@cursor/july 0.1.26 → 0.1.28

package/dist/channels/slack/cursor-account.d.ts

@@ -11,7 +11,7 @@
  * a runtime ref here, and the server discovers it, binds the transport, and
  * dispatches relayed envelopes through the pack's normal inbound path.
  */
-import type { HostContext, SendMessageFn } from "../../types.js";
+import type { ArtifactsApi, HostContext, SendMessageFn } from "../../types.js";
 import type { EventIdDedupe } from "./event-id-dedupe.js";
 import type { SlackLog } from "./log.js";
 import type { SlackApiTransport, SlackChannelOptions, SlackCredentials, SlackMessageHandler } from "./types.js";
@@ -72,6 +72,7 @@ export declare function dispatchCursorSlackEnvelope(args: {
     envelope: CursorSlackEnvelope;
     send: SendMessageFn;
     host: HostContext;
+    artifacts: ArtifactsApi;
     hasContinuationSession?: (continuationToken: string) => Promise<boolean>;
     isContinuationBusy?: (continuationToken: string) => Promise<boolean>;
     getContinuationLastBotMessageTs?: (continuationToken: string) => Promise<string | undefined>;

package/dist/channels/slack/cursor-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-account.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/cursor-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0EAA0E;IAC1E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;IACpC,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,MAAM,EAAE,MAAM,QAAQ,CAAC;CACxB;AAID,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,yBAAyB,CAAC;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkEhB"}
+{"version":3,"file":"cursor-account.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/cursor-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0EAA0E;IAC1E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;IACpC,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,MAAM,EAAE,MAAM,QAAQ,CAAC;CACxB;AAID,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,yBAAyB,CAAC;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEhB"}

package/dist/channels/slack/cursor-account.js

@@ -83,7 +83,9 @@ export function dispatchCursorSlackEnvelope(args) {
         const handler = isDm ? runtime.onDirectMessage : runtime.onAppMention;
         yield dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind,
             message,
-            handler, send: args.send, credentials: runtime.credentials, host: args.host, log, evalCommandsEnabled: runtime.options.evalCommands !== false, cursorAgentName: envelope.agentName }, (args.hasContinuationSession === undefined
+            handler, send: args.send, credentials: runtime.credentials, host: args.host, artifacts: args.artifacts, log, evalCommandsEnabled: runtime.options.evalCommands !== false, cursorAgentName: envelope.agentName, 
+            // Backend router already refused externals for this envelope.
+            blockExternals: false }, (args.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: args.hasContinuationSession })), (args.isContinuationBusy === undefined
             ? {}

package/dist/channels/slack/defaults.d.ts

@@ -3,17 +3,20 @@
  */
 import type { ChannelEventHandlers } from "../../types.js";
 import { type SlackLog } from "./log.js";
-import type { SlackChannelState, SlackCredentials, SlackMessageHandler, SlackSuggestedPrompt } from "./types.js";
+import type { SlackAccessPolicy, SlackChannelState, SlackCredentials, SlackMessageHandler, SlackRespondTo, SlackSuggestedPrompt } from "./types.js";
+export declare function resolveSlackRespondTo(policy: SlackAccessPolicy | undefined): SlackRespondTo;
+/** Defaults to true when omitted. */
+export declare function resolveSlackBlockExternals(policy: SlackAccessPolicy | undefined): boolean;
 /** Scrubbed turn.failed body for Slack (secrets / paths / URLs stripped). */
 export declare function formatSlackTurnFailureMessage(raw: string | undefined): string;
 /** Default mention/DM inbound handler (optional custom loading rotation). */
-export declare function createDefaultOnInbound(loadingMessages?: readonly string[]): SlackMessageHandler;
+export declare function createDefaultOnInbound(loadingMessages?: readonly string[], policy?: SlackAccessPolicy): SlackMessageHandler;
 /**
  * Default watched-channel-post handler (optional custom loading rotation).
- * Same thread-scoped principal as mentions, tagged with
+ * Same principal policy as mentions, tagged with
  * `engagement: "channel_post"` for auth policies.
  */
-export declare function createDefaultOnChannelPost(loadingMessages?: readonly string[]): SlackMessageHandler;
+export declare function createDefaultOnChannelPost(loadingMessages?: readonly string[], policy?: SlackAccessPolicy): SlackMessageHandler;
 export declare const defaultOnAppMention: SlackMessageHandler;
 export declare const defaultOnDirectMessage: SlackMessageHandler;
 export declare const defaultOnChannelPost: SlackMessageHandler;

package/dist/channels/slack/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAe3D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAS7E;AA0BD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAClC,mBAAmB,CAOrB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAClC,mBAAmB,CASrB;AAED,eAAO,MAAM,mBAAmB,EAAE,mBACR,CAAC;AAC3B,eAAO,MAAM,sBAAsB,EAAE,mBACX,CAAC;AAC3B,eAAO,MAAM,oBAAoB,EAAE,mBACL,CAAC;AAE/B,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,QAAQ,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,yBAA8B,GACtC,oBAAoB,CAAC,iBAAiB,CAAC,CA8XzC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAe3D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,cAAc,CAEhB;AAED,qCAAqC;AACrC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,OAAO,CAET;AAED,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAS7E;AA0BD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,GACzB,mBAAmB,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,GACzB,mBAAmB,CAWrB;AAED,eAAO,MAAM,mBAAmB,EAAE,mBACR,CAAC;AAC3B,eAAO,MAAM,sBAAsB,EAAE,mBACX,CAAC;AAC3B,eAAO,MAAM,oBAAoB,EAAE,mBACL,CAAC;AAE/B,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,QAAQ,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,yBAA8B,GACtC,oBAAoB,CAAC,iBAAiB,CAAC,CA8XzC"}

package/dist/channels/slack/defaults.js

@@ -19,6 +19,13 @@ import { defaultSlackLog } from "./log.js";
 import { buildTaskChunkForResult, buildTaskChunksForCalls } from "./stream.js";
 const SLACK_TURN_FAILURE_FALLBACK = "I hit an error while handling your request. Please try again or rephrase.";
 const SLACK_TURN_FAILURE_MAX_CHARS = 400;
+export function resolveSlackRespondTo(policy) {
+    return (policy === null || policy === void 0 ? void 0 : policy.respondTo) === "author" ? "author" : "thread";
+}
+/** Defaults to true when omitted. */
+export function resolveSlackBlockExternals(policy) {
+    return (policy === null || policy === void 0 ? void 0 : policy.blockExternals) !== false;
+}
 /** Scrubbed turn.failed body for Slack (secrets / paths / URLs stripped). */
 export function formatSlackTurnFailureMessage(raw) {
     var _a;
@@ -52,25 +59,28 @@ function resolveLoadingMessages(loadingMessages) {
     return [...SLACK_DEFAULT_LOADING_MESSAGES];
 }
 /** Default mention/DM inbound handler (optional custom loading rotation). */
-export function createDefaultOnInbound(loadingMessages) {
+export function createDefaultOnInbound(loadingMessages, policy) {
     const rotating = resolveLoadingMessages(loadingMessages);
+    const respondTo = resolveSlackRespondTo(policy);
     return (ctx, message) => __awaiter(this, void 0, void 0, function* () {
         yield ctx.thread.startTyping("Thinking…", rotating);
-        const auth = defaultSlackAuth(message, ctx);
+        const auth = defaultSlackAuth(message, ctx, { respondTo });
         return auth === null ? null : { auth };
     });
 }
 /**
  * Default watched-channel-post handler (optional custom loading rotation).
- * Same thread-scoped principal as mentions, tagged with
+ * Same principal policy as mentions, tagged with
  * `engagement: "channel_post"` for auth policies.
  */
-export function createDefaultOnChannelPost(loadingMessages) {
+export function createDefaultOnChannelPost(loadingMessages, policy) {
     const rotating = resolveLoadingMessages(loadingMessages);
+    const respondTo = resolveSlackRespondTo(policy);
     return (ctx, message) => __awaiter(this, void 0, void 0, function* () {
         yield ctx.thread.startTyping("Thinking…", rotating);
         const auth = defaultSlackAuth(message, ctx, {
             engagement: "channel_post",
+            respondTo,
         });
         return auth === null ? null : { auth };
     });

package/dist/channels/slack/dispatch.d.ts

@@ -1,7 +1,7 @@
 /**
  * Shared inbound dispatch for Slack Events API bodies and Socket Mode.
  */
-import type { HostContext, SendMessageFn } from "../../types.js";
+import type { ArtifactsApi, HostContext, SendMessageFn } from "../../types.js";
 import type { SlackBotMentionGate } from "./bot-mentions.js";
 import type { ChannelPostWatcher } from "./channel-watch.js";
 import type { EventIdDedupe } from "./event-id-dedupe.js";
@@ -17,6 +17,8 @@ export interface SlackInboundDispatchDeps extends SlackContinuationProbes {
     credentials: SlackCredentials | undefined;
     eventIds: EventIdDedupe;
     host: HostContext;
+    /** Unbound artifacts facade handed to handler bindings (`ctx.artifacts`). */
+    artifacts: ArtifactsApi;
     log?: SlackLog;
     /** Dispatch on `app_mention`. Defaults to `true`. */
     mentionsEnabled?: boolean;
@@ -36,6 +38,11 @@ export interface SlackInboundDispatchDeps extends SlackContinuationProbes {
     evalCommandsEnabled?: boolean;
     /** cursorAccount agent name stripped before `eval` directive parsing. */
     cursorAgentName?: string;
+    /**
+     * Drop external senders before the handler. Defaults to `true`; pass
+     * `false` to admit them (or when an upstream gate already refused them).
+     */
+    blockExternals?: boolean;
 }
 export declare function dispatchInboundMessage(args: {
     kind: "app_mention" | "direct_message" | "channel_post" | "block_action";
@@ -44,6 +51,7 @@ export declare function dispatchInboundMessage(args: {
     send: SendMessageFn;
     credentials: SlackCredentials | undefined;
     host: HostContext;
+    artifacts: ArtifactsApi;
     hasContinuationSession?: (continuationToken: string) => Promise<boolean>;
     isContinuationBusy?: (continuationToken: string) => Promise<boolean>;
     getContinuationLastBotMessageTs?: (continuationToken: string) => Promise<string | undefined>;
@@ -56,6 +64,7 @@ export declare function dispatchInboundMessage(args: {
      * (`OncallBuddy eval list`).
      */
     cursorAgentName?: string;
+    blockExternals?: boolean;
 }): Promise<void>;
 /**
  * Parse an Events API body (or Socket Mode `events_api` payload) and dispatch

package/dist/channels/slack/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/dispatch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAa,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG5E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAK7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAO1D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAM1D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAEhB,YAAY,EACZ,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAIpB,uCAAuC;AACvC,wBAAgB,sBAAsB,CACpC,KAAK,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACrC,iBAAiB,CAiBnB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACvE,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,qDAAqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAmBD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAC;IACzE,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA2QhB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CA8HT"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/dispatch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,aAAa,EACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAK7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQ1D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAM1D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAEhB,YAAY,EACZ,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAIpB,uCAAuC;AACvC,wBAAgB,sBAAsB,CACpC,KAAK,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACrC,iBAAiB,CAiBnB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACvE,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,6EAA6E;IAC7E,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,qDAAqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAmBD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAC;IACzE,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ShB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAkIT"}

package/dist/channels/slack/dispatch.js

@@ -13,6 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 import { buildSlackBinding, slackContinuationKey } from "./api.js";
 import { firstLineTitle, maybeSetThreadTitle } from "./assistant.js";
 import { handleSlackEvalDirective, parseSlackEvalDirective, } from "./eval-directive.js";
+import { isExternalSlackSender } from "./external-policy.js";
 import { formatSlackContextBlock, parseAppMentionEvent, parseChannelMessageEvent, parseDirectMessageEvent, } from "./inbound.js";
 import { defaultSlackLog } from "./log.js";
 import { isWholeMessageStop } from "./stop.js";
@@ -35,11 +36,19 @@ function triggeringMergeMessage(message) {
 }
 export function dispatchInboundMessage(args) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
-        var _m, _o, _p, _q, _r, _s, _t, _u, _v;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
+        var _q, _r, _s, _t, _u, _v, _w, _x, _y, _z;
         const { message, kind } = args;
-        const log = (_m = args.log) !== null && _m !== void 0 ? _m : defaultSlackLog;
-        const binding = buildSlackBinding(Object.assign({ botToken: (_a = args.credentials) === null || _a === void 0 ? void 0 : _a.botToken, channelId: message.channelId, threadTs: message.threadTs, host: args.host, log }, (message.teamId === undefined ? {} : { teamId: message.teamId })));
+        const log = (_q = args.log) !== null && _q !== void 0 ? _q : defaultSlackLog;
+        const binding = buildSlackBinding({
+            botToken: (_a = args.credentials) === null || _a === void 0 ? void 0 : _a.botToken,
+            channelId: message.channelId,
+            threadTs: message.threadTs,
+            host: args.host,
+            artifacts: args.artifacts,
+            log,
+            teamId: message.teamId,
+        });
         log.info("inbound", {
             kind,
             event_id: args.eventId,
@@ -49,6 +58,35 @@ export function dispatchInboundMessage(args) {
             user: (_b = message.author) === null || _b === void 0 ? void 0 : _b.userId,
             team: message.teamId,
         });
+        if (args.blockExternals !== false && ((_c = message.author) === null || _c === void 0 ? void 0 : _c.isBot) !== true) {
+            const userId = (_r = (_d = message.author) === null || _d === void 0 ? void 0 : _d.userId) !== null && _r !== void 0 ? _r : "";
+            const teamId = message.teamId;
+            if (teamId === undefined || teamId === "") {
+                log.info("inbound dropped (missing team)", {
+                    kind,
+                    channel: message.channelId,
+                    thread_ts: message.threadTs,
+                    user: userId,
+                    event_id: args.eventId,
+                });
+                return;
+            }
+            if (yield isExternalSlackSender({
+                botToken: (_e = args.credentials) === null || _e === void 0 ? void 0 : _e.botToken,
+                slackTeamId: teamId,
+                userId,
+            })) {
+                log.info("inbound dropped (external sender)", {
+                    kind,
+                    channel: message.channelId,
+                    thread_ts: message.threadTs,
+                    user: userId,
+                    team: teamId,
+                    event_id: args.eventId,
+                });
+                return;
+            }
+        }
         const continuation = slackContinuationKey(message.channelId, message.threadTs);
         // Whole-message stop: cancel active turn + clear nudges (Benny parity).
         if (isWholeMessageStop(message.text) ||
@@ -60,14 +98,14 @@ export function dispatchInboundMessage(args) {
                 continuation,
                 event_id: args.eventId,
             });
-            yield (_c = args.host.slackNudges) === null || _c === void 0 ? void 0 : _c.clear(continuation);
+            yield (_f = args.host.slackNudges) === null || _f === void 0 ? void 0 : _f.clear(continuation);
             const interrupted = args.interruptContinuation === undefined
                 ? false
                 : yield args.interruptContinuation(continuation);
             try {
                 yield binding.thread.startTyping(interrupted ? "Stopped." : "Nothing to stop.");
             }
-            catch (_w) {
+            catch (_0) {
                 // best-effort status
             }
             return;
@@ -78,7 +116,7 @@ export function dispatchInboundMessage(args) {
             ? undefined
             : { agentName: args.cursorAgentName };
         const evalDirective = evalCommandsEnabled && args.host.evals !== undefined
-            ? ((_o = parseSlackEvalDirective(message.text, evalParseOptions)) !== null && _o !== void 0 ? _o : parseSlackEvalDirective(message.markdown, evalParseOptions))
+            ? ((_s = parseSlackEvalDirective(message.text, evalParseOptions)) !== null && _s !== void 0 ? _s : parseSlackEvalDirective(message.markdown, evalParseOptions))
             : null;
         if (evalDirective !== null && args.host.evals !== undefined) {
             log.info("eval directive", {
@@ -98,7 +136,7 @@ export function dispatchInboundMessage(args) {
         }
         if (message.ts === message.threadTs) {
             yield maybeSetThreadTitle({
-                botToken: (_d = args.credentials) === null || _d === void 0 ? void 0 : _d.botToken,
+                botToken: (_g = args.credentials) === null || _g === void 0 ? void 0 : _g.botToken,
                 channelId: message.channelId,
                 threadTs: message.threadTs,
                 title: firstLineTitle(message.markdown),
@@ -128,7 +166,7 @@ export function dispatchInboundMessage(args) {
             return;
         }
         // Reply-once / delayed parent: claim channel:ts after the handler accepts.
-        const claimed = yield (_e = args.host.slackNudges) === null || _e === void 0 ? void 0 : _e.tryClaimAsk(message.channelId, message.ts);
+        const claimed = yield (_h = args.host.slackNudges) === null || _h === void 0 ? void 0 : _h.tryClaimAsk(message.channelId, message.ts);
         if (claimed === false) {
             log.info("inbound ask dedupe drop", {
                 kind,
@@ -139,10 +177,10 @@ export function dispatchInboundMessage(args) {
             });
             return;
         }
-        const userText = (_p = decision.message) !== null && _p !== void 0 ? _p : message.markdown;
+        const userText = (_t = decision.message) !== null && _t !== void 0 ? _t : message.markdown;
         const excludeThreadTimestamps = [
             message.ts,
-            ...((_q = decision.excludeThreadTimestamps) !== null && _q !== void 0 ? _q : []),
+            ...((_u = decision.excludeThreadTimestamps) !== null && _u !== void 0 ? _u : []),
         ];
         const hasSession = args.hasContinuationSession === undefined
             ? false
@@ -154,10 +192,10 @@ export function dispatchInboundMessage(args) {
         // Cold start: full <slack_thread>. Warm: <slack_thread_delta> since last
         // agent post (session watermark), else last matching bot post in-thread.
         const threadContext = hasSession
-            ? yield loadSlackThreadDeltaBlock(Object.assign(Object.assign({ botToken: (_f = args.credentials) === null || _f === void 0 ? void 0 : _f.botToken, channelId: message.channelId, threadTs: message.threadTs }, (afterTs === undefined ? {} : { afterTs })), { excludeTs: excludeThreadTimestamps, mergeMessages,
+            ? yield loadSlackThreadDeltaBlock(Object.assign(Object.assign({ botToken: (_j = args.credentials) === null || _j === void 0 ? void 0 : _j.botToken, channelId: message.channelId, threadTs: message.threadTs }, (afterTs === undefined ? {} : { afterTs })), { excludeTs: excludeThreadTimestamps, mergeMessages,
                 log }))
             : yield loadSlackThreadContextBlock({
-                botToken: (_g = args.credentials) === null || _g === void 0 ? void 0 : _g.botToken,
+                botToken: (_k = args.credentials) === null || _k === void 0 ? void 0 : _k.botToken,
                 channelId: message.channelId,
                 threadTs: message.threadTs,
                 excludeTs: excludeThreadTimestamps,
@@ -168,11 +206,11 @@ export function dispatchInboundMessage(args) {
             log.info(hasSession ? "thread delta loaded" : "thread context loaded", Object.assign({ kind, channel: message.channelId, thread_ts: message.threadTs, chars: threadContext.length, event_id: args.eventId }, (afterTs === undefined ? {} : { after_ts: afterTs })));
         }
         const prompt = [
-            formatSlackContextBlock(Object.assign(Object.assign({ userId: (_r = (_h = message.author) === null || _h === void 0 ? void 0 : _h.userId) !== null && _r !== void 0 ? _r : "", channelId: message.channelId, threadTs: message.threadTs }, (((_j = message.author) === null || _j === void 0 ? void 0 : _j.userName) === undefined
+            formatSlackContextBlock(Object.assign(Object.assign({ userId: (_v = (_l = message.author) === null || _l === void 0 ? void 0 : _l.userId) !== null && _v !== void 0 ? _v : "", channelId: message.channelId, threadTs: message.threadTs }, (((_m = message.author) === null || _m === void 0 ? void 0 : _m.userName) === undefined
                 ? {}
                 : { userName: message.author.userName })), (message.teamId === undefined ? {} : { teamId: message.teamId }))),
             ...(threadContext === undefined ? [] : [threadContext]),
-            ...((_s = decision.context) !== null && _s !== void 0 ? _s : []),
+            ...((_w = decision.context) !== null && _w !== void 0 ? _w : []),
             "",
             userText,
         ]
@@ -186,10 +224,10 @@ export function dispatchInboundMessage(args) {
             state: emptySlackChannelState({
                 channelId: message.channelId,
                 threadTs: message.threadTs,
-                teamId: (_t = message.teamId) !== null && _t !== void 0 ? _t : null,
-                triggeringUserId: (_u = (_k = message.author) === null || _k === void 0 ? void 0 : _k.userId) !== null && _u !== void 0 ? _u : null,
+                teamId: (_x = message.teamId) !== null && _x !== void 0 ? _x : null,
+                triggeringUserId: (_y = (_o = message.author) === null || _o === void 0 ? void 0 : _o.userId) !== null && _y !== void 0 ? _y : null,
             }),
-            title: (_v = decision.title) !== null && _v !== void 0 ? _v : `slack:${message.channelId}:${message.threadTs}`,
+            title: (_z = decision.title) !== null && _z !== void 0 ? _z : `slack:${message.channelId}:${message.threadTs}`,
             workspaceDir: decision.workspaceDir,
             workspaceFiles: decision.workspaceFiles,
             cloud: decision.cloud,
@@ -232,7 +270,7 @@ export function dispatchInboundMessage(args) {
             }
         }
         catch (error) {
-            yield (_l = args.host.slackNudges) === null || _l === void 0 ? void 0 : _l.releaseAsk(message.channelId, message.ts);
+            yield (_p = args.host.slackNudges) === null || _p === void 0 ? void 0 : _p.releaseAsk(message.channelId, message.ts);
             log.error(`${kind} delivery failed: ${error instanceof Error ? error.message : String(error)}`, {
                 channel: message.channelId,
                 thread_ts: message.threadTs,
@@ -288,7 +326,7 @@ export function dispatchInboundFromEventBody(body, deps) {
                 return false;
             }
         }
-        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "app_mention", message: mention, handler: deps.onAppMention, send: deps.send, credentials: deps.credentials, host: deps.host, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName }, (deps.hasContinuationSession === undefined
+        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "app_mention", message: mention, handler: deps.onAppMention, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName, blockExternals: deps.blockExternals }, (deps.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: deps.hasContinuationSession })), (deps.isContinuationBusy === undefined
             ? {}
@@ -309,7 +347,7 @@ export function dispatchInboundFromEventBody(body, deps) {
             });
             return false;
         }
-        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "direct_message", message: dm, handler: deps.onDirectMessage, send: deps.send, credentials: deps.credentials, host: deps.host, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName }, (deps.hasContinuationSession === undefined
+        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "direct_message", message: dm, handler: deps.onDirectMessage, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName, blockExternals: deps.blockExternals }, (deps.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: deps.hasContinuationSession })), (deps.isContinuationBusy === undefined
             ? {}

package/dist/channels/slack/external-policy.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Workspace-membership checks for AgentKit Slack agents.
+ * Mirrors backend `isExternalSlackUser` (cloud-agent/slack/externalChannelPolicy).
+ */
+import type { SlackBotToken } from "./types.js";
+type SlackUserInfo = {
+    team_id?: string;
+    is_stranger?: boolean;
+    is_restricted?: boolean;
+    is_ultra_restricted?: boolean;
+    enterprise_user?: {
+        teams?: string[];
+    };
+};
+/** Pure classifier over a `users.info` user object. Fails open to external. */
+export declare function classifySlackUserExternality(args: {
+    slackTeamId: string;
+    user: SlackUserInfo;
+}): boolean;
+/** Lookup + classify. Empty userId / API failure → external. */
+export declare function isExternalSlackSender(args: {
+    botToken: SlackBotToken | undefined;
+    slackTeamId: string;
+    userId: string;
+}): Promise<boolean>;
+export {};
+//# sourceMappingURL=external-policy.d.ts.map

package/dist/channels/slack/external-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-policy.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/external-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,KAAK,aAAa,GAAG;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACxC,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;CACrB,GAAG,OAAO,CAcV;AAED,gEAAgE;AAChE,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBnB"}

package/dist/channels/slack/external-policy.js

@@ -0,0 +1,53 @@
+/**
+ * Workspace-membership checks for AgentKit Slack agents.
+ * Mirrors backend `isExternalSlackUser` (cloud-agent/slack/externalChannelPolicy).
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { callSlackApi } from "./api.js";
+/** Pure classifier over a `users.info` user object. Fails open to external. */
+export function classifySlackUserExternality(args) {
+    var _a;
+    var _b;
+    const { slackTeamId, user } = args;
+    if (user.is_stranger === true ||
+        user.is_restricted === true ||
+        user.is_ultra_restricted === true) {
+        return true;
+    }
+    return (user.team_id !== undefined &&
+        user.team_id !== slackTeamId &&
+        !((_b = (_a = user.enterprise_user) === null || _a === void 0 ? void 0 : _a.teams) !== null && _b !== void 0 ? _b : []).includes(slackTeamId));
+}
+/** Lookup + classify. Empty userId / API failure → external. */
+export function isExternalSlackSender(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (args.userId === "") {
+            return true;
+        }
+        try {
+            const result = yield callSlackApi({
+                botToken: args.botToken,
+                operation: "users.info",
+                body: { user: args.userId },
+            });
+            if (result.ok !== true || result.user === undefined) {
+                return true;
+            }
+            return classifySlackUserExternality({
+                slackTeamId: args.slackTeamId,
+                user: result.user,
+            });
+        }
+        catch (_a) {
+            return true;
+        }
+    });
+}

package/dist/channels/slack/index.d.ts

@@ -32,6 +32,7 @@ export * from "./dispatch.js";
 export * from "./doctor.js";
 export * from "./eval-directive.js";
 export * from "./event-id-dedupe.js";
+export * from "./external-policy.js";
 export * from "./inbound.js";
 export * from "./init.js";
 export * from "./interactive.js";

package/dist/channels/slack/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,YAAY,CAAC"}

package/dist/channels/slack/index.js

@@ -32,6 +32,7 @@ export * from "./dispatch.js";
 export * from "./doctor.js";
 export * from "./eval-directive.js";
 export * from "./event-id-dedupe.js";
+export * from "./external-policy.js";
 export * from "./inbound.js";
 export * from "./init.js";
 export * from "./interactive.js";

package/dist/channels/slack/interactive.d.ts

@@ -6,7 +6,7 @@
  * to an author handler ({@link dispatchBlockAction} via
  * `slackChannel({ onBlockAction })`).
  */
-import type { ApprovalDecision, AuthContext, ChannelSession, HostContext, PendingApproval, SendMessageFn } from "../../types.js";
+import type { ApprovalDecision, ArtifactsApi, AuthContext, ChannelSession, HostContext, PendingApproval, SendMessageFn } from "../../types.js";
 import { type SlackLog } from "./log.js";
 import type { SlackBlockAction, SlackBlockActionHandler, SlackBotToken, SlackContinuationProbes, SlackCredentials } from "./types.js";
 export interface SlackInteractiveDispatchDeps {
@@ -15,6 +15,8 @@ export interface SlackInteractiveDispatchDeps {
     resolveApproval: (sessionId: string, callId: string, decision: ApprovalDecision, auth: AuthContext | null) => Promise<PendingApproval>;
     waitUntil: (promise: Promise<unknown>) => void;
     log?: SlackLog;
+    /** Defaults to true. */
+    blockExternals?: boolean;
 }
 /**
  * Handle a Socket Mode `interactive` body. Returns true when this was
@@ -44,7 +46,12 @@ export interface SlackBlockActionDispatchDeps extends SlackContinuationProbes {
     send: SendMessageFn;
     credentials: SlackCredentials | undefined;
     host: HostContext;
+    artifacts: ArtifactsApi;
     log?: SlackLog;
+    /** Defaults to true. */
+    blockExternals?: boolean;
+    /** Install workspace from `auth.test`; baseline for the external gate. */
+    installTeamId?: string;
 }
 /**
  * Route a non-approval `block_actions` payload to the author handler and

package/dist/channels/slack/interactive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/interactive.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,WAAW,EACX,eAAe,EACf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAClE,eAAe,EAAE,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,WAAW,GAAG,IAAI,KACrB,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,OAAO,CAAC,CAyFlB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,GACf,gBAAgB,GAAG,IAAI,CAuFzB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,EAAE,uBAAuB,CAAC;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAyBD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,OAAO,CAAC,CA+ClB"}
+{"version":3,"file":"interactive.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/interactive.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,WAAW,EACX,eAAe,EACf,aAAa,EACd,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,uBAAuB,EACvB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAClE,eAAe,EAAE,CACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,WAAW,GAAG,IAAI,KACrB,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,wBAAwB;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,OAAO,CAAC,CAiHlB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,OAAO,GACf,gBAAgB,GAAG,IAAI,CAoFzB;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAqBnB;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,OAAO,EAAE,uBAAuB,CAAC;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,wBAAwB;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA4BD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,OAAO,CAAC,CAiDlB"}