@cursor/bdk 0.2.14 → 0.2.16

package/AGENTS.md

@@ -1,6 +1,6 @@
 # Agent experience (AX)
 
-Guide for coding agents working on or with `@cursor/july`.
+Guide for coding agents working on or with `@cursor/bdk`.
 Loop: edit files → inspect surface → run a turn → assert with filesystem
 evals. Prefer the CLI over ad-hoc curl.
 
@@ -13,9 +13,9 @@ Start machine-readable docs at `dist/docs/llms.txt` when it exists, or at
 `/docs/llms.txt` on a running host. Use `llms-full.txt` only when the whole
 documentation set is needed.
 
-Before committing or reviewing any Agent SDK documentation change, read the
+Before committing or reviewing any BDK documentation change, read the
 repo-wide writing skill at `.cursor/skills/docs/writing/SKILL.md` (repo root)
-and run `/docs-lint` on every change. The Agent SDK naming, skill-link, and
+and run `/docs-lint` on every change. The BDK naming, skill-link, and
 verify rules live in `.cursor/rules/packages/agent-sdk-docs-style.mdc` and
 attach automatically when a published docs file is in context.
 
@@ -23,7 +23,7 @@ Before writing or editing a template, read
 [`docs/.cursor/skills/template-lint/SKILL.md`](./docs/.cursor/skills/template-lint/SKILL.md).
 Run `/template-lint` before every commit or review that changes `templates/`.
 
-Run the CLI under **Node, never Bun** — use the installed `agent-sdk`
+Run the CLI under **Node, never Bun** — use the installed `bdk`
 bin; from a source checkout of this package,
 `pnpm exec tsx src/bin/agent-serve.ts <command> …` is equivalent. Bun's
 HTTP/2 client corrupts local harness
@@ -34,7 +34,7 @@ built-in read/grep fail and sends models into retry loops.
 
 Before scaffolding, wiring channels, writing evals, or deploying, **read the
 matching skill under `skills/<task>/SKILL.md`** (paths
-below are relative to this package). Those files ship with `@cursor/july`.
+below are relative to this package). Those files ship with `@cursor/bdk`.
 Cloud agents get the same published skills via `GetManagedSkills`,
 which reads these files. Open them directly. There are no
 `.cursor/skills/` stubs for authoring.
@@ -47,52 +47,52 @@ which reads these files. Open them directly. There are no
 | `skills/otel/SKILL.md` | OpenTelemetry export (OTLP env / `serve({ otel })` / `ctx.host.otel`) |
 | `skills/hillclimb/SKILL.md` | Improving an existing agent measurably |
 | `skills/github/SKILL.md` | GitHub webhook agents; replay / forward / fixtures / cursor-events |
-| `skills/setup-slack/SKILL.md` | Slack wiring and Slack tool approvals |
-| `skills/mcp-auth/SKILL.md` | Host MCP OAuth (`mcp oauth`, `--store`, `advertiseTools`, `host-connections/`) |
+| `skills/setup-slack/SKILL.md` | Slack wiring and channel watching |
+| `skills/mcp-auth/SKILL.md` | Host MCP OAuth (`mcp oauth`, `advertiseTools`, `host-connections/`, hosted `cursorAccount`) |
 | `skills/deploy/SKILL.md` | Deploy or redeploy from a pushed Git ref with an attached service account |
 | `skills/debug/SKILL.md` | Something misbehaving locally (symptom → cause) |
 
 Hosted-platform debug (stopped / slow start / health-fail, Datadog
 `cursor.agent_serve.*`) is the monorepo skill
 `.cursor/skills/debugging/debug-agentsdk-deployment/SKILL.md` — it does
-not ship with `@cursor/july`.
+not ship with `@cursor/bdk`.
 
 ## Recommended loop
 
 ```bash
 # 1. Discover / validate
-agent-sdk validate --dir .
-agent-sdk info --dir . --json
+bdk validate --dir .
+bdk info --dir . --json
 
 # One-shot turn (ephemeral server, JSON trajectory + single NDJSON trace)
-agent-sdk run --dir . --message "What's the temperature in NYC?"
+bdk run --dir . --message "What's the temperature in NYC?"
 # → trace at <dir>/.agent-serve/traces/<sessionId>.ndjson
-# Visualize: agent-sdk serve --dir .  then playground → Open trace
+# Visualize: bdk serve --dir .  then playground → Open trace
 
 # Against a running server (deep-linkable in the playground)
-agent-sdk serve --dir . &
-agent-sdk run --url http://127.0.0.1:3000 --message "..."
+bdk serve --dir . &
+bdk run --url http://127.0.0.1:3000 --message "..."
 # → JSON includes playgroundUrl?sessionId=...
 
 # Optional: custom path / offline summary
-agent-sdk run --dir . --message "..." --events /tmp/run.ndjson
-agent-sdk trajectory --events /tmp/run.ndjson
+bdk run --dir . --message "..." --events /tmp/run.ndjson
+bdk trajectory --events /tmp/run.ndjson
 
 # Deterministic tool call (no model turn, no API key needed)
-agent-sdk call get_weather --dir . --input '{"city":"NYC"}'
+bdk call get_weather --dir . --input '{"city":"NYC"}'
 # → POST /v1/tools/get_weather; validates input, runs execute in-process
 
 # 3. Evals (defineEval under evals/)
-agent-sdk eval --dir . --list
-agent-sdk eval --dir . --json
-agent-sdk eval --dir . weather/nyc
+bdk eval --dir . --list
+bdk eval --dir . --json
+bdk eval --dir . weather/nyc
 ```
 
 ## Project layout
 
 ```
 my-agent/
-  agent/
+  bot/
     agent.ts
     instructions.md
     tools/*.ts
@@ -108,7 +108,7 @@ my-agent/
 ## Authoring evals
 
 ```ts
-import { defineEval, includes } from "@cursor/july/evals";
+import { defineEval, includes } from "@cursor/bdk/evals";
 
 // One datapoint per file, or many via `cases` (ids = <fileId>/<case.id>)
 export default defineEval({
@@ -132,12 +132,12 @@ Select with the CLI: one datapoint (`weather/nyc`), a whole file
 (`weather`), several ids, or omit for all.
 
 `evals/evals.config.ts` must set `maxConcurrency` (hard-capped at 200 due to
-model provider request limits; examples use `20`). Playground batches default
-to in-memory only (`maxPlaygroundRuns`, default 20); declare an `evals` table
-in `agent/storage.ts` (`defineStorage`) to survive serve restart:
+model provider request limits; examples use `20`). Playground batches stay
+in memory only (`maxPlaygroundRuns`, default 20), and a serve restart loses
+them:
 
 ```ts
-import { defineEvalConfig } from "@cursor/july/evals";
+import { defineEvalConfig } from "@cursor/bdk/evals";
 
 export default defineEvalConfig({
   maxConcurrency: 20,
@@ -158,9 +158,9 @@ export default defineEvalConfig({
   `~/.cursor/skills/bdk/` (TTY only; always overwrites with the
   package copy, with `alwaysApply: true` so Cursor injects them).
   Consumer installs already copy those skills in postinstall; the
-  source checkout does not. Links `agent-sdk` onto the
-  npm global bin (so bare `agent-sdk` works on PATH), runs `login` and
-  waits when unsigned, then prints `cd` (when needed) and `agent-sdk dev`.
+  source checkout does not. Links `bdk` onto the
+  npm global bin (so bare `bdk` works on PATH), runs `login` and
+  waits when unsigned, then prints `cd` (when needed) and `bdk dev`.
   `--json` still installs but never blocks on login or skill install; it
   prints
   `{ ok, directory, created, skipped, installed, installError, cliOnPath, cliLinkError, next }`.
@@ -179,7 +179,7 @@ the `mcp` channel and are visible in the playground.
 Wire one agent to another with a **peer MCP connection**:
 
 ```ts
-// agent/mcp-connections/weather.ts
+// bot/mcp-connections/weather.ts
 export default defineConnection({ agent: "weather-agent" });
 ```
 
@@ -191,23 +191,23 @@ instructions so A→B→A recursion cannot happen (e.g. a parent agent that
 delegates *only* weather questions to a `weather-agent` peer).
 
 ```bash
-agent-sdk dev ./agents
-agent-sdk chat --url http://127.0.0.1:3000/concierge --message "Weather in Paris?"
+bdk dev ./agents
+bdk chat --url http://127.0.0.1:3000/concierge --message "Weather in Paris?"
 ```
 
 ## Slack channel
 
 `slackChannel()` is a dedicated Socket Mode Slack app (no public Request
-URL). Import from `@cursor/july/channels/slack`. Mint the app with
-`agent-sdk slack create`; mention the bot (or DM it) in Slack.
+URL). Import from `@cursor/bdk/channels/slack`. Mint the app with
+`bdk slack create`; mention the bot (or DM it) in Slack.
 
 ```bash
-agent-sdk slack setup
-agent-sdk slack create --dir ./my-agent --channel-posts
+bdk slack setup
+bdk slack create --dir ./my-agent --channel-posts
 # envPrefix from the directory name (MY_AGENT_SLACK_*)
-# Manual path: agent-sdk slack init --manual --dir ./my-agent
-agent-sdk slack doctor --prefix MY_AGENT
-agent-sdk dev ./my-agent
+# Manual path: bdk slack init --manual --dir ./my-agent
+bdk slack doctor --prefix MY_AGENT
+bdk dev ./my-agent
 ```
 
 Multi-agent serve needs **one Slack app (and token pair) per agent**:
@@ -215,8 +215,7 @@ Multi-agent serve needs **one Slack app (and token pair) per agent**:
 that channel idle instead of failing `serve`. Single-agent setups can use the
 shared `SLACK_*` vars (`slackChannel()` / `slack create --no-prefix`).
 
-Channel watching is `engagement.channelPosts`. Tool approvals are
-`toolApprovals` / `interactivity`.
+Channel watching is `engagement.channelPosts`.
 
 Replies default to `reply: { mode: "post" }` (status chip while the turn
 runs, one message at the end); `reply: { mode: "stream" }` streams the answer
@@ -228,7 +227,7 @@ Guided skill: `skills/setup-slack/SKILL.md`.
 The web playground is a Vite + React SPA under `playground/` (entry
 `playground/src/main.tsx`).
 
-`agent-sdk serve` handles the Vite side for you:
+`bdk serve` handles the Vite side for you:
 
 - If `dist/playground/` is missing and the local vite toolchain is present,
   serve auto-runs `vite build` before listening.
@@ -243,8 +242,8 @@ The web playground is a Vite + React SPA under `playground/` (entry
 
 ## GitHub channel
 
-Author `agent/channels/github.ts` with `githubChannel()` from
-`@cursor/july/channels/github`; it mounts `POST /v1/channels/github`
+Author `bot/channels/github.ts` with `githubChannel()` from
+`@cursor/bdk/channels/github`; it mounts `POST /v1/channels/github`
 and verifies `X-Hub-Signature-256` when a webhook secret is set. The channel
 publishes the webhook events it dispatches on (derived from the declared hooks,
 or pinned via `webhookEvents`) as `meta.githubWebhookEvents`. Auth default: with
@@ -270,15 +269,15 @@ remote):
 
 ```bash
 # one-time: gh + the cli/gh-webhook extension
-agent-sdk github doctor --install
+bdk github doctor --install
 
 # what would be forwarded, per agent (URL + events)
-agent-sdk github events --dir ./agents --json
+bdk github events --dir ./agents --json
 
 # forward live deliveries to a served agent (no secret needed against --dev;
 # set GITHUB_WEBHOOK_SECRET to verify signatures)
-agent-sdk dev ./my-agent &
-agent-sdk github forward --dir ./my-agent
+bdk dev ./my-agent &
+bdk github forward --dir ./my-agent
 ```
 
 When several channels match (e.g. a folder of agent projects), one forwarder fans out to
@@ -292,11 +291,11 @@ target, `--events` narrows the set, `--url` points at a tunnel, and `--slug` /
 authenticates its relay with the GitHub CLI's own login — so a `GITHUB_TOKEN` /
 `GH_TOKEN` env override makes deliveries **401** (hook creation still succeeds,
 which is the confusing part). Blank it for the command (`GITHUB_TOKEN= GH_TOKEN=
-agent-sdk github forward …`) or `unset` it; `github doctor` / `forward` warn
+bdk github forward …`) or `unset` it; `github doctor` / `forward` warn
 when they detect an env token.
 
 When you lack repo admin, or want deterministic runs (hillclimbing), use
-`agent-sdk github replay <pr_url>` instead: it **reads** the PR via `gh api`
+`bdk github replay <pr_url>` instead: it **reads** the PR via `gh api`
 (pull access only, `GITHUB_TOKEN` is fine), synthesizes GitHub-shaped payloads,
 signs them (`--secret`/`GITHUB_WEBHOOK_SECRET`), and POSTs them at the channel —
 no admin, no relay. `--events` defaults to `pull_request` (`*` = the channel's
@@ -318,13 +317,13 @@ Fixtures still work for offline replay: `POST` a saved payload with an
   `instructions.md` / skills (prose in `.md`, never TS string builders).
   Speculative caches (prefetch, fingerprint dedupe, write coalescing) need
   measured pressure first, and framework gaps (posting, chunking, retries)
-  get fixed or filed in the framework, not worked around in `agent/lib/`.
+  get fixed or filed in the framework, not worked around in `bot/lib/`.
   Budget + smells: `skills/create-agent/SKILL.md` § "The deterministic-path
   budget".
 - Nested git checkouts default `local.cwd` to `~/.cache/agent-serve/<dir>`.
   Point cwd at a checkout only when the agent must inherit that tree.
   `run` / `eval` already use a temp state root.
-- Expect `agent/evals/` to be loaded — evals live at the **project root** `evals/`.
+- Expect `bot/evals/` to be loaded — evals live at the **project root** `evals/`.
 - Build optional object fields with a conditional empty-object spread.
   Assign the property directly; `undefined` is fine on optional keys.
 

package/README.md

@@ -2,7 +2,7 @@
 
 The Grok Bot Development Kit (BDK) is how Cursor builds bots and
 agents. It is the open-source version of the engine behind Bugbot,
-Security Review, and Approval Bot.
+Security Review, Approval Bot, and Rollouts.
 
 A BDK project is a folder of Markdown and TypeScript. Combine model
 judgment with deterministic code, then make the result available in

package/dist/bin/agent-serve.js

@@ -27,6 +27,7 @@ import { cmdCancelRuns, cmdDelete, cmdDeploy, cmdDeploymentStatus, cmdDeployment
 import { cmdImagesList, cmdImagesPush, cmdImagesRm } from "../internal/cli-images.js";
 import { cmdManifest } from "../internal/cli-manifest.js";
 import { CLI_COMMAND_NAME as CLI, formatCliVersion, PACKAGE_NAME, packageVersion, } from "../internal/distribution.js";
+import { initFlagConflict } from "../internal/init-project.js";
 import { v2HostedVerifyHint } from "../internal/legacy-command-guard.js";
 import { loadAgentLocalEnv } from "../internal/local-env.js";
 import { ENTER_RESTART_EXIT_CODE, isServeRestartWorker, runEnterRestartSupervisor, } from "../internal/serve-restart.js";
@@ -76,6 +77,8 @@ Usage:
   ${CLI} skill       <name> [--dir <path> | --url <baseUrl> | --prod]
                           [--slug <slug>] [--team <id>] [--text]
   ${CLI} init        [dir] [--template <name>] [--var id=value]... [--json]
+  ${CLI} init        [dir] --from-grokbot <recipe.json> [--answers <file>]
+                          [--dry-run] [--json]
   ${CLI} convert-automation <url> [--dir <path>] [--json]
   ${CLI} migrate     [--dir <path>] [--repo <url>] [--ref <ref>] [--path <agentPath>]
                           [--no-wait] [--json]
@@ -104,7 +107,7 @@ Usage:
   ${CLI} version     [--json]
   ${CLI} deploy      [--dir <path>] [--slug <slug> | --all] [--team <id>] [--json]
                           [--no-wait] [--repo <url>] [--ref <ref>]
-                          [--path <agentPath>] [--cursor-events-repo <owner/name>]...
+                          [--path <agentPath>] [--cursor-events-repo <repo>]...
                           [--allow-domain <domain>]...
   ${CLI} manifest    [--dir <path>] [--json]
   ${CLI} deployments [--team <id>] [--json]
@@ -189,6 +192,13 @@ Commands:
               prompt. With --json or off a TTY, each question without a
               default needs --var. --json is machine-readable and never
               blocks on login. No directory: print the setup guide.
+              --from-grokbot converts a Grok Bot recipe instead: it asks
+              the export questions on a TTY or reads them from --answers
+              (schema: schemas/grokbot-answers.schema.json), writes the
+              project with SECRETS.md, a finish-the-export skill, and
+              SLACK.md for Slack bots, and installs npm dependencies. The
+              directory defaults to the answers' location. --dry-run
+              prints the preview and writes nothing.
   convert-automation
               Export a Cursor Automation into an agentsdk project. <url> is
               the dashboard URL (…/automations/<uuid> or
@@ -451,8 +461,10 @@ Options:
   --all              deploy: every child agent under a multi-agent --dir
                      (skips the interactive picker; mutually exclusive with
                      --slug).
-  --cursor-events-repo  deploy: repo (owner/name) the deployed agent
-                     watches (repeatable).
+  --cursor-events-repo  deploy: repo the deployed agent watches
+                     (repeatable): owner/name for GitHub and Origin,
+                     gitlab.com/<group>/<project>, or
+                     bitbucket.org/<workspace>/<repo>.
   --allow-domain     deploy: egress domain the engine pod may reach
                      (repeatable; unioned with hosting.egressDomains from the
                      agent manifest). Repo-backed deploys only.
@@ -514,6 +526,8 @@ async function main(argv) {
             dir: { type: "string", default: "." },
             template: { type: "string" },
             var: { type: "string", multiple: true },
+            "from-grokbot": { type: "string" },
+            answers: { type: "string" },
             port: { type: "string" },
             host: { type: "string" },
             mode: { type: "string" },
@@ -730,6 +744,30 @@ async function main(argv) {
             });
         }
         case "init": {
+            const conflict = initFlagConflict({
+                fromGrokbot: values["from-grokbot"],
+                answers: values.answers,
+                dryRun: values["dry-run"],
+                template: values.template,
+                vars: values.var,
+            });
+            if (conflict !== undefined) {
+                if (values.json) {
+                    await writeStdout(`${JSON.stringify({ ok: false, error: conflict })}\n`);
+                }
+                process.stderr.write(`${conflict}\n`);
+                return 1;
+            }
+            if (values["from-grokbot"] !== undefined) {
+                const { cmdInitFromGrokbot } = await import("../internal/cli-init-grokbot.js");
+                return cmdInitFromGrokbot({
+                    recipe: values["from-grokbot"],
+                    answers: values.answers,
+                    dir: positionals[0],
+                    dryRun: values["dry-run"],
+                    json: values.json,
+                });
+            }
             return cmdInit({
                 dir,
                 initTarget: positionals[0],

package/dist/channels/github/index.d.ts

@@ -53,7 +53,7 @@ export { deriveGitHubWebhookEvents, GITHUB_CHANNEL_KIND } from "./events.js";
 export type { AgentMountLike, GitHubChannelTarget, GitHubForwardArgsInput, GitHubForwardTarget, ResolveGitHubForwardTargetsInput, ResolveGitHubForwardTargetsResult, } from "./forward.js";
 export { buildGitHubForwardArgs, channelForwardUrl, detectGitHubEnvTokenOverride, findGitHubChannelTargets, GITHUB_WEBHOOK_EXTENSION, GITHUB_WEBHOOK_EXTENSION_PIN, ghWebhookExtensionInstallArgs, ghWebhookExtensionPinSatisfied, githubEnvTokenHint, parseGhWebhookExtensionInstalled, parseGhWebhookExtensionVersion, parseRepoFromRemoteUrl, resolveGitHubForwardTargets, targetLabel, unionForwardEvents, } from "./forward.js";
 export type { GitHubPullRequestRef } from "./github-channel.js";
-export { defaultGitHubAuth, defaultGitHubPullRequestDispatch, defaultGitHubPullRequestMessage, defaultGitHubTitle, defaultOnComment, dispatchGitHubWebhook, extractGitHubCommentTrigger, getGitHubChannelOptions, githubChannel, githubContinuationKey, handleGitHubWebhookRequest, isGitHubAppBotAuthor, parseGitHubPrContinuationKey, parseGitHubPullRequestEvent, shouldDispatchGitHubComment, verifyGitHubWebhookSignature, } from "./github-channel.js";
+export { defaultGitHubAuth, defaultGitHubPullRequestDispatch, defaultGitHubPullRequestMessage, defaultGitHubTitle, defaultOnComment, dispatchGitHubWebhook, extractGitHubCommentTrigger, getGitHubChannelOptions, githubChannel, githubChannelArchitectureError, githubChannelCredentialSecretNames, githubContinuationKey, handleGitHubWebhookRequest, isCursorAccountGitHubChannel, isGitHubAppBotAuthor, parseGitHubPrContinuationKey, parseGitHubPullRequestEvent, shouldDispatchGitHubComment, verifyGitHubWebhookSignature, } from "./github-channel.js";
 export type { GitHubBannerProgress, GitHubCommitStatusProgress, GitHubProgressConfig, GitHubProgressOptions, GitHubProgressPhase, GitHubProgressPhaseCopy, } from "./progress.js";
 export { applyGitHubProgress, progressPhaseCopy, resolveBannerProgress, resolveCommitStatusProgress, } from "./progress.js";
 export type { GitHubPrRef, ReplayCheck, ReplayPull, ReplayRepo, ReplayUser, SynthesizableEvent, SynthesizedEvent, SynthesizeInput, SynthesizeResult, } from "./replay.js";

package/dist/channels/github/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,8BAA8B,EAC9B,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,YAAY,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,gCAAgC,EAChC,8BAA8B,EAC9B,sBAAsB,EACtB,2BAA2B,EAC3B,WAAW,EACX,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,gCAAgC,EAChC,+BAA+B,EAC/B,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,aAAa,EACb,qBAAqB,EACrB,0BAA0B,EAC1B,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,WAAW,EACX,WAAW,EACX,UAAU,EACV,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACjF,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,EACpB,8BAA8B,EAC9B,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,EACZ,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACnE,YAAY,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EACV,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,iCAAiC,GAClC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,gCAAgC,EAChC,8BAA8B,EAC9B,sBAAsB,EACtB,2BAA2B,EAC3B,WAAW,EACX,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,gCAAgC,EAChC,+BAA+B,EAC/B,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,aAAa,EACb,8BAA8B,EAC9B,kCAAkC,EAClC,qBAAqB,EACrB,0BAA0B,EAC1B,4BAA4B,EAC5B,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,GAC5B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,WAAW,EACX,WAAW,EACX,UAAU,EACV,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACjF,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,aAAa,EACb,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}

package/dist/channels/github/index.js

@@ -46,7 +46,7 @@ export { createGitHubCheck, resumeGitHubCheck } from "./checks.js";
 export { buildDefaultGitHubEvents } from "./defaults.js";
 export { deriveGitHubWebhookEvents, GITHUB_CHANNEL_KIND } from "./events.js";
 export { buildGitHubForwardArgs, channelForwardUrl, detectGitHubEnvTokenOverride, findGitHubChannelTargets, GITHUB_WEBHOOK_EXTENSION, GITHUB_WEBHOOK_EXTENSION_PIN, ghWebhookExtensionInstallArgs, ghWebhookExtensionPinSatisfied, githubEnvTokenHint, parseGhWebhookExtensionInstalled, parseGhWebhookExtensionVersion, parseRepoFromRemoteUrl, resolveGitHubForwardTargets, targetLabel, unionForwardEvents, } from "./forward.js";
-export { defaultGitHubAuth, defaultGitHubPullRequestDispatch, defaultGitHubPullRequestMessage, defaultGitHubTitle, defaultOnComment, dispatchGitHubWebhook, extractGitHubCommentTrigger, getGitHubChannelOptions, githubChannel, githubContinuationKey, handleGitHubWebhookRequest, isGitHubAppBotAuthor, parseGitHubPrContinuationKey, parseGitHubPullRequestEvent, shouldDispatchGitHubComment, verifyGitHubWebhookSignature, } from "./github-channel.js";
+export { defaultGitHubAuth, defaultGitHubPullRequestDispatch, defaultGitHubPullRequestMessage, defaultGitHubTitle, defaultOnComment, dispatchGitHubWebhook, extractGitHubCommentTrigger, getGitHubChannelOptions, githubChannel, githubChannelArchitectureError, githubChannelCredentialSecretNames, githubContinuationKey, handleGitHubWebhookRequest, isCursorAccountGitHubChannel, isGitHubAppBotAuthor, parseGitHubPrContinuationKey, parseGitHubPullRequestEvent, shouldDispatchGitHubComment, verifyGitHubWebhookSignature, } from "./github-channel.js";
 export { applyGitHubProgress, progressPhaseCopy, resolveBannerProgress, resolveCommitStatusProgress, } from "./progress.js";
 export { isSynthesizableEvent, parseGitHubPrRef, SYNTHESIZABLE_EVENTS, selectReplayEvents, signGitHubWebhookBody, synthesizeGitHubEvent, } from "./replay.js";
 export { emptyGitHubChannelState, githubBindingStateForEvent } from "./state.js";

package/dist/channels/slack/attachments.d.ts

@@ -16,6 +16,8 @@ export declare function isSupportedDocumentFormat(args: {
     filename?: string;
 }): boolean;
 export declare function isSupportedVideoFormat(mimeType: string): boolean;
+/** Slack's 1024px rendition when it made one: the backend downscales to that budget anyway. */
+export declare function slackImageThumbnailUrl(file: Record<string, unknown>): string | undefined;
 /** Raw Slack file object (message `files[]` or forwarded share). */
 export interface RawSlackFile {
     id?: unknown;

package/dist/channels/slack/attachments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/attachments.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAElE,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,4BAA4B,yFAC+C,CAAC;AA4FzF,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CA2EhG;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC;AAUhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,uBAAuB,GAAG,SAAS,CAyBzF;AAOD,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAgBzE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,EAAE,GAAG,SAAS,CAoBnF;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACnD,iDAAiD;IACjD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AA6HD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAoInC;AAED,yDAAyD;AACzD,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,mBAAmB,GAAE,MAAqC,GACzD,MAAM,CAUR"}
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/attachments.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAElE,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,eAAO,MAAM,4BAA4B,yFAC+C,CAAC;AA4FzF,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CA2EhG;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC;AAUhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,uBAAuB,GAAG,SAAS,CAyBzF;AAOD,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,EAAE,CAgBzE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,EAAE,GAAG,SAAS,CAoBnF;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACnD,iDAAiD;IACjD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAkID,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAuInC;AAED,yDAAyD;AACzD,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,mBAAmB,GAAE,MAAqC,GACzD,MAAM,CAUR"}

package/dist/channels/slack/attachments.js

@@ -174,6 +174,11 @@ export function isSupportedDocumentFormat(args) {
 export function isSupportedVideoFormat(mimeType) {
     return normalizeMimeType(mimeType).startsWith("video/");
 }
+/** Slack's 1024px rendition when it made one: the backend downscales to that budget anyway. */
+export function slackImageThumbnailUrl(file) {
+    const thumbnail = asString(file.thumb_1024);
+    return thumbnail !== undefined && thumbnail.length > 0 ? thumbnail : undefined;
+}
 function hasTextSlackHint(file) {
     if (file.mode === "snippet") {
         return true;
@@ -297,13 +302,17 @@ async function downloadSlackFileBytes(args) {
     if (file === null) {
         return null;
     }
-    const downloadUrl = asString(file.url_private_download);
+    const thumbnailUrl = args.preferImageThumbnail ? slackImageThumbnailUrl(file) : undefined;
+    const downloadUrl = thumbnailUrl ?? asString(file.url_private_download);
     if (downloadUrl === undefined || downloadUrl.length === 0) {
         return null;
     }
-    const fileSize = asNumber(file.size);
-    if (fileSize !== undefined && fileSize > args.maxBytes) {
-        return null;
+    // `file.size` is the original's size, which says nothing about the rendition.
+    if (thumbnailUrl === undefined) {
+        const fileSize = asNumber(file.size);
+        if (fileSize !== undefined && fileSize > args.maxBytes) {
+            return null;
+        }
     }
     const botToken = await tryResolveBotToken({ botToken: args.botToken });
     const headers = {};
@@ -372,7 +381,9 @@ export async function prepareSlackAttachments(options) {
         if (classification === undefined) {
             return undefined;
         }
-        if (file.size !== undefined && file.size > maxFileBytes) {
+        // A big image may still have a small rendition, so let the download decide.
+        const skipsSizeGate = classification.kind === "image" && file.dataBase64 === undefined;
+        if (!skipsSizeGate && file.size !== undefined && file.size > maxFileBytes) {
             options.log?.info("slack attachment skipped (size)", {
                 file_id: file.id,
                 size: file.size,
@@ -395,6 +406,7 @@ export async function prepareSlackAttachments(options) {
             fallbackMimeType: classification.mimeType,
             maxBytes: maxFileBytes,
             downloadTimeoutMs,
+            preferImageThumbnail: classification.kind === "image",
         });
         if (downloaded === null) {
             options.log?.info("slack attachment download failed", {

package/dist/channels/slack/channel-watch.d.ts

@@ -5,7 +5,8 @@
  * - The allowlist is a finite id list, or a lone `"*"` for every channel
  *   the bot is in. Mixing `"*"` with ids is a definition error.
  * - Top-level posts only by default. `"replies"` is thread replies only
- *   (`ts !== threadTs`). `"all"` is both. A lone `"*"` is replies only.
+ *   (`ts !== threadTs`). `"all"` is both. A lone `"*"` is replies only, or
+ *   `"all"` with `includeBotPosts` (hosted edges bound the top-level posts).
  * - Posts that @mention the bot are skipped here (the `app_mention` path
  *   owns them).
  * - Bot-authored posts are dropped unless `includeBotPosts` is configured
@@ -31,7 +32,8 @@ export declare const CHANNEL_POSTS_MAX_CHANNEL_IDS = 10;
  * True when the allowlist is only `"*"`: every channel the bot is in.
  * Guest-side only. It is not a deploy-manifest subscription — the control
  * plane rejects `"*"` and already delivers a reply in a thread a mention
- * started. Top-level posts do not match it (`posts: "replies"`).
+ * started. Top-level posts match it only under `posts: "all"` with
+ * `includeBotPosts`, and on hosting only in channels with an edge.
  */
 export declare function channelPostsWatchEverywhere(entries: readonly string[]): boolean;
 /** The channel-id (`C…`/`G…`) entries of an allowlist, deduped. */

package/dist/channels/slack/channel-watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-watch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/channel-watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAIzE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAG/E;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CASzE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAuBxF;AAED,sEAAsE;AACtE,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,YAAY,OAAO,EAAE,SAAS,MAAM,EAAE,EAqBrC;IAED,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAElC;IAED,eAAe,IAAI,MAAM,EAAE,CAE1B;IAED,uDAAuD;IACvD,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAO9D;CACF;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,GAAE,QAA0B,GAC9B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACnE,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,wBAAwB,CAAC;IAClC,SAAS,EAAE,qBAAqB,CAAC;IACjC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB,GAAG,kBAAkB,CAwHrB"}
+{"version":3,"file":"channel-watch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/channel-watch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,KAAK,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAIzE;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAEhD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAG/E;AAED,mEAAmE;AACnE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CASzE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAuBxF;AAED,sEAAsE;AACtE,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,YAAY,OAAO,EAAE,SAAS,MAAM,EAAE,EAqBrC;IAED,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAElC;IAED,eAAe,IAAI,MAAM,EAAE,CAE1B;IAED,uDAAuD;IACvD,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAO9D;CACF;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,GAAE,QAA0B,GAC9B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACnE,2CAA2C;IAC3C,IAAI,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,wBAAwB,CAAC;IAClC,SAAS,EAAE,qBAAqB,CAAC;IACjC,4EAA4E;IAC5E,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5D,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB,GAAG,kBAAkB,CAwHrB"}

package/dist/channels/slack/channel-watch.js

@@ -5,7 +5,8 @@
  * - The allowlist is a finite id list, or a lone `"*"` for every channel
  *   the bot is in. Mixing `"*"` with ids is a definition error.
  * - Top-level posts only by default. `"replies"` is thread replies only
- *   (`ts !== threadTs`). `"all"` is both. A lone `"*"` is replies only.
+ *   (`ts !== threadTs`). `"all"` is both. A lone `"*"` is replies only, or
+ *   `"all"` with `includeBotPosts` (hosted edges bound the top-level posts).
  * - Posts that @mention the bot are skipped here (the `app_mention` path
  *   owns them).
  * - Bot-authored posts are dropped unless `includeBotPosts` is configured
@@ -29,7 +30,8 @@ export const CHANNEL_POSTS_MAX_CHANNEL_IDS = 10;
  * True when the allowlist is only `"*"`: every channel the bot is in.
  * Guest-side only. It is not a deploy-manifest subscription — the control
  * plane rejects `"*"` and already delivers a reply in a thread a mention
- * started. Top-level posts do not match it (`posts: "replies"`).
+ * started. Top-level posts match it only under `posts: "all"` with
+ * `includeBotPosts`, and on hosting only in channels with an edge.
  */
 export function channelPostsWatchEverywhere(entries) {
     const trimmed = entries.map((entry) => entry.trim()).filter((entry) => entry !== "");

package/dist/channels/slack/slack-channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/slack-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EAEV,iBAAiB,EAOlB,MAAM,gBAAgB,CAAC;AAwDxB,OAAO,KAAK,EAEV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAKpB;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAE1F;AAED,0EAA0E;AAC1E,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,aAAa,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9C,uBAAuB,GAAG,SAAS,CAYrC;AAaD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,GAAE,mBAAwB,GACjC,iBAAiB,CAAC,iBAAiB,CAAC,CA6oBtC"}
+{"version":3,"file":"slack-channel.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/slack-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,OAAO,KAAK,EAEV,iBAAiB,EAOlB,MAAM,gBAAgB,CAAC;AAwDxB,OAAO,KAAK,EAEV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAKpB;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAE1F;AAED,0EAA0E;AAC1E,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,aAAa,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9C,uBAAuB,GAAG,SAAS,CAYrC;AAaD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,GAAE,mBAAwB,GACjC,iBAAiB,CAAC,iBAAiB,CAAC,CAipBtC"}

package/dist/channels/slack/slack-channel.js

@@ -108,8 +108,10 @@ export function slackChannel(authored = {}) {
         if (allowError !== undefined) {
             throw new Error(`slackChannel engagement.channelPosts.allow ${allowError}`);
         }
-        if (channelPostsWatchEverywhere(channelPosts.allow) && channelPosts.posts !== "replies") {
-            throw new Error('slackChannel engagement.channelPosts: "*" watches every channel the bot is in, thread replies only. Set posts: "replies".');
+        if (channelPostsWatchEverywhere(channelPosts.allow) &&
+            channelPosts.posts !== "replies" &&
+            !(channelPosts.posts === "all" && channelPosts.includeBotPosts === true)) {
+            throw new Error('slackChannel engagement.channelPosts: "*" watches every channel the bot is in. Set posts: "replies", or posts: "all" with includeBotPosts: true.');
         }
     }
     const botMentions = engagement.botMentions;

package/dist/channels/slack/types.d.ts

@@ -470,15 +470,17 @@ export type SlackBlockActionHandler = (ctx: SlackBinding, action: SlackBlockActi
 export interface SlackChannelPostsOptions {
     /**
      * Channels to watch. Either a lone `"*"` (every channel the bot is in;
-     * thread replies only — set `posts: "replies"`) or a finite list: at
+     * `posts: "replies"`, or `posts: "all"` with `includeBotPosts: true`) or a finite list: at
      * least one channel id (`C…` / `G…`), at most 10 distinct ids. Mixing
      * `"*"` with ids is a definition error. `#name` entries may accompany
      * ids (resolved via `conversations.list` on Socket Mode). On
      * Cursor-managed hosting, id entries become channel-scoped
      * subscriptions. A lone `"*"` is the guest watcher only: it is omitted
      * from the deploy manifest, and a thread reply is delivered when a
-     * mention already opened that thread. The bot must be a member of a
-     * channel to receive its messages.
+     * mention already opened that thread. On hosting, the deployment's
+     * channel edges decide which top-level posts arrive (for example an
+     * installation's alert channels), so `"*"` does not mean every channel.
+     * The bot must be a member of a channel to receive its messages.
      */
     allow: string[];
     /**
@@ -486,7 +488,7 @@ export interface SlackChannelPostsOptions {
      * channel posts — never on replies inside other people's threads.
      * `"replies"` is the opposite: thread replies only (`ts !== threadTs`),
      * never a top-level post. `"all"` is both. A lone `"*"` allowlist
-     * requires `"replies"`.
+     * requires `"replies"`, or `"all"` together with `includeBotPosts: true`.
      */
     posts?: "top-level" | "all" | "replies";
     /**