Function createSlackRouter

server/src/routes/slack.ts:31–181

()

 * Returns a router to be mounted at /api/slack with sub-routers for each bot
 */
export function createSlackRouter(): { aaobotRouter: Router; addieRouter: Router } {
  const aaobotRouter = Router();
  // Create wrapper router for Addie that handles URL verification first
  const addieRouter = Router();

  // =========================================================================
  // MAIN AAO BOT ROUTES (mounted at /api/slack/aaobot)
  // =========================================================================

  // POST /api/slack/aaobot/commands - Handle Slack slash commands
  aaobotRouter.post(
    '/commands',
    slackUrlencodedParser(),
    createSlackSignatureVerifier(process.env.SLACK_SIGNING_SECRET, 'AAO Bot'),
    async (req, res) => {
      try {
        const command = req.body;

        // Validate it's our command
        if (command.command !== '/aao') {
          logger.warn({ command: command.command }, 'Unknown slash command');
          return res.status(400).json({ error: 'Unknown command' });
        }

        // Handle the command
        const response = await handleSlashCommand(command);

        // Slack expects a 200 response within 3 seconds
        res.json(response);
      } catch (error) {
        logger.error({ err: error }, 'Slack command error');
        res.json({
          response_type: 'ephemeral',
          text: 'Sorry, there was an error processing your command. Please try again later.',
        });
      }
    }
  );

  // POST /api/slack/aaobot/events - Handle Slack Events API for main AAO bot
  aaobotRouter.post(
    '/events',
    slackJsonParser(),
    async (req, res) => {
      try {
        // Handle URL verification challenge (before signature verification)
        if (handleUrlVerification(req, res)) {
          return;
        }

        // Verify the request is from Slack
        if (isSlackSigningConfigured()) {
          const verifier = createSlackSignatureVerifier(
            process.env.SLACK_SIGNING_SECRET,
            'AAO Bot'
          );
          // Run verification manually since we already parsed the body
          const result = await new Promise<boolean>((resolve) => {