@agent-native/core 0.118.0 → 0.119.0

package/dist/guards/db-tool-scoping.js

@@ -89,7 +89,7 @@ export function scanDbToolScoping(options) {
         for (const table of tables) {
             if (hasRawDbScope(table.body))
                 continue;
-            if (Object.hasOwn(denylist, table.sqlName)) {
+            if (Object.prototype.hasOwnProperty.call(denylist, table.sqlName)) {
                 seenAllowed.add(table.sqlName);
                 continue;
             }

package/dist/guards/db-tool-scoping.js.map

@@ -1 +1 @@
-{"version":3,"file":"db-tool-scoping.js","sourceRoot":"","sources":["../../src/guards/db-tool-scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAc/D,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,WAAW,GACf,uGAAuG,CAAC;IAC1G,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;oBAAE,KAAK,GAAG,IAAI,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxC,KAAK,GAAG,CAAC,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACnB,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3C,gDAAgD,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,2CAA2C,CAAC,IAAI,CAAC,SAAS,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA6B;IAC7D,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,SAAS;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3C,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,UAAU,qLAAqL;aACnP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,6CAA6C,GAAG,gEAAgE;aAC1H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["/**\n * scanDbToolScoping — ported from `scripts/guard-db-tool-scoping.mjs`.\n *\n * The agent's raw DB tools (`db-query`, `db-exec`, `db-patch`) can only\n * safely expose tables with an explicit tenant scope (`owner_email` and/or\n * `org_id`) or a documented, reviewed exception. This guard keeps schema\n * drift visible: any table without raw-DB scope must either add\n * `owner_email`/`org_id`, or be added to the denylist with a\n * reviewer-readable reason.\n *\n * Conditional guard — per report 005's V1 guard set table: the original\n * walks every `templates/*\\/server/db/schema.ts` and keys its denylist\n * `\"<template>:<table>\"`. A generated app has exactly one\n * `server/db/schema.ts` (confirmed convention), so this port scans that\n * single file and uses bare `\"<table>\"` denylist keys. The denylist itself\n * comes from `agent-native.json`'s `doctor.dbToolScopingDenylist` (see\n * `../cli/doctor.ts`) — empty by default; app authors add entries with the\n * same reviewer-readable-reason convention as the original constant.\n *\n * Not ported: the original also resolves `export * from\n * \"@agent-native/<pkg>/schema\"` re-exports back to that package's\n * `packages/<pkg>/src/schema/*.ts` monorepo source, so template schemas\n * that re-export scheduling/dispatch tables get scanned too. In a\n * generated app those packages are compiled `node_modules` output (no\n * `.ts` source to brace-parse), and report 005's parameterization note\n * doesn't cover that case, so re-export resolution is intentionally\n * dropped for app mode: a re-exported table from an `@agent-native/*`\n * package is not scanned here (false-negative, not false-positive) — see\n * the plan's STOP-condition guidance (\"report rather than invent new\n * detection logic\").\n */\n\nimport { readFileSafe, relPosix, walk } from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nexport interface DbToolScopingOptions extends GuardScanOptions {\n  /** Table name -> reviewer-readable reason. Default `{}`. */\n  denylist?: Record<string, string>;\n}\n\ninterface TableCall {\n  exportName: string;\n  sqlName: string;\n  body: string;\n}\n\nfunction extractTableCalls(contents: string): TableCall[] {\n  const out: TableCall[] = [];\n  const headerRegex =\n    /export\\s+const\\s+([a-zA-Z_$][\\w$]*)\\s*=\\s*(?:[a-zA-Z_$][\\w$]*Table|table)\\s*\\(\\s*\"([^\"]+)\"\\s*,\\s*\\{/gm;\n  let match: RegExpExecArray | null;\n  while ((match = headerRegex.exec(contents)) !== null) {\n    const exportName = match[1];\n    const sqlName = match[2];\n    const start = headerRegex.lastIndex - 1;\n    let depth = 0;\n    let inStr: string | null = null;\n    let bodyEnd = -1;\n    for (let i = start; i < contents.length; i++) {\n      const c = contents[i];\n      const prev = contents[i - 1];\n      if (inStr) {\n        if (c === inStr && prev !== \"\\\\\") inStr = null;\n        continue;\n      }\n      if (c === '\"' || c === \"'\" || c === \"`\") {\n        inStr = c;\n        continue;\n      }\n      if (c === \"{\") depth++;\n      else if (c === \"}\") {\n        depth--;\n        if (depth === 0) {\n          bodyEnd = i;\n          break;\n        }\n      }\n    }\n    if (bodyEnd === -1) continue;\n    out.push({ exportName, sqlName, body: contents.slice(start + 1, bodyEnd) });\n  }\n  return out;\n}\n\nfunction hasRawDbScope(tableBody: string): boolean {\n  return (\n    /\\.\\.\\.ownableColumns\\s*\\(/.test(tableBody) ||\n    /\\b[\\w$]+\\s*:\\s*text\\s*\\(\\s*[\"']owner_email[\"']/.test(tableBody) ||\n    /\\b[\\w$]+\\s*:\\s*text\\s*\\(\\s*[\"']org_id[\"']/.test(tableBody)\n  );\n}\n\nexport function scanDbToolScoping(options: DbToolScopingOptions): GuardResult {\n  const { root, denylist = {} } = options;\n  const findings: GuardFinding[] = [];\n  const seenAllowed = new Set<string>();\n\n  for (const file of walk(root)) {\n    if (!file.endsWith(\"/server/db/schema.ts\")) continue;\n    const contents = readFileSafe(file);\n    if (contents === null) continue;\n    const rel = relPosix(root, file);\n    const tables = extractTableCalls(contents);\n    for (const table of tables) {\n      if (hasRawDbScope(table.body)) continue;\n      if (Object.hasOwn(denylist, table.sqlName)) {\n        seenAllowed.add(table.sqlName);\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line: 1,\n        message: `Table \"${table.sqlName}\" (export ${table.exportName}) has no owner_email/org_id scope and is not on the doctor.dbToolScopingDenylist — add tenant scope, or add it to agent-native.json's \"doctor.dbToolScopingDenylist\" with a reason.`,\n      });\n    }\n  }\n\n  for (const key of Object.keys(denylist)) {\n    if (!seenAllowed.has(key)) {\n      findings.push({\n        file: \"agent-native.json\",\n        line: 1,\n        message: `Stale doctor.dbToolScopingDenylist entry \"${key}\" — no matching table found in server/db/schema.ts. Remove it.`,\n      });\n    }\n  }\n\n  return { name: \"db-tool-scoping\", findings };\n}\n"]}
+{"version":3,"file":"db-tool-scoping.js","sourceRoot":"","sources":["../../src/guards/db-tool-scoping.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAc/D,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,WAAW,GACf,uGAAuG,CAAC;IAC1G,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,IAAI;oBAAE,KAAK,GAAG,IAAI,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxC,KAAK,GAAG,CAAC,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACnB,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,CACL,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3C,gDAAgD,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,2CAA2C,CAAC,IAAI,CAAC,SAAS,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA6B;IAC7D,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;YAAE,SAAS;QACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACxC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,UAAU,KAAK,CAAC,OAAO,aAAa,KAAK,CAAC,UAAU,qLAAqL;aACnP,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,6CAA6C,GAAG,gEAAgE;aAC1H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["/**\n * scanDbToolScoping — ported from `scripts/guard-db-tool-scoping.mjs`.\n *\n * The agent's raw DB tools (`db-query`, `db-exec`, `db-patch`) can only\n * safely expose tables with an explicit tenant scope (`owner_email` and/or\n * `org_id`) or a documented, reviewed exception. This guard keeps schema\n * drift visible: any table without raw-DB scope must either add\n * `owner_email`/`org_id`, or be added to the denylist with a\n * reviewer-readable reason.\n *\n * Conditional guard — per report 005's V1 guard set table: the original\n * walks every `templates/*\\/server/db/schema.ts` and keys its denylist\n * `\"<template>:<table>\"`. A generated app has exactly one\n * `server/db/schema.ts` (confirmed convention), so this port scans that\n * single file and uses bare `\"<table>\"` denylist keys. The denylist itself\n * comes from `agent-native.json`'s `doctor.dbToolScopingDenylist` (see\n * `../cli/doctor.ts`) — empty by default; app authors add entries with the\n * same reviewer-readable-reason convention as the original constant.\n *\n * Not ported: the original also resolves `export * from\n * \"@agent-native/<pkg>/schema\"` re-exports back to that package's\n * `packages/<pkg>/src/schema/*.ts` monorepo source, so template schemas\n * that re-export scheduling/dispatch tables get scanned too. In a\n * generated app those packages are compiled `node_modules` output (no\n * `.ts` source to brace-parse), and report 005's parameterization note\n * doesn't cover that case, so re-export resolution is intentionally\n * dropped for app mode: a re-exported table from an `@agent-native/*`\n * package is not scanned here (false-negative, not false-positive) — see\n * the plan's STOP-condition guidance (\"report rather than invent new\n * detection logic\").\n */\n\nimport { readFileSafe, relPosix, walk } from \"./scan-utils.js\";\nimport type { GuardFinding, GuardResult, GuardScanOptions } from \"./types.js\";\n\nexport interface DbToolScopingOptions extends GuardScanOptions {\n  /** Table name -> reviewer-readable reason. Default `{}`. */\n  denylist?: Record<string, string>;\n}\n\ninterface TableCall {\n  exportName: string;\n  sqlName: string;\n  body: string;\n}\n\nfunction extractTableCalls(contents: string): TableCall[] {\n  const out: TableCall[] = [];\n  const headerRegex =\n    /export\\s+const\\s+([a-zA-Z_$][\\w$]*)\\s*=\\s*(?:[a-zA-Z_$][\\w$]*Table|table)\\s*\\(\\s*\"([^\"]+)\"\\s*,\\s*\\{/gm;\n  let match: RegExpExecArray | null;\n  while ((match = headerRegex.exec(contents)) !== null) {\n    const exportName = match[1];\n    const sqlName = match[2];\n    const start = headerRegex.lastIndex - 1;\n    let depth = 0;\n    let inStr: string | null = null;\n    let bodyEnd = -1;\n    for (let i = start; i < contents.length; i++) {\n      const c = contents[i];\n      const prev = contents[i - 1];\n      if (inStr) {\n        if (c === inStr && prev !== \"\\\\\") inStr = null;\n        continue;\n      }\n      if (c === '\"' || c === \"'\" || c === \"`\") {\n        inStr = c;\n        continue;\n      }\n      if (c === \"{\") depth++;\n      else if (c === \"}\") {\n        depth--;\n        if (depth === 0) {\n          bodyEnd = i;\n          break;\n        }\n      }\n    }\n    if (bodyEnd === -1) continue;\n    out.push({ exportName, sqlName, body: contents.slice(start + 1, bodyEnd) });\n  }\n  return out;\n}\n\nfunction hasRawDbScope(tableBody: string): boolean {\n  return (\n    /\\.\\.\\.ownableColumns\\s*\\(/.test(tableBody) ||\n    /\\b[\\w$]+\\s*:\\s*text\\s*\\(\\s*[\"']owner_email[\"']/.test(tableBody) ||\n    /\\b[\\w$]+\\s*:\\s*text\\s*\\(\\s*[\"']org_id[\"']/.test(tableBody)\n  );\n}\n\nexport function scanDbToolScoping(options: DbToolScopingOptions): GuardResult {\n  const { root, denylist = {} } = options;\n  const findings: GuardFinding[] = [];\n  const seenAllowed = new Set<string>();\n\n  for (const file of walk(root)) {\n    if (!file.endsWith(\"/server/db/schema.ts\")) continue;\n    const contents = readFileSafe(file);\n    if (contents === null) continue;\n    const rel = relPosix(root, file);\n    const tables = extractTableCalls(contents);\n    for (const table of tables) {\n      if (hasRawDbScope(table.body)) continue;\n      if (Object.prototype.hasOwnProperty.call(denylist, table.sqlName)) {\n        seenAllowed.add(table.sqlName);\n        continue;\n      }\n      findings.push({\n        file: rel,\n        line: 1,\n        message: `Table \"${table.sqlName}\" (export ${table.exportName}) has no owner_email/org_id scope and is not on the doctor.dbToolScopingDenylist — add tenant scope, or add it to agent-native.json's \"doctor.dbToolScopingDenylist\" with a reason.`,\n      });\n    }\n  }\n\n  for (const key of Object.keys(denylist)) {\n    if (!seenAllowed.has(key)) {\n      findings.push({\n        file: \"agent-native.json\",\n        line: 1,\n        message: `Stale doctor.dbToolScopingDenylist entry \"${key}\" — no matching table found in server/db/schema.ts. Remove it.`,\n      });\n    }\n  }\n\n  return { name: \"db-tool-scoping\", findings };\n}\n"]}

package/dist/integrations/adapters/slack.d.ts

@@ -28,4 +28,5 @@ export interface SlackAdapterOptions {
  *   signing secret rotation surfaces multiple app installs.
  */
 export declare function slackAdapter(options?: SlackAdapterOptions): PlatformAdapter;
+export declare function resolveSlackBotTokenForIncoming(incoming: IncomingMessage): Promise<string | undefined>;
 //# sourceMappingURL=slack.d.ts.map

package/dist/integrations/adapters/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAShB,MAAM,aAAa,CAAC;AAwDrB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAskBjB"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/integrations/adapters/slack.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAShB,MAAM,aAAa,CAAC;AAmErB,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E,kEAAkE;IAClE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAqkBjB;AAkBD,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7B"}

package/dist/integrations/adapters/slack.js

@@ -24,6 +24,9 @@ const SLACK_IDENTITY_CACHE_TTL_MS = 10 * 60 * 1_000;
 // API blip must not fail-close a sender's identity (and DMs) for 10 minutes.
 const SLACK_IDENTITY_NEGATIVE_CACHE_TTL_MS = 30 * 1_000;
 const SLACK_IDENTITY_CACHE_MAX_ENTRIES = 1_000;
+const SLACK_TOKEN_IDENTITY_CACHE_TTL_MS = 10 * 60 * 1_000;
+const SLACK_TOKEN_IDENTITY_NEGATIVE_CACHE_TTL_MS = 30 * 1_000;
+const slackTokenIdentityCache = new Map();
 const slackIdentityCache = new Map();
 // Deduped system notices send at most once per key per TTL so senders are
 // informed without being spammed per message. Callers pick the window: the
@@ -70,8 +73,7 @@ function claimSlackSystemNoticeSlot(key, ttlMs = SLACK_SYSTEM_NOTICE_DEDUPE_TTL_
  */
 export function slackAdapter(options = {}) {
     const resolveBotToken = async (incoming) => (await options.resolveBotToken?.(incoming)) ??
-        (await resolveManagedSlackBotToken(incoming)) ??
-        (await resolveSecret("SLACK_BOT_TOKEN")) ??
+        (await resolveSlackBotTokenForIncoming(incoming)) ??
         undefined;
     return {
         platform: "slack",
@@ -576,6 +578,17 @@ function parseAllowlistEnv(name) {
         return null;
     return new Set(values);
 }
+export async function resolveSlackBotTokenForIncoming(incoming) {
+    const managedToken = await resolveManagedSlackBotToken(incoming);
+    if (managedToken)
+        return managedToken;
+    const legacyToken = await resolveSecret("SLACK_BOT_TOKEN");
+    if (!legacyToken)
+        return undefined;
+    return (await isSlackTokenForIncoming(legacyToken, incoming))
+        ? legacyToken
+        : undefined;
+}
 async function resolveManagedSlackBotToken(incoming) {
     const teamId = typeof incoming.platformContext.teamId === "string"
         ? incoming.platformContext.teamId
@@ -592,10 +605,10 @@ async function resolveManagedSlackBotToken(incoming) {
         let installation = apiAppId
             ? await getActiveIntegrationInstallationByKey("slack", slackInstallationKey({ teamId, enterpriseId, apiAppId }))
             : null;
-        if (!installation && teamId) {
+        if (!installation && !apiAppId && teamId) {
             installation = await getActiveIntegrationInstallationForTenant("slack", teamId);
         }
-        if (!installation && enterpriseId) {
+        if (!installation && !apiAppId && enterpriseId) {
             installation = await getActiveIntegrationInstallationForTenant("slack", enterpriseId);
         }
         const key = installation?.installationKey ??
@@ -606,6 +619,49 @@ async function resolveManagedSlackBotToken(incoming) {
         return undefined;
     }
 }
+async function isSlackTokenForIncoming(token, incoming) {
+    const teamId = slackIdentityValue(incoming.platformContext.teamId);
+    const apiAppId = slackIdentityValue(incoming.platformContext.apiAppId);
+    if (!teamId && !apiAppId)
+        return true;
+    const cached = slackTokenIdentityCache.get(token);
+    if (cached && cached.expiresAt > Date.now()) {
+        return (cached.valid &&
+            (!teamId || cached.teamId === teamId) &&
+            (!apiAppId || cached.appId === apiAppId));
+    }
+    const auth = await slackJson(token, "auth.test", {});
+    const authTeamId = slackIdentityValue(auth?.team_id);
+    const botId = slackIdentityValue(auth?.bot_id);
+    let appId = null;
+    let valid = !!auth;
+    if (valid && apiAppId) {
+        const bot = botId
+            ? await slackJson(token, "bots.info", { bot: botId })
+            : null;
+        appId = slackIdentityValue(bot?.bot?.app_id);
+        valid = !!appId;
+    }
+    const identity = {
+        teamId: authTeamId,
+        appId,
+        valid,
+        expiresAt: Date.now() +
+            (valid
+                ? SLACK_TOKEN_IDENTITY_CACHE_TTL_MS
+                : SLACK_TOKEN_IDENTITY_NEGATIVE_CACHE_TTL_MS),
+    };
+    slackTokenIdentityCache.set(token, identity);
+    return (valid &&
+        (!teamId || identity.teamId === teamId) &&
+        (!apiAppId || identity.appId === apiAppId));
+}
+function slackIdentityValue(value) {
+    if (typeof value !== "string")
+        return null;
+    const normalized = value.trim();
+    return normalized && normalized !== "unknown" ? normalized : null;
+}
 let _missingAllowlistWarned = false;
 /**
  * Enforce that an incoming Slack event comes from an allowlisted workspace.
@@ -874,7 +930,7 @@ async function resolveSlackThreadPermalink(channelId, threadTs, resolvedToken) {
     if (typeof channelId !== "string" || typeof threadTs !== "string") {
         return undefined;
     }
-    const token = resolvedToken ?? (await resolveSecret("SLACK_BOT_TOKEN"));
+    const token = resolvedToken;
     if (!token)
         return undefined;
     try {