@agentconnect.md/setup 1.51.0 → 1.52.0-rc.1

package/dist/index.js

@@ -37447,6 +37447,8 @@ var import_fastify = /* @__PURE__ */ __toESM(require_fastify(), 1);
 const SLACK_MANAGE_SESSION_SHORTCUT_CALLBACK_ID = "ac_manage_session";
 /** Public platform profile copy. Never derive this from an Agent description. */
 const PLATFORM_APP_DESCRIPTION = "AI agent powered by AgentConnect.";
+/** The bot scopes an installation MUST hold — without one of these the app cannot receive,
+*  read, or answer a message at all, so a short grant is refused rather than degraded. */
 const SLACK_BOT_SCOPES = [
 	"files:read",
 	"app_mentions:read",
@@ -37466,6 +37468,28 @@ const SLACK_BOT_SCOPES = [
 	"assistant:write",
 	"users:read"
 ];
+/**
+* Bot scopes that unlock ONE optional capability each and are declared but never fenced on.
+*
+* A required scope is load-bearing: an install missing it is broken, so `checkSlackBotScopes`
+* refuses it and the console asks for a reinstall. These are not — a workspace that granted
+* the app before the capability existed keeps working, and only the one tool that needs the
+* scope refuses, with Slack's own `missing_scope`. Fencing on them would mark every existing
+* installation broken for a feature it never asked for.
+*
+* `channels:manage` / `groups:write` also back `conversations.leave`, which has always needed
+* a write scope this manifest did not declare.
+*/
+const SLACK_CAPABILITY_BOT_SCOPES = [
+	"reactions:read",
+	"canvases:read",
+	"canvases:write",
+	"channels:manage",
+	"groups:write",
+	"mpim:write"
+];
+/** Everything the app manifest declares: the required fence plus the optional capabilities. */
+const SLACK_MANIFEST_BOT_SCOPES = [...SLACK_BOT_SCOPES, ...SLACK_CAPABILITY_BOT_SCOPES];
 const SLACK_BOT_EVENTS = [
 	"agent_session_stopped",
 	"agent_session_title_changed",
@@ -37525,7 +37549,7 @@ function buildSlackAppManifest(name, options = {}) {
 			}]
 		},
 		oauth_config: {
-			scopes: { bot: [...SLACK_BOT_SCOPES] },
+			scopes: { bot: [...SLACK_MANIFEST_BOT_SCOPES] },
 			...redirectUrls.length > 0 ? { redirect_urls: redirectUrls } : {},
 			...options.pkceEnabled !== void 0 ? { pkce_enabled: options.pkceEnabled } : {}
 		},