@cursor/july 0.1.27 → 0.1.28

package/dist/bin/agent-serve.js

@@ -55,7 +55,7 @@ Usage:
   ${CLI} sessions    [--url <baseUrl> | --prod] [--json]
                           [--slug <slug>] [--team <id>] [--dir <path>]
   ${CLI} session     <sessionId> [--url <baseUrl> | --prod]
-                          [--json | --text | --events]
+                          [--json | --text | --events] [--out <file.ndjson>]
                           [--slug <slug>] [--team <id>] [--dir <path>]
   ${CLI} cost        [sessionId] [--url <baseUrl> | --prod] [--json]
                           [--slug <slug>] [--team <id>] [--dir <path>]
@@ -80,11 +80,12 @@ Usage:
                           [--tag <tag>]... [--verbose] [--timeout-ms <n>]
                           [--strict] [--max-concurrency <n>]
                           [--junit <path>] [--artifacts <dir>|--no-artifacts]
+                          [--out <file.json>]
                           [--skip-report] [--no-stream] [--no-wait]
                           [--prod | --url <baseUrl>] [--slug <slug>]
                           [--team <id>]
   ${CLI} eval status [runId] --prod|--url <baseUrl> [--dir <path>] [--json]
-                          [--slug <slug>] [--team <id>]
+                          [--out <file.json>] [--slug <slug>] [--team <id>]
   ${CLI} eval cancel <runId> --prod|--url <baseUrl> [--dir <path>] [--json]
                           [--slug <slug>] [--team <id>]
   ${CLI} info        [--dir <path>] [--json]
@@ -362,7 +363,11 @@ Options:
   --comment          github replay: comment body for comment events.
   --context          github replay: commit-status context.
   --dry-run          github replay: print synthesized payloads, don't POST.
-  --out              github replay: write synthesized payloads as fixtures.
+  --out              eval / eval status <runId>: also write the full results
+                     JSON to this path. session: write the raw NDJSON trace
+                     there instead of printing (same format as run --events;
+                     playground-openable). github replay: write synthesized
+                     payloads as fixtures.
 `;
 function main(argv) {
     return __awaiter(this, void 0, void 0, function* () {
@@ -688,6 +693,7 @@ function main(argv) {
                         apiKey: values["api-key"],
                         slug: values.slug,
                         bearerToken: values["bearer-token"],
+                        out: values.out,
                     }));
                 }
                 if (positionals[0] === "cancel" &&
@@ -725,6 +731,7 @@ function main(argv) {
                     artifacts: values["no-artifacts"] ? false : values.artifacts,
                     skipReport: values["skip-report"],
                     maxConcurrency: parseMaxConcurrency(values["max-concurrency"]),
+                    out: values.out,
                 }));
             }
             case "chat": {
@@ -801,6 +808,7 @@ function main(argv) {
                     json: values.json,
                     text: values.text,
                     rawEvents: values["raw-events"],
+                    out: values.out,
                 }));
             }
             case "cost": {
@@ -1080,6 +1088,7 @@ function axFromOptions(partial) {
         artifacts: partial.artifacts,
         skipReport: partial.skipReport,
         maxConcurrency: partial.maxConcurrency,
+        out: partial.out,
     };
 }
 function loadMessages(messages, messagesFile) {

package/dist/channels/slack/auth.d.ts

@@ -2,26 +2,25 @@
  * Slack auth helpers — AuthContext builders for thread-scoped sessions.
  */
 import type { AuthContext } from "../../types.js";
-import type { SlackBinding, SlackBlockAction, SlackMessage } from "./types.js";
-/**
- * Build a thread-scoped principal so any participant in the same Slack
- * thread can continue the session. The triggering user is preserved in
- * attributes for message context.
- */
-export declare function buildSlackAuthContext(args: {
+import type { SlackBinding, SlackBlockAction, SlackMessage, SlackRespondTo } from "./types.js";
+export type BuildSlackAuthArgs = {
     channelId: string;
     threadTs: string;
     teamId?: string;
     userId?: string;
     userName?: string;
     isBot?: boolean;
-    /**
-     * Engagement surface that started the session (e.g. `"channel_post"` for
-     * the opt-in channel watch). Recorded as an attribute; the principal stays
-     * thread-scoped so an @mention in the same thread continues the session.
-     */
     engagement?: string;
-}): AuthContext;
+    /** Defaults to `"thread"`. `"author"` appends `:{userId}` to the principal. */
+    respondTo?: SlackRespondTo;
+};
+/**
+ * Build a Slack session principal.
+ *
+ * - `"thread"` (default): any participant can continue.
+ * - `"author"`: only the starter (`…:{userId}`), same shape approvals already honor.
+ */
+export declare function buildSlackAuthContext(args: BuildSlackAuthArgs): AuthContext;
 /**
  * Auth for a Slack user clicking an interactive Approve/Deny button.
  * Uses the clicker's identity for {@link SessionEngine.resolveApproval},
@@ -42,5 +41,6 @@ export declare function buildSlackInteractiveApprovalAuth(args: {
 export declare function blockActionAuth(action: SlackBlockAction): AuthContext;
 export declare function defaultSlackAuth(message: SlackMessage, ctx: SlackBinding, options?: {
     engagement?: string;
+    respondTo?: SlackRespondTo;
 }): AuthContext | null;
 //# sourceMappingURL=auth.d.ts.map

package/dist/channels/slack/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/E;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,WAAW,CA4Bd;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,WAAW,CAqBd;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAQrE;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAChC,WAAW,GAAG,IAAI,CAiBpB"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAiC3E;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,WAAW,CAqBd;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAQrE;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,YAAY,EACrB,GAAG,EAAE,YAAY,EACjB,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,cAAc,CAAA;CAAE,GAC5D,WAAW,GAAG,IAAI,CAcpB"}

package/dist/channels/slack/auth.js

@@ -3,14 +3,18 @@
  */
 import { samePrincipal } from "../../internal/auth.js";
 /**
- * Build a thread-scoped principal so any participant in the same Slack
- * thread can continue the session. The triggering user is preserved in
- * attributes for message context.
+ * Build a Slack session principal.
+ *
+ * - `"thread"` (default): any participant can continue.
+ * - `"author"`: only the starter (`…:{userId}`), same shape approvals already honor.
  */
 export function buildSlackAuthContext(args) {
-    var _a;
+    var _a, _b;
     const team = (_a = args.teamId) !== null && _a !== void 0 ? _a : "unknown";
-    const principalId = `slack:${team}:${args.channelId}:${args.threadTs}`;
+    const respondTo = (_b = args.respondTo) !== null && _b !== void 0 ? _b : "thread";
+    const base = `slack:${team}:${args.channelId}:${args.threadTs}`;
+    const authorScoped = respondTo === "author" && args.userId !== undefined && args.userId !== "";
+    const principalId = authorScoped ? `${base}:${args.userId}` : base;
     const attributes = {
         channel_id: args.channelId,
         thread_ts: args.threadTs,
@@ -77,9 +81,14 @@ export function defaultSlackAuth(message, ctx, options) {
     if (message.author === undefined) {
         return null;
     }
-    return buildSlackAuthContext(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ channelId: ctx.slack.channelId, threadTs: ctx.slack.threadTs }, (message.teamId === undefined ? {} : { teamId: message.teamId })), { userId: message.author.userId }), (message.author.userName === undefined
-        ? {}
-        : { userName: message.author.userName })), { isBot: message.author.isBot }), ((options === null || options === void 0 ? void 0 : options.engagement) === undefined
-        ? {}
-        : { engagement: options.engagement })));
+    return buildSlackAuthContext({
+        channelId: ctx.slack.channelId,
+        threadTs: ctx.slack.threadTs,
+        teamId: message.teamId,
+        userId: message.author.userId,
+        userName: message.author.userName,
+        isBot: message.author.isBot,
+        engagement: options === null || options === void 0 ? void 0 : options.engagement,
+        respondTo: options === null || options === void 0 ? void 0 : options.respondTo,
+    });
 }

package/dist/channels/slack/cursor-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cursor-account.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/cursor-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0EAA0E;IAC1E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;IACpC,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,MAAM,EAAE,MAAM,QAAQ,CAAC;CACxB;AAID,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,yBAAyB,CAAC;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE,GAAG,OAAO,CAAC,IAAI,CAAC,CAmEhB"}
+{"version":3,"file":"cursor-account.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/cursor-account.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAEhB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,wBAAgB,8BAA8B,IAAI,wBAAwB,CAezE;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,0EAA0E;IAC1E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,SAAS,EAAE,wBAAwB,CAAC;IACpC,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,MAAM,EAAE,MAAM,QAAQ,CAAC;CACxB;AAID,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,yBAAyB,GACjC,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CAEvC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,yBAAyB,CAAC;IACnC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEhB"}

package/dist/channels/slack/cursor-account.js

@@ -83,7 +83,9 @@ export function dispatchCursorSlackEnvelope(args) {
         const handler = isDm ? runtime.onDirectMessage : runtime.onAppMention;
         yield dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind,
             message,
-            handler, send: args.send, credentials: runtime.credentials, host: args.host, artifacts: args.artifacts, log, evalCommandsEnabled: runtime.options.evalCommands !== false, cursorAgentName: envelope.agentName }, (args.hasContinuationSession === undefined
+            handler, send: args.send, credentials: runtime.credentials, host: args.host, artifacts: args.artifacts, log, evalCommandsEnabled: runtime.options.evalCommands !== false, cursorAgentName: envelope.agentName, 
+            // Backend router already refused externals for this envelope.
+            blockExternals: false }, (args.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: args.hasContinuationSession })), (args.isContinuationBusy === undefined
             ? {}

package/dist/channels/slack/defaults.d.ts

@@ -3,17 +3,20 @@
  */
 import type { ChannelEventHandlers } from "../../types.js";
 import { type SlackLog } from "./log.js";
-import type { SlackChannelState, SlackCredentials, SlackMessageHandler, SlackSuggestedPrompt } from "./types.js";
+import type { SlackAccessPolicy, SlackChannelState, SlackCredentials, SlackMessageHandler, SlackRespondTo, SlackSuggestedPrompt } from "./types.js";
+export declare function resolveSlackRespondTo(policy: SlackAccessPolicy | undefined): SlackRespondTo;
+/** Defaults to true when omitted. */
+export declare function resolveSlackBlockExternals(policy: SlackAccessPolicy | undefined): boolean;
 /** Scrubbed turn.failed body for Slack (secrets / paths / URLs stripped). */
 export declare function formatSlackTurnFailureMessage(raw: string | undefined): string;
 /** Default mention/DM inbound handler (optional custom loading rotation). */
-export declare function createDefaultOnInbound(loadingMessages?: readonly string[]): SlackMessageHandler;
+export declare function createDefaultOnInbound(loadingMessages?: readonly string[], policy?: SlackAccessPolicy): SlackMessageHandler;
 /**
  * Default watched-channel-post handler (optional custom loading rotation).
- * Same thread-scoped principal as mentions, tagged with
+ * Same principal policy as mentions, tagged with
  * `engagement: "channel_post"` for auth policies.
  */
-export declare function createDefaultOnChannelPost(loadingMessages?: readonly string[]): SlackMessageHandler;
+export declare function createDefaultOnChannelPost(loadingMessages?: readonly string[], policy?: SlackAccessPolicy): SlackMessageHandler;
 export declare const defaultOnAppMention: SlackMessageHandler;
 export declare const defaultOnDirectMessage: SlackMessageHandler;
 export declare const defaultOnChannelPost: SlackMessageHandler;

package/dist/channels/slack/defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAe3D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAS7E;AA0BD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAClC,mBAAmB,CAOrB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAClC,mBAAmB,CASrB;AAED,eAAO,MAAM,mBAAmB,EAAE,mBACR,CAAC;AAC3B,eAAO,MAAM,sBAAsB,EAAE,mBACX,CAAC;AAC3B,eAAO,MAAM,oBAAoB,EAAE,mBACL,CAAC;AAE/B,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,QAAQ,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,yBAA8B,GACtC,oBAAoB,CAAC,iBAAiB,CAAC,CA8XzC"}
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/defaults.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAe3D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE1D,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAMpB,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,cAAc,CAEhB;AAED,qCAAqC;AACrC,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,iBAAiB,GAAG,SAAS,GACpC,OAAO,CAET;AAED,6EAA6E;AAC7E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAS7E;AA0BD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,GACzB,mBAAmB,CAQrB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,EACnC,MAAM,CAAC,EAAE,iBAAiB,GACzB,mBAAmB,CAWrB;AAED,eAAO,MAAM,mBAAmB,EAAE,mBACR,CAAC;AAC3B,eAAO,MAAM,sBAAsB,EAAE,mBACX,CAAC;AAC3B,eAAO,MAAM,oBAAoB,EAAE,mBACL,CAAC;AAE/B,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mEAAmE;IACnE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,QAAQ,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,yBAA8B,GACtC,oBAAoB,CAAC,iBAAiB,CAAC,CA8XzC"}

package/dist/channels/slack/defaults.js

@@ -19,6 +19,13 @@ import { defaultSlackLog } from "./log.js";
 import { buildTaskChunkForResult, buildTaskChunksForCalls } from "./stream.js";
 const SLACK_TURN_FAILURE_FALLBACK = "I hit an error while handling your request. Please try again or rephrase.";
 const SLACK_TURN_FAILURE_MAX_CHARS = 400;
+export function resolveSlackRespondTo(policy) {
+    return (policy === null || policy === void 0 ? void 0 : policy.respondTo) === "author" ? "author" : "thread";
+}
+/** Defaults to true when omitted. */
+export function resolveSlackBlockExternals(policy) {
+    return (policy === null || policy === void 0 ? void 0 : policy.blockExternals) !== false;
+}
 /** Scrubbed turn.failed body for Slack (secrets / paths / URLs stripped). */
 export function formatSlackTurnFailureMessage(raw) {
     var _a;
@@ -52,25 +59,28 @@ function resolveLoadingMessages(loadingMessages) {
     return [...SLACK_DEFAULT_LOADING_MESSAGES];
 }
 /** Default mention/DM inbound handler (optional custom loading rotation). */
-export function createDefaultOnInbound(loadingMessages) {
+export function createDefaultOnInbound(loadingMessages, policy) {
     const rotating = resolveLoadingMessages(loadingMessages);
+    const respondTo = resolveSlackRespondTo(policy);
     return (ctx, message) => __awaiter(this, void 0, void 0, function* () {
         yield ctx.thread.startTyping("Thinking…", rotating);
-        const auth = defaultSlackAuth(message, ctx);
+        const auth = defaultSlackAuth(message, ctx, { respondTo });
         return auth === null ? null : { auth };
     });
 }
 /**
  * Default watched-channel-post handler (optional custom loading rotation).
- * Same thread-scoped principal as mentions, tagged with
+ * Same principal policy as mentions, tagged with
  * `engagement: "channel_post"` for auth policies.
  */
-export function createDefaultOnChannelPost(loadingMessages) {
+export function createDefaultOnChannelPost(loadingMessages, policy) {
     const rotating = resolveLoadingMessages(loadingMessages);
+    const respondTo = resolveSlackRespondTo(policy);
     return (ctx, message) => __awaiter(this, void 0, void 0, function* () {
         yield ctx.thread.startTyping("Thinking…", rotating);
         const auth = defaultSlackAuth(message, ctx, {
             engagement: "channel_post",
+            respondTo,
         });
         return auth === null ? null : { auth };
     });

package/dist/channels/slack/dispatch.d.ts

@@ -38,6 +38,11 @@ export interface SlackInboundDispatchDeps extends SlackContinuationProbes {
     evalCommandsEnabled?: boolean;
     /** cursorAccount agent name stripped before `eval` directive parsing. */
     cursorAgentName?: string;
+    /**
+     * Drop external senders before the handler. Defaults to `true`; pass
+     * `false` to admit them (or when an upstream gate already refused them).
+     */
+    blockExternals?: boolean;
 }
 export declare function dispatchInboundMessage(args: {
     kind: "app_mention" | "direct_message" | "channel_post" | "block_action";
@@ -59,6 +64,7 @@ export declare function dispatchInboundMessage(args: {
      * (`OncallBuddy eval list`).
      */
     cursorAgentName?: string;
+    blockExternals?: boolean;
 }): Promise<void>;
 /**
  * Parse an Events API body (or Socket Mode `events_api` payload) and dispatch

package/dist/channels/slack/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/dispatch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,aAAa,EACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAK7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAO1D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAM1D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAEhB,YAAY,EACZ,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAIpB,uCAAuC;AACvC,wBAAgB,sBAAsB,CACpC,KAAK,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACrC,iBAAiB,CAiBnB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACvE,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,6EAA6E;IAC7E,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,qDAAqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAmBD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAC;IACzE,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4QhB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAgIT"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/dispatch.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,aAAa,EACd,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAK7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAQ1D,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAM1D,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,gBAAgB,EAEhB,YAAY,EACZ,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAIpB,uCAAuC;AACvC,wBAAgB,sBAAsB,CACpC,KAAK,GAAE,OAAO,CAAC,iBAAiB,CAAM,GACrC,iBAAiB,CAiBnB;AAED,MAAM,WAAW,wBAAyB,SAAQ,uBAAuB;IACvE,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC/C,YAAY,EAAE,mBAAmB,CAAC;IAClC,eAAe,EAAE,mBAAmB,CAAC;IACrC,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,6EAA6E;IAC7E,SAAS,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,qDAAqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAmBD,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,IAAI,EAAE,aAAa,GAAG,gBAAgB,GAAG,cAAc,GAAG,cAAc,CAAC;IACzE,OAAO,EAAE,YAAY,CAAC;IACtB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,YAAY,CAAC;IACxB,sBAAsB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,+BAA+B,CAAC,EAAE,CAChC,iBAAiB,EAAE,MAAM,KACtB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,qBAAqB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ShB;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,OAAO,EACb,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAkIT"}

package/dist/channels/slack/dispatch.js

@@ -13,6 +13,7 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 import { buildSlackBinding, slackContinuationKey } from "./api.js";
 import { firstLineTitle, maybeSetThreadTitle } from "./assistant.js";
 import { handleSlackEvalDirective, parseSlackEvalDirective, } from "./eval-directive.js";
+import { isExternalSlackSender } from "./external-policy.js";
 import { formatSlackContextBlock, parseAppMentionEvent, parseChannelMessageEvent, parseDirectMessageEvent, } from "./inbound.js";
 import { defaultSlackLog } from "./log.js";
 import { isWholeMessageStop } from "./stop.js";
@@ -35,11 +36,19 @@ function triggeringMergeMessage(message) {
 }
 export function dispatchInboundMessage(args) {
     return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l;
-        var _m, _o, _p, _q, _r, _s, _t, _u, _v;
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m, _o, _p;
+        var _q, _r, _s, _t, _u, _v, _w, _x, _y, _z;
         const { message, kind } = args;
-        const log = (_m = args.log) !== null && _m !== void 0 ? _m : defaultSlackLog;
-        const binding = buildSlackBinding(Object.assign({ botToken: (_a = args.credentials) === null || _a === void 0 ? void 0 : _a.botToken, channelId: message.channelId, threadTs: message.threadTs, host: args.host, artifacts: args.artifacts, log }, (message.teamId === undefined ? {} : { teamId: message.teamId })));
+        const log = (_q = args.log) !== null && _q !== void 0 ? _q : defaultSlackLog;
+        const binding = buildSlackBinding({
+            botToken: (_a = args.credentials) === null || _a === void 0 ? void 0 : _a.botToken,
+            channelId: message.channelId,
+            threadTs: message.threadTs,
+            host: args.host,
+            artifacts: args.artifacts,
+            log,
+            teamId: message.teamId,
+        });
         log.info("inbound", {
             kind,
             event_id: args.eventId,
@@ -49,6 +58,35 @@ export function dispatchInboundMessage(args) {
             user: (_b = message.author) === null || _b === void 0 ? void 0 : _b.userId,
             team: message.teamId,
         });
+        if (args.blockExternals !== false && ((_c = message.author) === null || _c === void 0 ? void 0 : _c.isBot) !== true) {
+            const userId = (_r = (_d = message.author) === null || _d === void 0 ? void 0 : _d.userId) !== null && _r !== void 0 ? _r : "";
+            const teamId = message.teamId;
+            if (teamId === undefined || teamId === "") {
+                log.info("inbound dropped (missing team)", {
+                    kind,
+                    channel: message.channelId,
+                    thread_ts: message.threadTs,
+                    user: userId,
+                    event_id: args.eventId,
+                });
+                return;
+            }
+            if (yield isExternalSlackSender({
+                botToken: (_e = args.credentials) === null || _e === void 0 ? void 0 : _e.botToken,
+                slackTeamId: teamId,
+                userId,
+            })) {
+                log.info("inbound dropped (external sender)", {
+                    kind,
+                    channel: message.channelId,
+                    thread_ts: message.threadTs,
+                    user: userId,
+                    team: teamId,
+                    event_id: args.eventId,
+                });
+                return;
+            }
+        }
         const continuation = slackContinuationKey(message.channelId, message.threadTs);
         // Whole-message stop: cancel active turn + clear nudges (Benny parity).
         if (isWholeMessageStop(message.text) ||
@@ -60,14 +98,14 @@ export function dispatchInboundMessage(args) {
                 continuation,
                 event_id: args.eventId,
             });
-            yield (_c = args.host.slackNudges) === null || _c === void 0 ? void 0 : _c.clear(continuation);
+            yield (_f = args.host.slackNudges) === null || _f === void 0 ? void 0 : _f.clear(continuation);
             const interrupted = args.interruptContinuation === undefined
                 ? false
                 : yield args.interruptContinuation(continuation);
             try {
                 yield binding.thread.startTyping(interrupted ? "Stopped." : "Nothing to stop.");
             }
-            catch (_w) {
+            catch (_0) {
                 // best-effort status
             }
             return;
@@ -78,7 +116,7 @@ export function dispatchInboundMessage(args) {
             ? undefined
             : { agentName: args.cursorAgentName };
         const evalDirective = evalCommandsEnabled && args.host.evals !== undefined
-            ? ((_o = parseSlackEvalDirective(message.text, evalParseOptions)) !== null && _o !== void 0 ? _o : parseSlackEvalDirective(message.markdown, evalParseOptions))
+            ? ((_s = parseSlackEvalDirective(message.text, evalParseOptions)) !== null && _s !== void 0 ? _s : parseSlackEvalDirective(message.markdown, evalParseOptions))
             : null;
         if (evalDirective !== null && args.host.evals !== undefined) {
             log.info("eval directive", {
@@ -98,7 +136,7 @@ export function dispatchInboundMessage(args) {
         }
         if (message.ts === message.threadTs) {
             yield maybeSetThreadTitle({
-                botToken: (_d = args.credentials) === null || _d === void 0 ? void 0 : _d.botToken,
+                botToken: (_g = args.credentials) === null || _g === void 0 ? void 0 : _g.botToken,
                 channelId: message.channelId,
                 threadTs: message.threadTs,
                 title: firstLineTitle(message.markdown),
@@ -128,7 +166,7 @@ export function dispatchInboundMessage(args) {
             return;
         }
         // Reply-once / delayed parent: claim channel:ts after the handler accepts.
-        const claimed = yield (_e = args.host.slackNudges) === null || _e === void 0 ? void 0 : _e.tryClaimAsk(message.channelId, message.ts);
+        const claimed = yield (_h = args.host.slackNudges) === null || _h === void 0 ? void 0 : _h.tryClaimAsk(message.channelId, message.ts);
         if (claimed === false) {
             log.info("inbound ask dedupe drop", {
                 kind,
@@ -139,10 +177,10 @@ export function dispatchInboundMessage(args) {
             });
             return;
         }
-        const userText = (_p = decision.message) !== null && _p !== void 0 ? _p : message.markdown;
+        const userText = (_t = decision.message) !== null && _t !== void 0 ? _t : message.markdown;
         const excludeThreadTimestamps = [
             message.ts,
-            ...((_q = decision.excludeThreadTimestamps) !== null && _q !== void 0 ? _q : []),
+            ...((_u = decision.excludeThreadTimestamps) !== null && _u !== void 0 ? _u : []),
         ];
         const hasSession = args.hasContinuationSession === undefined
             ? false
@@ -154,10 +192,10 @@ export function dispatchInboundMessage(args) {
         // Cold start: full <slack_thread>. Warm: <slack_thread_delta> since last
         // agent post (session watermark), else last matching bot post in-thread.
         const threadContext = hasSession
-            ? yield loadSlackThreadDeltaBlock(Object.assign(Object.assign({ botToken: (_f = args.credentials) === null || _f === void 0 ? void 0 : _f.botToken, channelId: message.channelId, threadTs: message.threadTs }, (afterTs === undefined ? {} : { afterTs })), { excludeTs: excludeThreadTimestamps, mergeMessages,
+            ? yield loadSlackThreadDeltaBlock(Object.assign(Object.assign({ botToken: (_j = args.credentials) === null || _j === void 0 ? void 0 : _j.botToken, channelId: message.channelId, threadTs: message.threadTs }, (afterTs === undefined ? {} : { afterTs })), { excludeTs: excludeThreadTimestamps, mergeMessages,
                 log }))
             : yield loadSlackThreadContextBlock({
-                botToken: (_g = args.credentials) === null || _g === void 0 ? void 0 : _g.botToken,
+                botToken: (_k = args.credentials) === null || _k === void 0 ? void 0 : _k.botToken,
                 channelId: message.channelId,
                 threadTs: message.threadTs,
                 excludeTs: excludeThreadTimestamps,
@@ -168,11 +206,11 @@ export function dispatchInboundMessage(args) {
             log.info(hasSession ? "thread delta loaded" : "thread context loaded", Object.assign({ kind, channel: message.channelId, thread_ts: message.threadTs, chars: threadContext.length, event_id: args.eventId }, (afterTs === undefined ? {} : { after_ts: afterTs })));
         }
         const prompt = [
-            formatSlackContextBlock(Object.assign(Object.assign({ userId: (_r = (_h = message.author) === null || _h === void 0 ? void 0 : _h.userId) !== null && _r !== void 0 ? _r : "", channelId: message.channelId, threadTs: message.threadTs }, (((_j = message.author) === null || _j === void 0 ? void 0 : _j.userName) === undefined
+            formatSlackContextBlock(Object.assign(Object.assign({ userId: (_v = (_l = message.author) === null || _l === void 0 ? void 0 : _l.userId) !== null && _v !== void 0 ? _v : "", channelId: message.channelId, threadTs: message.threadTs }, (((_m = message.author) === null || _m === void 0 ? void 0 : _m.userName) === undefined
                 ? {}
                 : { userName: message.author.userName })), (message.teamId === undefined ? {} : { teamId: message.teamId }))),
             ...(threadContext === undefined ? [] : [threadContext]),
-            ...((_s = decision.context) !== null && _s !== void 0 ? _s : []),
+            ...((_w = decision.context) !== null && _w !== void 0 ? _w : []),
             "",
             userText,
         ]
@@ -186,10 +224,10 @@ export function dispatchInboundMessage(args) {
             state: emptySlackChannelState({
                 channelId: message.channelId,
                 threadTs: message.threadTs,
-                teamId: (_t = message.teamId) !== null && _t !== void 0 ? _t : null,
-                triggeringUserId: (_u = (_k = message.author) === null || _k === void 0 ? void 0 : _k.userId) !== null && _u !== void 0 ? _u : null,
+                teamId: (_x = message.teamId) !== null && _x !== void 0 ? _x : null,
+                triggeringUserId: (_y = (_o = message.author) === null || _o === void 0 ? void 0 : _o.userId) !== null && _y !== void 0 ? _y : null,
             }),
-            title: (_v = decision.title) !== null && _v !== void 0 ? _v : `slack:${message.channelId}:${message.threadTs}`,
+            title: (_z = decision.title) !== null && _z !== void 0 ? _z : `slack:${message.channelId}:${message.threadTs}`,
             workspaceDir: decision.workspaceDir,
             workspaceFiles: decision.workspaceFiles,
             cloud: decision.cloud,
@@ -232,7 +270,7 @@ export function dispatchInboundMessage(args) {
             }
         }
         catch (error) {
-            yield (_l = args.host.slackNudges) === null || _l === void 0 ? void 0 : _l.releaseAsk(message.channelId, message.ts);
+            yield (_p = args.host.slackNudges) === null || _p === void 0 ? void 0 : _p.releaseAsk(message.channelId, message.ts);
             log.error(`${kind} delivery failed: ${error instanceof Error ? error.message : String(error)}`, {
                 channel: message.channelId,
                 thread_ts: message.threadTs,
@@ -288,7 +326,7 @@ export function dispatchInboundFromEventBody(body, deps) {
                 return false;
             }
         }
-        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "app_mention", message: mention, handler: deps.onAppMention, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName }, (deps.hasContinuationSession === undefined
+        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "app_mention", message: mention, handler: deps.onAppMention, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName, blockExternals: deps.blockExternals }, (deps.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: deps.hasContinuationSession })), (deps.isContinuationBusy === undefined
             ? {}
@@ -309,7 +347,7 @@ export function dispatchInboundFromEventBody(body, deps) {
             });
             return false;
         }
-        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "direct_message", message: dm, handler: deps.onDirectMessage, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName }, (deps.hasContinuationSession === undefined
+        deps.waitUntil(dispatchInboundMessage(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ kind: "direct_message", message: dm, handler: deps.onDirectMessage, send: deps.send, credentials: deps.credentials, host: deps.host, artifacts: deps.artifacts, log, evalCommandsEnabled: deps.evalCommandsEnabled, cursorAgentName: deps.cursorAgentName, blockExternals: deps.blockExternals }, (deps.hasContinuationSession === undefined
             ? {}
             : { hasContinuationSession: deps.hasContinuationSession })), (deps.isContinuationBusy === undefined
             ? {}

package/dist/channels/slack/external-policy.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Workspace-membership checks for AgentKit Slack agents.
+ * Mirrors backend `isExternalSlackUser` (cloud-agent/slack/externalChannelPolicy).
+ */
+import type { SlackBotToken } from "./types.js";
+type SlackUserInfo = {
+    team_id?: string;
+    is_stranger?: boolean;
+    is_restricted?: boolean;
+    is_ultra_restricted?: boolean;
+    enterprise_user?: {
+        teams?: string[];
+    };
+};
+/** Pure classifier over a `users.info` user object. Fails open to external. */
+export declare function classifySlackUserExternality(args: {
+    slackTeamId: string;
+    user: SlackUserInfo;
+}): boolean;
+/** Lookup + classify. Empty userId / API failure → external. */
+export declare function isExternalSlackSender(args: {
+    botToken: SlackBotToken | undefined;
+    slackTeamId: string;
+    userId: string;
+}): Promise<boolean>;
+export {};
+//# sourceMappingURL=external-policy.d.ts.map

package/dist/channels/slack/external-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-policy.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/external-policy.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,KAAK,aAAa,GAAG;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACxC,CAAC;AAEF,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;CACrB,GAAG,OAAO,CAcV;AAED,gEAAgE;AAChE,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,QAAQ,EAAE,aAAa,GAAG,SAAS,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBnB"}

package/dist/channels/slack/external-policy.js

@@ -0,0 +1,53 @@
+/**
+ * Workspace-membership checks for AgentKit Slack agents.
+ * Mirrors backend `isExternalSlackUser` (cloud-agent/slack/externalChannelPolicy).
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { callSlackApi } from "./api.js";
+/** Pure classifier over a `users.info` user object. Fails open to external. */
+export function classifySlackUserExternality(args) {
+    var _a;
+    var _b;
+    const { slackTeamId, user } = args;
+    if (user.is_stranger === true ||
+        user.is_restricted === true ||
+        user.is_ultra_restricted === true) {
+        return true;
+    }
+    return (user.team_id !== undefined &&
+        user.team_id !== slackTeamId &&
+        !((_b = (_a = user.enterprise_user) === null || _a === void 0 ? void 0 : _a.teams) !== null && _b !== void 0 ? _b : []).includes(slackTeamId));
+}
+/** Lookup + classify. Empty userId / API failure → external. */
+export function isExternalSlackSender(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (args.userId === "") {
+            return true;
+        }
+        try {
+            const result = yield callSlackApi({
+                botToken: args.botToken,
+                operation: "users.info",
+                body: { user: args.userId },
+            });
+            if (result.ok !== true || result.user === undefined) {
+                return true;
+            }
+            return classifySlackUserExternality({
+                slackTeamId: args.slackTeamId,
+                user: result.user,
+            });
+        }
+        catch (_a) {
+            return true;
+        }
+    });
+}

package/dist/channels/slack/index.d.ts

@@ -32,6 +32,7 @@ export * from "./dispatch.js";
 export * from "./doctor.js";
 export * from "./eval-directive.js";
 export * from "./event-id-dedupe.js";
+export * from "./external-policy.js";
 export * from "./inbound.js";
 export * from "./init.js";
 export * from "./interactive.js";

package/dist/channels/slack/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/slack/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,YAAY,CAAC"}

package/dist/channels/slack/index.js

@@ -32,6 +32,7 @@ export * from "./dispatch.js";
 export * from "./doctor.js";
 export * from "./eval-directive.js";
 export * from "./event-id-dedupe.js";
+export * from "./external-policy.js";
 export * from "./inbound.js";
 export * from "./init.js";
 export * from "./interactive.js";

package/dist/channels/slack/interactive.d.ts

@@ -15,6 +15,8 @@ export interface SlackInteractiveDispatchDeps {
     resolveApproval: (sessionId: string, callId: string, decision: ApprovalDecision, auth: AuthContext | null) => Promise<PendingApproval>;
     waitUntil: (promise: Promise<unknown>) => void;
     log?: SlackLog;
+    /** Defaults to true. */
+    blockExternals?: boolean;
 }
 /**
  * Handle a Socket Mode `interactive` body. Returns true when this was
@@ -46,6 +48,10 @@ export interface SlackBlockActionDispatchDeps extends SlackContinuationProbes {
     host: HostContext;
     artifacts: ArtifactsApi;
     log?: SlackLog;
+    /** Defaults to true. */
+    blockExternals?: boolean;
+    /** Install workspace from `auth.test`; baseline for the external gate. */
+    installTeamId?: string;
 }
 /**
  * Route a non-approval `block_actions` payload to the author handler and