@andreprado/agentkit 0.1.0-alpha.19 → 0.1.0-alpha.20

package/docs/guides/add-channel.md

@@ -16,9 +16,10 @@ agentkit deploy
 agentkit channels list
 agentkit channels add website website-chat
 agentkit channels add telegram support-telegram
-agentkit channels add whatsapp support-whatsapp --provider zapster
 agentkit channels connect discord support-discord
 agentkit channels connect discord server-discord --mode bot
+agentkit channels connect slack support-slack
+agentkit channels add whatsapp support-whatsapp --provider zapster
 agentkit channels setup support-telegram
 agentkit channels status support-telegram
 agentkit channels test support-telegram --message "hello"
@@ -30,7 +31,7 @@ Use `--api <url>` only when the owner gives you a non-default AgentKit Cloud API
 
 ## Files Created Or Edited
 
-- `agentkit.config.ts`: declare channel config with `websiteChannel`, `telegramChannel`, `whatsappChannel`, or `discordChannel`.
+- `agentkit.config.ts`: declare channel config with `websiteChannel`, `telegramChannel`, `whatsappChannel`, `discordChannel`, or `slackChannel`.
 - `.agentkit/deploy.json`: written by `agentkit deploy`; used by `agentkit channels ...`.
 - No user Turso tables: AgentKit owns channel resources, dedupe, identities, queue state, and delivery logs.
 - Website channel clients must send `AGENTKIT_WEBSITE_CHANNEL_TOKEN` as `Authorization: Bearer <token>` or `X-AgentKit-Channel-Token`.
@@ -38,7 +39,7 @@ Use `--api <url>` only when the owner gives you a non-default AgentKit Cloud API
 ## Minimal Working Example
 
 ```ts
-import { defineAgent, discordChannel, telegramChannel, whatsappChannel, websiteChannel } from "@andreprado/agentkit";
+import { defineAgent, discordChannel, slackChannel, telegramChannel, whatsappChannel, websiteChannel } from "@andreprado/agentkit";
 
 export default defineAgent({
   name: "support-agent",
@@ -53,6 +54,7 @@ export default defineAgent({
     whatsappChannel({ name: "support-whatsapp", provider: "zapster" }),
     discordChannel({ name: "support-discord" }),
     discordChannel({ name: "server-discord", mode: "bot" }),
+    slackChannel({ name: "support-slack" }),
   ],
   access: { mode: "public" },
   storage: { driver: "agentkit" },

package/docs/guides/channel-security.md

@@ -2,7 +2,7 @@
 
 ## Goal
 
-Configure website, Telegram, WhatsApp, and Discord channels without leaking secrets, storing raw provider payloads, or treating public webhook URLs as authorization.
+Configure website, Telegram, WhatsApp, Discord, and Slack channels without leaking secrets, storing raw provider payloads, or treating public webhook URLs as authorization.
 
 ## When To Use It
 
@@ -32,6 +32,7 @@ agentkit channels deliveries show <delivery-id>
 - Put secret names in `agentkit.config.ts`; put local values in ignored `.env`; upload production values with `agentkit secret set` or `agentkit secret sync`.
 - Do not store raw webhook bodies, raw audio, or provider secret values in tools, prompts, evals, fixtures, or delivery notes.
 - Do not expose Discord interaction tokens or bot tokens. Interaction tokens are reply tokens, not public identifiers.
+- Do not expose Slack bot tokens or signing secrets. Slack signing secrets authenticate webhook origin; Slack bot tokens authorize outbound replies.
 - Inspect delivery IDs, hashes, redacted metadata, and statuses instead of raw provider payloads.
 - Keep channel plumbing out of the agent's application database. The user's Turso tables are for the agent's business data.
 - Enable audio transcription only when the capsule declares a transcription provider and bounded `limits`.
@@ -100,6 +101,17 @@ discordChannel({
 
 Bot mode requires Message Content Intent in the Discord Developer Portal and channel permissions for `View Channel`, `Read Message History`, and `Send Messages`. AgentKit must redact `DISCORD_BOT_TOKEN` anywhere delivery, queue, buffer, or doctor output is returned.
 
+Slack Events API uses a bot token and signing secret:
+
+```ts
+slackChannel({
+  name: "support-slack",
+  secrets: ["SLACK_BOT_TOKEN", "SLACK_SIGNING_SECRET"],
+});
+```
+
+AgentKit validates `X-Slack-Signature` and `X-Slack-Request-Timestamp` against the raw body, rejects stale timestamps, answers Slack `url_verification` with the literal challenge, skips bot/subtype messages, and sends replies with Slack control mentions escaped.
+
 ## Verification
 
 ```sh

package/docs/guides/connect-slack.md

@@ -0,0 +1,126 @@
+# Connect Slack
+
+## Goal
+
+Connect Slack to a hosted AgentKit channel through Slack Events API.
+
+V1 supports:
+
+- `app_mention` events in channels.
+- `message.im` direct messages.
+- Replies through `chat.postMessage`.
+
+Slack Socket Mode, file events, audio transcription, app-management automation, and all-channel message listening are not supported in V1.
+
+## Commands
+
+```sh
+agentkit deploy
+agentkit secret set SLACK_BOT_TOKEN --stdin
+agentkit secret set SLACK_SIGNING_SECRET --stdin
+agentkit channels connect slack support-slack
+agentkit channels test support-slack --message "hello"
+agentkit channels deliveries list support-slack
+```
+
+## Minimal Config
+
+```ts
+import { defineAgent, slackChannel } from "@andreprado/agentkit";
+
+export default defineAgent({
+  name: "support-agent",
+  runtime: "edge",
+  provider: { name: "test", model: "fake" },
+  instructions: "./prompts/instructions.md",
+  secrets: [],
+  tools: [],
+  channels: [slackChannel({ name: "support-slack" })],
+  access: { mode: "public" },
+  storage: { driver: "agentkit" },
+});
+```
+
+## Slack App Setup
+
+Required hosted secrets:
+
+```txt
+SLACK_BOT_TOKEN
+SLACK_SIGNING_SECRET
+```
+
+Expected webhook URL:
+
+```txt
+https://<deploy-host>/channels/support-slack/slack/slack/webhook
+```
+
+In Slack app configuration:
+
+1. Open **Basic Information** and copy the Signing Secret into hosted secret `SLACK_SIGNING_SECRET`.
+2. Open **OAuth & Permissions** and add bot scopes:
+   - `app_mentions:read`
+   - `im:history`
+   - `chat:write`
+3. Install or reinstall the app to the workspace.
+4. Copy the Bot User OAuth Token into hosted secret `SLACK_BOT_TOKEN`.
+5. Open **Event Subscriptions**.
+6. Enable events and paste the AgentKit webhook URL as the Request URL.
+7. Subscribe to bot events:
+   - `app_mention`
+   - `message.im`
+
+AgentKit answers Slack `url_verification` challenges with the literal challenge string after signature validation.
+
+## Runtime Behavior
+
+Slack signs each request with `X-Slack-Signature` and `X-Slack-Request-Timestamp`. AgentKit verifies the signature against the raw body and rejects stale timestamps before normalizing events.
+
+For channel mentions, AgentKit maps the conversation to the Slack thread and replies in that thread. For direct messages, AgentKit maps the conversation to the Slack DM channel and user.
+
+AgentKit skips Slack bot/subtype messages to avoid reply loops. Outbound Slack delivery uses `chat.postMessage` with `parse: "none"`, disabled link-name expansion, disabled unfurls, and escaped Slack control mentions.
+
+## Safety Rules
+
+- Keep `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET` as managed hosted secrets; do not put values in prompts, fixtures, evals, or source files.
+- Do not configure `audio` on `slackChannel`; Slack audio is not supported in V1.
+- Keep bot scopes narrow. V1 does not require broad channel-history scopes for all-channel listening.
+- Only set `AGENTKIT_CHANNEL_SEND_DRY_RUN=1` in tests when Slack should not receive a real reply.
+- Delivery logs return hashes and redacted metadata, never raw Slack request bodies or token values.
+
+## Verification
+
+```sh
+agentkit channels status support-slack
+agentkit channels test support-slack --message "hello"
+agentkit channels deliveries list support-slack
+agentkit channels deliveries show <delivery-id>
+agentkit channels buffers list support-slack
+```
+
+Expected flow:
+
+1. A user mentions the Slack app or sends it a direct message.
+2. Slack sends a signed Events API request.
+3. AgentKit records an inbound delivery and enqueues the channel job.
+4. The channel queue runs the agent.
+5. AgentKit sends a Slack reply through `chat.postMessage`.
+6. Delivery status becomes `provider_sent` for a real provider send or `adapter_stubbed` in dry-run mode.
+
+## Troubleshooting
+
+`channel_secret_missing`:
+Set `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET` as hosted managed secrets.
+
+Slack rejects the Request URL:
+Confirm the deployed channel is online, `SLACK_SIGNING_SECRET` matches the Slack app, and the endpoint can answer Slack's signed `url_verification` challenge.
+
+No channel mention arrives:
+Confirm Event Subscriptions includes `app_mention`, the app is installed in the workspace, and the app has access to the channel where it is mentioned.
+
+No direct message arrives:
+Confirm Event Subscriptions includes `message.im` and the app has `im:history`.
+
+No answer appears after a queued delivery:
+Run `agentkit channels deliveries list support-slack`, inspect the inbound delivery, and drain/check the channel queue.

package/docs/guides/debug-channel.md

@@ -2,7 +2,7 @@
 
 ## Goal
 
-Diagnose website, Telegram, WhatsApp, or Discord channel setup, webhook validation, dedupe, buffering, outbound sends, and delivery failures from the Agent Capsule CLI.
+Diagnose website, Telegram, WhatsApp, Discord, or Slack channel setup, webhook validation, dedupe, buffering, outbound sends, and delivery failures from the Agent Capsule CLI.
 
 ## When To Use It
 

package/docs/guides/security-rules.md

@@ -102,6 +102,7 @@ defineTool({
 - Treat hosted deploy URLs as addresses, not access control.
 - Use deploy access tokens for hosted chat, hosted conversation reads, hosted trace reads, and any client app that talks to AgentKit Cloud.
 - Remove client PII before writing evals.
+- Review `.agentkit/feedback/` drafts before sending AgentKit product feedback. Do not paste `.env` values, provider keys, cookies, client PII, or full private transcripts into feedback messages.
 
 ## Verification
 

package/docs/guides/send-feedback.md

@@ -0,0 +1,135 @@
+# Send Feedback To AgentKit
+
+## Goal
+
+Create a redacted local feedback draft when AgentKit itself is confusing, missing docs, or failing, then send it to AgentKit Cloud only after the user has authenticated.
+
+## When To Use This
+
+Use this for AgentKit product feedback, not for the user's agent's client conversations.
+
+Good cases:
+
+- an AgentKit CLI command failed and the error did not explain recovery;
+- a docs guide or generated skill is missing a step;
+- deploy, channel, provider, eval, or runtime behavior looks like an AgentKit bug;
+- the user's coding agent found a feature gap in AgentKit itself.
+
+Do not use this to upload private client data, provider keys, `.env` values, or full conversation transcripts.
+
+## Commands
+
+Create a local draft only:
+
+```sh
+agentkit feedback create --about last-run --kind bug --summary "Deploy failed after secrets sync"
+```
+
+Preview a draft:
+
+```sh
+agentkit feedback preview .agentkit/feedback/<draft>.json
+```
+
+Send a saved draft:
+
+```sh
+agentkit login --token agk_user_...
+agentkit feedback send .agentkit/feedback/<draft>.json
+```
+
+Create and send in one command:
+
+```sh
+agentkit feedback send --about deploy --kind deploy_issue --summary "Deploy doctor passed but deploy failed" --message "The recovery step was unclear."
+```
+
+## Files Created Or Edited
+
+`feedback create` writes ignored local files:
+
+```txt
+.agentkit/feedback/<timestamp>-<summary>.json
+.agentkit/feedback/<timestamp>-<summary>.md
+```
+
+These files are local diagnostic drafts. Keep `.agentkit/` out of commits.
+
+## Minimal Working Example
+
+```sh
+agentkit feedback create \
+  --about last-run \
+  --kind missing_docs \
+  --summary "The channel debug guide did not explain Discord bot mode recovery" \
+  --message "The command failed after setup, and I could not tell whether to rerun connect or setup."
+```
+
+Review the printed JSON path, then send it:
+
+```sh
+agentkit feedback send .agentkit/feedback/<draft>.json
+```
+
+## Safety Rules
+
+- Creating a draft never sends network feedback.
+- Sending requires AgentKit Cloud login.
+- The CLI redacts common bearer tokens, AgentKit tokens, provider key patterns, and Authorization headers before saving or sending.
+- AgentKit Cloud validates the payload again and stores the redacted report under the authenticated account.
+- Do not paste `.env` contents, provider key values, OAuth tokens, cookies, client PII, or full private transcripts into `--message`.
+- The feedback command does not upload arbitrary files and does not ask AgentKit Cloud to fetch URLs.
+- The deployed agent runtime does not send feedback to the AgentKit team.
+
+## Verification
+
+After creating a draft:
+
+```sh
+agentkit feedback preview .agentkit/feedback/<draft>.json
+```
+
+Expected:
+
+- `schema_version` is `agentkit.feedback.v1`;
+- `source.channel` is `cli`;
+- `context` describes the current capsule and deploy shape;
+- no secret values are present.
+
+After sending:
+
+```txt
+Feedback sent
+ID:     fb_...
+Status: new
+```
+
+## Troubleshooting
+
+`auth_required`:
+
+Log in before sending:
+
+```sh
+agentkit login --token agk_user_...
+```
+
+`feedback_draft_invalid`:
+
+Recreate the draft with `agentkit feedback create`. Do not hand-edit the JSON schema unless you keep `schema_version: "agentkit.feedback.v1"`.
+
+`payload_too_large`:
+
+Shorten `--message`. Do not paste full logs; include the command, exact error code, and the smallest useful excerpt.
+
+## Backend Contracts Used
+
+Feedback submit uses authenticated AgentKit Cloud account auth:
+
+```txt
+POST /v1/feedback
+Authorization: Bearer agk_user_...
+Idempotency-Key: fbdraft_...
+```
+
+The endpoint accepts only structured JSON feedback and stores it in the AgentKit Cloud feedback inbox.

package/docs/llms-full.txt

@@ -53,12 +53,15 @@ agentkit eval from-conversation <conversation-id> [--out <path>] [--force]
 agentkit improve collect [--deploy] [--since <duration|iso>] [--conversation-id <id>] [--out <directory>]
 agentkit improve evals <bundle-dir-or-json> [--force]
 agentkit replay <bundle-dir-or-json> --against local
+agentkit feedback create [--about last-run|deploy|manual] [--kind bug|confusion|missing_docs|feature_request|deploy_issue|runtime_issue|other] --summary <text> [--message <text>] [--out <path>]
+agentkit feedback preview [draft.json]
+agentkit feedback send [draft.json] [--about last-run|deploy|manual] [--kind <kind>] --summary <text> [--message <text>] [--api <url>] [--save]
 agentkit conversations list
 agentkit conversations show <conversation-id>
 agentkit conversations trace <conversation-id> [--deploy]
 agentkit channels list
-agentkit channels add <website|telegram|whatsapp|discord> <name> [--provider zapster|meta] [--mode interactions|bot] [--api <url>]
-agentkit channels connect <website|telegram|whatsapp|discord> <name> [--provider zapster|meta] [--mode interactions|bot] [--api <url>]
+agentkit channels add <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot] [--api <url>]
+agentkit channels connect <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot] [--api <url>]
 agentkit channels setup <name> [--apply] [--api <url>]
 agentkit channels status <name> [--api <url>]
 agentkit channels test <name> [--message <text>] [--fixture <path>] [--api <url>]
@@ -112,6 +115,8 @@ agentkit help commands
 
 Prefer `env set --stdin` or `--from-env` for local secret values, and prefer `secret set --stdin`, `--from-env`, or `--from-local-env` for hosted secrets. Inline `<VALUE>` forms exist for simple non-sensitive values, but agents should avoid putting secrets in shell history.
 
+Use `agentkit feedback create` when AgentKit itself fails, confuses the coding agent, or lacks docs. Drafts are local files under `.agentkit/feedback/` and are not sent automatically. Use `agentkit feedback send` only after reviewing the draft and logging in with `agentkit login --token agk_user_...`. Feedback upload uses authenticated AgentKit Cloud account auth, redacts common token/key patterns, does not upload arbitrary files, and does not cause the deployed agent runtime to phone home.
+
 On Windows PowerShell, if `npm.ps1` or `npx.ps1` is blocked with `PSSecurityException`, run capsule scripts through the `.cmd` shims instead of changing the workflow. Examples: `npx.cmd @andreprado/agentkit@alpha new demo --template blank`, `npm.cmd run agentkit -- inspect`, `npm.cmd run agentkit -- knowledge sync`, and `npm.cmd run eval`.
 
 Managed Composio is configured with `composioManaged({...})` in `agentkit.config.ts` and is paid hosted AgentKit infrastructure. It requires a non-anonymous AgentKit Cloud deploy with `managed_composio`, uses one Composio settings profile per agent, injects `COMPOSIO_API_KEY` as an AgentKit-managed secret, resolves toolkit auth configs from AgentKit Cloud, validates toolkit readiness during `agentkit deploy doctor`, and exposes the generated `agentkit_composio_execute` tool only for explicit configured action slugs. Calendar starters should include `GOOGLECALENDAR_EVENTS_LIST`, `GOOGLECALENDAR_CREATE_EVENT`, and `GOOGLECALENDAR_UPDATE_EVENT`; create-event calls must pass UTC `start_datetime` plus explicit duration. Managed external write actions require tool input `confirmed: true` by default unless the integration sets `confirmExternalWrites: false`. See `docs/guides/add-managed-composio.md`.
@@ -339,7 +344,7 @@ Channels are hosted inbound/outbound conversation transports. They are separate
 Use these helpers in `agentkit.config.ts`:
 
 ```ts
-import { defineAgent, discordChannel, telegramChannel, whatsappChannel, websiteChannel } from "@andreprado/agentkit";
+import { defineAgent, discordChannel, slackChannel, telegramChannel, whatsappChannel, websiteChannel } from "@andreprado/agentkit";
 
 export default defineAgent({
   name: "support-agent",
@@ -354,6 +359,7 @@ export default defineAgent({
     whatsappChannel({ name: "support-whatsapp", provider: "zapster" }),
     discordChannel({ name: "support-discord" }),
     discordChannel({ name: "server-discord", mode: "bot" }),
+    slackChannel({ name: "support-slack" }),
   ],
   access: { mode: "public" },
   storage: { driver: "agentkit" },
@@ -390,6 +396,7 @@ Useful guides:
 
 - Add a channel: `docs/guides/add-channel.md`
 - Connect Discord: `docs/guides/connect-discord.md`
+- Connect Slack: `docs/guides/connect-slack.md`
 - Connect Telegram: `docs/guides/connect-telegram.md`
 - Connect WhatsApp through Zapster: `docs/guides/connect-whatsapp-zapster.md`
 - Debug a channel: `docs/guides/debug-channel.md`
@@ -431,6 +438,7 @@ agentkit channels list
 agentkit channels add telegram support-telegram
 agentkit channels connect discord support-discord
 agentkit channels connect discord server-discord --mode bot
+agentkit channels connect slack support-slack
 agentkit channels setup support-telegram
 agentkit channels test support-telegram --message "hello"
 agentkit channels test-audio support-telegram --fixture voice-note

package/docs/llms.txt

@@ -12,6 +12,7 @@ Task guides:
 - Run or prepare evals: `docs/guides/run-evals.md`
 - Improve from production traces: `docs/guides/improve-from-production.md`
 - Replay collected traces locally: `docs/guides/replay-production-traces.md`
+- Send AgentKit product feedback safely: `docs/guides/send-feedback.md`
 - Switch from `test/fake` to a real provider: `docs/guides/use-provider.md`
 - Prepare for hosted deploy: `docs/guides/prepare-deploy.md`
 - Build Cloudflare artifact: `agentkit build --target cloudflare`
@@ -21,6 +22,7 @@ Task guides:
 - Add AgentKit-managed Composio: `docs/guides/add-managed-composio.md`
 - Buffer rapid channel messages: `docs/guides/add-channel.md#buffer-bursty-messages`
 - Connect Discord: `docs/guides/connect-discord.md`
+- Connect Slack: `docs/guides/connect-slack.md`
 - Connect Telegram: `docs/guides/connect-telegram.md`
 - Connect WhatsApp through Zapster: `docs/guides/connect-whatsapp-zapster.md`
 - Follow channel webhook and delivery-log safety rules: `docs/guides/channel-security.md`
@@ -46,6 +48,8 @@ agentkit eval run
 agentkit improve collect --deploy --since 24h
 agentkit improve evals .agentkit/improve/<run>
 agentkit replay .agentkit/improve/<run> --against local
+agentkit feedback create --about last-run --kind bug --summary "what failed"
+agentkit feedback send .agentkit/feedback/<draft>.json
 agentkit conversations list
 agentkit conversations show <conversation-id>
 agentkit conversations trace <conversation-id> [--deploy]
@@ -53,6 +57,7 @@ agentkit channels list
 agentkit channels add telegram support-telegram
 agentkit channels connect discord support-discord
 agentkit channels connect discord server-discord --mode bot
+agentkit channels connect slack support-slack
 agentkit channels setup support-telegram
 agentkit channels status support-telegram
 agentkit channels test support-telegram --message "hello"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@andreprado/agentkit",
-  "version": "0.1.0-alpha.19",
+  "version": "0.1.0-alpha.20",
   "private": false,
   "type": "module",
   "repository": {

package/src/cli/cloud-client.ts

@@ -155,6 +155,18 @@ export type CloudSecretsResponse = {
   }>;
 };
 
+export type FeedbackSendResponse = {
+  feedback?: {
+    id?: string;
+    account_id?: string;
+    kind?: string;
+    summary?: string;
+    status?: string;
+    client_report_id?: string;
+    created_at?: string;
+  };
+};
+
 export function cloudAuthPath(): string {
   return join(homedir(), ".agentkit", "cloud.json");
 }

package/src/cli/commands/channels.ts

@@ -1,3 +1,4 @@
+import { createHmac } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
 
@@ -14,8 +15,8 @@ type DeployState = LocalDeployState;
 type CloudChannel = {
   id: string;
   name: string;
-  type: "website" | "telegram" | "whatsapp" | "discord";
-  provider: "agentkit" | "telegram" | "zapster" | "meta" | "discord";
+  type: "website" | "telegram" | "whatsapp" | "discord" | "slack";
+  provider: "agentkit" | "telegram" | "zapster" | "meta" | "discord" | "slack";
   mode?: "interactions" | "bot";
   status: string;
   webhook_url: string;
@@ -142,8 +143,8 @@ export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
     const type = first;
     const name = second;
 
-    if (!type || !name || (type !== "website" && type !== "telegram" && type !== "whatsapp" && type !== "discord")) {
-      throw new Error("Usage: agentkit channels add <website|telegram|whatsapp|discord> <name> [--provider zapster|meta] [--mode interactions|bot]");
+    if (!type || !name || !isCliChannelType(type)) {
+      throw new Error("Usage: agentkit channels add <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot]");
     }
 
     const response = await createHostedChannel(type, name, args.flags.provider, args.flags.mode, args.flags.api);
@@ -156,8 +157,8 @@ export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
     const type = first;
     const name = second;
 
-    if (!type || !name || (type !== "website" && type !== "telegram" && type !== "whatsapp" && type !== "discord")) {
-      throw new Error("Usage: agentkit channels connect <website|telegram|whatsapp|discord> <name> [--provider zapster|meta] [--mode interactions|bot]");
+    if (!type || !name || !isCliChannelType(type)) {
+      throw new Error("Usage: agentkit channels connect <website|telegram|whatsapp|discord|slack> <name> [--provider zapster|meta] [--mode interactions|bot]");
     }
 
     const created = await createHostedChannel(type, name, args.flags.provider, args.flags.mode, args.flags.api);
@@ -203,6 +204,15 @@ export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
       return;
     }
 
+    if (channel.type === "slack") {
+      const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
+      printSlackHumanNextStep(channel);
+      if (!smoke) {
+        process.exitCode = 1;
+      }
+      return;
+    }
+
     if (channel.type === "whatsapp" && channel.provider === "zapster") {
       const smoke = await runConnectSmoke(() => runChannelSmoke(channel, args.flags.api, args.flags.message));
       console.log(`Next human step: paste ${channel.webhook_url} into ${channel.provider}'s webhook settings.`);
@@ -243,6 +253,8 @@ export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
       console.log(`Next step: paste this URL into ${channel.provider}'s webhook settings.`);
     } else if (channel.type === "discord") {
       printDiscordHumanNextStep(channel);
+    } else if (channel.type === "slack") {
+      printSlackHumanNextStep(channel);
     } else {
       console.log(`Website endpoint: ${channel.webhook_url}`);
       console.log("Use this endpoint from the AgentKit website client or a signed server-to-server test.");
@@ -415,7 +427,7 @@ export async function handleChannelsCommand(args: ParsedArgs): Promise<void> {
 }
 
 async function createHostedChannel(
-  type: "website" | "telegram" | "whatsapp" | "discord",
+  type: "website" | "telegram" | "whatsapp" | "discord" | "slack",
   name: string,
   providerFlag: string | boolean | undefined,
   modeFlag: string | boolean | undefined,
@@ -510,7 +522,7 @@ async function runLocallySignedChannelTest(
   }
 
   const path = `${webhookUrl.pathname}${webhookUrl.search}`;
-  const headers = channelTestHeaders(channel);
+  const headers = channelTestHeaders(channel, rawBody);
   const response = await cloudFetch(apiUrl, path, {
     method: "POST",
     headers,
@@ -677,6 +689,19 @@ function printDiscordHumanNextStep(channel: CloudChannel): void {
   console.log(`  Then run: npm run agentkit -- channels deliveries list ${channel.name}`);
 }
 
+function printSlackHumanNextStep(channel: CloudChannel): void {
+  console.log("");
+  console.log("Next human step:");
+  console.log("  Open the Slack app configuration");
+  console.log("  Event Subscriptions: enable events");
+  console.log(`  Request URL: paste ${channel.webhook_url}`);
+  console.log("  Subscribe to bot events: app_mention and message.im");
+  console.log("  OAuth scopes: app_mentions:read, im:history, chat:write");
+  console.log("  Install or reinstall the app to the workspace");
+  console.log('  Mention the app with "hello" or send it a direct message');
+  console.log(`  Then run: npm run agentkit -- channels deliveries list ${channel.name}`);
+}
+
 function isRecord(value: unknown): value is Record<string, unknown> {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
@@ -689,6 +714,10 @@ async function readDeployStateIfExists(cwd: string): Promise<DeployState | null>
   return readLocalDeployStateIfExists(cwd);
 }
 
+function isCliChannelType(value: string): value is "website" | "telegram" | "whatsapp" | "discord" | "slack" {
+  return value === "website" || value === "telegram" || value === "whatsapp" || value === "discord" || value === "slack";
+}
+
 async function readDeployStateRequired(cwd: string): Promise<DeployState> {
   const state = await readDeployStateIfExists(cwd);
 
@@ -972,6 +1001,14 @@ function channelProviderForCli(type: string, providerFlag: string | boolean | un
     return "discord";
   }
 
+  if (type === "slack") {
+    if (providerFlag !== undefined) {
+      throw new Error("--provider is not supported for Slack channels.");
+    }
+
+    return "slack";
+  }
+
   const provider = providerFlag ?? "zapster";
 
   if (provider !== "zapster" && provider !== "meta") {
@@ -1026,6 +1063,10 @@ function defaultChannelSecretsForCli(type: string, provider: string, mode?: "int
     return mode === "bot" ? ["DISCORD_BOT_TOKEN"] : ["DISCORD_PUBLIC_KEY"];
   }
 
+  if (type === "slack") {
+    return ["SLACK_BOT_TOKEN", "SLACK_SIGNING_SECRET"];
+  }
+
   return [];
 }
 
@@ -1137,6 +1178,29 @@ async function channelTestBody(
     });
   }
 
+  if (channel.type === "slack") {
+    const now = Date.now();
+
+    return JSON.stringify({
+      token: "deprecated-verification-token",
+      team_id: "T_AGENTKIT",
+      api_app_id: "A_AGENTKIT",
+      type: "event_callback",
+      event_id: `Ev${now}`,
+      event_time: Math.floor(now / 1000),
+      event: {
+        type: "app_mention",
+        user: "UAGENTKITUSER",
+        text: `<@UAGENTKITBOT> ${message}`,
+        ts: `${Math.floor(now / 1000)}.000100`,
+        channel: "C_AGENTKIT",
+        event_ts: `${Math.floor(now / 1000)}.000100`,
+      },
+      authorizations: [],
+      is_ext_shared_channel: false,
+    });
+  }
+
   return JSON.stringify({
     event_id: `web_${Date.now()}`,
     visitor_id: "visitor_test",
@@ -1211,7 +1275,7 @@ function isExplicitFixturePath(value: string): boolean {
   return value.includes("/") || value.startsWith(".") || value.endsWith(".json");
 }
 
-function channelTestHeaders(channel: CloudChannel): Headers {
+function channelTestHeaders(channel: CloudChannel, rawBody: string): Headers {
   const headers = new Headers({ "Content-Type": "application/json" });
 
   if (channel.type === "website") {
@@ -1234,5 +1298,18 @@ function channelTestHeaders(channel: CloudChannel): Headers {
     headers.set("User-Agent", "Zapsterapi/agentkit-cli");
   }
 
+  if (channel.type === "slack") {
+    const signingSecret = process.env.SLACK_SIGNING_SECRET;
+
+    if (signingSecret) {
+      const timestamp = String(Math.floor(Date.now() / 1000));
+      const signature = createHmac("sha256", signingSecret)
+        .update(`v0:${timestamp}:${rawBody}`)
+        .digest("hex");
+      headers.set("X-Slack-Request-Timestamp", timestamp);
+      headers.set("X-Slack-Signature", `v0=${signature}`);
+    }
+  }
+
   return headers;
 }