread reply is invisible to
     // `conversations.history`, so the entire poll — reactions included — has to
     // come from the thread.
@@ -1942,6 +2000,25 @@ async function askWaitForAnswer(token: string, ctx: AskWaitCtx): Promise<never>
       console.log(found.answer);
       process.exit(0);
     }
+    // Said as soon as it is seen, not only at the timeout: the reply is usually
+    // a question BACK, and the person who can unblock it is the one watching
+    // this command. Once per reply — a poller that repeated itself every tick
+    // would be noise nobody reads.
+    if (unchosen && unchosen.ts !== unchosenReported) {
+      unchosenReported = unchosen.ts;
+      let who = unchosen.who;
+      try {
+        if (who) who = await userName(token, who, cookie);
+      } catch {
+        // the id is still a usable answer to "who"
+      }
+      console.error(
+        unchosen.ambiguous
+          ? `  (${stripTerminalControls(who)} の返信は複数の選択肢に一致します。1 つに絞ってもらうまで待ちます)`
+          : `  (${stripTerminalControls(who)} が返信しましたが、選択肢のどれでもありません。待機を続けます)`,
+      );
+      console.error(`    「${stripTerminalControls(unchosen.text)}」`);
+    }
     // Checked after the first poll, never before it: `--timeout 0` means one
     // look, and one look must still be a real look.
     if (Date.now() >= deadline) break;
@@ -1953,6 +2030,23 @@ async function askWaitForAnswer(token: string, ctx: AskWaitCtx): Promise<never>
   // question is still standing, and they have just decided not to block on it.
   // Printing only the permalink here leaves them where `ask` used to: holding a
   // link with nothing that reads a pressed pill back.
+  // Three states, not two. "Nobody replied" and "somebody replied and chose
+  // nothing" need different reactions from whoever reads this — the first waits,
+  // the second answers a person — and collapsing them into exit 2 hides a human
+  // standing there. stdout stays empty in both: the caller must not be handed
+  // something to act on.
+  if (unchosen) {
+    console.error(
+      unchosen.ambiguous
+        ? `Error: 返信はありましたが、複数の選択肢に一致するため確定できません (メッセージはそのまま残っています)`
+        : `Error: 返信はありましたが、選択肢のどれも選ばれていません (メッセージはそのまま残っています)`,
+    );
+    console.error(`  返信: 「${stripTerminalControls(unchosen.text)}」`);
+    console.error(`  選択肢: ${candidates.map((c, i) => `${i + 1}. ${stripTerminalControls(askFlatten(c))}`).join("  ")}`);
+    console.error(`  ${shown}`);
+    console.error(`  返答してから回収する:  ${askResumeCommand(shown, ctx.asBot)}`);
+    process.exit(ASK_EXIT_UNCHOSEN);
+  }
   if (timeout === 0) {
     console.error(`まだ回答がありません: ${shown}`);
   } else {
@@ -2177,6 +2271,7 @@ async function cmdAsk(token: string, args: AskArgs): Promise<void> {
     ts,
     question,
     reactable,
+    overflow,
     threadOnly,
     audience,
     broadcast,
@@ -2291,6 +2386,7 @@ async function cmdAskWaitFor(token: string, args: { link: string; timeout: numbe
     ts,
     question: parsed.question,
     reactable: parsed.reactable,
+    overflow: parsed.overflow,
     threadOnly: parsed.threadOnly,
     audience,
     broadcast,
@@ -2725,6 +2821,11 @@ async function cmdScheduleSend(token: string, args: ScheduleSendArgs): Promise<v
   const destOverride = args.targetOverride ? `  [${args.targetOverride} → ${channelId}]` : "";
 
   if (args.code !== code) {
+    // Quiet hours are judged on post_at, in the recipient's zone — the two facts
+    // that decide whether a phone buzzes at 3am, and the two this gate was
+    // guessing at. `send` already resolves the zone; here the time is known
+    // exactly, which is the one command where it is.
+    const recipientTz = await recipientTzFor(token, channelId, args.cookie);
     requireCode(args.code, code, [
       `--- Scheduling message -----------------------`,
       fromLine(self, { asBot: args.asBot, pad: 9 }),
@@ -2732,7 +2833,7 @@ async function cmdScheduleSend(token: string, args: ScheduleSendArgs): Promise<v
       `  At:      ${fmtPostAt(postAt)}`,
       `  Message: ${args.message}`,
       `---------------------------------------------`,
-    ]);
+    ], recipientTz, new Date(postAt * 1000));
   }
   const id = await scheduleMessage(token, channelId, args.message, postAt, threadTs, args.cookie);
   console.log(`✓ Scheduled (id: ${id}, at: ${postAtDate})`);
@@ -3542,7 +3643,7 @@ async function main(): Promise<void> {
         .positional("choices", { type: "string", array: true, describe: "Up to 10 choices, seeded as 1️⃣..🔟 reactions. Beyond 10 they are listed but answerable only by text. With none, the question asks for a free-text reply." })
         .option("code", { type: "string", describe: "Safety hash to confirm the ask" })
         .option("body", { type: "string", describe: "Extra context shown under the question" })
-        .option("wait", { type: "boolean", default: false, describe: "Block until answered; print ONLY the answer on stdout. Exit 0 = answered, 2 = timed out, 3 = transport failure." })
+        .option("wait", { type: "boolean", default: false, describe: "Block until answered; print ONLY the answer on stdout. Exit 0 = answered, 2 = nobody replied, 3 = transport failure, 4 = somebody replied but picked none of the choices (stdout empty — do not act on it)." })
         .option("waitFor", { type: "string", describe: "Collect the answer to a question already posted: pass its permalink. Nothing is posted. Same stdout/exit contract as --wait; --timeout 0 checks once and exits 2 if still open." })
         .option("timeout", { type: "number", default: 3600, describe: "Overall limit for --wait / --waitFor, in seconds (0 with --waitFor = check once)" })
         .option("channel-id", { type: "string", describe: "Raw channel ID" })