@0xmaxma/claude-gateway 1.7.6 → 1.7.7

package/dist/api/slack-access.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Slack DM/channel access control — pure, stateless sender gate.
+ *
+ * Direct structural port of `line-access.ts` (same closed-by-default posture,
+ * same policy/allowlist shape) — see that file's own doc comment for the
+ * broader lineage (hermes-agent's three-list gate, openclaw's `dmPolicy`).
+ * The webhook router reads `slack` config directly and calls this once per
+ * inbound event — no env plumbing, no state files.
+ *
+ * `kind` uses LINE's own `'user' | 'group' | 'room' | 'other'` vocabulary,
+ * narrowed to `'user' | 'group'` here since Slack has no room-equivalent —
+ * kept as a subset (not a separate type) so `isResolvedSourceAllowed`-shaped
+ * dispatch logic reads identically across both channels.
+ *
+ * Default (policy absent) is CLOSED: only ids in the allowlist pass. Set
+ * `dmPolicy'/'groupPolicy': 'open'` to restore "reply to anyone" behavior.
+ *
+ * Allowlist entries MUST be stable Slack ids ("U..." for users, "C..." for
+ * channels) — never display names or channel names. Slack channel names can
+ * be renamed or are ambiguous across workspaces; a name-keyed allowlist entry
+ * silently never matches (see openclaw's docs, which call this out as a
+ * common footgun).
+ */
+export declare function isSlackSenderAllowed(policy: 'open' | 'allowlist' | 'disabled' | undefined, allowlist: string[] | undefined, id: string): boolean;
+/**
+ * Structural view of a Slack Events API `event` — the only fields the gate
+ * needs. Kept local (not the Slack SDK type) so this module stays pure and
+ * trivially testable. Slack sources are one of:
+ *   im (DM)  → { channel_type: 'im',      channel, user }
+ *   channel  → { channel_type: 'channel', channel, user }  (also 'group'/'mpim', both treated as 'group' here)
+ *
+ * `app_mention` events are a special case: Slack does NOT include
+ * `channel_type` on them at all (confirmed live — only `message` events
+ * carry it) — only `type: 'app_mention'`, `channel`, `user`. Since
+ * `app_mention` only ever fires for channel/group mentions (never DMs — a
+ * DM mention is just a plain `message.im` event), `type` is accepted here
+ * specifically to classify that case without needing `channel_type`.
+ */
+export interface SlackEventLike {
+    type?: string;
+    channel?: string;
+    channel_type?: string;
+    user?: string;
+}
+export type SlackSourceKind = 'user' | 'group' | 'other';
+export interface ResolvedSlackSource {
+    /** Conversation key — the reply target: the Slack channel id (DM channel id for `im`, channel id for `channel`/`group`/`mpim`). */
+    conversationId: string;
+    /** The human who sent the event. */
+    senderId: string;
+    kind: SlackSourceKind;
+}
+/** Map a raw Slack event to {conversationId, senderId, kind}. */
+export declare function resolveSlackSource(event: SlackEventLike | undefined | null): ResolvedSlackSource;
+/** The subset of `slack` config the conversation gate reads. */
+export interface SlackAccessConfig {
+    dmPolicy?: 'open' | 'allowlist' | 'disabled';
+    dmAllowlist?: string[];
+    groupPolicy?: 'open' | 'allowlist' | 'disabled';
+    groupAllowlist?: string[];
+}
+/**
+ * Gate an already-resolved Slack source. DMs are gated on the sender's user
+ * id against `dmPolicy`/`dmAllowlist`; channels are gated on the
+ * conversation id (the channel id) against `groupPolicy`/`groupAllowlist`,
+ * closed by default — same posture as DMs. Unknown source kinds are denied.
+ */
+export declare function isResolvedSourceAllowed(cfg: SlackAccessConfig | undefined, resolved: ResolvedSlackSource): boolean;
+/**
+ * Convenience wrapper that resolves a raw event and gates it in one call.
+ * Equivalent to `isResolvedSourceAllowed(cfg, resolveSlackSource(event))`.
+ */
+export declare function isSlackConversationAllowed(cfg: SlackAccessConfig | undefined, event: SlackEventLike | undefined | null): boolean;
+//# sourceMappingURL=slack-access.d.ts.map

package/dist/api/slack-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-access.d.ts","sourceRoot":"","sources":["../../src/api/slack-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,EACrD,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,EAC/B,EAAE,EAAE,MAAM,GACT,OAAO,CAKT;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,mIAAmI;IACnI,cAAc,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,eAAe,CAAC;CACvB;AAED,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,GAAG,mBAAmB,CAYhG;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;IAC7C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,iBAAiB,GAAG,SAAS,EAClC,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAST;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,iBAAiB,GAAG,SAAS,EAClC,KAAK,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,GACvC,OAAO,CAET"}

package/dist/api/slack-access.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSlackSenderAllowed = isSlackSenderAllowed;
+exports.resolveSlackSource = resolveSlackSource;
+exports.isResolvedSourceAllowed = isResolvedSourceAllowed;
+exports.isSlackConversationAllowed = isSlackConversationAllowed;
+/**
+ * Slack DM/channel access control — pure, stateless sender gate.
+ *
+ * Direct structural port of `line-access.ts` (same closed-by-default posture,
+ * same policy/allowlist shape) — see that file's own doc comment for the
+ * broader lineage (hermes-agent's three-list gate, openclaw's `dmPolicy`).
+ * The webhook router reads `slack` config directly and calls this once per
+ * inbound event — no env plumbing, no state files.
+ *
+ * `kind` uses LINE's own `'user' | 'group' | 'room' | 'other'` vocabulary,
+ * narrowed to `'user' | 'group'` here since Slack has no room-equivalent —
+ * kept as a subset (not a separate type) so `isResolvedSourceAllowed`-shaped
+ * dispatch logic reads identically across both channels.
+ *
+ * Default (policy absent) is CLOSED: only ids in the allowlist pass. Set
+ * `dmPolicy'/'groupPolicy': 'open'` to restore "reply to anyone" behavior.
+ *
+ * Allowlist entries MUST be stable Slack ids ("U..." for users, "C..." for
+ * channels) — never display names or channel names. Slack channel names can
+ * be renamed or are ambiguous across workspaces; a name-keyed allowlist entry
+ * silently never matches (see openclaw's docs, which call this out as a
+ * common footgun).
+ */
+function isSlackSenderAllowed(policy, allowlist, id) {
+    if (policy === 'open')
+        return true;
+    if (policy === 'disabled')
+        return false;
+    // 'allowlist' OR undefined (closed default) → only listed ids pass.
+    return !!id && (allowlist ?? []).includes(id);
+}
+/** Map a raw Slack event to {conversationId, senderId, kind}. */
+function resolveSlackSource(event) {
+    const channelType = event?.channel_type;
+    const conversationId = event?.channel ?? '';
+    const senderId = event?.user ?? '';
+    if (!conversationId)
+        return { conversationId: '', senderId: '', kind: 'other' };
+    // app_mention has no channel_type — it's always a channel/group context.
+    if (event?.type === 'app_mention')
+        return { conversationId, senderId, kind: 'group' };
+    if (channelType === 'im')
+        return { conversationId, senderId, kind: 'user' };
+    if (channelType === 'channel' || channelType === 'group' || channelType === 'mpim') {
+        return { conversationId, senderId, kind: 'group' };
+    }
+    return { conversationId: '', senderId: '', kind: 'other' };
+}
+/**
+ * Gate an already-resolved Slack source. DMs are gated on the sender's user
+ * id against `dmPolicy`/`dmAllowlist`; channels are gated on the
+ * conversation id (the channel id) against `groupPolicy`/`groupAllowlist`,
+ * closed by default — same posture as DMs. Unknown source kinds are denied.
+ */
+function isResolvedSourceAllowed(cfg, resolved) {
+    const { conversationId, senderId, kind } = resolved;
+    if (kind === 'user') {
+        return isSlackSenderAllowed(cfg?.dmPolicy, cfg?.dmAllowlist, senderId || conversationId);
+    }
+    if (kind === 'group') {
+        return isSlackSenderAllowed(cfg?.groupPolicy, cfg?.groupAllowlist, conversationId);
+    }
+    return false;
+}
+/**
+ * Convenience wrapper that resolves a raw event and gates it in one call.
+ * Equivalent to `isResolvedSourceAllowed(cfg, resolveSlackSource(event))`.
+ */
+function isSlackConversationAllowed(cfg, event) {
+    return isResolvedSourceAllowed(cfg, resolveSlackSource(event));
+}
+//# sourceMappingURL=slack-access.js.map

package/dist/api/slack-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-access.js","sourceRoot":"","sources":["../../src/api/slack-access.ts"],"names":[],"mappings":";;AAuBA,oDASC;AAkCD,gDAYC;AAgBD,0DAYC;AAMD,gEAKC;AArHD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,SAAgB,oBAAoB,CAClC,MAAqD,EACrD,SAA+B,EAC/B,EAAU;IAEV,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IACxC,oEAAoE;IACpE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AAiCD,iEAAiE;AACjE,SAAgB,kBAAkB,CAAC,KAAwC;IACzE,MAAM,WAAW,GAAG,KAAK,EAAE,YAAY,CAAC;IACxC,MAAM,cAAc,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAChF,yEAAyE;IACzE,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtF,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5E,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QACnF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAUD;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,GAAkC,EAClC,QAA6B;IAE7B,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;IACpD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,IAAI,cAAc,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO,oBAAoB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CACxC,GAAkC,EAClC,KAAwC;IAExC,OAAO,uBAAuB,CAAC,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/api/slack-client.d.ts

@@ -0,0 +1,68 @@
+export interface SlackClientOptions {
+    botToken: string;
+    logDir: string;
+    /** Test-only override for the Web API base URL. Production uses the real default. */
+    apiBase?: string;
+}
+interface SlackApiResponse {
+    ok: boolean;
+    error?: string;
+    [key: string]: unknown;
+}
+export declare class SlackClient {
+    private readonly botToken;
+    private readonly apiBase;
+    private readonly logger;
+    constructor(opts: SlackClientOptions);
+    /**
+     * form-urlencoded, not JSON: write-oriented methods (chat.postMessage,
+     * reactions.*) accept a JSON body fine, but read/info methods
+     * (users.info, conversations.info) do NOT reliably parse it — confirmed
+     * live (users.info returned "user_not_found" for a real user id via JSON,
+     * "ok":true via form-encoding). form-urlencoded is the one format every
+     * Slack Web API method accepts, so use it uniformly rather than branching
+     * per method.
+     */
+    private call;
+    /**
+     * Verify the token and fetch the workspace/team name — used as the
+     * connect-flow's "Save" validation step (see 2b in the plan: reused from
+     * openclaw's startup `auth.test` call), not just a startup check.
+     */
+    authTest(): Promise<{
+        ok: boolean;
+        team?: string;
+        error?: string;
+    }>;
+    /**
+     * Post a reply. `unfurl_links: false` by default (see 2c — avoids link-preview
+     * spam on every URL in an agent's reply; openclaw defaults the same way).
+     * `threadTs`, when passed, replies in-thread instead of top-level.
+     */
+    postMessage(channel: string, text: string, threadTs?: string): Promise<SlackApiResponse>;
+    /**
+     * Ack-reaction (see 2c) — added to the inbound message on receipt, removed
+     * once the reply posts. Replaces LINE's reply-token-TTL-driven slow-response
+     * postback button: Slack has no such TTL, so a simple "seen" signal is a
+     * proportionate substitute, not a scaled-down version of LINE's mechanism.
+     * Best-effort: failures (e.g. already reacted, message deleted) are logged,
+     * never thrown — an ack reaction is UX polish, not correctness-critical.
+     */
+    addReaction(channel: string, timestamp: string, name?: string): Promise<void>;
+    removeReaction(channel: string, timestamp: string, name?: string): Promise<void>;
+    /**
+     * Best-effort display name for a pending-knock DM sender — mirrors LINE's
+     * `getProfile()` backfill in line-webhook-router.ts. Needs the `users:read`
+     * scope; returns undefined (never throws) if missing or the call fails, so
+     * the pending list just falls back to "Unknown" same as before this existed.
+     */
+    getUserDisplayName(userId: string): Promise<string | undefined>;
+    /**
+     * Best-effort channel name for a pending-knock channel — mirrors LINE's
+     * `getGroupSummary()` backfill. Needs `channels:read` (public) / `groups:read`
+     * (private); same graceful undefined-on-failure contract as above.
+     */
+    getChannelName(channelId: string): Promise<string | undefined>;
+}
+export {};
+//# sourceMappingURL=slack-client.d.ts.map

package/dist/api/slack-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-client.d.ts","sourceRoot":"","sources":["../../src/api/slack-client.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,gBAAgB;IACxB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAE7C,IAAI,EAAE,kBAAkB;IAMpC;;;;;;;;OAQG;YACW,IAAI;IAoBlB;;;;OAIG;IACG,QAAQ,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAKzE;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAU9F;;;;;;;OAOG;IACG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,SAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAO/F,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,SAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxG;;;;;OAKG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IASrE;;;;OAIG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAMrE"}

package/dist/api/slack-client.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SlackClient = void 0;
+/**
+ * Thin Slack Web API wrapper — the outbound half of the Slack channel.
+ *
+ * Unlike LINE (`line-webhook-router.ts` uses `@line/bot-sdk`'s
+ * `MessagingApiClient` + a 402-line reply-token TTL state machine in
+ * `line-reply-manager.ts`), Slack has no reply-token expiry: `chat.postMessage`
+ * works with the bot token at any time, so no reply-manager equivalent is
+ * needed here — this is a plain fetch wrapper around the handful of Web API
+ * methods the channel actually uses.
+ */
+const logger_1 = require("../logger");
+const SLACK_API_BASE = 'https://slack.com/api';
+class SlackClient {
+    constructor(opts) {
+        this.botToken = opts.botToken;
+        this.apiBase = opts.apiBase ?? SLACK_API_BASE;
+        this.logger = (0, logger_1.createLogger)('slack-client', opts.logDir);
+    }
+    /**
+     * form-urlencoded, not JSON: write-oriented methods (chat.postMessage,
+     * reactions.*) accept a JSON body fine, but read/info methods
+     * (users.info, conversations.info) do NOT reliably parse it — confirmed
+     * live (users.info returned "user_not_found" for a real user id via JSON,
+     * "ok":true via form-encoding). form-urlencoded is the one format every
+     * Slack Web API method accepts, so use it uniformly rather than branching
+     * per method.
+     */
+    async call(method, body) {
+        const params = new URLSearchParams();
+        for (const [k, v] of Object.entries(body)) {
+            if (v !== undefined)
+                params.set(k, String(v));
+        }
+        const res = await fetch(`${this.apiBase}/${method}`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${this.botToken}`,
+                'Content-Type': 'application/x-www-form-urlencoded; charset=utf-8',
+            },
+            body: params,
+        });
+        const json = (await res.json());
+        if (!json.ok) {
+            this.logger.warn(`Slack API ${method} failed`, { error: json.error });
+        }
+        return json;
+    }
+    /**
+     * Verify the token and fetch the workspace/team name — used as the
+     * connect-flow's "Save" validation step (see 2b in the plan: reused from
+     * openclaw's startup `auth.test` call), not just a startup check.
+     */
+    async authTest() {
+        const json = await this.call('auth.test', {});
+        return { ok: json.ok, team: json.team, error: json.error };
+    }
+    /**
+     * Post a reply. `unfurl_links: false` by default (see 2c — avoids link-preview
+     * spam on every URL in an agent's reply; openclaw defaults the same way).
+     * `threadTs`, when passed, replies in-thread instead of top-level.
+     */
+    async postMessage(channel, text, threadTs) {
+        return this.call('chat.postMessage', {
+            channel,
+            text,
+            unfurl_links: false,
+            unfurl_media: false,
+            ...(threadTs ? { thread_ts: threadTs } : {}),
+        });
+    }
+    /**
+     * Ack-reaction (see 2c) — added to the inbound message on receipt, removed
+     * once the reply posts. Replaces LINE's reply-token-TTL-driven slow-response
+     * postback button: Slack has no such TTL, so a simple "seen" signal is a
+     * proportionate substitute, not a scaled-down version of LINE's mechanism.
+     * Best-effort: failures (e.g. already reacted, message deleted) are logged,
+     * never thrown — an ack reaction is UX polish, not correctness-critical.
+     */
+    async addReaction(channel, timestamp, name = 'hourglass_flowing_sand') {
+        const json = await this.call('reactions.add', { channel, timestamp, name });
+        if (!json.ok && json.error !== 'already_reacted') {
+            this.logger.debug('addReaction failed', { error: json.error });
+        }
+    }
+    async removeReaction(channel, timestamp, name = 'hourglass_flowing_sand') {
+        const json = await this.call('reactions.remove', { channel, timestamp, name });
+        if (!json.ok && json.error !== 'no_reaction') {
+            this.logger.debug('removeReaction failed', { error: json.error });
+        }
+    }
+    /**
+     * Best-effort display name for a pending-knock DM sender — mirrors LINE's
+     * `getProfile()` backfill in line-webhook-router.ts. Needs the `users:read`
+     * scope; returns undefined (never throws) if missing or the call fails, so
+     * the pending list just falls back to "Unknown" same as before this existed.
+     */
+    async getUserDisplayName(userId) {
+        const json = await this.call('users.info', { user: userId });
+        if (!json.ok)
+            return undefined;
+        const user = json.user;
+        return user?.profile?.display_name || user?.profile?.real_name || user?.real_name || undefined;
+    }
+    /**
+     * Best-effort channel name for a pending-knock channel — mirrors LINE's
+     * `getGroupSummary()` backfill. Needs `channels:read` (public) / `groups:read`
+     * (private); same graceful undefined-on-failure contract as above.
+     */
+    async getChannelName(channelId) {
+        const json = await this.call('conversations.info', { channel: channelId });
+        if (!json.ok)
+            return undefined;
+        const channel = json.channel;
+        return channel?.name || undefined;
+    }
+}
+exports.SlackClient = SlackClient;
+//# sourceMappingURL=slack-client.js.map

package/dist/api/slack-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-client.js","sourceRoot":"","sources":["../../src/api/slack-client.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,sCAAyC;AAEzC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAe/C,MAAa,WAAW;IAKtB,YAAY,IAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAA,qBAAY,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAA6B;QAC9D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,QAAQ,EAAE;gBACxC,cAAc,EAAE,kDAAkD;aACnE;YACD,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,MAAM,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,QAAiB;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE;YACnC,OAAO;YACP,IAAI;YACJ,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,KAAK;YACnB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,SAAiB,EAAE,IAAI,GAAG,wBAAwB;QACnF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,IAAI,GAAG,wBAAwB;QACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAEL,CAAC;QACd,OAAO,IAAI,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE,SAAS,IAAI,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;IACjG,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAwC,CAAC;QAC9D,OAAO,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC;IACpC,CAAC;CACF;AAjHD,kCAiHC"}

package/dist/api/slack-webhook-router.d.ts

@@ -0,0 +1,34 @@
+import type { AgentRunner } from '../agent/runner';
+import { type ResolvedSlackSource } from './slack-access';
+import type { WebhookAppHandler } from './webhooks-router';
+export type NormalizedSlackMessage = {
+    content: string;
+    meta: Record<string, string>;
+};
+interface SlackEvent {
+    type: string;
+    channel?: string;
+    channel_type?: string;
+    user?: string;
+    bot_id?: string;
+    text?: string;
+    ts?: string;
+    thread_ts?: string;
+    event_ts?: string;
+}
+/**
+ * Normalize a Slack Events API `event` into the gateway's {content, meta}
+ * intake shape. Returns null for anything not handled in v1 (bot-authored
+ * events, missing channel/user, non message/app_mention types — see 2c for
+ * what's deliberately deferred: files, edits, reactions, etc.).
+ */
+export declare function normalizeSlackEvent(event: SlackEvent, resolved?: ResolvedSlackSource, botUserId?: string): NormalizedSlackMessage | null;
+/** Verify `X-Slack-Signature` (HMAC-SHA256 of "v0:{timestamp}:{rawBody}") and reject stale requests. */
+export declare function verifySlackSignature(rawBody: Buffer, signingSecret: string, timestampHeader: string | undefined, signatureHeader: string | undefined): boolean;
+export interface SlackWebhookOptions {
+    /** Test-only Web API base override (see SlackClient). */
+    apiBase?: string;
+}
+export declare function createSlackWebhookHandler(agents: Map<string, AgentRunner>, logDir: string, opts?: SlackWebhookOptions): WebhookAppHandler;
+export {};
+//# sourceMappingURL=slack-webhook-router.d.ts.map

package/dist/api/slack-webhook-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-webhook-router.d.ts","sourceRoot":"","sources":["../../src/api/slack-webhook-router.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAGL,KAAK,mBAAmB,EAEzB,MAAM,gBAAgB,CAAC;AAQxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAwB3D,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,UAAU,UAAU;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAgBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,mBAAmB,EAC9B,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,GAAG,IAAI,CAqB/B;AAED,wGAAwG;AACxG,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,OAAO,CAYT;AAiBD,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AASD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,mBAAwB,GAC7B,iBAAiB,CA2LnB"}