@cursor/bdk 0.2.8 → 0.2.10

package/dist/internal/cli-slack.js

@@ -3,15 +3,6 @@
  * dashboard-wizard launcher (`slack-provision-client.ts`), and
  * `init --manual` for Slack CLI / paste-at-api.slack.com manifests.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { access, readFile } from "node:fs/promises";
 import { basename, extname, join, resolve as resolvePath } from "node:path";
 import { envPrefixFromName, formatSlackSetupGuide, initSlackChannel, runSlackDoctor, slackEnvKeys, } from "../channels/slack/index.js";
@@ -42,7 +33,7 @@ Usage:
   ${CLI} slack icon      <URL-or-FILE> [--dir .] [--slack-team T0123ABCD]
                                 [--prod] [--team <id>] [--json]
   ${CLI} slack init --manual [--dir .] [--name NAME]
-                                [--prefix PREFIX | --no-prefix] [--channel-posts]
+                                [--prefix PREFIX | --no-prefix]
                                 [--install | --no-install]
                                 [--slack-team T0123ABCD] [--prod]
   ${CLI} slack manifest --env dev|prod|both [--dir .] [--name NAME]
@@ -56,7 +47,7 @@ create/destroy/icon — dedicated Socket Mode app via the Cursor dashboard:
            <dir>/.env.local and runs doctor. Requires \`${CLI} login\`
            (or CURSOR_API_KEY). A team service-account key cannot
            provision Slack apps. --prod provisions the prod app (default
-           dev). --name / --icon / --channel-posts prefill the wizard.
+           dev). --name / --icon prefill the wizard.
            All three follow the agent's \`architecture\` (agent.ts;
            default v2): the wizard stores tokens on that deployment and
            the app inventory lives on that control plane.
@@ -82,73 +73,67 @@ Env tokens:
 
 See also: skills/setup-slack/SKILL.md
 `;
-export function cmdSlack(subcommand, options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        switch (subcommand) {
-            case undefined:
-            case "help":
-            case "--help":
-            case "-h":
-                process.stdout.write(SLACK_HELP);
-                return subcommand === undefined ? 1 : 0;
-            case "setup":
-                process.stdout.write(formatSlackSetupGuide());
-                return 0;
-            case "create":
-                return cmdSlackCreate(options);
-            case "destroy":
-                return cmdSlackDestroy(options);
-            case "icon":
-                return cmdSlackIcon(options);
-            case "init":
-                return cmdSlackInit({
-                    dir: options.dir,
-                    name: options.name,
-                    prefix: options.prefix,
-                    noPrefix: options.noPrefix,
-                    channelPosts: options.channelPosts,
-                    manual: options.manual,
-                    install: options.install,
-                    noInstall: options.noInstall,
-                    slackTeam: options.slackTeam,
-                    detectSlackCli: options.detectSlackCli,
-                    runSlackCli: options.runSlackCli,
-                    prod: options.prod,
-                    out: options.out,
-                    err: options.err,
-                });
-            case "manifest":
-                return runSlackManifest(options);
-            case "doctor":
-                return runDoctor(options);
-            default:
-                process.stderr.write(`Unknown slack subcommand: ${subcommand}\n`);
-                process.stdout.write(SLACK_HELP);
-                return 1;
-        }
-    });
+export async function cmdSlack(subcommand, options) {
+    switch (subcommand) {
+        case undefined:
+        case "help":
+        case "--help":
+        case "-h":
+            process.stdout.write(SLACK_HELP);
+            return subcommand === undefined ? 1 : 0;
+        case "setup":
+            process.stdout.write(formatSlackSetupGuide());
+            return 0;
+        case "create":
+            return cmdSlackCreate(options);
+        case "destroy":
+            return cmdSlackDestroy(options);
+        case "icon":
+            return cmdSlackIcon(options);
+        case "init":
+            return cmdSlackInit({
+                dir: options.dir,
+                name: options.name,
+                prefix: options.prefix,
+                noPrefix: options.noPrefix,
+                manual: options.manual,
+                install: options.install,
+                noInstall: options.noInstall,
+                slackTeam: options.slackTeam,
+                detectSlackCli: options.detectSlackCli,
+                runSlackCli: options.runSlackCli,
+                prod: options.prod,
+                out: options.out,
+                err: options.err,
+            });
+        case "manifest":
+            return runSlackManifest(options);
+        case "doctor":
+            return runDoctor(options);
+        default:
+            process.stderr.write(`Unknown slack subcommand: ${subcommand}\n`);
+            process.stdout.write(SLACK_HELP);
+            return 1;
+    }
 }
-function runDoctor(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b;
-        const dir = resolvePath(options.dir);
-        // Tokens usually live in the agent's .env.local; real env still wins.
-        loadAgentLocalEnv(dir);
-        const envPrefix = resolveDoctorEnvPrefix(options, dir);
-        const doctor = (_a = options.doctorImpl) !== null && _a !== void 0 ? _a : runSlackDoctor;
-        const channels = (_b = options.channels) !== null && _b !== void 0 ? _b : [];
-        const result = yield doctor({
-            envPrefix,
-            channels: channels.length > 0 ? channels : undefined,
-        });
-        if (options.json) {
-            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-        }
-        else {
-            process.stdout.write(renderDoctorReport(result));
-        }
-        return result.ok ? 0 : 1;
+async function runDoctor(options) {
+    const dir = resolvePath(options.dir);
+    // Tokens usually live in the agent's .env.local; real env still wins.
+    loadAgentLocalEnv(dir);
+    const envPrefix = resolveDoctorEnvPrefix(options, dir);
+    const doctor = options.doctorImpl ?? runSlackDoctor;
+    const channels = options.channels ?? [];
+    const result = await doctor({
+        envPrefix,
+        channels: channels.length > 0 ? channels : undefined,
     });
+    if (options.json) {
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(renderDoctorReport(result));
+    }
+    return result.ok ? 0 : 1;
 }
 /**
  * --prefix / --no-prefix win; otherwise the directory-derived prefix
@@ -171,10 +156,9 @@ function resolveDoctorEnvPrefix(options, dir) {
 // ============================================================================
 // create / destroy — Cursor "Add to Slack" managed provisioning
 // ============================================================================
-const DEFAULT_WIZARD_POLL_INTERVAL_MS = 3000;
+const DEFAULT_WIZARD_POLL_INTERVAL_MS = 3_000;
 const DEFAULT_WIZARD_POLL_TIMEOUT_MS = 60 * 60 * 1000;
 function resolveSlackAppTarget(options, err) {
-    var _a, _b;
     if (options.env === "both" && options.prod !== true) {
         err("Provisioning targets one env at a time; pass --prod for the prod app (default dev).\n");
         return 1;
@@ -188,15 +172,14 @@ function resolveSlackAppTarget(options, err) {
         err(`Could not derive a valid app slug from the directory name ${JSON.stringify(basename(dir))} (slugs start with a letter or digit; lowercase letters, digits, '-', '_'); rename the directory or pass --dir <agent>.\n`);
         return 1;
     }
-    const name = (_a = options.name) !== null && _a !== void 0 ? _a : basename(dir);
-    const envPrefix = options.noPrefix === true ? undefined : ((_b = options.prefix) !== null && _b !== void 0 ? _b : envPrefixFromName(basename(dir)));
+    const name = options.name ?? basename(dir);
+    const envPrefix = options.noPrefix === true ? undefined : (options.prefix ?? envPrefixFromName(basename(dir)));
     return { dir, name, slug, env, envPrefix, envKeys: slackEnvKeys(envPrefix) };
 }
 function errStream(options) {
-    var _a;
-    return (_a = options.err) !== null && _a !== void 0 ? _a : ((text) => void process.stderr.write(text));
+    return options.err ?? ((text) => void process.stderr.write(text));
 }
-const SLACK_ICON_MAX_BYTES = 524288;
+const SLACK_ICON_MAX_BYTES = 524_288;
 const SLACK_ICON_URL_MAX_LENGTH = 3000;
 const SLACK_ICON_CONTENT_TYPES = {
     ".png": "image/png",
@@ -204,39 +187,37 @@ const SLACK_ICON_CONTENT_TYPES = {
     ".jpeg": "image/jpeg",
     ".gif": "image/gif",
 };
-function resolveSlackIconSource(raw, err) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (raw.startsWith("https://")) {
-            if (raw.length > SLACK_ICON_URL_MAX_LENGTH) {
-                err(`Icon URLs must be at most ${SLACK_ICON_URL_MAX_LENGTH} characters (got ${raw.length}).\n`);
-                return 1;
-            }
-            return { kind: "url", url: raw };
-        }
-        if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) {
-            err(`Icon URLs must be https (got ${JSON.stringify(raw)}).\n`);
-            return 1;
-        }
-        const path = resolvePath(raw);
-        const contentType = SLACK_ICON_CONTENT_TYPES[extname(path).toLowerCase()];
-        if (contentType === undefined) {
-            err(`Icon files must be .png, .jpg/.jpeg, or .gif (got ${JSON.stringify(basename(path))}).\n`);
-            return 1;
-        }
-        let data;
-        try {
-            data = yield readFile(path);
-        }
-        catch (error) {
-            err(`Could not read the icon file ${path}: ${describeError(error)}\n`);
+async function resolveSlackIconSource(raw, err) {
+    if (raw.startsWith("https://")) {
+        if (raw.length > SLACK_ICON_URL_MAX_LENGTH) {
+            err(`Icon URLs must be at most ${SLACK_ICON_URL_MAX_LENGTH} characters (got ${raw.length}).\n`);
             return 1;
         }
-        if (data.length > SLACK_ICON_MAX_BYTES) {
-            err(`Icon files must be at most ${SLACK_ICON_MAX_BYTES} bytes (${path} is ${data.length}).\n`);
-            return 1;
-        }
-        return { kind: "file", base64: data.toString("base64"), contentType, path };
-    });
+        return { kind: "url", url: raw };
+    }
+    if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) {
+        err(`Icon URLs must be https (got ${JSON.stringify(raw)}).\n`);
+        return 1;
+    }
+    const path = resolvePath(raw);
+    const contentType = SLACK_ICON_CONTENT_TYPES[extname(path).toLowerCase()];
+    if (contentType === undefined) {
+        err(`Icon files must be .png, .jpg/.jpeg, or .gif (got ${JSON.stringify(basename(path))}).\n`);
+        return 1;
+    }
+    let data;
+    try {
+        data = await readFile(path);
+    }
+    catch (error) {
+        err(`Could not read the icon file ${path}: ${describeError(error)}\n`);
+        return 1;
+    }
+    if (data.length > SLACK_ICON_MAX_BYTES) {
+        err(`Icon files must be at most ${SLACK_ICON_MAX_BYTES} bytes (${path} is ${data.length}).\n`);
+        return 1;
+    }
+    return { kind: "file", base64: data.toString("base64"), contentType, path };
 }
 function toSlackAppIconInput(source) {
     return source.kind === "url"
@@ -247,24 +228,22 @@ function toSlackAppIconInput(source) {
  * File icons post after the wizard finishes. URL icons ride the mint
  * payload. Best-effort: failures warn, never fail the create.
  */
-function applySlackCreateFileIcon(ctx, source, appId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (source === undefined || source.kind === "url") {
-            return undefined;
-        }
-        try {
-            yield ctx.client.setAppIcon({
-                teamId: ctx.teamId,
-                slackAppId: appId,
-                icon: toSlackAppIconInput(source),
-            });
-            return "set";
-        }
-        catch (error) {
-            ctx.err(`warning: setting the Slack app icon failed: ${describeError(error)}\nRetry with \`${CLI} slack icon ${source.path}\`.\n`);
-            return "failed";
-        }
-    });
+async function applySlackCreateFileIcon(ctx, source, appId) {
+    if (source === undefined || source.kind === "url") {
+        return undefined;
+    }
+    try {
+        await ctx.client.setAppIcon({
+            teamId: ctx.teamId,
+            slackAppId: appId,
+            icon: toSlackAppIconInput(source),
+        });
+        return "set";
+    }
+    catch (error) {
+        ctx.err(`warning: setting the Slack app icon failed: ${describeError(error)}\nRetry with \`${CLI} slack icon ${source.path}\`.\n`);
+        return "failed";
+    }
 }
 /**
  * The Slack control plane follows the agent's hosted architecture
@@ -274,15 +253,12 @@ function applySlackCreateFileIcon(ctx, source, appId) {
  * that is not an agent project yet has nothing to read and takes the
  * framework default, same as an `agent.ts` that omits the field.
  */
-function resolveSlackAppArchitecture(dir) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        if (!(yield isAgentProjectDir(dir))) {
-            return DEFAULT_AGENT_ARCHITECTURE;
-        }
-        const project = yield loadAgentProject(dir);
-        return (_a = project.agent.architecture) !== null && _a !== void 0 ? _a : DEFAULT_AGENT_ARCHITECTURE;
-    });
+async function resolveSlackAppArchitecture(dir) {
+    if (!(await isAgentProjectDir(dir))) {
+        return DEFAULT_AGENT_ARCHITECTURE;
+    }
+    const project = await loadAgentProject(dir);
+    return project.agent.architecture ?? DEFAULT_AGENT_ARCHITECTURE;
 }
 /**
  * Credentials → provisioning client → team id, sharing the deploy CLI's
@@ -290,47 +266,44 @@ function resolveSlackAppArchitecture(dir) {
  * default-team fallback). Returns an exit code (error already rendered)
  * on failure.
  */
-function prepareProvision(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d, _e;
-        const out = (_a = options.out) !== null && _a !== void 0 ? _a : ((text) => void process.stdout.write(text));
-        const err = errStream(options);
-        const credential = resolveApiKeySync(options.apiKey === undefined ? undefined : { apiKey: options.apiKey });
-        if ((credential === null || credential === void 0 ? void 0 : credential.source) === "service-account") {
-            err(`A team service-account key cannot provision Slack apps. Sign in with \`${CLI} login\` or set CURSOR_API_KEY.\n`);
-            return 1;
-        }
-        const auth = yield resolveDeployAuth({
-            team: options.team,
-            apiKey: options.apiKey,
-            fetchImpl: options.fetchImpl,
-            err,
-        });
-        if (typeof auth === "number") {
-            return auth;
-        }
-        // Loading the project imports its authored modules; do it only once the
-        // credentials are known good.
-        const architecture = yield resolveSlackAppArchitecture(resolvePath(options.dir));
-        // Provisioning routes live on the external API host beside deploys.
-        return {
-            client: new AgentServeSlackClient({
-                backendUrl: cursorExternalApiUrl(),
-                apiKey: auth.apiKey,
-                architecture,
-                fetchImpl: options.fetchImpl,
-            }),
-            teamId: auth.teamId,
-            architecture,
-            json: options.json === true,
-            out,
-            err,
-            dim: ((_b = options.palette) !== null && _b !== void 0 ? _b : stderrPalette()).dim,
-            openBrowserImpl: (_c = options.openBrowserImpl) !== null && _c !== void 0 ? _c : openBrowser,
-            pollIntervalMs: (_d = options.connectPollIntervalMs) !== null && _d !== void 0 ? _d : DEFAULT_WIZARD_POLL_INTERVAL_MS,
-            pollTimeoutMs: (_e = options.connectPollTimeoutMs) !== null && _e !== void 0 ? _e : DEFAULT_WIZARD_POLL_TIMEOUT_MS,
-        };
+async function prepareProvision(options) {
+    const out = options.out ?? ((text) => void process.stdout.write(text));
+    const err = errStream(options);
+    const credential = resolveApiKeySync(options.apiKey === undefined ? undefined : { apiKey: options.apiKey });
+    if (credential?.source === "service-account") {
+        err(`A team service-account key cannot provision Slack apps. Sign in with \`${CLI} login\` or set CURSOR_API_KEY.\n`);
+        return 1;
+    }
+    const auth = await resolveDeployAuth({
+        team: options.team,
+        apiKey: options.apiKey,
+        fetchImpl: options.fetchImpl,
+        err,
     });
+    if (typeof auth === "number") {
+        return auth;
+    }
+    // Loading the project imports its authored modules; do it only once the
+    // credentials are known good.
+    const architecture = await resolveSlackAppArchitecture(resolvePath(options.dir));
+    // Provisioning routes live on the external API host beside deploys.
+    return {
+        client: new AgentServeSlackClient({
+            backendUrl: cursorExternalApiUrl(),
+            apiKey: auth.apiKey,
+            architecture,
+            fetchImpl: options.fetchImpl,
+        }),
+        teamId: auth.teamId,
+        architecture,
+        json: options.json === true,
+        out,
+        err,
+        dim: (options.palette ?? stderrPalette()).dim,
+        openBrowserImpl: options.openBrowserImpl ?? openBrowser,
+        pollIntervalMs: options.connectPollIntervalMs ?? DEFAULT_WIZARD_POLL_INTERVAL_MS,
+        pollTimeoutMs: options.connectPollTimeoutMs ?? DEFAULT_WIZARD_POLL_TIMEOUT_MS,
+    };
 }
 function writePendingAdminWait(ctx, poll) {
     const appSuffix = poll.appId === undefined ? "" : ` (${poll.appId})`;
@@ -358,273 +331,266 @@ function writePendingAdminWait(ctx, poll) {
     ctx.err(ctx.dim(`  Keep this command running.\n` +
         `  After an admin approves, click Retry in the dashboard.\n`));
 }
-export function cmdSlackCreate(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c;
-        const target = resolveSlackAppTarget(options, errStream(options));
-        if (typeof target === "number") {
-            return target;
-        }
-        let iconSource;
-        if (options.icon !== undefined) {
-            const resolved = yield resolveSlackIconSource(options.icon, errStream(options));
-            if (typeof resolved === "number") {
-                return resolved;
-            }
-            iconSource = resolved;
-        }
-        const ctx = yield prepareProvision(options);
-        if (typeof ctx === "number") {
-            return ctx;
-        }
-        let wrote;
-        try {
-            wrote = yield scaffoldSlackChannelFiles(target);
-        }
-        catch (error) {
-            ctx.err(`${describeError(error)}\n`);
-            return 1;
-        }
-        if (wrote.length > 0 && !ctx.json) {
-            ctx.err(`${ctx.dim(`Scaffolded the Slack channel: ${wrote.join(", ")}`)}\n`);
+export async function cmdSlackCreate(options) {
+    const target = resolveSlackAppTarget(options, errStream(options));
+    if (typeof target === "number") {
+        return target;
+    }
+    let iconSource;
+    if (options.icon !== undefined) {
+        const resolved = await resolveSlackIconSource(options.icon, errStream(options));
+        if (typeof resolved === "number") {
+            return resolved;
         }
-        const source = yield inferDeployGitSource(target.dir);
-        let minted;
+        iconSource = resolved;
+    }
+    const ctx = await prepareProvision(options);
+    if (typeof ctx === "number") {
+        return ctx;
+    }
+    let wrote;
+    try {
+        wrote = await scaffoldSlackChannelFiles(target);
+    }
+    catch (error) {
+        ctx.err(`${describeError(error)}\n`);
+        return 1;
+    }
+    if (wrote.length > 0 && !ctx.json) {
+        ctx.err(`${ctx.dim(`Scaffolded the Slack channel: ${wrote.join(", ")}`)}\n`);
+    }
+    const source = await inferDeployGitSource(target.dir);
+    let minted;
+    try {
+        minted = await ctx.client.mintWizard({
+            teamId: ctx.teamId,
+            slug: target.slug,
+            env: target.env,
+            envPrefix: target.envPrefix,
+            name: options.name ?? target.name,
+            gitRepoUrl: source.gitRepoUrl,
+            gitRef: source.gitRef,
+            agentPath: source.agentPath,
+            // Control planes predating the full permission set only subscribe
+            // channel posts when asked; newer ones always do.
+            channelPosts: options.channelPosts === true ? true : undefined,
+            slackTeamId: options.slackTeam,
+            iconUrl: iconSource?.kind === "url" ? iconSource.url : undefined,
+            force: options.force === true ? true : undefined,
+        });
+    }
+    catch (error) {
+        return renderSlackApiError(error, ctx.err);
+    }
+    const waitMinutes = Math.round(ctx.pollTimeoutMs / 60_000);
+    ctx.err(`Finish Slack setup in the browser:\n\n  ${minted.url}\n\n`);
+    ctx.err(ctx.dim(`  Sign in as the same Cursor account that ran this command.\n` +
+        `  The CLI waits here (up to ${waitMinutes} minutes).\n`));
+    ctx.openBrowserImpl(minted.url);
+    const deadline = Date.now() + ctx.pollTimeoutMs;
+    let sawPendingAdmin = false;
+    let poll;
+    for (;;) {
         try {
-            minted = yield ctx.client.mintWizard({
-                teamId: ctx.teamId,
-                slug: target.slug,
-                env: target.env,
-                envPrefix: target.envPrefix,
-                name: (_a = options.name) !== null && _a !== void 0 ? _a : target.name,
-                gitRepoUrl: source.gitRepoUrl,
-                gitRef: source.gitRef,
-                agentPath: source.agentPath,
-                channelPosts: options.channelPosts === true ? true : undefined,
-                slackTeamId: options.slackTeam,
-                iconUrl: (iconSource === null || iconSource === void 0 ? void 0 : iconSource.kind) === "url" ? iconSource.url : undefined,
-                force: options.force === true ? true : undefined,
-            });
+            poll = await ctx.client.pollWizard(minted.wizardId);
         }
         catch (error) {
-            return renderSlackApiError(error, ctx.err);
-        }
-        const waitMinutes = Math.round(ctx.pollTimeoutMs / 60000);
-        ctx.err(`Finish Slack setup in the browser:\n\n  ${minted.url}\n\n`);
-        ctx.err(ctx.dim(`  Sign in as the same Cursor account that ran this command.\n` +
-            `  The CLI waits here (up to ${waitMinutes} minutes).\n`));
-        ctx.openBrowserImpl(minted.url);
-        const deadline = Date.now() + ctx.pollTimeoutMs;
-        let sawPendingAdmin = false;
-        let poll;
-        for (;;) {
-            try {
-                poll = yield ctx.client.pollWizard(minted.wizardId);
-            }
-            catch (error) {
-                if (Date.now() >= deadline) {
-                    return renderSlackApiError(error, ctx.err);
-                }
-                yield sleep(ctx.pollIntervalMs);
-                continue;
-            }
-            if (poll.status === "complete") {
-                break;
-            }
-            if (poll.status === "failed") {
-                ctx.err(`${(_b = poll.error) !== null && _b !== void 0 ? _b : "Slack setup failed"}\n`);
-                return 1;
-            }
-            if (poll.status === "pending_admin_approval" && !sawPendingAdmin) {
-                sawPendingAdmin = true;
-                writePendingAdminWait(ctx, poll);
-            }
             if (Date.now() >= deadline) {
-                ctx.err(`Timed out waiting for Slack setup.\n\n`);
-                ctx.err(ctx.dim(`  Finish it in the browser, then re-run \`${CLI} slack create\`.\n\n`));
-                ctx.err(`  ${minted.url}\n`);
-                return 1;
+                return renderSlackApiError(error, ctx.err);
             }
-            yield sleep(ctx.pollIntervalMs);
+            await sleep(ctx.pollIntervalMs);
+            continue;
         }
-        if (poll === undefined || poll.localEnv === undefined) {
-            ctx.err(poll.localEnvClaimed === true
-                ? "Tokens were already claimed by another poll; re-run create to rotate them.\n"
-                : "Slack setup finished but no tokens were returned; re-run create.\n");
-            return 1;
-        }
-        const envEntries = [{ key: target.envKeys.bot, value: poll.localEnv.botToken }];
-        if (poll.localEnv.appToken !== undefined) {
-            envEntries.push({ key: target.envKeys.app, value: poll.localEnv.appToken });
-        }
-        const envFile = join(target.dir, ".env.local");
-        try {
-            yield upsertEnvFile(envFile, envEntries);
-            if (yield ensureEnvLocalGitignored(target.dir)) {
-                wrote.push(".gitignore (+.env.local)");
-            }
+        if (poll.status === "complete") {
+            break;
         }
-        catch (error) {
-            ctx.err(`Could not write ${envFile}: ${describeError(error)}\n`);
+        if (poll.status === "failed") {
+            ctx.err(`${poll.error ?? "Slack setup failed"}\n`);
             return 1;
         }
-        wrote.push(".env.local");
-        for (const { key, value } of envEntries) {
-            process.env[key] = value;
-        }
-        if (poll.localEnv.appToken === undefined) {
-            ctx.err(ctx.dim(`warning: Slack did not return an app-level token, so ${target.envKeys.app} was not written.\n` +
-                `  Re-run \`${CLI} slack create\` to recover it.\n`));
+        if (poll.status === "pending_admin_approval" && !sawPendingAdmin) {
+            sawPendingAdmin = true;
+            writePendingAdminWait(ctx, poll);
         }
-        let iconStatus;
-        if (poll.appId !== undefined) {
-            iconStatus = yield applySlackCreateFileIcon(ctx, iconSource, poll.appId);
+        if (Date.now() >= deadline) {
+            ctx.err(`Timed out waiting for Slack setup.\n\n`);
+            ctx.err(ctx.dim(`  Finish it in the browser, then re-run \`${CLI} slack create\`.\n\n`));
+            ctx.err(`  ${minted.url}\n`);
+            return 1;
         }
-        if (ctx.json) {
-            ctx.out(`${JSON.stringify({
-                ok: true,
-                appId: poll.appId,
-                status: poll.status,
-                architecture: ctx.architecture,
-                envKeys: target.envKeys,
-                wrote,
-                iconStatus,
-            }, null, 2)}\n`);
-            return 0;
+        await sleep(ctx.pollIntervalMs);
+    }
+    if (poll === undefined || poll.localEnv === undefined) {
+        ctx.err(poll.localEnvClaimed === true
+            ? "Tokens were already claimed by another poll; re-run create to rotate them.\n"
+            : "Slack setup finished but no tokens were returned; re-run create.\n");
+        return 1;
+    }
+    const envEntries = [{ key: target.envKeys.bot, value: poll.localEnv.botToken }];
+    if (poll.localEnv.appToken !== undefined) {
+        envEntries.push({ key: target.envKeys.app, value: poll.localEnv.appToken });
+    }
+    const envFile = join(target.dir, ".env.local");
+    try {
+        await upsertEnvFile(envFile, envEntries);
+        if (await ensureEnvLocalGitignored(target.dir)) {
+            wrote.push(".gitignore (+.env.local)");
         }
-        ctx.out(`Slack is connected for ${target.slug}` +
-            (poll.appId === undefined ? "" : ` (app ${poll.appId})`) +
-            `.\n  wrote ${envEntries.map(entry => entry.key).join(" + ")} to ${envFile}\n\n`);
-        const doctor = (_c = options.doctorImpl) !== null && _c !== void 0 ? _c : runSlackDoctor;
-        const doctorResult = yield doctor(target.envPrefix === undefined ? {} : { envPrefix: target.envPrefix });
-        ctx.out(renderDoctorReport(doctorResult));
-        ctx.out(`\nNext steps:\n` +
-            `  1. ${CLI} serve --dir ${options.dir} --dev\n` +
-            `  2. Invite the bot in Slack and @mention it.\n`);
+    }
+    catch (error) {
+        ctx.err(`Could not write ${envFile}: ${describeError(error)}\n`);
+        return 1;
+    }
+    wrote.push(".env.local");
+    for (const { key, value } of envEntries) {
+        process.env[key] = value;
+    }
+    if (poll.localEnv.appToken === undefined) {
+        ctx.err(ctx.dim(`warning: Slack did not return an app-level token, so ${target.envKeys.app} was not written.\n` +
+            `  Re-run \`${CLI} slack create\` to recover it.\n`));
+    }
+    let iconStatus;
+    if (poll.appId !== undefined) {
+        iconStatus = await applySlackCreateFileIcon(ctx, iconSource, poll.appId);
+    }
+    if (ctx.json) {
+        ctx.out(`${JSON.stringify({
+            ok: true,
+            appId: poll.appId,
+            status: poll.status,
+            architecture: ctx.architecture,
+            envKeys: target.envKeys,
+            wrote,
+            iconStatus,
+        }, null, 2)}\n`);
         return 0;
-    });
+    }
+    ctx.out(`Slack is connected for ${target.slug}` +
+        (poll.appId === undefined ? "" : ` (app ${poll.appId})`) +
+        `.\n  wrote ${envEntries.map(entry => entry.key).join(" + ")} to ${envFile}\n\n`);
+    const doctor = options.doctorImpl ?? runSlackDoctor;
+    const doctorResult = await doctor(target.envPrefix === undefined ? {} : { envPrefix: target.envPrefix });
+    ctx.out(renderDoctorReport(doctorResult));
+    ctx.out(`\nNext steps:\n` +
+        `  1. ${CLI} serve --dir ${options.dir} --dev\n` +
+        `  2. Invite the bot in Slack and @mention it.\n`);
+    return 0;
 }
 /**
  * Resolve the one provisioned app for (slug, env[, --slack-team]) from
  * `GET /status`. Returns an exit code with the error already rendered
  * when zero or several apps match.
  */
-function resolveProvisionedApp(ctx, target, options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        let status;
-        try {
-            status = yield ctx.client.status(ctx.teamId);
-        }
-        catch (error) {
-            return renderSlackApiError(error, ctx.err);
-        }
-        const sameSlug = status.apps.filter(app => app.slug === target.slug);
-        let candidates = sameSlug.filter(app => app.env === target.env);
-        if (options.slackTeam !== undefined) {
-            candidates = candidates.filter(app => app.slackTeamId === options.slackTeam);
-        }
-        if (candidates.length === 0) {
-            ctx.err(`No provisioned ${target.env} Slack app for "${target.slug}"${options.slackTeam === undefined ? "" : ` in workspace ${options.slackTeam}`} (team ${ctx.teamId}).\n` +
-                (sameSlug.length === 0
-                    ? ""
-                    : `Provisioned apps for this agent:\n${formatAppList(sameSlug)}`));
-            return 1;
-        }
-        if (candidates.length > 1) {
-            ctx.err(`Multiple provisioned Slack apps match "${target.slug}" (${target.env}):\n` +
-                formatAppList(candidates) +
-                `Pass --slack-team <id> to pick one.\n`);
-            return 1;
-        }
-        return candidates[0];
-    });
+async function resolveProvisionedApp(ctx, target, options) {
+    let status;
+    try {
+        status = await ctx.client.status(ctx.teamId);
+    }
+    catch (error) {
+        return renderSlackApiError(error, ctx.err);
+    }
+    const sameSlug = status.apps.filter(app => app.slug === target.slug);
+    let candidates = sameSlug.filter(app => app.env === target.env);
+    if (options.slackTeam !== undefined) {
+        candidates = candidates.filter(app => app.slackTeamId === options.slackTeam);
+    }
+    if (candidates.length === 0) {
+        ctx.err(`No provisioned ${target.env} Slack app for "${target.slug}"${options.slackTeam === undefined ? "" : ` in workspace ${options.slackTeam}`} (team ${ctx.teamId}).\n` +
+            (sameSlug.length === 0
+                ? ""
+                : `Provisioned apps for this agent:\n${formatAppList(sameSlug)}`));
+        return 1;
+    }
+    if (candidates.length > 1) {
+        ctx.err(`Multiple provisioned Slack apps match "${target.slug}" (${target.env}):\n` +
+            formatAppList(candidates) +
+            `Pass --slack-team <id> to pick one.\n`);
+        return 1;
+    }
+    return candidates[0];
 }
-export function cmdSlackDestroy(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const target = resolveSlackAppTarget(options, errStream(options));
-        if (typeof target === "number") {
-            return target;
-        }
-        const ctx = yield prepareProvision(options);
-        if (typeof ctx === "number") {
-            return ctx;
-        }
-        const app = yield resolveProvisionedApp(ctx, target, options);
-        if (typeof app === "number") {
-            return app;
-        }
-        try {
-            yield ctx.client.deleteApp({
-                teamId: ctx.teamId,
-                slackAppId: app.slackAppId,
-            });
-        }
-        catch (error) {
-            return renderSlackApiError(error, ctx.err);
-        }
-        if (ctx.json) {
-            ctx.out(`${JSON.stringify({
-                ok: true,
-                deleted: true,
-                appId: app.slackAppId,
-                slackTeamId: app.slackTeamId,
-                slug: target.slug,
-                env: target.env,
-            }, null, 2)}\n`);
-            return 0;
-        }
-        ctx.out(`Deleted the ${target.env} Slack app for ${target.slug} (app ${app.slackAppId}) from workspace ${app.slackTeamId}.\n` +
-            `Tokens in .env.local were left in place — ${target.envKeys.bot} / ${target.envKeys.app} are now inert; remove them whenever you like.\n`);
+export async function cmdSlackDestroy(options) {
+    const target = resolveSlackAppTarget(options, errStream(options));
+    if (typeof target === "number") {
+        return target;
+    }
+    const ctx = await prepareProvision(options);
+    if (typeof ctx === "number") {
+        return ctx;
+    }
+    const app = await resolveProvisionedApp(ctx, target, options);
+    if (typeof app === "number") {
+        return app;
+    }
+    try {
+        await ctx.client.deleteApp({
+            teamId: ctx.teamId,
+            slackAppId: app.slackAppId,
+        });
+    }
+    catch (error) {
+        return renderSlackApiError(error, ctx.err);
+    }
+    if (ctx.json) {
+        ctx.out(`${JSON.stringify({
+            ok: true,
+            deleted: true,
+            appId: app.slackAppId,
+            slackTeamId: app.slackTeamId,
+            slug: target.slug,
+            env: target.env,
+        }, null, 2)}\n`);
         return 0;
-    });
+    }
+    ctx.out(`Deleted the ${target.env} Slack app for ${target.slug} (app ${app.slackAppId}) from workspace ${app.slackTeamId}.\n` +
+        `Tokens in .env.local were left in place — ${target.envKeys.bot} / ${target.envKeys.app} are now inert; remove them whenever you like.\n`);
+    return 0;
 }
-export function cmdSlackIcon(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const err = errStream(options);
-        if (options.iconSource === undefined) {
-            err(`Usage: ${CLI} slack icon <https-url-or-file> [--dir .] [--slack-team T0123ABCD] [--prod] [--team <id>] [--json]\n`);
-            return 1;
-        }
-        const source = yield resolveSlackIconSource(options.iconSource, err);
-        if (typeof source === "number") {
-            return source;
-        }
-        const target = resolveSlackAppTarget(options, err);
-        if (typeof target === "number") {
-            return target;
-        }
-        const ctx = yield prepareProvision(options);
-        if (typeof ctx === "number") {
-            return ctx;
-        }
-        const app = yield resolveProvisionedApp(ctx, target, options);
-        if (typeof app === "number") {
-            return app;
-        }
-        try {
-            yield ctx.client.setAppIcon({
-                teamId: ctx.teamId,
-                slackAppId: app.slackAppId,
-                icon: toSlackAppIconInput(source),
-            });
-        }
-        catch (error) {
-            return renderSlackApiError(error, ctx.err);
-        }
-        if (ctx.json) {
-            ctx.out(`${JSON.stringify({
-                ok: true,
-                appId: app.slackAppId,
-                slackTeamId: app.slackTeamId,
-                slug: target.slug,
-                env: target.env,
-                iconStatus: "set",
-            }, null, 2)}\n`);
-            return 0;
-        }
-        ctx.out(`Set the icon for the ${target.env} Slack app for ${target.slug} (app ${app.slackAppId}).\n`);
+export async function cmdSlackIcon(options) {
+    const err = errStream(options);
+    if (options.iconSource === undefined) {
+        err(`Usage: ${CLI} slack icon <https-url-or-file> [--dir .] [--slack-team T0123ABCD] [--prod] [--team <id>] [--json]\n`);
+        return 1;
+    }
+    const source = await resolveSlackIconSource(options.iconSource, err);
+    if (typeof source === "number") {
+        return source;
+    }
+    const target = resolveSlackAppTarget(options, err);
+    if (typeof target === "number") {
+        return target;
+    }
+    const ctx = await prepareProvision(options);
+    if (typeof ctx === "number") {
+        return ctx;
+    }
+    const app = await resolveProvisionedApp(ctx, target, options);
+    if (typeof app === "number") {
+        return app;
+    }
+    try {
+        await ctx.client.setAppIcon({
+            teamId: ctx.teamId,
+            slackAppId: app.slackAppId,
+            icon: toSlackAppIconInput(source),
+        });
+    }
+    catch (error) {
+        return renderSlackApiError(error, ctx.err);
+    }
+    if (ctx.json) {
+        ctx.out(`${JSON.stringify({
+            ok: true,
+            appId: app.slackAppId,
+            slackTeamId: app.slackTeamId,
+            slug: target.slug,
+            env: target.env,
+            iconStatus: "set",
+        }, null, 2)}\n`);
         return 0;
-    });
+    }
+    ctx.out(`Set the icon for the ${target.env} Slack app for ${target.slug} (app ${app.slackAppId}).\n`);
+    return 0;
 }
 function formatAppList(apps) {
     return apps
@@ -635,37 +601,33 @@ function formatAppList(apps) {
  * Scaffold the authored Slack channel when absent. Existing files are never
  * overwritten: initSlackChannel writes with `wx`.
  */
-function scaffoldSlackChannelFiles(target) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        const channelFile = projectPath(resolveProjectRoot(target.dir), "channels/slack.ts");
-        if (yield fileExists(join(target.dir, channelFile))) {
+async function scaffoldSlackChannelFiles(target) {
+    const channelFile = projectPath(resolveProjectRoot(target.dir), "channels/slack.ts");
+    if (await fileExists(join(target.dir, channelFile))) {
+        return [];
+    }
+    try {
+        const result = await initSlackChannel({
+            dir: target.dir,
+            name: target.name,
+            envPrefix: target.envPrefix ?? "",
+        });
+        return result.files;
+    }
+    catch (error) {
+        if (isErrnoException(error) && error.code === "EEXIST") {
             return [];
         }
-        try {
-            const result = yield initSlackChannel({
-                dir: target.dir,
-                name: target.name,
-                envPrefix: (_a = target.envPrefix) !== null && _a !== void 0 ? _a : "",
-            });
-            return result.files;
-        }
-        catch (error) {
-            if (isErrnoException(error) && error.code === "EEXIST") {
-                return [];
-            }
-            throw error;
-        }
-    });
+        throw error;
+    }
 }
 function renderDoctorReport(result) {
-    var _a;
     let text = `env: ${result.envKeys.bot} / ${result.envKeys.app}\n`;
     for (const check of result.checks) {
         text += `${check.ok ? "ok" : "!!"}  ${check.id}: ${check.message}\n`;
     }
     text += result.ok ? "doctor: pass\n" : "doctor: fail\n";
-    for (const note of (_a = result.notes) !== null && _a !== void 0 ? _a : []) {
+    for (const note of result.notes ?? []) {
         text += `\nnote: ${note}\n`;
     }
     return text;
@@ -679,16 +641,14 @@ function renderSlackApiError(error, err) {
         : `${error.message}\n`);
     return 1;
 }
-function fileExists(path) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            yield access(path);
-            return true;
-        }
-        catch (_a) {
-            return false;
-        }
-    });
+async function fileExists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
 function isErrnoException(error) {
     return error instanceof Error && "code" in error;