@fastagent-sh/fastagent 0.13.0 → 0.15.0

package/dist/tunnel.d.ts

@@ -1,7 +1,7 @@
 /**
  * `--tunnel`: expose the local dev server on a public HTTPS URL via a Cloudflare quick tunnel, then
- * auto-register the first-party webhook channels against it (Telegram setWebhook; Feishu/Lark
- * application-config PATCH; GitHub prints the URL to paste into repo settings). This closes the
+ * auto-register the first-party webhook channels against it (Telegram setWebhook; onboarded Slack
+ * App Manifest update; Feishu/Lark application-config PATCH; GitHub/manual Slack print URLs). This closes the
  * "local dev → public URL" gap webhooks need.
  *
  * Process orchestration, not assembly — lives outside the engine, beside dev-supervisor.ts.
@@ -25,10 +25,13 @@ type SpawnCloudflared = (port: number) => ChildProcess;
  */
 export declare function startCloudflareTunnel(port: number, spawnFn?: SpawnCloudflared, attemptTimeoutMs?: number): Promise<Tunnel | undefined>;
 /**
- * Print the public URL and wire up the first-party webhook channels found under `dir`: Telegram and
- * Feishu/Lark auto-register using credentials from .env; GitHub prints the URL to add in repo settings.
+ * Print the public URL and wire up first-party webhook channels found under `dir`: Telegram and
+ * Feishu/Lark use runtime credentials; onboarded Slack uses its owner-local config token; GitHub and a
+ * manually scaffolded Slack app receive explicit console URLs.
  */
 export declare function announceWebhooks(dir: string, baseUrl: string, opts?: {
     openUrl?: (url: string) => void;
+    routeChannels?: string[];
+    stateRoot?: string;
 }): Promise<void>;
 export {};

package/dist/tunnel.js

@@ -1,7 +1,7 @@
 /**
  * `--tunnel`: expose the local dev server on a public HTTPS URL via a Cloudflare quick tunnel, then
- * auto-register the first-party webhook channels against it (Telegram setWebhook; Feishu/Lark
- * application-config PATCH; GitHub prints the URL to paste into repo settings). This closes the
+ * auto-register the first-party webhook channels against it (Telegram setWebhook; onboarded Slack
+ * App Manifest update; Feishu/Lark application-config PATCH; GitHub/manual Slack print URLs). This closes the
  * "local dev → public URL" gap webhooks need.
  *
  * Process orchestration, not assembly — lives outside the engine, beside dev-supervisor.ts.
@@ -10,8 +10,10 @@ import { spawn } from "node:child_process";
 import { readdirSync } from "node:fs";
 import { join } from "node:path";
 import { registerFeishuWebhook } from "./channels/feishu/register-webhook.js";
+import { registerSlackWebhook } from "./channels/slack/register-webhook.js";
 import { registerTelegramWebhook } from "./channels/telegram/register-webhook.js";
 import { loadDotEnv } from "./env.js";
+import { resolveStateRoot } from "./engines/pi/config.js";
 import { log } from "./log.js";
 // `(?!api\.)`: cloudflared's ERROR lines mention its request endpoint (`https://api.trycloudflare.com/tunnel`,
 // e.g. "failed to request quick Tunnel: Post ... timeout" under a flaky proxy) — without the exclusion a
@@ -116,8 +118,9 @@ function channelBasenames(dir) {
     }
 }
 /**
- * Print the public URL and wire up the first-party webhook channels found under `dir`: Telegram and
- * Feishu/Lark auto-register using credentials from .env; GitHub prints the URL to add in repo settings.
+ * Print the public URL and wire up first-party webhook channels found under `dir`: Telegram and
+ * Feishu/Lark use runtime credentials; onboarded Slack uses its owner-local config token; GitHub and a
+ * manually scaffolded Slack app receive explicit console URLs.
  */
 export async function announceWebhooks(dir, baseUrl, opts = {}) {
     log.info(`[fastagent] public URL: ${baseUrl}`);
@@ -132,25 +135,33 @@ export async function announceWebhooks(dir, baseUrl, opts = {}) {
         // missing-credential guidance. loadDotEnv keeps throwing for the synchronous command callers.
         log.warn(`[fastagent] could not read ${join(dir, ".env")}: ${error.message} — continuing without it`);
     }
-    const channels = channelBasenames(dir);
-    if (channels.length === 0)
+    // Serving passes the validated route-channel subset. The basename fallback preserves the public
+    // helper's standalone behavior for callers that did not assemble channels first.
+    const routeChannels = opts.routeChannels ?? channelBasenames(dir);
+    if (routeChannels.length === 0)
         return;
     // Readiness is the registrar's job now: a fresh quick tunnel returns Cloudflare 530 for ~20-30s before
     // its origin connects, and the automatic registrars poll /health before configuring the platform (the
     // same wait the deploy runners rely on). GitHub needs no wait — the operator adds that webhook by hand.
-    if (channels.includes("telegram"))
+    if (routeChannels.includes("telegram"))
         await registerTelegramWebhook(baseUrl);
-    if (channels.includes("github")) {
+    if (routeChannels.includes("github")) {
         log.info(`[fastagent] github: add a webhook in your repo (Settings → Webhooks): Payload URL = ${baseUrl}/webhook, content type application/json, secret = GITHUB_WEBHOOK_SECRET`);
     }
+    if (routeChannels.includes("slack")) {
+        await registerSlackWebhook(baseUrl, {
+            stateRoot: opts.stateRoot ?? resolveStateRoot(dir),
+            log: (message) => log.info(message),
+        });
+    }
     // feishu/lark register programmatically too (application-v7 config PATCH — telegram-setWebhook
     // parity), once per mounted kind (each kind is its own app with its own credentials); the registrar
     // owns its own health wait and degrades to the manual console instruction.
     const feishuOptions = {
         onManualRegistration: ({ consoleUrl }) => opts.openUrl?.(consoleUrl),
     };
-    if (channels.includes("feishu"))
+    if (routeChannels.includes("feishu"))
         await registerFeishuWebhook(baseUrl, "feishu", feishuOptions);
-    if (channels.includes("lark"))
+    if (routeChannels.includes("lark"))
         await registerFeishuWebhook(baseUrl, "lark", feishuOptions);
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@fastagent-sh/fastagent",
-  "version": "0.13.0",
-  "description": "Vibe first. Then FastAgent: turn a local agent directory into a live service in your app, on GitHub, in Telegram, or behind any channel.",
+  "version": "0.15.0",
+  "description": "Vibe first. Then FastAgent: turn a local agent directory into a live service in your app, on GitHub, Telegram, Slack, or behind any channel.",
   "keywords": [
     "agent",
     "ai-agent",
@@ -10,6 +10,7 @@
     "agent-skills",
     "agent-serving",
     "telegram",
+    "slack",
     "github",
     "webhook",
     "sse",
@@ -42,6 +43,10 @@
       "types": "./dist/core.d.ts",
       "default": "./dist/core.js"
     },
+    "./session": {
+      "types": "./dist/session.d.ts",
+      "default": "./dist/session.js"
+    },
     "./pi": {
       "types": "./dist/pi.d.ts",
       "default": "./dist/pi.js"
@@ -54,6 +59,10 @@
       "types": "./dist/telegram.d.ts",
       "default": "./dist/telegram.js"
     },
+    "./slack": {
+      "types": "./dist/slack.d.ts",
+      "default": "./dist/slack.js"
+    },
     "./feishu": {
       "types": "./dist/feishu.d.ts",
       "default": "./dist/feishu.js"
@@ -82,26 +91,32 @@
     "prepack": "npm run build",
     "test": "vitest --run",
     "typecheck": "tsc --noEmit",
-    "lint": "biome check src test && node scripts/check-doc-links.mjs",
+    "lint": "biome check src test && node scripts/check-doc-links.mjs && knip",
     "format": "biome check --write src test",
-    "postbuild": "node scripts/copy-scaffold-assets.mjs"
+    "postbuild": "node scripts/copy-scaffold-assets.mjs",
+    "knip": "knip"
   },
   "dependencies": {
     "@clack/prompts": "^1.6.0",
-    "@earendil-works/pi-agent-core": "^0.80.7",
-    "@earendil-works/pi-ai": "^0.80.7",
-    "@earendil-works/pi-coding-agent": "^0.80.7",
+    "@earendil-works/pi-agent-core": "^0.81.1",
+    "@earendil-works/pi-ai": "^0.81.1",
+    "@earendil-works/pi-coding-agent": "^0.81.1",
+    "@larksuiteoapi/node-sdk": "^1.71.1",
     "@octokit/webhooks-methods": "^6.0.0",
     "@octokit/webhooks-types": "^7.6.1",
     "chokidar": "^5.0.0",
+    "commander": "^15.0.0",
     "croner": "^10.0.1",
     "giget": "^3.3.0",
     "ignore": "^7.0.5",
+    "proper-lockfile": "^4.1.2",
     "undici": "^8.6.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.2",
+    "@types/proper-lockfile": "^4.1.4",
+    "knip": "^6.29.0",
     "typescript": "^7.0.2",
     "vitest": "^4.1.9"
   }

package/dist/channels/feishu/seen.d.ts

@@ -1,5 +0,0 @@
-export interface SeenRing {
-    has(id: string): boolean;
-    add(id: string): void;
-}
-export declare function createSeenRing(path: string, label?: string, cap?: number): SeenRing;

package/dist/channels/feishu/seen.js

@@ -1,47 +0,0 @@
-/**
- * Accepted-turn dedup: a bounded, persisted ring of message_ids the channel has ACCEPTED. The platform
- * redelivers events it thinks undelivered AND documents duplicate pushes in "special scenarios", keying
- * idempotency on message_id (its own guidance: dedup on message_id, not event_id). The turn-store alone
- * cannot cover the tail: once a completed turn's intent is removed, a late redelivery would re-run it —
- * this ring is what refuses that. Only ACCEPTED (routed) messages enter: ignored events are side-effect-
- * free, so recording them would just churn the ring.
- *
- * Best-effort durability (post-decision insurance, not the pre-ACK intent): a failed write logs and
- * moves on — the exposure is a re-run after BOTH a completed turn and a redelivery straddle a crash,
- * the same at-least-once tail the turn-store documents.
- */
-import { log } from "../../log.js";
-import { loadStateFile, saveStateFile } from "../state.js";
-export function createSeenRing(path, label = "[feishu]", cap = 2000) {
-    const load = () => {
-        const raw = loadStateFile(path);
-        if (raw === undefined)
-            return [];
-        if (Array.isArray(raw) && raw.every((x) => typeof x === "string"))
-            return raw.slice(-cap);
-        log.warn(`${label} unexpected shape in ${path} — starting with no seen ids`);
-        return [];
-    };
-    const order = load();
-    const ids = new Set(order);
-    return {
-        has: (id) => ids.has(id),
-        add(id) {
-            if (ids.has(id))
-                return;
-            ids.add(id);
-            order.push(id);
-            while (order.length > cap) {
-                const evicted = order.shift();
-                if (evicted !== undefined)
-                    ids.delete(evicted);
-            }
-            try {
-                saveStateFile(path, order);
-            }
-            catch (e) {
-                log.warn(`${label} seen-ring write failed (dedup degrades to the turn-store window): ${String(e)}`);
-            }
-        },
-    };
-}

package/dist/cli-add-feishu.d.ts

@@ -1,8 +0,0 @@
-/**
- * Create or resume the platform app behind `add feishu` / `add lark`. Returns credentials for the
- * caller's generic .env write (the guided Lark path), or undefined when nothing remains to write —
- * the feishu path persists its own two credential stages internally (the App ID/Secret boundary is
- * irreversible and must not wait for the caller). Throws on refusal (a committable .env, a
- * non-interactive lark run); the caller surfaces that as a startup failure.
- */
-export declare function onboardFeishuCloudApp(target: string, kind: "feishu" | "lark", envIgnored: boolean): Promise<Record<string, string> | undefined>;

package/dist/cli-models.d.ts

@@ -1,11 +0,0 @@
-/**
- * CLI presenter for `fastagent models [search]`: the stdout/stderr output DECISION, kept out of the
- * engine config layer (config.ts owns model resolution / listModels) so this process-boundary behavior
- * is unit-testable without spawning the CLI.
- */
-/** The output of `fastagent models [search]`: the spec `lines` to print to stdout (a case-insensitive
- *  substring filter; no search → all), and an stderr `error` diagnostic when a search matches nothing. */
-export declare function formatModelsCommand(specs: string[], search?: string): {
-    lines: string[];
-    error?: string;
-};

package/dist/cli-models.js

@@ -1,20 +0,0 @@
-/**
- * CLI presenter for `fastagent models [search]`: the stdout/stderr output DECISION, kept out of the
- * engine config layer (config.ts owns model resolution / listModels) so this process-boundary behavior
- * is unit-testable without spawning the CLI.
- */
-/** The output of `fastagent models [search]`: the spec `lines` to print to stdout (a case-insensitive
- *  substring filter; no search → all), and an stderr `error` diagnostic when a search matches nothing. */
-export function formatModelsCommand(specs, search) {
-    if (!search)
-        return { lines: specs };
-    const q = search.toLowerCase();
-    const matches = specs.filter((spec) => spec.toLowerCase().includes(q));
-    if (matches.length === 0)
-        return { lines: matches, error: `no model matches "${search}"` };
-    // Rank a PROVIDER-name match (query in the part before "/") above an incidental model-id match, so
-    // `models anthropic` leads with anthropic/* rather than burying it under amazon-bedrock/anthropic.*
-    // and google-vertex/…-anthropic-… (which only match in the model id). Order within each group is kept.
-    const providerMatch = (spec) => spec.slice(0, spec.indexOf("/")).toLowerCase().includes(q);
-    return { lines: [...matches.filter(providerMatch), ...matches.filter((s) => !providerMatch(s))] };
-}