@crewhaus/channel-adapter-slack 0.5.1 → 0.5.2

package/dist/approvals.d.ts

@@ -13,9 +13,11 @@
  * `postApproval` / `ackApproval` do the I/O, and the channel-generic store +
  * orchestration live in `@crewhaus/channel-adapter-base`.
  */
-/** Block Kit `action_id`s for the two buttons — the interaction parser keys on
- *  these, so they are part of the wire contract. */
+/** Block Kit `action_id`s for the three buttons — the interaction parser keys
+ *  on these, so they are part of the wire contract. */
 export declare const APPROVE_ACTION_ID = "crewhaus_approve";
+/** #383 — grant AND persist a standing `alwaysAllow` rule for the tool. */
+export declare const APPROVE_ALWAYS_ACTION_ID = "crewhaus_approve_always";
 export declare const DENY_ACTION_ID = "crewhaus_deny";
 /** `block_id` prefix carrying the approval id (a redundant channel to the
  *  buttons' `value`, so the id survives even if Slack ever elides `value`). */
@@ -35,10 +37,14 @@ export type SlackApprovalMessage = {
     readonly blocks: readonly unknown[];
 };
 /**
- * Build the Approve/Deny Block Kit message for a parked approval. Each button
- * carries the `approvalId` in its `value`, and the actions block's `block_id`
- * carries it too (`crewhaus_approval:<id>`), so the interaction parser can
- * recover the id from either.
+ * Build the Approve / Always allow / Deny Block Kit message for a parked
+ * approval. Each button carries the `approvalId` in its `value`, and the
+ * actions block's `block_id` carries it too (`crewhaus_approval:<id>`), so the
+ * interaction parser can recover the id from either. "Always allow" (#383)
+ * grants this call AND persists a standing `alwaysAllow` rule for the tool in
+ * the harness's `.crewhaus/settings.json`, so a tool the loop calls repeatedly
+ * with varying input stops re-prompting (a plain Approve is one-shot and keyed
+ * on the exact input).
  */
 export declare function buildApprovalMessage(content: ApprovalPromptContent): SlackApprovalMessage;
 /**
@@ -50,6 +56,8 @@ export declare function buildApprovalAckMessage(args: {
     readonly decision: "grant" | "deny";
     readonly by: string;
     readonly toolName?: string;
+    /** #383 — the grant was recorded as a standing allow. */
+    readonly always?: boolean;
 }): SlackApprovalMessage;
 /** A parsed Slack interactivity webhook. Only Approve/Deny `block_actions` are
  *  surfaced; every other interaction type is `skip`. */
@@ -57,6 +65,8 @@ export type ParsedInteraction = {
     readonly kind: "approval_action";
     readonly approvalId: string;
     readonly decision: "grant" | "deny";
+    /** #383 — the click was "Always allow": grant + persist a standing rule. */
+    readonly always?: boolean;
     /** The Slack user who clicked (deciding identity). */
     readonly userId: string;
     readonly channelId?: string;

package/dist/approvals.js

@@ -13,18 +13,24 @@
  * `postApproval` / `ackApproval` do the I/O, and the channel-generic store +
  * orchestration live in `@crewhaus/channel-adapter-base`.
  */
-/** Block Kit `action_id`s for the two buttons — the interaction parser keys on
- *  these, so they are part of the wire contract. */
+/** Block Kit `action_id`s for the three buttons — the interaction parser keys
+ *  on these, so they are part of the wire contract. */
 export const APPROVE_ACTION_ID = "crewhaus_approve";
+/** #383 — grant AND persist a standing `alwaysAllow` rule for the tool. */
+export const APPROVE_ALWAYS_ACTION_ID = "crewhaus_approve_always";
 export const DENY_ACTION_ID = "crewhaus_deny";
 /** `block_id` prefix carrying the approval id (a redundant channel to the
  *  buttons' `value`, so the id survives even if Slack ever elides `value`). */
 export const APPROVAL_BLOCK_ID_PREFIX = "crewhaus_approval:";
 /**
- * Build the Approve/Deny Block Kit message for a parked approval. Each button
- * carries the `approvalId` in its `value`, and the actions block's `block_id`
- * carries it too (`crewhaus_approval:<id>`), so the interaction parser can
- * recover the id from either.
+ * Build the Approve / Always allow / Deny Block Kit message for a parked
+ * approval. Each button carries the `approvalId` in its `value`, and the
+ * actions block's `block_id` carries it too (`crewhaus_approval:<id>`), so the
+ * interaction parser can recover the id from either. "Always allow" (#383)
+ * grants this call AND persists a standing `alwaysAllow` rule for the tool in
+ * the harness's `.crewhaus/settings.json`, so a tool the loop calls repeatedly
+ * with varying input stops re-prompting (a plain Approve is one-shot and keyed
+ * on the exact input).
  */
 export function buildApprovalMessage(content) {
     const text = `Approval needed: \`${content.toolName}\` wants to run (surface: ${content.surface})`;
@@ -47,6 +53,12 @@ export function buildApprovalMessage(content) {
                     style: "primary",
                     value: content.approvalId,
                 },
+                {
+                    type: "button",
+                    action_id: APPROVE_ALWAYS_ACTION_ID,
+                    text: { type: "plain_text", text: `Always allow ${truncateForButton(content.toolName)}` },
+                    value: content.approvalId,
+                },
                 {
                     type: "button",
                     action_id: DENY_ACTION_ID,
@@ -61,7 +73,7 @@ export function buildApprovalMessage(content) {
             elements: [
                 {
                     type: "mrkdwn",
-                    text: `id \`${content.approvalId}\` · or run \`crewhaus approvals grant ${content.approvalId}\``,
+                    text: `id \`${content.approvalId}\` · or run \`crewhaus approvals grant ${content.approvalId}\` (add \`--always\` for a standing allow)`,
                 },
             ],
         },
@@ -74,10 +86,12 @@ export function buildApprovalMessage(content) {
  * decided. Returned as text + a single context block (buttons removed).
  */
 export function buildApprovalAckMessage(args) {
-    const verb = args.decision === "grant" ? "Approved" : "Denied";
+    const always = args.decision === "grant" && args.always === true;
+    const verb = args.decision === "grant" ? (always ? "Approved (always)" : "Approved") : "Denied";
     const icon = args.decision === "grant" ? "✅" : "🚫";
     const tool = args.toolName !== undefined ? ` \`${args.toolName}\`` : "";
-    const text = `${icon} ${verb}${tool} by ${args.by}`;
+    const suffix = always ? " — future calls run pre-approved" : "";
+    const text = `${icon} ${verb}${tool} by ${args.by}${suffix}`;
     return {
         text,
         blocks: [{ type: "context", elements: [{ type: "mrkdwn", text }] }],
@@ -117,13 +131,15 @@ export function parseSlackInteraction(body) {
     const action = actions[0];
     if (action === undefined)
         return { kind: "skip" };
-    const decision = action["action_id"] === APPROVE_ACTION_ID
+    const actionId = action["action_id"];
+    const decision = actionId === APPROVE_ACTION_ID || actionId === APPROVE_ALWAYS_ACTION_ID
         ? "grant"
-        : action["action_id"] === DENY_ACTION_ID
+        : actionId === DENY_ACTION_ID
             ? "deny"
             : undefined;
     if (decision === undefined)
         return { kind: "skip" };
+    const always = actionId === APPROVE_ALWAYS_ACTION_ID;
     // Prefer the button's `value`; fall back to the actions block_id suffix.
     const approvalId = (typeof action["value"] === "string" && action["value"].length > 0
         ? action["value"]
@@ -164,6 +180,7 @@ export function parseSlackInteraction(body) {
         kind: "approval_action",
         approvalId,
         decision,
+        ...(always ? { always: true } : {}),
         userId,
         ...(channelId !== undefined ? { channelId } : {}),
         ...(messageTs !== undefined ? { messageTs } : {}),
@@ -185,3 +202,8 @@ function truncateForBlock(preview, max = 500) {
     const safe = preview.replace(/```/g, "'''");
     return safe.length > max ? `${safe.slice(0, max)}…` : safe;
 }
+/** Slack caps a button's plain_text at 75 chars; keep room for the
+ *  "Always allow " prefix so a long MCP tool name can't break the block. */
+function truncateForButton(toolName, max = 40) {
+    return toolName.length > max ? `${toolName.slice(0, max)}…` : toolName;
+}

package/dist/index.d.ts

@@ -25,7 +25,7 @@
 import { CrewhausError } from "@crewhaus/errors";
 import { type ApprovalPromptContent, type ParsedInteraction } from "./approvals.js";
 export { signSlackBody, verifySlackSignature } from "./verify.js";
-export { APPROVE_ACTION_ID, DENY_ACTION_ID, APPROVAL_BLOCK_ID_PREFIX, type ApprovalPromptContent, type SlackApprovalMessage, type ParsedInteraction, buildApprovalMessage, buildApprovalAckMessage, parseSlackInteraction, } from "./approvals.js";
+export { APPROVE_ACTION_ID, APPROVE_ALWAYS_ACTION_ID, DENY_ACTION_ID, APPROVAL_BLOCK_ID_PREFIX, type ApprovalPromptContent, type SlackApprovalMessage, type ParsedInteraction, buildApprovalMessage, buildApprovalAckMessage, parseSlackInteraction, } from "./approvals.js";
 export declare class SlackAdapterError extends CrewhausError {
     readonly name = "SlackAdapterError";
     constructor(message: string, cause?: unknown);

package/dist/index.js

@@ -27,7 +27,7 @@ import { buildApprovalAckMessage, buildApprovalMessage, parseSlackInteraction, }
 import { signSlackBody, verifySlackSignature } from "./verify.js";
 export { signSlackBody, verifySlackSignature } from "./verify.js";
 // Loop contract 0.4 (Batch C, G11) — Slack interactive approval surface.
-export { APPROVE_ACTION_ID, DENY_ACTION_ID, APPROVAL_BLOCK_ID_PREFIX, buildApprovalMessage, buildApprovalAckMessage, parseSlackInteraction, } from "./approvals.js";
+export { APPROVE_ACTION_ID, APPROVE_ALWAYS_ACTION_ID, DENY_ACTION_ID, APPROVAL_BLOCK_ID_PREFIX, buildApprovalMessage, buildApprovalAckMessage, parseSlackInteraction, } from "./approvals.js";
 export class SlackAdapterError extends CrewhausError {
     name = "SlackAdapterError";
     constructor(message, cause) {
@@ -258,6 +258,8 @@ export function createSlackAdapter(config, opts = {}) {
             const ack = buildApprovalAckMessage({
                 decision: args.decision,
                 by: args.by,
+                // #383 — an "Always allow" click acks as a standing approval.
+                ...(args.interaction.always === true ? { always: true } : {}),
                 ...(args.toolName !== undefined ? { toolName: args.toolName } : {}),
             });
             if (args.interaction.responseUrl !== undefined) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crewhaus/channel-adapter-slack",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "type": "module",
   "description": "Slack channel adapter: webhook signature verification, event parsing, reply-to-thread (Section 12)",
   "main": "dist/index.js",
@@ -15,7 +15,7 @@
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/errors": "0.5.1"
+    "@crewhaus/errors": "0.5.2"
   },
   "license": "Apache-2.0",
   "author": {