@agent-native/dispatch 0.0.0-beta-20260819155526

package/dist/server/lib/curated-workspace-templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"curated-workspace-templates.js","sourceRoot":"","sources":["../../../src/server/lib/curated-workspace-templates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAkB5D;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GACtC;IACE;QACE,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,MAAM;QACZ,WAAW,EACT,kEAAkE;QACpE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,+BAA+B;QACxC,QAAQ,EAAE,eAAe;QACzB,SAAS,EACP,wEAAwE;KAC3E;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EACT,mFAAmF;QACrF,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,mCAAmC;QAC5C,QAAQ,EAAE,cAAc;QACxB,SAAS,EACP,6EAA6E;KAChF;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,4EAA4E;QAC9E,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,WAAW;QACrB,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,UAAU;QACpB,SAAS,EACP,2EAA2E;KAC9E;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,8DAA8D;QAChE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,UAAU;QACpB,SAAS,EACP,4EAA4E;KAC/E;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,WAAW,EACT,6DAA6D;QAC/D,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,SAAS;QACnB,SAAS,EACP,yEAAyE;KAC5E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EACT,yEAAyE;QAC3E,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,OAAO;QACjB,SAAS,EACP,6EAA6E;KAChF;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EACT,6EAA6E;QAC/E,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,WAAW;QACrB,SAAS,EACP,2EAA2E;KAC9E;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,oEAAoE;QACtE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,SAAS;QACnB,SAAS,EACP,2EAA2E;KAC9E;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,YAAY;QACtB,SAAS,EACP,kFAAkF;KACrF;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,iEAAiE;QACnE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,UAAU;QACpB,SAAS,EACP,yEAAyE;KAC5E;CACO,CAAC;AAEb,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,2BAA2B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACvE,CAAC;AAEF,MAAM,UAAU,2BAA2B,CACzC,UAAkB;IAElB,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B;IAGjD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CACE,MAAM,iBAAiB,CAAC;QACtB,iBAAiB,EAAE,KAAK;QACxB,eAAe,EAAE,IAAI;KACtB,CAAC,CACH,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAC5C,CAAC;IAEF,OAAO,2BAA2B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,QAAQ;QACX,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC,CAAC;AACN,CAAC","sourcesContent":["import { listWorkspaceApps } from \"./app-creation-store.js\";\n\nexport interface CuratedWorkspaceTemplate {\n  id: string;\n  name: string;\n  description: string;\n  icon: string;\n  color: string;\n  template: string;\n  liveUrl: string;\n  category: string;\n  setupNote: string;\n}\n\nexport interface CuratedWorkspaceTemplateStatus extends CuratedWorkspaceTemplate {\n  installed: boolean;\n}\n\n/**\n * Stable first-party template metadata for the initial app-creation catalog.\n * `liveUrl` identifies the product URL; it is not a public-demo claim.\n */\nexport const CURATED_WORKSPACE_TEMPLATES: readonly CuratedWorkspaceTemplate[] =\n  [\n    {\n      id: \"mail\",\n      name: \"Mail\",\n      description:\n        \"Agent-native email client with keyboard shortcuts and AI triage.\",\n      icon: \"Mail\",\n      color: \"#3B82F6\",\n      template: \"mail\",\n      liveUrl: \"https://mail.agent-native.com\",\n      category: \"communication\",\n      setupNote:\n        \"Connect the workspace email integration before working with live mail.\",\n    },\n    {\n      id: \"calendar\",\n      name: \"Calendar\",\n      description:\n        \"Manage events, synchronization, and public booking with an agent-native calendar.\",\n      icon: \"CalendarDays\",\n      color: \"#00B5FF\",\n      template: \"calendar\",\n      liveUrl: \"https://calendar.agent-native.com\",\n      category: \"productivity\",\n      setupNote:\n        \"Connect the workspace calendar integration before working with live events.\",\n    },\n    {\n      id: \"analytics\",\n      name: \"Analytics\",\n      description:\n        \"Connect data sources and prompt for charts, reports, and product insights.\",\n      icon: \"BarChart2\",\n      color: \"#F59E0B\",\n      template: \"analytics\",\n      liveUrl: \"https://analytics.agent-native.com\",\n      category: \"insights\",\n      setupNote:\n        \"Connect a data source or import a representative dataset before analysis.\",\n    },\n    {\n      id: \"slides\",\n      name: \"Slides\",\n      description:\n        \"Generate and edit React presentations with agent assistance.\",\n      icon: \"GalleryHorizontal\",\n      color: \"#EC4899\",\n      template: \"slides\",\n      liveUrl: \"https://slides.agent-native.com\",\n      category: \"creative\",\n      setupNote:\n        \"Start with a blank deck or connect the workspace presentation integration.\",\n    },\n    {\n      id: \"content\",\n      name: \"Content\",\n      description:\n        \"Write and organize local MDX content with agent assistance.\",\n      icon: \"FileText\",\n      color: \"#10B981\",\n      template: \"content\",\n      liveUrl: \"https://content.agent-native.com\",\n      category: \"content\",\n      setupNote:\n        \"Choose a content folder or create a first document for the private app.\",\n    },\n    {\n      id: \"clips\",\n      name: \"Clips\",\n      description:\n        \"Record screens, capture meeting notes, and use voice dictation with AI.\",\n      icon: \"ScreenShare\",\n      color: \"#0EA5E9\",\n      template: \"clips\",\n      liveUrl: \"https://clips.agent-native.com\",\n      category: \"media\",\n      setupNote:\n        \"Grant screen and audio permissions only when the workspace needs recording.\",\n    },\n    {\n      id: \"brain\",\n      name: \"Brain\",\n      description:\n        \"Search cited company knowledge from conversations, meetings, and decisions.\",\n      icon: \"Brain\",\n      color: \"#8B5CF6\",\n      template: \"brain\",\n      liveUrl: \"https://brain.agent-native.com\",\n      category: \"knowledge\",\n      setupNote:\n        \"Connect approved knowledge sources before indexing workspace information.\",\n    },\n    {\n      id: \"assets\",\n      name: \"Assets\",\n      description:\n        \"Upload, organize, search, and generate on-brand images and videos.\",\n      icon: \"Photo\",\n      color: \"#0F766E\",\n      template: \"assets\",\n      liveUrl: \"https://assets.agent-native.com\",\n      category: \"content\",\n      setupNote:\n        \"Upload a representative asset or connect approved asset storage to begin.\",\n    },\n    {\n      id: \"forms\",\n      name: \"Forms\",\n      description: \"Create, edit, and manage forms with agent assistance.\",\n      icon: \"ClipboardList\",\n      color: \"#06B6D4\",\n      template: \"forms\",\n      liveUrl: \"https://forms.agent-native.com\",\n      category: \"operations\",\n      setupNote:\n        \"Create a form and choose its submission destination before inviting respondents.\",\n    },\n    {\n      id: \"design\",\n      name: \"Design\",\n      description:\n        \"Create and edit visual designs with agent-assisted exploration.\",\n      icon: \"Brush\",\n      color: \"#F472B6\",\n      template: \"design\",\n      liveUrl: \"https://design.agent-native.com\",\n      category: \"creative\",\n      setupNote:\n        \"Create a private project and optionally connect approved asset sources.\",\n    },\n  ] as const;\n\nconst curatedTemplateById = new Map(\n  CURATED_WORKSPACE_TEMPLATES.map((template) => [template.id, template]),\n);\n\nexport function getCuratedWorkspaceTemplate(\n  templateId: string,\n): CuratedWorkspaceTemplate {\n  const normalized = templateId.trim().toLowerCase();\n  const template = curatedTemplateById.get(normalized);\n  if (!template) {\n    throw new Error(`Unknown curated workspace template \"${templateId}\".`);\n  }\n  return template;\n}\n\nexport async function listCuratedWorkspaceTemplates(): Promise<\n  CuratedWorkspaceTemplateStatus[]\n> {\n  const installedIds = new Set(\n    (\n      await listWorkspaceApps({\n        includeAgentCards: false,\n        includeArchived: true,\n      })\n    ).map((app) => app.id.trim().toLowerCase()),\n  );\n\n  return CURATED_WORKSPACE_TEMPLATES.map((template) => ({\n    ...template,\n    installed: installedIds.has(template.id),\n  }));\n}\n"]}

package/dist/server/lib/dispatch-integrations.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage, IntegrationExecutionContext, PlatformAdapter } from "@agent-native/core/server";
+export declare function identityKeyForIncoming(incoming: IncomingMessage): string | null;
+export declare function resolveDispatchOwner(incoming: IncomingMessage): Promise<string>;
+/**
+ * Resolve a personal DM user or a workspace-qualified channel service
+ * principal. Managed Slack channels never silently inherit one requester's
+ * personal credentials or memory.
+ */
+export declare function resolveDispatchExecutionContext(incoming: IncomingMessage): Promise<IntegrationExecutionContext>;
+export declare function beforeDispatchProcess(incoming: IncomingMessage, adapter: PlatformAdapter): Promise<{
+    handled: true;
+    responseText?: string;
+} | {
+    handled: false;
+}>;
+//# sourceMappingURL=dispatch-integrations.d.ts.map

package/dist/server/lib/dispatch-integrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-integrations.d.ts","sourceRoot":"","sources":["../../../src/server/lib/dispatch-integrations.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,eAAe,EACf,2BAA2B,EAC3B,eAAe,EAChB,MAAM,2BAA2B,CAAC;AA2BnC,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,GACxB,MAAM,GAAG,IAAI,CAmBf;AAwOD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC,CA8DjB;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC,CAgGtC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC,CAwDxE"}

package/dist/server/lib/dispatch-integrations.js

@@ -0,0 +1,411 @@
+import crypto from "node:crypto";
+import { evaluateIntegrationScopePolicy, getActiveIntegrationInstallationByKey, getIntegrationScope, resolveIntegrationTokenBundle, resolveSlackBotTokenForIncoming, saveIntegrationScope, slackInstallationKey, } from "@agent-native/core/integrations";
+import { resolveOrgIdForEmail } from "@agent-native/core/org";
+import { withConfiguredAppBasePath } from "@agent-native/core/server";
+import { handleRemoteCodeCommand } from "./dispatch-remote-commands.js";
+import { dispatchIntegrationRoutingHint, } from "./dispatch-routing.js";
+import { consumeLinkToken, resolveLinkedOwner } from "./dispatch-store.js";
+const slackProfileCache = new Map();
+const SLACK_PROFILE_CACHE_TTL = 10 * 60 * 1000;
+function contextString(value) {
+    if (typeof value === "string" && value.trim())
+        return value.trim();
+    if (typeof value === "number" && Number.isFinite(value))
+        return String(value);
+    return null;
+}
+export function identityKeyForIncoming(incoming) {
+    const senderId = contextString(incoming.senderId);
+    if (!senderId)
+        return null;
+    if (incoming.platform === "slack") {
+        const teamId = contextString(incoming.platformContext.teamId);
+        return teamId ? `${teamId}:${senderId}` : senderId;
+    }
+    if (incoming.platform === "whatsapp") {
+        const phoneNumberId = contextString(incoming.platformContext.phoneNumberId);
+        return phoneNumberId ? `${phoneNumberId}:${senderId}` : senderId;
+    }
+    if (incoming.platform === "email") {
+        return senderId.toLowerCase();
+    }
+    return senderId;
+}
+function fallbackOwnerForIncoming(incoming) {
+    const tenant = contextString(incoming.platformContext.teamId) ||
+        contextString(incoming.platformContext.phoneNumberId) ||
+        contextString(incoming.platformContext.chatId) ||
+        contextString(incoming.platformContext.from) ||
+        incoming.externalThreadId;
+    const raw = `${incoming.platform}:${tenant}:${incoming.senderId || ""}`;
+    const hash = crypto
+        .createHash("sha256")
+        .update(raw)
+        .digest("hex")
+        .slice(0, 16);
+    return `dispatch+${hash}@integration.local`;
+}
+function configuredDefaultOwnerForIncoming(incoming) {
+    // This is intentionally Slack-only: a deployment-wide default owner grants
+    // that Slack workspace access to the owner's connected agents and org
+    // credentials, so other platforms should opt in with explicit identity links.
+    if (incoming.platform !== "slack")
+        return null;
+    const email = process.env.DISPATCH_DEFAULT_OWNER_EMAIL?.trim();
+    if (!email)
+        return null;
+    return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email) ? email : null;
+}
+function platformRequiresExplicitLink(incoming) {
+    // Telegram does not provide a verified email address. Require an explicit
+    // identity link before it can act as a Builder/Agent-Native user.
+    return incoming.platform === "telegram";
+}
+function configuredDispatchIdentitiesUrl() {
+    const raw = process.env.WORKSPACE_GATEWAY_URL ||
+        process.env.APP_URL ||
+        process.env.URL ||
+        process.env.DEPLOY_URL ||
+        process.env.BETTER_AUTH_URL ||
+        "";
+    if (!raw.trim())
+        return null;
+    const base = /^https?:\/\//i.test(raw) ? raw : `https://${raw}`;
+    try {
+        return new URL("identities", `${withConfiguredAppBasePath(base).replace(/\/+$/, "")}/`).toString();
+    }
+    catch {
+        return null;
+    }
+}
+async function resolveManagedSlackInstallation(incoming) {
+    if (incoming.platform !== "slack")
+        return null;
+    const teamId = contextString(incoming.platformContext.teamId);
+    const apiAppId = contextString(incoming.platformContext.apiAppId);
+    if (!teamId)
+        return null;
+    try {
+        return await getActiveIntegrationInstallationByKey("slack", slackInstallationKey({ teamId, apiAppId }));
+    }
+    catch {
+        return null;
+    }
+}
+async function resolveManagedSlackToken(incoming) {
+    const installation = await resolveManagedSlackInstallation(incoming);
+    if (!installation)
+        return null;
+    const bundle = await resolveIntegrationTokenBundle("slack", installation.installationKey);
+    return bundle?.accessToken ?? null;
+}
+function formatTelegramLinkRequiredMessage() {
+    const identitiesUrl = configuredDispatchIdentitiesUrl();
+    const linkStep = identitiesUrl
+        ? `Tap ${identitiesUrl}, create a Telegram link token, then send \`/link <token>\` here.`
+        : "Open Dispatch while signed in, create a Telegram link token, then send `/link <token>` here.";
+    return `Telegram is connected, but this Telegram account is not linked to an Agent-Native user yet. ${linkStep} After that I can use your Builder.io org and connected apps.`;
+}
+function formatSlackLinkRequiredMessage() {
+    const identitiesUrl = configuredDispatchIdentitiesUrl();
+    const linkStep = identitiesUrl
+        ? `Open ${identitiesUrl}, create a Slack link token, then send \`/link <token>\` in this DM.`
+        : "Open Dispatch while signed in, create a Slack link token, then send `/link <token>` in this DM.";
+    return `Agent Native is ready, but this Slack account is not linked to an Agent Native user yet. ${linkStep}`;
+}
+async function resolveSlackSenderProfile(incoming) {
+    if (incoming.platform !== "slack") {
+        return { email: null, name: null, trust: "unknown" };
+    }
+    const token = await resolveSlackBotTokenForIncoming(incoming);
+    const userId = contextString(incoming.senderId);
+    const teamId = contextString(incoming.platformContext.teamId);
+    if (!token || !userId) {
+        return { email: null, name: null, trust: "unknown" };
+    }
+    // Slack user IDs are scoped per workspace, so without a teamId we can't
+    // safely cache: two installs of the bot in different workspaces could
+    // share user-id strings and collide on a single "default" key. Skip the
+    // cache (and lookup on every request) when teamId is missing.
+    const cacheKey = teamId ? `${teamId}:${userId}` : null;
+    if (cacheKey) {
+        const cached = slackProfileCache.get(cacheKey);
+        if (cached && cached.expiresAt > Date.now())
+            return cached.profile;
+    }
+    try {
+        const params = new URLSearchParams({ user: userId });
+        const res = await fetch(`https://slack.com/api/users.info?${params}`, {
+            headers: { Authorization: `Bearer ${token}` },
+        });
+        const data = (await res.json());
+        const profile = data.ok
+            ? {
+                email: data.user?.profile?.email?.trim().toLowerCase() || null,
+                name: data.user?.profile?.real_name?.trim() ||
+                    data.user?.profile?.display_name?.trim() ||
+                    data.user?.real_name?.trim() ||
+                    data.user?.name?.trim() ||
+                    null,
+                trust: data.user?.is_ultra_restricted === true
+                    ? "external_shared"
+                    : data.user?.is_restricted === true
+                        ? "guest"
+                        : "trusted",
+            }
+            : { email: null, name: null, trust: "unknown" };
+        if (cacheKey) {
+            slackProfileCache.set(cacheKey, {
+                profile,
+                expiresAt: Date.now() + SLACK_PROFILE_CACHE_TTL,
+            });
+        }
+        return profile;
+    }
+    catch {
+        return { email: null, name: null, trust: "unknown" };
+    }
+}
+async function resolveSlackOwnerFromVerifiedEmail(incoming) {
+    const profile = await resolveSlackSenderProfile(incoming);
+    if (!profile.email)
+        return null;
+    incoming.senderEmail = profile.email;
+    incoming.platformContext.senderEmail = profile.email;
+    if (profile.name) {
+        incoming.senderName = profile.name;
+        incoming.platformContext.senderName = profile.name;
+    }
+    const orgId = await resolveOrgIdForEmail(profile.email);
+    return orgId ? profile.email : null;
+}
+async function resolveSlackConversationTrust(incoming, actorTrust) {
+    if (incoming.triggerKind === "dm") {
+        return { trust: actorTrust, conversationType: "direct_message" };
+    }
+    const token = await resolveManagedSlackToken(incoming);
+    const channel = contextString(incoming.platformContext.channelId);
+    if (!token || !channel) {
+        return { trust: "unknown", conversationType: "channel" };
+    }
+    try {
+        const params = new URLSearchParams({ channel });
+        const response = await fetch(`https://slack.com/api/conversations.info?${params}`, { headers: { Authorization: `Bearer ${token}` } });
+        const data = (await response.json());
+        if (!data.ok) {
+            return { trust: "unknown", conversationType: "channel" };
+        }
+        return {
+            trust: data.channel?.is_ext_shared ? "external_shared" : actorTrust,
+            conversationType: data.channel?.is_im
+                ? "direct_message"
+                : data.channel?.is_mpim
+                    ? "group_direct_message"
+                    : "channel",
+        };
+    }
+    catch {
+        return { trust: "unknown", conversationType: "channel" };
+    }
+}
+export async function resolveDispatchOwner(incoming) {
+    try {
+        const externalUserId = identityKeyForIncoming(incoming);
+        // Webhooks do not have the browser request's org context, so allow a safe
+        // cross-org fallback when the linked platform identity maps to one owner.
+        const owner = await resolveLinkedOwner(incoming.platform, externalUserId, {
+            allowAnyOrgFallback: true,
+        });
+        if (owner)
+            return owner;
+        // For email, the sender's `From:` address is attacker-settable: SMTP lets
+        // anyone claim any From, and our inbound webhook secret only authenticates
+        // the provider→app hop, not the original sender. So we must NOT grant a
+        // real user's identity (their API keys, org secrets, personal
+        // instructions, ownable data) off the bare From. Mirror the Slack gate:
+        // only return the sender email as the acting owner when BOTH
+        //   (a) the message is DKIM/SPF-verified for the From domain, AND
+        //   (b) that email maps to a real org member.
+        // Otherwise fall through to the synthetic, credential-less fallback owner.
+        // (A linked identity, handled by resolveLinkedOwner above, remains an
+        // always-allowed way to bind an address regardless of verification.)
+        //
+        // Escape hatch: set DISPATCH_TRUST_UNVERIFIED_EMAIL_SENDER=1 to restore
+        // the legacy "trust the From header" behavior. OFF by default; only use
+        // this if you fully control the inbound mail path and accept that a
+        // spoofed From can act as any org member. See FINDING 3 (inbound-email
+        // impersonation) in the webhook security audit.
+        if (incoming.platform === "email" &&
+            incoming.senderId &&
+            incoming.senderId.includes("@")) {
+            if (process.env.DISPATCH_TRUST_UNVERIFIED_EMAIL_SENDER === "1") {
+                return incoming.senderId;
+            }
+            if (incoming.senderVerified) {
+                const orgId = await resolveOrgIdForEmail(incoming.senderId);
+                if (orgId)
+                    return incoming.senderId;
+            }
+            // Unverified or not an org member — do not impersonate. Fall through to
+            // the synthetic fallback owner below.
+        }
+        // Slack gives us a user id in the event payload. Resolve it to a verified
+        // workspace email and use that user's own org context when they are an
+        // Agent-Native member, so artifacts created via @agent-native are visible
+        // when they open the target app.
+        if (incoming.platform === "slack") {
+            const slackOwner = await resolveSlackOwnerFromVerifiedEmail(incoming);
+            if (slackOwner)
+                return slackOwner;
+        }
+        const defaultOwner = configuredDefaultOwnerForIncoming(incoming);
+        if (defaultOwner)
+            return defaultOwner;
+        return fallbackOwnerForIncoming(incoming);
+    }
+    catch {
+        const defaultOwner = configuredDefaultOwnerForIncoming(incoming);
+        if (defaultOwner)
+            return defaultOwner;
+        return fallbackOwnerForIncoming(incoming);
+    }
+}
+/**
+ * Resolve a personal DM user or a workspace-qualified channel service
+ * principal. Managed Slack channels never silently inherit one requester's
+ * personal credentials or memory.
+ */
+export async function resolveDispatchExecutionContext(incoming) {
+    if (incoming.platform !== "slack" || incoming.triggerKind === "dm") {
+        const ownerEmail = await resolveDispatchOwner(incoming);
+        if (incoming.platform === "slack" &&
+            ownerEmail.endsWith("@integration.local")) {
+            // Preserve a credential-less principal long enough for beforeProcess to
+            // deliver linking guidance or consume `/link <token>`. Never run the
+            // agent under this synthetic owner.
+            incoming.platformContext.identityLinkRequired = true;
+        }
+        return {
+            ownerEmail,
+            orgId: (await resolveOrgIdForEmail(ownerEmail)) ?? null,
+            principalType: "user",
+        };
+    }
+    const installation = await resolveManagedSlackInstallation(incoming);
+    if (!installation) {
+        // Preserve the legacy manually configured app path while managed installs
+        // roll out. Its behavior remains explicit and visible in Settings.
+        const ownerEmail = await resolveDispatchOwner(incoming);
+        return {
+            ownerEmail,
+            orgId: (await resolveOrgIdForEmail(ownerEmail)) ?? null,
+            principalType: "user",
+        };
+    }
+    const teamId = contextString(incoming.platformContext.teamId);
+    const channelId = contextString(incoming.platformContext.channelId);
+    if (!teamId || !channelId) {
+        throw new Error("Slack channel identity is incomplete");
+    }
+    const profile = await resolveSlackSenderProfile(incoming);
+    const conversation = await resolveSlackConversationTrust(incoming, profile.trust);
+    const access = {
+        ownerEmail: installation.ownerEmail,
+        orgId: installation.orgId,
+    };
+    const key = {
+        platform: "slack",
+        tenantId: teamId,
+        conversationId: channelId,
+    };
+    let scope = await getIntegrationScope(key, access);
+    if (!scope && incoming.triggerKind === "mention") {
+        scope = await saveIntegrationScope({
+            ...key,
+            conversationType: conversation.conversationType,
+            trust: conversation.trust,
+            orgId: installation.orgId,
+            installationId: installation.id,
+        }, access);
+    }
+    if (!scope)
+        throw new Error("Slack channel is not enabled for Agent Native");
+    const decision = evaluateIntegrationScopePolicy(scope, {
+        // Slack channel turns only arrive here after an explicit current-message
+        // mention; keep the generic thread_reply trigger for other adapters.
+        mentioned: incoming.triggerKind === "mention" ||
+            incoming.triggerKind === "thread_reply",
+    });
+    if (!decision.allowed) {
+        throw new Error(`Slack channel policy denied: ${decision.reason}`);
+    }
+    incoming.integrationScopeId = scope.id;
+    if (scope.defaultModel) {
+        incoming.platformContext.defaultModel = scope.defaultModel;
+    }
+    incoming.actorTrust = {
+        memberType: conversation.trust === "guest"
+            ? "guest"
+            : conversation.trust === "external_shared"
+                ? "external"
+                : conversation.trust === "trusted"
+                    ? "member"
+                    : "unknown",
+        verified: conversation.trust !== "unknown",
+    };
+    return {
+        ownerEmail: scope.serviceOwnerEmail,
+        orgId: scope.orgId,
+        principalType: "service",
+        installationId: installation.id,
+        scopeId: scope.id,
+    };
+}
+export async function beforeDispatchProcess(incoming, adapter) {
+    const trimmed = incoming.text.trim();
+    const commandText = contextString(incoming.platformContext.rawText) || trimmed;
+    const match = commandText.match(/^\/link(?:@\w+)?\s+([a-zA-Z0-9_-]+)$/);
+    if (!match) {
+        const routedIncoming = incoming;
+        routedIncoming.routingHint ??= dispatchIntegrationRoutingHint(trimmed);
+        if (incoming.platform === "slack" &&
+            incoming.triggerKind === "dm" &&
+            incoming.platformContext.identityLinkRequired === true) {
+            return {
+                handled: true,
+                responseText: formatSlackLinkRequiredMessage(),
+            };
+        }
+        if (platformRequiresExplicitLink(incoming)) {
+            const owner = await resolveLinkedOwner(incoming.platform, identityKeyForIncoming(incoming), { allowAnyOrgFallback: true });
+            if (!owner) {
+                return {
+                    handled: true,
+                    responseText: formatTelegramLinkRequiredMessage(),
+                };
+            }
+        }
+        return handleRemoteCodeCommand(incoming, adapter, {
+            resolveOwner: () => resolveDispatchOwner(incoming),
+        });
+    }
+    try {
+        const owner = await consumeLinkToken({
+            platform: incoming.platform,
+            token: match[1],
+            externalUserId: identityKeyForIncoming(incoming),
+            externalUserName: incoming.senderName || null,
+        });
+        return {
+            handled: true,
+            responseText: `Linked successfully. Future ${incoming.platform} messages will use ${owner}'s personal dispatch context.`,
+        };
+    }
+    catch (error) {
+        return {
+            handled: true,
+            responseText: error instanceof Error ? error.message : "Failed to link this account.",
+        };
+    }
+}
+//# sourceMappingURL=dispatch-integrations.js.map

package/dist/server/lib/dispatch-integrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-integrations.js","sourceRoot":"","sources":["../../../src/server/lib/dispatch-integrations.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,EACL,8BAA8B,EAC9B,qCAAqC,EACrC,mBAAmB,EACnB,6BAA6B,EAC7B,+BAA+B,EAC/B,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACL,8BAA8B,GAE/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAQ3E,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAG9B,CAAC;AACJ,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,QAAyB;IAEzB,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrD,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAC5E,OAAO,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAyB;IACzD,MAAM,MAAM,GACV,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC;QAC9C,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,aAAa,CAAC;QACrD,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC;QAC9C,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC;QAC5C,QAAQ,CAAC,gBAAgB,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,YAAY,IAAI,oBAAoB,CAAC;AAC9C,CAAC;AAED,SAAS,iCAAiC,CACxC,QAAyB;IAEzB,2EAA2E;IAC3E,sEAAsE;IACtE,8EAA8E;IAC9E,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,4BAA4B,CAAC,QAAyB;IAC7D,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC;AAC1C,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,GAAG,GACP,OAAO,CAAC,GAAG,CAAC,qBAAqB;QACjC,OAAO,CAAC,GAAG,CAAC,OAAO;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG;QACf,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,EAAE,CAAC;IACL,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CACZ,YAAY,EACZ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAC1D,CAAC,QAAQ,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAAC,QAAyB;IACtE,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,qCAAqC,CAChD,OAAO,EACP,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,QAAyB;IAEzB,MAAM,YAAY,GAAG,MAAM,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,OAAO,EACP,YAAY,CAAC,eAAe,CAC7B,CAAC;IACF,OAAO,MAAM,EAAE,WAAW,IAAI,IAAI,CAAC;AACrC,CAAC;AAED,SAAS,iCAAiC;IACxC,MAAM,aAAa,GAAG,+BAA+B,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,aAAa;QAC5B,CAAC,CAAC,OAAO,aAAa,mEAAmE;QACzF,CAAC,CAAC,8FAA8F,CAAC;IACnG,OAAO,+FAA+F,QAAQ,+DAA+D,CAAC;AAChL,CAAC;AAED,SAAS,8BAA8B;IACrC,MAAM,aAAa,GAAG,+BAA+B,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAG,aAAa;QAC5B,CAAC,CAAC,QAAQ,aAAa,sEAAsE;QAC7F,CAAC,CAAC,iGAAiG,CAAC;IACtG,OAAO,4FAA4F,QAAQ,EAAE,CAAC;AAChH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,QAAyB;IAEzB,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvD,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oCAAoC,MAAM,EAAE,EAAE;YACpE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAa7B,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE;YACrB,CAAC,CAAC;gBACE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI;gBAC9D,IAAI,EACF,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;oBACrC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE;oBACxC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;oBAC5B,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;oBACvB,IAAI;gBACN,KAAK,EACH,IAAI,CAAC,IAAI,EAAE,mBAAmB,KAAK,IAAI;oBACrC,CAAC,CAAE,iBAA2B;oBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI;wBACjC,CAAC,CAAE,OAAiB;wBACpB,CAAC,CAAE,SAAmB;aAC7B;YACH,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAC9B,OAAO;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB;aAChD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,QAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAEhC,QAAQ,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IACrD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QACnC,QAAQ,CAAC,eAAe,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,QAAyB,EACzB,UAAuC;IAKvC,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,4CAA4C,MAAM,EAAE,EACpD,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAOlC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU;YACnE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK;gBACnC,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO;oBACrB,CAAC,CAAC,sBAAsB;oBACxB,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAExD,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE;YACxE,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,8DAA8D;QAC9D,wEAAwE;QACxE,6DAA6D;QAC7D,kEAAkE;QAClE,8CAA8C;QAC9C,2EAA2E;QAC3E,sEAAsE;QACtE,qEAAqE;QACrE,EAAE;QACF,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,uEAAuE;QACvE,gDAAgD;QAChD,IACE,QAAQ,CAAC,QAAQ,KAAK,OAAO;YAC7B,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC/B,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,CAAC,sCAAsC,KAAK,GAAG,EAAE,CAAC;gBAC/D,OAAO,QAAQ,CAAC,QAAQ,CAAC;YAC3B,CAAC;YACD,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,KAAK;oBAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;YACtC,CAAC;YACD,wEAAwE;YACxE,sCAAsC;QACxC,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,0EAA0E;QAC1E,iCAAiC;QACjC,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,QAAQ,CAAC,CAAC;YACtE,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;QACpC,CAAC;QAED,MAAM,YAAY,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QAEtC,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,YAAY,GAAG,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QACtC,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,QAAyB;IAEzB,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACnE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxD,IACE,QAAQ,CAAC,QAAQ,KAAK,OAAO;YAC7B,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EACzC,CAAC;YACD,wEAAwE;YACxE,qEAAqE;YACrE,oCAAoC;YACpC,QAAQ,CAAC,eAAe,CAAC,oBAAoB,GAAG,IAAI,CAAC;QACvD,CAAC;QACD,OAAO;YACL,UAAU;YACV,KAAK,EAAE,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI;YACvD,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACxD,OAAO;YACL,UAAU;YACV,KAAK,EAAE,CAAC,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI;YACvD,aAAa,EAAE,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,MAAM,6BAA6B,CACtD,QAAQ,EACR,OAAO,CAAC,KAAK,CACd,CAAC;IACF,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,KAAK,EAAE,YAAY,CAAC,KAAK;KAC1B,CAAC;IACF,MAAM,GAAG,GAAG;QACV,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,SAAS;KAC1B,CAAC;IACF,IAAI,KAAK,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACjD,KAAK,GAAG,MAAM,oBAAoB,CAChC;YACE,GAAG,GAAG;YACN,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;YAC/C,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,cAAc,EAAE,YAAY,CAAC,EAAE;SAChC,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,8BAA8B,CAAC,KAAK,EAAE;QACrD,yEAAyE;QACzE,qEAAqE;QACrE,SAAS,EACP,QAAQ,CAAC,WAAW,KAAK,SAAS;YAClC,QAAQ,CAAC,WAAW,KAAK,cAAc;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,kBAAkB,GAAG,KAAK,CAAC,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,eAAe,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC7D,CAAC;IACD,QAAQ,CAAC,UAAU,GAAG;QACpB,UAAU,EACR,YAAY,CAAC,KAAK,KAAK,OAAO;YAC5B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,iBAAiB;gBACxC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS;oBAChC,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,SAAS;QACnB,QAAQ,EAAE,YAAY,CAAC,KAAK,KAAK,SAAS;KAC3C,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,iBAAiB;QACnC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,SAAS;QACxB,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,OAAO,EAAE,KAAK,CAAC,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAyB,EACzB,OAAwB;IAExB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,WAAW,GACf,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;IAC7D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,cAAc,GAAG,QAEtB,CAAC;QACF,cAAc,CAAC,WAAW,KAAK,8BAA8B,CAAC,OAAO,CAAC,CAAC;QACvE,IACE,QAAQ,CAAC,QAAQ,KAAK,OAAO;YAC7B,QAAQ,CAAC,WAAW,KAAK,IAAI;YAC7B,QAAQ,CAAC,eAAe,CAAC,oBAAoB,KAAK,IAAI,EACtD,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,8BAA8B,EAAE;aAC/C,CAAC;QACJ,CAAC;QACD,IAAI,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,QAAQ,CAAC,QAAQ,EACjB,sBAAsB,CAAC,QAAQ,CAAC,EAChC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAC9B,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,YAAY,EAAE,iCAAiC,EAAE;iBAClD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE;YAChD,YAAY,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;SACnD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,cAAc,EAAE,sBAAsB,CAAC,QAAQ,CAAC;YAChD,gBAAgB,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI;SAC9C,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,+BAA+B,QAAQ,CAAC,QAAQ,sBAAsB,KAAK,+BAA+B;SACzH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EACV,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;SAC1E,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import crypto from \"node:crypto\";\n\nimport {\n  evaluateIntegrationScopePolicy,\n  getActiveIntegrationInstallationByKey,\n  getIntegrationScope,\n  resolveIntegrationTokenBundle,\n  resolveSlackBotTokenForIncoming,\n  saveIntegrationScope,\n  slackInstallationKey,\n} from \"@agent-native/core/integrations\";\nimport { resolveOrgIdForEmail } from \"@agent-native/core/org\";\nimport { withConfiguredAppBasePath } from \"@agent-native/core/server\";\nimport type {\n  IncomingMessage,\n  IntegrationExecutionContext,\n  PlatformAdapter,\n} from \"@agent-native/core/server\";\n\nimport { handleRemoteCodeCommand } from \"./dispatch-remote-commands.js\";\nimport {\n  dispatchIntegrationRoutingHint,\n  type DispatchIntegrationRoutingHint,\n} from \"./dispatch-routing.js\";\nimport { consumeLinkToken, resolveLinkedOwner } from \"./dispatch-store.js\";\n\ntype SlackSenderProfile = {\n  email: string | null;\n  name: string | null;\n  trust: \"trusted\" | \"guest\" | \"external_shared\" | \"unknown\";\n};\n\nconst slackProfileCache = new Map<\n  string,\n  { profile: SlackSenderProfile; expiresAt: number }\n>();\nconst SLACK_PROFILE_CACHE_TTL = 10 * 60 * 1000;\n\nfunction contextString(value: unknown): string | null {\n  if (typeof value === \"string\" && value.trim()) return value.trim();\n  if (typeof value === \"number\" && Number.isFinite(value)) return String(value);\n  return null;\n}\n\nexport function identityKeyForIncoming(\n  incoming: IncomingMessage,\n): string | null {\n  const senderId = contextString(incoming.senderId);\n  if (!senderId) return null;\n\n  if (incoming.platform === \"slack\") {\n    const teamId = contextString(incoming.platformContext.teamId);\n    return teamId ? `${teamId}:${senderId}` : senderId;\n  }\n\n  if (incoming.platform === \"whatsapp\") {\n    const phoneNumberId = contextString(incoming.platformContext.phoneNumberId);\n    return phoneNumberId ? `${phoneNumberId}:${senderId}` : senderId;\n  }\n\n  if (incoming.platform === \"email\") {\n    return senderId.toLowerCase();\n  }\n\n  return senderId;\n}\n\nfunction fallbackOwnerForIncoming(incoming: IncomingMessage): string {\n  const tenant =\n    contextString(incoming.platformContext.teamId) ||\n    contextString(incoming.platformContext.phoneNumberId) ||\n    contextString(incoming.platformContext.chatId) ||\n    contextString(incoming.platformContext.from) ||\n    incoming.externalThreadId;\n  const raw = `${incoming.platform}:${tenant}:${incoming.senderId || \"\"}`;\n  const hash = crypto\n    .createHash(\"sha256\")\n    .update(raw)\n    .digest(\"hex\")\n    .slice(0, 16);\n  return `dispatch+${hash}@integration.local`;\n}\n\nfunction configuredDefaultOwnerForIncoming(\n  incoming: IncomingMessage,\n): string | null {\n  // This is intentionally Slack-only: a deployment-wide default owner grants\n  // that Slack workspace access to the owner's connected agents and org\n  // credentials, so other platforms should opt in with explicit identity links.\n  if (incoming.platform !== \"slack\") return null;\n  const email = process.env.DISPATCH_DEFAULT_OWNER_EMAIL?.trim();\n  if (!email) return null;\n  return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email) ? email : null;\n}\n\nfunction platformRequiresExplicitLink(incoming: IncomingMessage): boolean {\n  // Telegram does not provide a verified email address. Require an explicit\n  // identity link before it can act as a Builder/Agent-Native user.\n  return incoming.platform === \"telegram\";\n}\n\nfunction configuredDispatchIdentitiesUrl(): string | null {\n  const raw =\n    process.env.WORKSPACE_GATEWAY_URL ||\n    process.env.APP_URL ||\n    process.env.URL ||\n    process.env.DEPLOY_URL ||\n    process.env.BETTER_AUTH_URL ||\n    \"\";\n  if (!raw.trim()) return null;\n  const base = /^https?:\\/\\//i.test(raw) ? raw : `https://${raw}`;\n  try {\n    return new URL(\n      \"identities\",\n      `${withConfiguredAppBasePath(base).replace(/\\/+$/, \"\")}/`,\n    ).toString();\n  } catch {\n    return null;\n  }\n}\n\nasync function resolveManagedSlackInstallation(incoming: IncomingMessage) {\n  if (incoming.platform !== \"slack\") return null;\n  const teamId = contextString(incoming.platformContext.teamId);\n  const apiAppId = contextString(incoming.platformContext.apiAppId);\n  if (!teamId) return null;\n  try {\n    return await getActiveIntegrationInstallationByKey(\n      \"slack\",\n      slackInstallationKey({ teamId, apiAppId }),\n    );\n  } catch {\n    return null;\n  }\n}\n\nasync function resolveManagedSlackToken(\n  incoming: IncomingMessage,\n): Promise<string | null> {\n  const installation = await resolveManagedSlackInstallation(incoming);\n  if (!installation) return null;\n  const bundle = await resolveIntegrationTokenBundle(\n    \"slack\",\n    installation.installationKey,\n  );\n  return bundle?.accessToken ?? null;\n}\n\nfunction formatTelegramLinkRequiredMessage(): string {\n  const identitiesUrl = configuredDispatchIdentitiesUrl();\n  const linkStep = identitiesUrl\n    ? `Tap ${identitiesUrl}, create a Telegram link token, then send \\`/link <token>\\` here.`\n    : \"Open Dispatch while signed in, create a Telegram link token, then send `/link <token>` here.\";\n  return `Telegram is connected, but this Telegram account is not linked to an Agent-Native user yet. ${linkStep} After that I can use your Builder.io org and connected apps.`;\n}\n\nfunction formatSlackLinkRequiredMessage(): string {\n  const identitiesUrl = configuredDispatchIdentitiesUrl();\n  const linkStep = identitiesUrl\n    ? `Open ${identitiesUrl}, create a Slack link token, then send \\`/link <token>\\` in this DM.`\n    : \"Open Dispatch while signed in, create a Slack link token, then send `/link <token>` in this DM.\";\n  return `Agent Native is ready, but this Slack account is not linked to an Agent Native user yet. ${linkStep}`;\n}\n\nasync function resolveSlackSenderProfile(\n  incoming: IncomingMessage,\n): Promise<SlackSenderProfile> {\n  if (incoming.platform !== \"slack\") {\n    return { email: null, name: null, trust: \"unknown\" };\n  }\n  const token = await resolveSlackBotTokenForIncoming(incoming);\n  const userId = contextString(incoming.senderId);\n  const teamId = contextString(incoming.platformContext.teamId);\n  if (!token || !userId) {\n    return { email: null, name: null, trust: \"unknown\" };\n  }\n\n  // Slack user IDs are scoped per workspace, so without a teamId we can't\n  // safely cache: two installs of the bot in different workspaces could\n  // share user-id strings and collide on a single \"default\" key. Skip the\n  // cache (and lookup on every request) when teamId is missing.\n  const cacheKey = teamId ? `${teamId}:${userId}` : null;\n  if (cacheKey) {\n    const cached = slackProfileCache.get(cacheKey);\n    if (cached && cached.expiresAt > Date.now()) return cached.profile;\n  }\n\n  try {\n    const params = new URLSearchParams({ user: userId });\n    const res = await fetch(`https://slack.com/api/users.info?${params}`, {\n      headers: { Authorization: `Bearer ${token}` },\n    });\n    const data = (await res.json()) as {\n      ok?: boolean;\n      user?: {\n        real_name?: string;\n        name?: string;\n        profile?: {\n          email?: string;\n          real_name?: string;\n          display_name?: string;\n        };\n        is_restricted?: boolean;\n        is_ultra_restricted?: boolean;\n      };\n    };\n    const profile = data.ok\n      ? {\n          email: data.user?.profile?.email?.trim().toLowerCase() || null,\n          name:\n            data.user?.profile?.real_name?.trim() ||\n            data.user?.profile?.display_name?.trim() ||\n            data.user?.real_name?.trim() ||\n            data.user?.name?.trim() ||\n            null,\n          trust:\n            data.user?.is_ultra_restricted === true\n              ? (\"external_shared\" as const)\n              : data.user?.is_restricted === true\n                ? (\"guest\" as const)\n                : (\"trusted\" as const),\n        }\n      : { email: null, name: null, trust: \"unknown\" as const };\n    if (cacheKey) {\n      slackProfileCache.set(cacheKey, {\n        profile,\n        expiresAt: Date.now() + SLACK_PROFILE_CACHE_TTL,\n      });\n    }\n    return profile;\n  } catch {\n    return { email: null, name: null, trust: \"unknown\" };\n  }\n}\n\nasync function resolveSlackOwnerFromVerifiedEmail(\n  incoming: IncomingMessage,\n): Promise<string | null> {\n  const profile = await resolveSlackSenderProfile(incoming);\n  if (!profile.email) return null;\n\n  incoming.senderEmail = profile.email;\n  incoming.platformContext.senderEmail = profile.email;\n  if (profile.name) {\n    incoming.senderName = profile.name;\n    incoming.platformContext.senderName = profile.name;\n  }\n\n  const orgId = await resolveOrgIdForEmail(profile.email);\n  return orgId ? profile.email : null;\n}\n\nasync function resolveSlackConversationTrust(\n  incoming: IncomingMessage,\n  actorTrust: SlackSenderProfile[\"trust\"],\n): Promise<{\n  trust: SlackSenderProfile[\"trust\"];\n  conversationType: \"channel\" | \"direct_message\" | \"group_direct_message\";\n}> {\n  if (incoming.triggerKind === \"dm\") {\n    return { trust: actorTrust, conversationType: \"direct_message\" };\n  }\n  const token = await resolveManagedSlackToken(incoming);\n  const channel = contextString(incoming.platformContext.channelId);\n  if (!token || !channel) {\n    return { trust: \"unknown\", conversationType: \"channel\" };\n  }\n  try {\n    const params = new URLSearchParams({ channel });\n    const response = await fetch(\n      `https://slack.com/api/conversations.info?${params}`,\n      { headers: { Authorization: `Bearer ${token}` } },\n    );\n    const data = (await response.json()) as {\n      ok?: boolean;\n      channel?: {\n        is_ext_shared?: boolean;\n        is_im?: boolean;\n        is_mpim?: boolean;\n      };\n    };\n    if (!data.ok) {\n      return { trust: \"unknown\", conversationType: \"channel\" };\n    }\n    return {\n      trust: data.channel?.is_ext_shared ? \"external_shared\" : actorTrust,\n      conversationType: data.channel?.is_im\n        ? \"direct_message\"\n        : data.channel?.is_mpim\n          ? \"group_direct_message\"\n          : \"channel\",\n    };\n  } catch {\n    return { trust: \"unknown\", conversationType: \"channel\" };\n  }\n}\n\nexport async function resolveDispatchOwner(\n  incoming: IncomingMessage,\n): Promise<string> {\n  try {\n    const externalUserId = identityKeyForIncoming(incoming);\n\n    // Webhooks do not have the browser request's org context, so allow a safe\n    // cross-org fallback when the linked platform identity maps to one owner.\n    const owner = await resolveLinkedOwner(incoming.platform, externalUserId, {\n      allowAnyOrgFallback: true,\n    });\n    if (owner) return owner;\n\n    // For email, the sender's `From:` address is attacker-settable: SMTP lets\n    // anyone claim any From, and our inbound webhook secret only authenticates\n    // the provider→app hop, not the original sender. So we must NOT grant a\n    // real user's identity (their API keys, org secrets, personal\n    // instructions, ownable data) off the bare From. Mirror the Slack gate:\n    // only return the sender email as the acting owner when BOTH\n    //   (a) the message is DKIM/SPF-verified for the From domain, AND\n    //   (b) that email maps to a real org member.\n    // Otherwise fall through to the synthetic, credential-less fallback owner.\n    // (A linked identity, handled by resolveLinkedOwner above, remains an\n    // always-allowed way to bind an address regardless of verification.)\n    //\n    // Escape hatch: set DISPATCH_TRUST_UNVERIFIED_EMAIL_SENDER=1 to restore\n    // the legacy \"trust the From header\" behavior. OFF by default; only use\n    // this if you fully control the inbound mail path and accept that a\n    // spoofed From can act as any org member. See FINDING 3 (inbound-email\n    // impersonation) in the webhook security audit.\n    if (\n      incoming.platform === \"email\" &&\n      incoming.senderId &&\n      incoming.senderId.includes(\"@\")\n    ) {\n      if (process.env.DISPATCH_TRUST_UNVERIFIED_EMAIL_SENDER === \"1\") {\n        return incoming.senderId;\n      }\n      if (incoming.senderVerified) {\n        const orgId = await resolveOrgIdForEmail(incoming.senderId);\n        if (orgId) return incoming.senderId;\n      }\n      // Unverified or not an org member — do not impersonate. Fall through to\n      // the synthetic fallback owner below.\n    }\n\n    // Slack gives us a user id in the event payload. Resolve it to a verified\n    // workspace email and use that user's own org context when they are an\n    // Agent-Native member, so artifacts created via @agent-native are visible\n    // when they open the target app.\n    if (incoming.platform === \"slack\") {\n      const slackOwner = await resolveSlackOwnerFromVerifiedEmail(incoming);\n      if (slackOwner) return slackOwner;\n    }\n\n    const defaultOwner = configuredDefaultOwnerForIncoming(incoming);\n    if (defaultOwner) return defaultOwner;\n\n    return fallbackOwnerForIncoming(incoming);\n  } catch {\n    const defaultOwner = configuredDefaultOwnerForIncoming(incoming);\n    if (defaultOwner) return defaultOwner;\n    return fallbackOwnerForIncoming(incoming);\n  }\n}\n\n/**\n * Resolve a personal DM user or a workspace-qualified channel service\n * principal. Managed Slack channels never silently inherit one requester's\n * personal credentials or memory.\n */\nexport async function resolveDispatchExecutionContext(\n  incoming: IncomingMessage,\n): Promise<IntegrationExecutionContext> {\n  if (incoming.platform !== \"slack\" || incoming.triggerKind === \"dm\") {\n    const ownerEmail = await resolveDispatchOwner(incoming);\n    if (\n      incoming.platform === \"slack\" &&\n      ownerEmail.endsWith(\"@integration.local\")\n    ) {\n      // Preserve a credential-less principal long enough for beforeProcess to\n      // deliver linking guidance or consume `/link <token>`. Never run the\n      // agent under this synthetic owner.\n      incoming.platformContext.identityLinkRequired = true;\n    }\n    return {\n      ownerEmail,\n      orgId: (await resolveOrgIdForEmail(ownerEmail)) ?? null,\n      principalType: \"user\",\n    };\n  }\n\n  const installation = await resolveManagedSlackInstallation(incoming);\n  if (!installation) {\n    // Preserve the legacy manually configured app path while managed installs\n    // roll out. Its behavior remains explicit and visible in Settings.\n    const ownerEmail = await resolveDispatchOwner(incoming);\n    return {\n      ownerEmail,\n      orgId: (await resolveOrgIdForEmail(ownerEmail)) ?? null,\n      principalType: \"user\",\n    };\n  }\n\n  const teamId = contextString(incoming.platformContext.teamId);\n  const channelId = contextString(incoming.platformContext.channelId);\n  if (!teamId || !channelId) {\n    throw new Error(\"Slack channel identity is incomplete\");\n  }\n  const profile = await resolveSlackSenderProfile(incoming);\n  const conversation = await resolveSlackConversationTrust(\n    incoming,\n    profile.trust,\n  );\n  const access = {\n    ownerEmail: installation.ownerEmail,\n    orgId: installation.orgId,\n  };\n  const key = {\n    platform: \"slack\",\n    tenantId: teamId,\n    conversationId: channelId,\n  };\n  let scope = await getIntegrationScope(key, access);\n  if (!scope && incoming.triggerKind === \"mention\") {\n    scope = await saveIntegrationScope(\n      {\n        ...key,\n        conversationType: conversation.conversationType,\n        trust: conversation.trust,\n        orgId: installation.orgId,\n        installationId: installation.id,\n      },\n      access,\n    );\n  }\n  if (!scope) throw new Error(\"Slack channel is not enabled for Agent Native\");\n  const decision = evaluateIntegrationScopePolicy(scope, {\n    // Slack channel turns only arrive here after an explicit current-message\n    // mention; keep the generic thread_reply trigger for other adapters.\n    mentioned:\n      incoming.triggerKind === \"mention\" ||\n      incoming.triggerKind === \"thread_reply\",\n  });\n  if (!decision.allowed) {\n    throw new Error(`Slack channel policy denied: ${decision.reason}`);\n  }\n  incoming.integrationScopeId = scope.id;\n  if (scope.defaultModel) {\n    incoming.platformContext.defaultModel = scope.defaultModel;\n  }\n  incoming.actorTrust = {\n    memberType:\n      conversation.trust === \"guest\"\n        ? \"guest\"\n        : conversation.trust === \"external_shared\"\n          ? \"external\"\n          : conversation.trust === \"trusted\"\n            ? \"member\"\n            : \"unknown\",\n    verified: conversation.trust !== \"unknown\",\n  };\n  return {\n    ownerEmail: scope.serviceOwnerEmail,\n    orgId: scope.orgId,\n    principalType: \"service\",\n    installationId: installation.id,\n    scopeId: scope.id,\n  };\n}\n\nexport async function beforeDispatchProcess(\n  incoming: IncomingMessage,\n  adapter: PlatformAdapter,\n): Promise<{ handled: true; responseText?: string } | { handled: false }> {\n  const trimmed = incoming.text.trim();\n  const commandText =\n    contextString(incoming.platformContext.rawText) || trimmed;\n  const match = commandText.match(/^\\/link(?:@\\w+)?\\s+([a-zA-Z0-9_-]+)$/);\n  if (!match) {\n    const routedIncoming = incoming as IncomingMessage & {\n      routingHint?: DispatchIntegrationRoutingHint;\n    };\n    routedIncoming.routingHint ??= dispatchIntegrationRoutingHint(trimmed);\n    if (\n      incoming.platform === \"slack\" &&\n      incoming.triggerKind === \"dm\" &&\n      incoming.platformContext.identityLinkRequired === true\n    ) {\n      return {\n        handled: true,\n        responseText: formatSlackLinkRequiredMessage(),\n      };\n    }\n    if (platformRequiresExplicitLink(incoming)) {\n      const owner = await resolveLinkedOwner(\n        incoming.platform,\n        identityKeyForIncoming(incoming),\n        { allowAnyOrgFallback: true },\n      );\n      if (!owner) {\n        return {\n          handled: true,\n          responseText: formatTelegramLinkRequiredMessage(),\n        };\n      }\n    }\n    return handleRemoteCodeCommand(incoming, adapter, {\n      resolveOwner: () => resolveDispatchOwner(incoming),\n    });\n  }\n\n  try {\n    const owner = await consumeLinkToken({\n      platform: incoming.platform,\n      token: match[1],\n      externalUserId: identityKeyForIncoming(incoming),\n      externalUserName: incoming.senderName || null,\n    });\n    return {\n      handled: true,\n      responseText: `Linked successfully. Future ${incoming.platform} messages will use ${owner}'s personal dispatch context.`,\n    };\n  } catch (error) {\n    return {\n      handled: true,\n      responseText:\n        error instanceof Error ? error.message : \"Failed to link this account.\",\n    };\n  }\n}\n"]}

package/dist/server/lib/dispatch-remote-commands.d.ts

@@ -0,0 +1,83 @@
+import type { IncomingMessage, PlatformAdapter } from "@agent-native/core/server";
+export type RemoteCodeCommand = {
+    type: "create";
+    prompt: string;
+} | {
+    type: "list";
+} | {
+    type: "status";
+    runRef?: string;
+} | {
+    type: "continue";
+    runRef: string;
+    text: string;
+} | {
+    type: "approve";
+    approvalId: string;
+} | {
+    type: "deny";
+    approvalId: string;
+} | {
+    type: "stop";
+    runRef: string;
+} | {
+    type: "help";
+    reason?: string;
+};
+export interface RemoteCodeCommandEnvelope {
+    kind: "code-agent";
+    ownerEmail: string;
+    command: Exclude<RemoteCodeCommand, {
+        type: "help";
+    }>;
+    source: {
+        platform: string;
+        externalThreadId: string;
+        senderId?: string;
+        senderName?: string;
+        messageId?: string;
+        timestamp: number;
+    };
+}
+export interface RemoteCodeRunSummary {
+    id?: string;
+    runId?: string;
+    title?: string;
+    prompt?: string;
+    status?: string;
+    updatedAt?: string | number | Date;
+    createdAt?: string | number | Date;
+}
+export interface RemoteCodeCommandResult {
+    ok?: boolean;
+    status?: string;
+    hostOnline?: boolean;
+    hostStatus?: string;
+    commandId?: string;
+    requestId?: string;
+    runId?: string;
+    run?: RemoteCodeRunSummary;
+    runs?: RemoteCodeRunSummary[];
+    message?: string;
+    error?: string;
+}
+export type RemoteCodeCommandRelay = (envelope: RemoteCodeCommandEnvelope) => Promise<RemoteCodeCommandResult>;
+export interface HandleRemoteCodeCommandOptions {
+    resolveOwner: () => Promise<string> | string;
+    relay?: RemoteCodeCommandRelay;
+}
+export declare function parseTelegramCodeCommand(incoming: Pick<IncomingMessage, "platform" | "text" | "platformContext">): RemoteCodeCommand | null;
+export declare function handleRemoteCodeCommand(incoming: IncomingMessage, _adapter: PlatformAdapter, options: HandleRemoteCodeCommandOptions): Promise<{
+    handled: true;
+    responseText?: string;
+} | {
+    handled: false;
+}>;
+export declare function createRemoteCodeCommandEnvelope(incoming: IncomingMessage, ownerEmail: string, command: Exclude<RemoteCodeCommand, {
+    type: "help";
+}>): RemoteCodeCommandEnvelope;
+export declare function enqueueRemoteCodeCommand(envelope: RemoteCodeCommandEnvelope): Promise<RemoteCodeCommandResult>;
+export declare function formatRemoteCodeCommandResult(command: Exclude<RemoteCodeCommand, {
+    type: "help";
+}>, result: RemoteCodeCommandResult): string;
+//# sourceMappingURL=dispatch-remote-commands.d.ts.map

package/dist/server/lib/dispatch-remote-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-remote-commands.d.ts","sourceRoot":"","sources":["../../../src/server/lib/dispatch-remote-commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAChB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,sBAAsB,GAAG,CACnC,QAAQ,EAAE,yBAAyB,KAChC,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAEtC,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC7C,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAID,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,MAAM,GAAG,iBAAiB,CAAC,GACvE,iBAAiB,GAAG,IAAI,CAO1B;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,eAAe,EACzB,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,CAAC,CA8BxE;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GACpD,yBAAyB,CAc3B;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,uBAAuB,CAAC,CA2BlC;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EACrD,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CA4CR"}