@chrysb/alphaclaw 0.8.3 → 0.8.4

package/lib/public/js/components/agents-tab/create-channel-modal.js

@@ -2,12 +2,15 @@ import { h } from "preact";
 import { useEffect, useMemo, useState } from "preact/hooks";
 import htm from "htm";
 import { ActionButton } from "../action-button.js";
-import { CloseIcon } from "../icons.js";
+import { CloseIcon, FileCopyLineIcon } from "../icons.js";
 import { ModalShell } from "../modal-shell.js";
 import { PageHeader } from "../page-header.js";
 import { SecretInput } from "../secret-input.js";
 import { fetchChannelAccountToken } from "../../lib/api.js";
+import { copyTextToClipboard } from "../../lib/clipboard.js";
+import { isSingleAccountChannelProvider } from "../../lib/channel-provider-availability.js";
 import { ALL_CHANNELS, getChannelMeta } from "../channels.js";
+import { showToast } from "../toast.js";
 
 const html = htm.bind(h);
 
@@ -25,15 +28,33 @@ const kSlackBotScopes = [
   "channels:history",
   "channels:read",
   "chat:write",
+  "commands",
+  "emoji:read",
+  "files:read",
+  "files:write",
+  "groups:read",
   "groups:history",
   "im:history",
   "im:read",
   "im:write",
   "mpim:history",
+  "mpim:read",
+  "mpim:write",
+  "pins:read",
+  "pins:write",
   "reactions:read",
   "reactions:write",
   "users:read",
 ];
+const kSlackBotEvents = [
+  "app_mention",
+  "message.channels",
+  "message.groups",
+  "message.im",
+  "message.mpim",
+  "reaction_added",
+  "reaction_removed",
+];
 const kSlackInstructionsLink = "https://docs.openclaw.ai/channels/slack";
 
 const slugifyChannelAccountId = (value) =>
@@ -50,7 +71,63 @@ const deriveChannelEnvKey = ({ provider, accountId }) => {
   if (!normalizedAccountId || normalizedAccountId === "default") return baseKey;
   return `${baseKey}_${normalizedAccountId.replace(/-/g, "_").toUpperCase()}`;
 };
+const deriveChannelExtraEnvKey = ({ provider, accountId, index = 0 }) => {
+  const baseKeys = [kChannelExtraEnvKeys[String(provider || "").trim()]].filter(
+    Boolean,
+  );
+  const baseKey = String(baseKeys[index] || "").trim();
+  const normalizedAccountId = String(accountId || "").trim();
+  if (!baseKey) return "";
+  if (!normalizedAccountId || normalizedAccountId === "default") return baseKey;
+  return `${baseKey}_${normalizedAccountId.replace(/-/g, "_").toUpperCase()}`;
+};
 const isMaskedTokenValue = (value) => /^\*+$/.test(String(value || "").trim());
+const buildSlackManifest = (appName = "AlphaClaw") =>
+  JSON.stringify(
+    {
+      _metadata: {
+        major_version: 1,
+      },
+      display_information: {
+        name: String(appName || "").trim() || "AlphaClaw",
+        description: "Slack connector for AlphaClaw",
+      },
+      features: {
+        bot_user: {
+          display_name: String(appName || "").trim() || "AlphaClaw",
+          always_online: false,
+        },
+        app_home: {
+          messages_tab_enabled: true,
+          messages_tab_read_only_enabled: false,
+        },
+      },
+      oauth_config: {
+        scopes: {
+          bot: kSlackBotScopes,
+        },
+      },
+      settings: {
+        event_subscriptions: {
+          bot_events: kSlackBotEvents,
+        },
+        org_deploy_enabled: false,
+        socket_mode_enabled: true,
+        is_hosted: false,
+        token_rotation_enabled: false,
+      },
+    },
+    null,
+    2,
+  );
+const copyAndToast = async (value, label = "text") => {
+  const copied = await copyTextToClipboard(value);
+  if (copied) {
+    showToast("Copied to clipboard", "success");
+    return;
+  }
+  showToast(`Could not copy ${label}`, "error");
+};
 
 export const CreateChannelModal = ({
   visible = false,
@@ -152,9 +229,7 @@ export const CreateChannelModal = ({
     }
     setName(providerLabel);
   }, [provider, providerHasAccounts, nameEditedManually, isEditMode]);
-  const isSingleAccountProvider =
-    String(provider || "").trim() === "discord" ||
-    String(provider || "").trim() === "slack";
+  const isSingleAccountProvider = isSingleAccountChannelProvider(provider);
   const needsAppToken = String(provider || "").trim() === "slack";
 
   const accountId = useMemo(() => {
@@ -170,6 +245,24 @@ export const CreateChannelModal = ({
     () => deriveChannelEnvKey({ provider, accountId }),
     [provider, accountId],
   );
+  const extraEnvKey = useMemo(
+    () =>
+      deriveChannelExtraEnvKey({
+        provider,
+        accountId,
+      }),
+    [provider, accountId],
+  );
+  const slackManifestName = useMemo(() => {
+    const normalizedName = String(name || "").trim();
+    if (!normalizedName) return "AlphaClaw";
+    if (normalizedName.toLowerCase() === "slack") return "AlphaClaw";
+    return normalizedName;
+  }, [name]);
+  const slackManifest = useMemo(
+    () => buildSlackManifest(slackManifestName),
+    [slackManifestName],
+  );
 
   const accountExists = useMemo(
     () =>
@@ -269,7 +362,7 @@ export const CreateChannelModal = ({
     <${ModalShell}
       visible=${visible}
       onClose=${onClose}
-      panelClassName="bg-modal border border-border rounded-xl p-6 max-w-lg w-full space-y-4"
+      panelClassName="bg-modal border border-border rounded-xl p-6 max-w-lg w-full max-h-[calc(100vh-2rem)] overflow-y-auto space-y-4"
     >
       <${PageHeader}
         title=${
@@ -360,7 +453,7 @@ export const CreateChannelModal = ({
                   <p class="text-xs text-fg-muted">
                     Saved behind the scenes as
                     <code class="font-mono text-fg-muted ml-1">
-                      ${kChannelExtraEnvKeys.slack}
+                      ${extraEnvKey || kChannelExtraEnvKeys.slack}
                     </code>
                     .
                   </p>
@@ -371,60 +464,167 @@ export const CreateChannelModal = ({
         ${
           needsAppToken
             ? html`
-                <details class="rounded-lg border border-border bg-field px-3 py-2.5">
-                  <summary class="cursor-pointer text-xs text-body hover:text-body">
-                    Slack-specific instructions (step-by-step)
-                  </summary>
-                  <div class="mt-2 space-y-2 text-xs text-fg-muted">
-                    <ol class="list-decimal list-inside space-y-1.5">
-                      <li>
-                        In Slack app settings, turn on
-                        ${" "}
-                        <span class="text-body">Socket Mode</span>.
-                      </li>
-                      <li>
-                        In
-                        ${" "}
-                        <span class="text-body">App Home</span>, enable
-                        <code class="font-mono text-fg-muted ml-1">
-                          Allow users to send Slash commands and messages from the messages tab
-                        </code>.
-                      </li>
-                      <li>
-                        In
-                        ${" "}
-                        <span class="text-body">Event Subscriptions</span>, toggle on
-                        <code class="font-mono text-fg-muted ml-1">Subscribe to bot events</code>
-                        ${" "}
-                        and add
-                        <code class="font-mono text-fg-muted ml-1">message.im</code>.
-                      </li>
-                      <li>
-                        Create a Bot Token (<code class="font-mono text-fg-muted">xoxb-...</code>)
-                        with scopes:
-                        <code class="font-mono text-fg-muted ml-1">
-                          ${kSlackBotScopes.join(", ")}
-                        </code>
-                      </li>
-                      <li>
-                        Create an App Token (<code class="font-mono text-fg-muted">xapp-...</code>)
-                        with
-                        <code class="font-mono text-fg-muted ml-1">connections:write</code>.
-                      </li>
-                      <li>
-                        Reinstall the app after changing scopes.
-                      </li>
-                    </ol>
-                    <a
-                      href=${kSlackInstructionsLink}
-                      target="_blank"
-                      class="hover:underline"
-                      style="color: var(--accent-link)"
+                <div class="space-y-2">
+                  <details
+                    class="rounded-lg border border-border bg-field px-3 py-2.5"
+                  >
+                    <summary
+                      class="cursor-pointer text-xs text-body hover:text-body"
+                    >
+                      <span class="inline-block ml-1">
+                        Create app from manifest (recommended)
+                      </span>
+                    </summary>
+                    <div class="mt-2 space-y-2 text-xs text-fg-muted">
+                      <div class="flex items-center justify-between gap-3 pt-1">
+                        <div class="space-y-0.5">
+                          <p class="text-[12px] text-fg-muted">
+                            ${slackManifestName} App Manifest
+                          </p>
+                        </div>
+                        <button
+                          type="button"
+                          onclick=${() =>
+                            copyAndToast(slackManifest, "Slack manifest")}
+                          class="text-xs px-2 py-1 rounded-lg ac-btn-cyan inline-flex items-center gap-1.5 shrink-0"
+                        >
+                          <${FileCopyLineIcon} className="w-3.5 h-3.5" />
+                          Copy
+                        </button>
+                      </div>
+                      <pre
+                        class="max-h-72 overflow-auto rounded-lg border border-border bg-field p-3 text-[11px] leading-5 whitespace-pre-wrap break-all font-mono text-body"
+                      >
+${slackManifest}</pre
+                      >
+                      <ol
+                        class="list-decimal list-inside space-y-1.5 text-[11px] text-fg-muted"
+                      >
+                        <li>
+                          In Slack, click ${" "}
+                          <span class="text-body"
+                            >Create app from manifest</span
+                          >
+                          ${" "} and paste this manifest.
+                        </li>
+                        <li>
+                          Open ${" "}
+                          <span class="text-body">Basic Information</span>
+                          ${" "} and create an ${" "}
+                          <span class="text-body">App-Level Token</span>
+                          ${" "} with
+                          <code class="font-mono text-fg-muted ml-1"
+                            >connections:write</code
+                          >.
+                        </li>
+                        <li>
+                          Open ${" "}
+                          <span class="text-body">OAuth & Permissions</span>
+                          ${" "} and use ${" "}
+                          <span class="text-body">Install to Workspace</span>
+                          ${" "} or ${" "}
+                          <span class="text-body">Reinstall to Workspace</span>
+                          ${" "} so Slack issues a bot token.
+                        </li>
+                        <li>
+                          In ${" "}
+                          <span class="text-body">OAuth & Permissions</span>
+                          ${" "} copy the ${" "}
+                          <span class="text-body">Bot User OAuth Token</span>
+                          ${" "} (
+                          <code class="font-mono text-fg-muted">xoxb-...</code>
+                          ).
+                        </li>
+                        <li>
+                          Paste the generated ${" "}
+                          <code class="font-mono text-fg-muted">xoxb-...</code>
+                          ${" "} and ${" "}
+                          <code class="font-mono text-fg-muted">xapp-...</code>
+                          ${" "} tokens here.
+                        </li>
+                      </ol>
+                    </div>
+                  </details>
+                  <details
+                    class="rounded-lg border border-border bg-field px-3 py-2.5"
+                  >
+                    <summary
+                      class="cursor-pointer text-xs text-body hover:text-body"
                     >
-                      Open full Slack setup guide
-                    </a>
-                  </div>
-                </details>
+                      <span class="inline-block ml-1">
+                        Manual setup instructions
+                      </span>
+                    </summary>
+                    <div class="mt-2 space-y-2 text-xs text-fg-muted">
+                      <p>
+                        Use this if you want to configure the Slack app by hand
+                        instead of importing a manifest.
+                      </p>
+                      <ol class="list-decimal list-inside space-y-1.5">
+                        <li>
+                          In Slack app settings, turn on ${" "}
+                          <span class="text-body">Socket Mode</span>.
+                        </li>
+                        <li>
+                          In ${" "}
+                          <span class="text-body">App Home</span>, enable
+                          <code class="font-mono text-fg-muted ml-1">
+                            Allow users to send Slash commands and messages from
+                            the messages tab </code
+                          >.
+                        </li>
+                        <li>
+                          In ${" "}
+                          <span class="text-body">Event Subscriptions</span>,
+                          toggle on
+                          <code class="font-mono text-fg-muted ml-1"
+                            >Subscribe to bot events</code
+                          >
+                          ${" "} and add
+                          <code class="font-mono text-fg-muted ml-1"
+                            >message.im</code
+                          >.
+                        </li>
+                        <li>
+                          In ${" "}
+                          <span class="text-body">OAuth & Permissions</span>,
+                          add the bot scopes:
+                          <code class="font-mono text-fg-muted ml-1">
+                            ${kSlackBotScopes.join(", ")}
+                          </code>
+                        </li>
+                        <li>
+                          In ${" "}
+                          <span class="text-body">Basic Information</span>,
+                          create an App Token (<code
+                            class="font-mono text-fg-muted"
+                            >xapp-...</code
+                          >) with
+                          <code class="font-mono text-fg-muted ml-1"
+                            >connections:write</code
+                          >.
+                        </li>
+                        <li>
+                          Back in ${" "}
+                          <span class="text-body">OAuth & Permissions</span>,
+                          install or reinstall the app, then copy the ${" "}
+                          <span class="text-body">Bot User OAuth Token</span>
+                          ${" "} (
+                          <code class="font-mono text-fg-muted">xoxb-...</code>
+                          ).
+                        </li>
+                      </ol>
+                      <a
+                        href=${kSlackInstructionsLink}
+                        target="_blank"
+                        class="hover:underline"
+                        style="color: var(--accent-link)"
+                      >
+                        Open full Slack setup guide
+                      </a>
+                    </div>
+                  </details>
+                </div>
               `
             : null
         }

package/lib/public/js/components/modal-shell.js

@@ -29,7 +29,7 @@ export const ModalShell = ({
   return createPortal(
     html`
       <div
-        class="fixed inset-0 bg-overlay flex items-center justify-center p-4 z-50"
+        class="fixed inset-0 bg-overlay flex items-start justify-center overflow-y-auto p-4 sm:items-center z-50"
         onclick=${(event) => {
           if (closeOnOverlayClick && event.target === event.currentTarget) onClose?.();
         }}

package/lib/public/js/lib/channel-provider-availability.js

@@ -1,4 +1,4 @@
-const kSingleAccountChannelProviders = new Set(["discord", "slack"]);
+const kSingleAccountChannelProviders = new Set(["discord"]);
 
 const hasConfiguredAccounts = ({ configuredChannelMap, provider }) => {
   const channelEntry = configuredChannelMap instanceof Map
@@ -20,4 +20,3 @@ export const isChannelProviderDisabledForAdd = ({
   if (!isSingleAccountChannelProvider(provider)) return false;
   return hasConfiguredAccounts({ configuredChannelMap, provider });
 };
-

package/lib/server/agents/channels.js

@@ -143,10 +143,7 @@ const createChannelsDomain = ({
           `Channel account "${provider}/${accountId}" already exists`,
         );
       }
-      if (
-        (provider === "discord" || provider === "slack") &&
-        Object.keys(existingAccounts).length > 0
-      ) {
+      if (provider === "discord" && Object.keys(existingAccounts).length > 0) {
         throw new Error(
           `${kChannelLabels[provider] || "This provider"} supports a single channel account`,
         );

package/lib/server/exec-defaults-config.js

@@ -0,0 +1,163 @@
+const fs = require("fs");
+const path = require("path");
+const {
+  readOpenclawConfig,
+  resolveOpenclawConfigPath,
+  writeOpenclawConfig,
+} = require("./openclaw-config");
+
+const kManagedExecApprovalsDefaults = Object.freeze({
+  security: "full",
+  ask: "off",
+  askFallback: "full",
+});
+
+const kManagedOpenclawExecDefaults = Object.freeze({
+  security: "full",
+  strictInlineEval: false,
+});
+
+const resolveExecApprovalsConfigPath = ({ openclawDir }) =>
+  path.join(openclawDir, "exec-approvals.json");
+
+const readExecApprovalsConfig = ({
+  fsModule = fs,
+  openclawDir,
+  fallback = { version: 1 },
+} = {}) => {
+  const filePath = resolveExecApprovalsConfigPath({ openclawDir });
+  try {
+    const parsed = JSON.parse(fsModule.readFileSync(filePath, "utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+      ? parsed
+      : fallback;
+  } catch {
+    return fallback;
+  }
+};
+
+const writeExecApprovalsConfig = ({
+  fsModule = fs,
+  openclawDir,
+  file = {},
+  spacing = 2,
+} = {}) => {
+  const filePath = resolveExecApprovalsConfigPath({ openclawDir });
+  fsModule.mkdirSync(path.dirname(filePath), { recursive: true });
+  fsModule.writeFileSync(filePath, JSON.stringify(file, null, spacing) + "\n", "utf8");
+  return filePath;
+};
+
+const hasOwn = (obj, key) =>
+  !!obj && typeof obj === "object" && Object.prototype.hasOwnProperty.call(obj, key);
+
+const ensureManagedExecApprovalsDefaults = (rawFile = {}) => {
+  const file =
+    rawFile && typeof rawFile === "object" && !Array.isArray(rawFile) ? rawFile : {};
+  const before = JSON.stringify(file);
+  const defaults =
+    file.defaults && typeof file.defaults === "object" && !Array.isArray(file.defaults)
+      ? file.defaults
+      : null;
+  const hasNonEmptyDefaults = !!defaults && Object.keys(defaults).length > 0;
+  if (!hasNonEmptyDefaults) {
+    if (!Number.isInteger(file.version)) file.version = 1;
+    file.defaults = {
+      security: kManagedExecApprovalsDefaults.security,
+      ask: kManagedExecApprovalsDefaults.ask,
+      askFallback: kManagedExecApprovalsDefaults.askFallback,
+    };
+    if (!file.agents || typeof file.agents !== "object" || Array.isArray(file.agents)) {
+      file.agents = {};
+    }
+  }
+  return {
+    file,
+    changed: JSON.stringify(file) !== before,
+  };
+};
+
+const ensureManagedOpenclawExecDefaults = (rawConfig = {}) => {
+  const config =
+    rawConfig && typeof rawConfig === "object" && !Array.isArray(rawConfig) ? rawConfig : {};
+  const before = JSON.stringify(config);
+  if (!config.tools || typeof config.tools !== "object" || Array.isArray(config.tools)) {
+    config.tools = {};
+  }
+  if (!hasOwn(config.tools, "exec")) {
+    config.tools.exec = {
+      security: kManagedOpenclawExecDefaults.security,
+      strictInlineEval: kManagedOpenclawExecDefaults.strictInlineEval,
+    };
+  }
+  return {
+    config,
+    changed: JSON.stringify(config) !== before,
+  };
+};
+
+const ensureManagedExecDefaults = ({ fsModule = fs, openclawDir } = {}) => {
+  let openclawChanged = false;
+  let approvalsChanged = false;
+
+  const openclawConfigPath = resolveOpenclawConfigPath({ openclawDir });
+  const openclawExists =
+    typeof fsModule.existsSync === "function" ? fsModule.existsSync(openclawConfigPath) : null;
+  if (openclawExists !== false) {
+    const cfg = readOpenclawConfig({
+      fsModule,
+      openclawDir,
+      fallback: openclawExists === true ? null : {},
+    });
+    if (cfg && typeof cfg === "object" && !Array.isArray(cfg)) {
+      const ensuredConfig = ensureManagedOpenclawExecDefaults(cfg);
+      if (ensuredConfig.changed) {
+        writeOpenclawConfig({
+          fsModule,
+          openclawDir,
+          config: ensuredConfig.config,
+          spacing: 2,
+        });
+        openclawChanged = true;
+      }
+    }
+  }
+
+  const approvalsPath = resolveExecApprovalsConfigPath({ openclawDir });
+  const approvalsExists =
+    typeof fsModule.existsSync === "function" ? fsModule.existsSync(approvalsPath) : null;
+  const approvals = readExecApprovalsConfig({
+    fsModule,
+    openclawDir,
+    fallback: approvalsExists === true ? null : { version: 1 },
+  });
+  if (approvals && typeof approvals === "object" && !Array.isArray(approvals)) {
+    const ensuredApprovals = ensureManagedExecApprovalsDefaults(approvals);
+    if (ensuredApprovals.changed || approvalsExists === false) {
+      writeExecApprovalsConfig({
+        fsModule,
+        openclawDir,
+        file: ensuredApprovals.file,
+        spacing: 2,
+      });
+      approvalsChanged = true;
+    }
+  }
+
+  return {
+    changed: openclawChanged || approvalsChanged,
+    openclawChanged,
+    approvalsChanged,
+  };
+};
+
+module.exports = {
+  kManagedExecApprovalsDefaults,
+  kManagedOpenclawExecDefaults,
+  resolveExecApprovalsConfigPath,
+  readExecApprovalsConfig,
+  writeExecApprovalsConfig,
+  ensureManagedExecApprovalsDefaults,
+  ensureManagedOpenclawExecDefaults,
+  ensureManagedExecDefaults,
+};

package/lib/server/init/server-lifecycle.js

@@ -3,6 +3,7 @@ const startServerLifecycle = ({
   PORT,
   isOnboarded,
   runOnboardedBootSequence,
+  ensureManagedExecDefaults,
   ensureUsageTrackerPluginConfig,
   doSyncPromptFiles,
   reloadEnv,
@@ -18,6 +19,7 @@ const startServerLifecycle = ({
     console.log(`[alphaclaw] Express listening on :${PORT}`);
     if (isOnboarded()) {
       runOnboardedBootSequence({
+        ensureManagedExecDefaults,
         ensureUsageTrackerPluginConfig,
         doSyncPromptFiles,
         reloadEnv,

package/lib/server/onboarding/index.js

@@ -25,6 +25,7 @@ const {
 } = require("./cron");
 const { migrateManagedInternalFiles } = require("../internal-files-migration");
 const { installGogCliSkill } = require("../gog-skill");
+const { ensureManagedExecDefaults } = require("../exec-defaults-config");
 
 const kPlaceholderEnvValue = "placeholder";
 const kEnvRefPattern = /\$\{([A-Z_][A-Z0-9_]*)\}/g;
@@ -529,6 +530,10 @@ const createOnboardingService = ({
       });
     }
     authProfiles?.syncConfigAuthReferencesForAgent?.();
+    ensureManagedExecDefaults({
+      fsModule: fs,
+      openclawDir: OPENCLAW_DIR,
+    });
 
     installGogCliSkill({ fs, openclawDir: OPENCLAW_DIR });