@agentworkforce/sage 1.0.5 → 1.1.0

package/dist/integrations/cloud-proxy-provider.d.ts

@@ -0,0 +1,42 @@
+export type ProxyMethod = "DELETE" | "GET" | "PATCH" | "POST" | "PUT";
+export type ProxyHeaders = Record<string, string>;
+export type ProxyQuery = Record<string, string>;
+export interface ProxyRequest {
+    method: ProxyMethod;
+    endpoint: string;
+    workspaceId?: string;
+    data?: unknown;
+    params?: ProxyQuery;
+}
+export interface ProxyResponse<T = unknown> {
+    status: number;
+    headers: ProxyHeaders;
+    data: T;
+}
+export interface ConnectionProvider {
+    readonly name: string;
+    proxy<T = unknown>(request: ProxyRequest): Promise<ProxyResponse<T>>;
+    healthCheck(): Promise<boolean>;
+}
+export declare class CloudProxyError extends Error {
+    readonly status?: number;
+    readonly code: string;
+    readonly retryAfterMs?: number;
+    constructor(message: string, options?: {
+        status?: number;
+        code?: string;
+        retryAfterMs?: number;
+    });
+}
+export declare class CloudProxyProvider implements ConnectionProvider {
+    readonly name = "cloud-proxy";
+    private readonly baseUrl;
+    private readonly cloudApiToken;
+    constructor(config: {
+        cloudApiUrl: string;
+        cloudApiToken: string;
+    });
+    proxy<T = unknown>(request: ProxyRequest): Promise<ProxyResponse<T>>;
+    healthCheck(): Promise<boolean>;
+}
+//# sourceMappingURL=cloud-proxy-provider.d.ts.map

package/dist/integrations/cloud-proxy-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-proxy-provider.d.ts","sourceRoot":"","sources":["../../src/integrations/cloud-proxy-provider.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAClD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACjC;AA8CD,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE;CAOjG;AAwBD,qBAAa,kBAAmB,YAAW,kBAAkB;IAC3D,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;IAK5D,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IA0DpE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAWtC"}

package/dist/integrations/cloud-proxy-provider.js

@@ -0,0 +1,131 @@
+const HEALTH_ENDPOINT = "/api/health";
+const SLACK_PROXY_ENDPOINT = "/api/v1/proxy/slack";
+const REQUEST_TIMEOUT_MS = 30_000;
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function readString(value) {
+    return typeof value === "string" && value.trim() ? value : undefined;
+}
+function readNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+function requireNonEmpty(value, field) {
+    const normalized = value.trim();
+    if (!normalized) {
+        throw new CloudProxyError(`Cloud proxy configuration is missing ${field}`);
+    }
+    return normalized;
+}
+function readWorkspaceId(request) {
+    const workspaceId = readString(request.workspaceId);
+    if (!workspaceId) {
+        throw new CloudProxyError("Cloud Slack proxy request is missing workspaceId", {
+            code: "invalid_request",
+        });
+    }
+    return workspaceId;
+}
+export class CloudProxyError extends Error {
+    status;
+    code;
+    retryAfterMs;
+    constructor(message, options) {
+        super(message);
+        this.name = "CloudProxyError";
+        this.status = options?.status;
+        this.code = options?.code ?? "cloud_proxy_error";
+        this.retryAfterMs = options?.retryAfterMs;
+    }
+}
+function parseEnvelope(payload) {
+    if (!isRecord(payload) || typeof payload.ok !== "boolean") {
+        throw new CloudProxyError("Cloud Slack proxy returned an invalid response");
+    }
+    if (payload.ok) {
+        return {
+            ok: true,
+            data: ("data" in payload ? payload.data : undefined),
+        };
+    }
+    return {
+        ok: false,
+        ...(readString(payload.error) ? { error: readString(payload.error) } : {}),
+        ...(readString(payload.code) ? { code: readString(payload.code) } : {}),
+        ...(readNumber(payload.retryAfterMs) !== undefined
+            ? { retryAfterMs: readNumber(payload.retryAfterMs) }
+            : {}),
+    };
+}
+export class CloudProxyProvider {
+    name = "cloud-proxy";
+    baseUrl;
+    cloudApiToken;
+    constructor(config) {
+        this.baseUrl = requireNonEmpty(config.cloudApiUrl, "cloudApiUrl").replace(/\/+$/, "");
+        this.cloudApiToken = requireNonEmpty(config.cloudApiToken, "cloudApiToken");
+    }
+    async proxy(request) {
+        let response;
+        const workspaceId = readWorkspaceId(request);
+        try {
+            response = await fetch(`${this.baseUrl}${SLACK_PROXY_ENDPOINT}`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${this.cloudApiToken}`,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    workspaceId,
+                    endpoint: request.endpoint,
+                    method: request.method,
+                    ...(request.data !== undefined ? { data: request.data } : {}),
+                    ...(request.params !== undefined ? { params: request.params } : {}),
+                }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+        }
+        catch (error) {
+            throw new CloudProxyError(error instanceof Error ? error.message : "Cloud Slack proxy request failed", { code: "network_error" });
+        }
+        if (!response.ok) {
+            throw new CloudProxyError(`Cloud Slack proxy request failed: ${response.status} ${response.statusText}`, {
+                code: "upstream_error",
+                status: response.status,
+            });
+        }
+        let payload;
+        try {
+            payload = parseEnvelope(await response.json());
+        }
+        catch (error) {
+            if (error instanceof CloudProxyError) {
+                throw error;
+            }
+            throw new CloudProxyError("Cloud Slack proxy returned invalid JSON");
+        }
+        if (!payload.ok) {
+            throw new CloudProxyError(payload.error ?? "Cloud Slack proxy returned an error", {
+                code: payload.code,
+                retryAfterMs: payload.retryAfterMs,
+            });
+        }
+        return {
+            status: response.status,
+            headers: {},
+            data: payload.data,
+        };
+    }
+    async healthCheck() {
+        try {
+            const response = await fetch(`${this.baseUrl}${HEALTH_ENDPOINT}`, {
+                method: "GET",
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            return response.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+}

package/dist/integrations/github-context.d.ts

@@ -6,10 +6,11 @@ export interface GitHubContextProviderOptions {
 }
 export declare class GitHubContextProvider {
     private readonly nangoClient;
+    private readonly providerConfigKey;
     private readonly cache;
     private readonly cacheTtlMs;
     private readonly logger;
-    constructor(nangoClient: NangoClient, options?: GitHubContextProviderOptions);
+    constructor(nangoClient: NangoClient, providerConfigKey: string, options?: GitHubContextProviderOptions);
     getOrgsAndRepos(connectionId: string, relayfileReader?: SageRelayFileReader | null): Promise<GitHubOrgDiscovery>;
     private setCache;
 }

package/dist/integrations/github-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-context.d.ts","sourceRoot":"","sources":["../../src/integrations/github-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AASjE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,qBAAa,qBAAqB;IAM9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAL9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAG5B,WAAW,EAAE,WAAW,EACzC,OAAO,GAAE,4BAAiC;IAMtC,eAAe,CACnB,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,mBAAmB,GAAG,IAAI,GAC3C,OAAO,CAAC,kBAAkB,CAAC;IAwB9B,OAAO,CAAC,QAAQ;CAMjB"}
+{"version":3,"file":"github-context.d.ts","sourceRoot":"","sources":["../../src/integrations/github-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AASjE,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,qBAAa,qBAAqB;IAM9B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IANpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAG5B,WAAW,EAAE,WAAW,EACxB,iBAAiB,EAAE,MAAM,EAC1C,OAAO,GAAE,4BAAiC;IAMtC,eAAe,CACnB,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,mBAAmB,GAAG,IAAI,GAC3C,OAAO,CAAC,kBAAkB,CAAC;IAwB9B,OAAO,CAAC,QAAQ;CAMjB"}

package/dist/integrations/github-context.js

@@ -1,11 +1,13 @@
 const DEFAULT_CACHE_TTL_MS = 5 * 60_000;
 export class GitHubContextProvider {
     nangoClient;
+    providerConfigKey;
     cache = new Map();
     cacheTtlMs;
     logger;
-    constructor(nangoClient, options = {}) {
+    constructor(nangoClient, providerConfigKey, options = {}) {
         this.nangoClient = nangoClient;
+        this.providerConfigKey = providerConfigKey;
         this.cacheTtlMs = options.cacheTtlMs ?? DEFAULT_CACHE_TTL_MS;
         this.logger = options.logger ?? console;
     }
@@ -27,7 +29,7 @@ export class GitHubContextProvider {
                 this.logger.warn('[sage] RelayFile GitHub discovery failed, falling back to Nango', error);
             }
         }
-        const discovery = await this.nangoClient.discoverGitHubOrgs(connectionId);
+        const discovery = await this.nangoClient.discoverGitHubOrgs(connectionId, this.providerConfigKey);
         this.setCache(connectionId, discovery);
         return cloneGitHubOrgDiscovery(discovery);
     }

package/dist/integrations/github.d.ts

@@ -3,16 +3,18 @@
  *
  * All GitHub API calls are routed through Nango's proxy so that
  * authentication is handled automatically via the stored connection.
- * Uses the 'github' integration key for repo access.
+ * Uses the workspace-resolved provider config key for repo access.
  */
 import { NangoClient } from '../nango.js';
 import type { IntegrationResult, GitHubFile, GitHubIssue, GitHubPR, GitHubSearchResult } from './types.js';
 export declare class GitHubIntegration {
     private readonly nango;
     private readonly connectionId;
-    constructor({ nangoClient, connectionId, }: {
+    private readonly providerConfigKey;
+    constructor({ nangoClient, connectionId, providerConfigKey, }: {
         nangoClient: NangoClient;
         connectionId: string;
+        providerConfigKey?: string | null;
     });
     private errorResult;
     private execute;

package/dist/integrations/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/integrations/github.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAkC,MAAM,aAAa,CAAC;AAC1E,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,QAAQ,EACR,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA6EpB,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,EACV,WAAW,EACX,YAAY,GACb,EAAE;QACD,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;KACtB;IAKD,OAAO,CAAC,WAAW;YAOL,OAAO;IAcf,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAmCxF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC;IAmCrF,QAAQ,CACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAmCnC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAuC7F,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;IAmBjC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;CA+BrG"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/integrations/github.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EACV,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,QAAQ,EACR,kBAAkB,EACnB,MAAM,YAAY,CAAC;AA4EpB,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAc;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;gBAE/B,EACV,WAAW,EACX,YAAY,EACZ,iBAAiB,GAClB,EAAE;QACD,WAAW,EAAE,WAAW,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC;IAWD,OAAO,CAAC,WAAW;YAOL,OAAO;IAcf,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;IAmCxF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC;IAmCrF,QAAQ,CACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAmCnC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAuC7F,aAAa,CACjB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;IAmBjC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;CA+BrG"}

package/dist/integrations/github.js

@@ -3,11 +3,10 @@
  *
  * All GitHub API calls are routed through Nango's proxy so that
  * authentication is handled automatically via the stored connection.
- * Uses the 'github' integration key for repo access.
+ * Uses the workspace-resolved provider config key for repo access.
  */
-import { NangoError, NANGO_INTEGRATIONS } from '../nango.js';
+import { NangoError } from '../nango.js';
 const SOURCE = 'github';
-const PROVIDER = NANGO_INTEGRATIONS.GITHUB;
 function result(data, summary) {
     return {
         source: SOURCE,
@@ -64,9 +63,15 @@ function encodeRepoPath(path) {
 export class GitHubIntegration {
     nango;
     connectionId;
-    constructor({ nangoClient, connectionId, }) {
+    providerConfigKey;
+    constructor({ nangoClient, connectionId, providerConfigKey, }) {
+        const resolvedProviderConfigKey = providerConfigKey?.trim();
+        if (!resolvedProviderConfigKey) {
+            throw new Error('GitHubIntegration requires a providerConfigKey');
+        }
         this.nango = nangoClient;
         this.connectionId = connectionId;
+        this.providerConfigKey = resolvedProviderConfigKey;
     }
     errorResult(action, fallback, error) {
         const prefix = isRateLimited(error)
@@ -88,7 +93,7 @@ export class GitHubIntegration {
         return this.execute(`searching code for "${query}"${repo ? ` in ${repo}` : ''}`, { items: [] }, async () => {
             const data = await this.nango.proxy({
                 connectionId: this.connectionId,
-                providerConfigKey: PROVIDER,
+                providerConfigKey: this.providerConfigKey,
                 method: 'GET',
                 endpoint: `/search/code?q=${encodeURIComponent(scopedQuery)}`,
                 headers: { Accept: 'application/vnd.github.text-match+json' },
@@ -108,7 +113,7 @@ export class GitHubIntegration {
         return this.execute(`searching issues for "${query}"${repo ? ` in ${repo}` : ''}`, [], async () => {
             const data = await this.nango.proxy({
                 connectionId: this.connectionId,
-                providerConfigKey: PROVIDER,
+                providerConfigKey: this.providerConfigKey,
                 method: 'GET',
                 endpoint: `/search/issues?q=${encodeURIComponent(scopedQuery)}`,
             });
@@ -130,7 +135,7 @@ export class GitHubIntegration {
         return this.execute(`reading file ${owner}/${repo}/${path}${ref ? ` @ ${ref}` : ''}`, { path, content: '', sha: '' }, async () => {
             const data = await this.nango.proxy({
                 connectionId: this.connectionId,
-                providerConfigKey: PROVIDER,
+                providerConfigKey: this.providerConfigKey,
                 method: 'GET',
                 endpoint,
             });
@@ -148,13 +153,13 @@ export class GitHubIntegration {
             const [pr, files] = await Promise.all([
                 this.nango.proxy({
                     connectionId: this.connectionId,
-                    providerConfigKey: PROVIDER,
+                    providerConfigKey: this.providerConfigKey,
                     method: 'GET',
                     endpoint: `/repos/${owner}/${repo}/pulls/${number}`,
                 }),
                 this.nango.proxy({
                     connectionId: this.connectionId,
-                    providerConfigKey: PROVIDER,
+                    providerConfigKey: this.providerConfigKey,
                     method: 'GET',
                     endpoint: `/repos/${owner}/${repo}/pulls/${number}/files`,
                 }),
@@ -174,7 +179,7 @@ export class GitHubIntegration {
         return this.execute(`listing repository contents for ${owner}/${repo}${path ? `/${path}` : ''}`, [], async () => {
             const data = await this.nango.proxy({
                 connectionId: this.connectionId,
-                providerConfigKey: PROVIDER,
+                providerConfigKey: this.providerConfigKey,
                 method: 'GET',
                 endpoint: `/repos/${owner}/${repo}/contents${encodedPath}`,
             });
@@ -185,7 +190,7 @@ export class GitHubIntegration {
         return this.execute(`loading issue #${number} in ${owner}/${repo}`, { number, title: '', body: '', state: 'error', labels: [], url: '' }, async () => {
             const data = await this.nango.proxy({
                 connectionId: this.connectionId,
-                providerConfigKey: PROVIDER,
+                providerConfigKey: this.providerConfigKey,
                 method: 'GET',
                 endpoint: `/repos/${owner}/${repo}/issues/${number}`,
             });

package/dist/integrations/slack-egress.d.ts

@@ -0,0 +1,28 @@
+import type { ConnectionProvider } from "./cloud-proxy-provider.js";
+import { type ThreadMessage } from "../slack.js";
+export interface SlackEgressResult {
+    ok: boolean;
+    ts?: string;
+    error?: string;
+}
+export declare class SlackEgressError extends Error {
+    readonly code: string;
+    readonly retryAfterMs?: number;
+    constructor(message: string, code?: string, retryAfterMs?: number);
+}
+export interface SlackReaction {
+    name: string;
+    count: number;
+}
+export interface SlackEgress {
+    postMessage(channel: string, text: string, threadTs?: string): Promise<SlackEgressResult>;
+    postMessageChunked(channel: string, text: string, threadTs?: string, maxChars?: number): Promise<SlackEgressResult>;
+    addReaction(channel: string, timestamp: string, emoji: string): Promise<void>;
+    fetchThreadHistory(channel: string, threadTs: string, botUserId?: string): Promise<ThreadMessage[]>;
+    getBotUserId(): Promise<string | undefined>;
+    getReactions(channel: string, timestamp: string): Promise<SlackReaction[]>;
+}
+export declare function createSlackEgress(provider: ConnectionProvider, workspaceId: string): SlackEgress;
+export type { ConnectionProvider } from "./cloud-proxy-provider.js";
+export type { ThreadMessage } from "../slack.js";
+//# sourceMappingURL=slack-egress.d.ts.map

package/dist/integrations/slack-egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-egress.d.ts","sourceRoot":"","sources":["../../src/integrations/slack-egress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,2BAA2B,CAAC;AAElF,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AA4BrB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,IAAI,SAAwB,EAAE,YAAY,CAAC,EAAE,MAAM;CAMjF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1F,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;CAC5E;AA+ED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,CAkKhG;AAED,YAAY,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/integrations/slack-egress.js

@@ -0,0 +1,181 @@
+import { SLACK_MESSAGE_MAX_CHARS, chunkSlackMessage, cleanSlackText, } from "../slack.js";
+export class SlackEgressError extends Error {
+    code;
+    retryAfterMs;
+    constructor(message, code = "slack_egress_failed", retryAfterMs) {
+        super(message);
+        this.name = "SlackEgressError";
+        this.code = code;
+        this.retryAfterMs = retryAfterMs;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function asString(value) {
+    return typeof value === "string" ? value : undefined;
+}
+function asNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+function toSlackEgressError(error, fallbackCode = "slack_egress_failed") {
+    if (error instanceof SlackEgressError) {
+        return error;
+    }
+    if (isRecord(error)) {
+        const message = asString(error.message) ?? "Slack request failed";
+        const code = asString(error.code) ?? fallbackCode;
+        const retryAfterMs = asNumber(error.retryAfterMs);
+        return new SlackEgressError(message, code, retryAfterMs);
+    }
+    if (error instanceof Error) {
+        return new SlackEgressError(error.message, fallbackCode);
+    }
+    return new SlackEgressError("Slack request failed", fallbackCode);
+}
+function assertWorkspaceId(workspaceId) {
+    if (typeof workspaceId !== "string" || workspaceId.trim().length === 0) {
+        throw new Error("A workspaceId is required to create Slack egress");
+    }
+    return workspaceId.trim();
+}
+function createProxyRequest(workspaceId, endpoint, method, options) {
+    return {
+        method,
+        endpoint,
+        workspaceId,
+        ...(options?.data !== undefined ? { data: options.data } : {}),
+        ...(options?.params !== undefined ? { params: options.params } : {}),
+    };
+}
+async function executeSlackRequest(provider, request) {
+    try {
+        const response = await provider.proxy(request);
+        if (isRecord(response.data) && response.data.ok === false) {
+            throw new SlackEgressError(asString(response.data.error) ?? "Slack request failed", asString(response.data.code) ?? "slack_error", asNumber(response.data.retryAfterMs));
+        }
+        if (response.status >= 400) {
+            throw new SlackEgressError(`Slack request failed with status ${response.status}`, `http_${response.status}`);
+        }
+        return response.data;
+    }
+    catch (error) {
+        throw toSlackEgressError(error);
+    }
+}
+export function createSlackEgress(provider, workspaceId) {
+    const resolvedWorkspaceId = assertWorkspaceId(workspaceId);
+    let cachedBotUserId;
+    let botUserIdLoaded = false;
+    const postMessage = async (channel, text, threadTs) => {
+        const body = {
+            channel,
+            text,
+            ...(threadTs ? { thread_ts: threadTs } : {}),
+        };
+        const response = await executeSlackRequest(provider, createProxyRequest(resolvedWorkspaceId, "/chat.postMessage", "POST", { data: body }));
+        return {
+            ok: response.ok === true,
+            ...(response.ts ? { ts: response.ts } : {}),
+            ...(response.error ? { error: response.error } : {}),
+        };
+    };
+    return {
+        postMessage,
+        async postMessageChunked(channel, text, threadTs, maxChars = SLACK_MESSAGE_MAX_CHARS) {
+            const effectiveMaxChars = Math.min(Math.max(1, maxChars), SLACK_MESSAGE_MAX_CHARS);
+            const chunks = chunkSlackMessage(text, effectiveMaxChars);
+            if (!chunks.length) {
+                return { ok: false, error: "Cannot post an empty Slack message" };
+            }
+            let firstTs;
+            let replyThreadTs = threadTs;
+            for (const chunk of chunks) {
+                const result = await postMessage(channel, chunk, replyThreadTs);
+                if (!result.ok) {
+                    return {
+                        ok: false,
+                        ...(firstTs ? { ts: firstTs } : {}),
+                        ...(result.error ? { error: result.error } : {}),
+                    };
+                }
+                firstTs ??= result.ts;
+                replyThreadTs ??= result.ts;
+            }
+            return {
+                ok: true,
+                ...(firstTs ? { ts: firstTs } : {}),
+            };
+        },
+        async addReaction(channel, timestamp, emoji) {
+            try {
+                await executeSlackRequest(provider, createProxyRequest(resolvedWorkspaceId, "/reactions.add", "POST", {
+                    data: {
+                        channel,
+                        timestamp,
+                        name: emoji,
+                    },
+                }));
+            }
+            catch {
+                // Reactions are best-effort and should not block callers.
+            }
+        },
+        async fetchThreadHistory(channel, threadTs, botUserId) {
+            const response = await executeSlackRequest(provider, createProxyRequest(resolvedWorkspaceId, "/conversations.replies", "POST", {
+                data: {
+                    channel,
+                    ts: threadTs,
+                },
+            }));
+            if (!Array.isArray(response.messages)) {
+                return [];
+            }
+            return response.messages
+                .filter((message) => !message.subtype || message.subtype === "bot_message")
+                .sort((left, right) => Number(left.ts ?? "0") - Number(right.ts ?? "0"))
+                .map((message) => {
+                const content = cleanSlackText(message.text);
+                const isAssistant = Boolean(message.bot_id) || (!!botUserId && message.user === botUserId);
+                return {
+                    role: isAssistant ? "assistant" : "user",
+                    content,
+                    ...(message.ts ? { ts: message.ts } : {}),
+                };
+            })
+                .filter((message) => message.content.length > 0)
+                .slice(-20);
+        },
+        async getBotUserId() {
+            if (botUserIdLoaded) {
+                return cachedBotUserId;
+            }
+            const response = await executeSlackRequest(provider, createProxyRequest(resolvedWorkspaceId, "/auth.test", "POST"));
+            cachedBotUserId = asString(response.user_id);
+            botUserIdLoaded = true;
+            return cachedBotUserId;
+        },
+        async getReactions(channel, timestamp) {
+            const response = await executeSlackRequest(provider, createProxyRequest(resolvedWorkspaceId, "/reactions.get", "GET", {
+                params: {
+                    channel,
+                    timestamp,
+                },
+            }));
+            const reactions = response.message?.reactions;
+            if (!Array.isArray(reactions)) {
+                return [];
+            }
+            return reactions
+                .map((reaction) => {
+                const name = asString(reaction.name);
+                const count = asNumber(reaction.count);
+                if (!name || count === undefined) {
+                    return null;
+                }
+                return { name, count };
+            })
+                .filter((reaction) => reaction !== null);
+        },
+    };
+}

package/dist/integrations/slack-ingress.d.ts

@@ -0,0 +1,26 @@
+import { normalizeSlackWebhook } from "@relayfile/adapter-slack";
+import type { NormalizedWebhook, SlackEnvelope as AdapterSlackEventEnvelope, SlackEvent as AdapterSlackEvent } from "@relayfile/adapter-slack";
+/**
+ * Parse a Slack webhook body that may have been forwarded through Nango.
+ *
+ * Real-world delivery path in production:
+ *   Slack → Nango forward webhook → sage (this function)
+ *
+ * Nango wraps the underlying Slack event in its own envelope:
+ *   { type: "forward", from: "slack", connectionId, providerConfigKey, payload: {...slack event...} }
+ *
+ * The raw Slack envelope (what the @relayfile/adapter-slack parser expects) is
+ * whatever is inside `.payload`. For direct webhook delivery paths (no Nango
+ * in front) the body IS the raw Slack envelope, no unwrap needed.
+ *
+ * This wrapper detects the envelope shape and hands the adapter parser the
+ * unwrapped inner payload in both cases.
+ */
+export declare function parseSlackWebhookEnvelope(rawBody: unknown): AdapterSlackEventEnvelope;
+export { normalizeSlackWebhook };
+export type SlackEvent = AdapterSlackEvent;
+export type SlackEventEnvelope = AdapterSlackEventEnvelope;
+export type NormalizedSlackWebhook = Omit<NormalizedWebhook, "payload"> & {
+    payload: SlackEventEnvelope;
+};
+//# sourceMappingURL=slack-ingress.d.ts.map

package/dist/integrations/slack-ingress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-ingress.d.ts","sourceRoot":"","sources":["../../src/integrations/slack-ingress.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,qBAAqB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,IAAI,yBAAyB,EAC1C,UAAU,IAAI,iBAAiB,EAChC,MAAM,0BAA0B,CAAC;AAElC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAerF;AAED,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAEjC,MAAM,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAC3C,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAE3D,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG;IACxE,OAAO,EAAE,kBAAkB,CAAC;CAC7B,CAAC"}

package/dist/integrations/slack-ingress.js

@@ -0,0 +1,31 @@
+import { parseNangoWebhookPayload, } from "@relayfile/provider-nango";
+import { normalizeSlackWebhook, parseSlackWebhookEnvelope as parseRawSlackWebhookEnvelope, } from "@relayfile/adapter-slack";
+/**
+ * Parse a Slack webhook body that may have been forwarded through Nango.
+ *
+ * Real-world delivery path in production:
+ *   Slack → Nango forward webhook → sage (this function)
+ *
+ * Nango wraps the underlying Slack event in its own envelope:
+ *   { type: "forward", from: "slack", connectionId, providerConfigKey, payload: {...slack event...} }
+ *
+ * The raw Slack envelope (what the @relayfile/adapter-slack parser expects) is
+ * whatever is inside `.payload`. For direct webhook delivery paths (no Nango
+ * in front) the body IS the raw Slack envelope, no unwrap needed.
+ *
+ * This wrapper detects the envelope shape and hands the adapter parser the
+ * unwrapped inner payload in both cases.
+ */
+export function parseSlackWebhookEnvelope(rawBody) {
+    const envelope = parseNangoWebhookPayload(rawBody);
+    if (envelope.type === "forward") {
+        const inner = envelope.payload;
+        if (!inner || typeof inner !== "object") {
+            throw new TypeError("Nango forward webhook payload is missing its inner object — cannot extract Slack envelope");
+        }
+        return parseRawSlackWebhookEnvelope(inner);
+    }
+    // Direct webhook delivery — the body itself is already a raw Slack envelope.
+    return parseRawSlackWebhookEnvelope(envelope);
+}
+export { normalizeSlackWebhook };

package/dist/nango.d.ts

@@ -1,7 +1,3 @@
-export declare const NANGO_INTEGRATIONS: {
-    readonly GITHUB: "github-app-oauth";
-    readonly SLACK: "slack";
-};
 export interface ProxyConfig {
     connectionId: string;
     providerConfigKey: string;
@@ -34,7 +30,6 @@ export declare class NangoError extends Error {
 export declare class NangoClient {
     private client;
     private readonly githubOrgDiscoveryCache;
-    private readonly slackBotUserIdCache;
     private readonly secretKey;
     constructor({ secretKey }: {
         secretKey: string;
@@ -42,8 +37,7 @@ export declare class NangoClient {
     private getClient;
     proxy<T>(config: ProxyConfig): Promise<T>;
     getConnection(connectionId: string, providerConfigKey: string): Promise<NangoConnection | null>;
-    discoverGitHubOrgs(connectionId: string): Promise<GitHubOrgDiscovery>;
-    getSlackBotUserId(connectionId: string): Promise<string>;
+    discoverGitHubOrgs(connectionId: string, providerConfigKey: string): Promise<GitHubOrgDiscovery>;
     private listGitHubInstallationRepos;
 }
 //# sourceMappingURL=nango.d.ts.map

package/dist/nango.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nango.d.ts","sourceRoot":"","sources":["../src/nango.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAKX,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC9B;AAgCD,qBAAa,UAAW,SAAQ,KAAK;aAEjB,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,MAAM;aACd,KAAK,EAAE,OAAO;gBAFd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO;CAKjC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAqD;IAC7F,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;IAIhD,OAAO,CAAC,SAAS;IAIX,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQzC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAQ/F,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAwDrE,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAsBhD,2BAA2B;CAmD1C"}
+{"version":3,"file":"nango.d.ts","sourceRoot":"","sources":["../src/nango.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAClE;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC9B;AA4BD,qBAAa,UAAW,SAAQ,KAAK;aAEjB,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,MAAM;aACd,KAAK,EAAE,OAAO;gBAFd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,OAAO;CAKjC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAqD;IAC7F,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,EAAE,SAAS,EAAE,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE;IAIhD,OAAO,CAAC,SAAS;IAIX,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;IAQzC,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAQ/F,kBAAkB,CACtB,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,kBAAkB,CAAC;YA8DhB,2BAA2B;CAuD1C"}