@inkeep/agents-work-apps 0.50.3 → 0.50.4

package/dist/env.d.ts

@@ -20,7 +20,7 @@ declare const envSchema: z.ZodObject<{
     warn: "warn";
     error: "error";
   }>>;
-  INKEEP_AGENTS_RUN_DATABASE_URL: z.ZodString;
+  INKEEP_AGENTS_RUN_DATABASE_URL: z.ZodOptional<z.ZodString>;
   INKEEP_AGENTS_MANAGE_UI_URL: z.ZodOptional<z.ZodString>;
   GITHUB_APP_ID: z.ZodOptional<z.ZodString>;
   GITHUB_APP_PRIVATE_KEY: z.ZodOptional<z.ZodString>;
@@ -45,7 +45,7 @@ declare const env: {
   NODE_ENV: "development" | "production" | "test";
   ENVIRONMENT: "development" | "production" | "test" | "pentest";
   LOG_LEVEL: "trace" | "debug" | "info" | "warn" | "error";
-  INKEEP_AGENTS_RUN_DATABASE_URL: string;
+  INKEEP_AGENTS_RUN_DATABASE_URL?: string | undefined;
   INKEEP_AGENTS_MANAGE_UI_URL?: string | undefined;
   GITHUB_APP_ID?: string | undefined;
   GITHUB_APP_PRIVATE_KEY?: string | undefined;

package/dist/env.js

@@ -22,7 +22,7 @@ const envSchema = z.object({
 		"warn",
 		"error"
 	]).default("info").describe("Logging verbosity level"),
-	INKEEP_AGENTS_RUN_DATABASE_URL: z.string().describe("PostgreSQL connection URL for the runtime database"),
+	INKEEP_AGENTS_RUN_DATABASE_URL: z.string().optional().describe("PostgreSQL connection URL for the runtime database. Required in production; tests use PGlite."),
 	INKEEP_AGENTS_MANAGE_UI_URL: z.string().optional().describe("URL where the management UI is hosted"),
 	GITHUB_APP_ID: z.string().optional().describe("GitHub App ID for GitHub integration"),
 	GITHUB_APP_PRIVATE_KEY: z.string().optional().describe("GitHub App private key for authentication"),

package/dist/github/mcp/auth.d.ts

@@ -1,7 +1,7 @@
-import * as hono1 from "hono";
+import * as hono0 from "hono";
 
 //#region src/github/mcp/auth.d.ts
-declare const githubMcpAuth: () => hono1.MiddlewareHandler<{
+declare const githubMcpAuth: () => hono0.MiddlewareHandler<{
   Variables: {
     toolId: string;
   };

package/dist/github/mcp/index.d.ts

@@ -1,11 +1,11 @@
 import { Hono } from "hono";
-import * as hono_types9 from "hono/types";
+import * as hono_types5 from "hono/types";
 
 //#region src/github/mcp/index.d.ts
 declare const app: Hono<{
   Variables: {
     toolId: string;
   };
-}, hono_types9.BlankSchema, "/">;
+}, hono_types5.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/setup.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types8 from "hono/types";
 
 //#region src/github/routes/setup.d.ts
-declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+declare const app: Hono<hono_types8.BlankEnv, hono_types8.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/tokenExchange.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/github/routes/tokenExchange.d.ts
-declare const app: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
+declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/webhooks.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/github/routes/webhooks.d.ts
 interface WebhookVerificationResult {
@@ -7,6 +7,6 @@ interface WebhookVerificationResult {
   error?: string;
 }
 declare function verifyWebhookSignature(payload: string, signature: string | undefined, secret: string): WebhookVerificationResult;
-declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
+declare const app: Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
 //#endregion
 export { WebhookVerificationResult, app as default, verifyWebhookSignature };

package/dist/slack/routes/workspaces.js

@@ -44,7 +44,8 @@ const ChannelAgentConfigSchema = z.object({
 	projectId: z.string(),
 	agentId: z.string(),
 	agentName: z.string().optional(),
-	projectName: z.string().optional()
+	projectName: z.string().optional(),
+	grantAccessToMembers: z.boolean().optional()
 });
 const WorkspaceSettingsSchema = z.object({ defaultAgent: ChannelAgentConfigSchema.optional() });
 app.openapi(createProtectedRoute({
@@ -360,7 +361,8 @@ app.openapi(createProtectedRoute({
 				agentConfig: config ? {
 					projectId: config.projectId,
 					agentId: config.agentId,
-					agentName: config.agentName || void 0
+					agentName: config.agentName || void 0,
+					grantAccessToMembers: config.grantAccessToMembers
 				} : void 0
 			};
 		});
@@ -416,7 +418,8 @@ app.openapi(createProtectedRoute({
 		agentConfig: config ? {
 			projectId: config.projectId,
 			agentId: config.agentId,
-			agentName: config.agentName || void 0
+			agentName: config.agentName || void 0,
+			grantAccessToMembers: config.grantAccessToMembers
 		} : void 0
 	});
 });
@@ -471,6 +474,7 @@ app.openapi(createProtectedRoute({
 		projectId: body.agentConfig.projectId,
 		agentId: body.agentConfig.agentId,
 		agentName: body.agentConfig.agentName,
+		grantAccessToMembers: body.agentConfig.grantAccessToMembers ?? true,
 		enabled: true
 	});
 	logger.info({
@@ -557,6 +561,7 @@ app.openapi(createProtectedRoute({
 				projectId: body.agentConfig.projectId,
 				agentId: body.agentConfig.agentId,
 				agentName: body.agentConfig.agentName,
+				grantAccessToMembers: body.agentConfig.grantAccessToMembers ?? true,
 				enabled: true
 			});
 			updated++;

package/dist/slack/services/agent-resolution.d.ts

@@ -11,6 +11,7 @@ interface ResolvedAgentConfig {
   agentId: string;
   agentName?: string;
   source: 'channel' | 'workspace' | 'none';
+  grantAccessToMembers: boolean;
 }
 interface AgentResolutionParams {
   tenantId: string;

package/dist/slack/services/agent-resolution.js

@@ -37,7 +37,8 @@ async function resolveEffectiveAgent(params) {
 				projectId: channelConfig.projectId,
 				agentId: channelConfig.agentId,
 				agentName: channelConfig.agentName || void 0,
-				source: "channel"
+				source: "channel",
+				grantAccessToMembers: channelConfig.grantAccessToMembers
 			};
 		}
 	}
@@ -52,7 +53,8 @@ async function resolveEffectiveAgent(params) {
 			projectId: workspaceConfig.projectId,
 			agentId: workspaceConfig.agentId,
 			agentName: workspaceConfig.agentName,
-			source: "workspace"
+			source: "workspace",
+			grantAccessToMembers: workspaceConfig.grantAccessToMembers ?? true
 		};
 	}
 	logger.debug({
@@ -78,7 +80,8 @@ async function getAgentConfigSources(params) {
 			projectId: config.projectId,
 			agentId: config.agentId,
 			agentName: config.agentName || void 0,
-			source: "channel"
+			source: "channel",
+			grantAccessToMembers: config.grantAccessToMembers
 		};
 	}
 	const wsConfig = await getWorkspaceDefaultAgentFromNango(teamId);
@@ -86,7 +89,8 @@ async function getAgentConfigSources(params) {
 		projectId: wsConfig.projectId,
 		agentId: wsConfig.agentId,
 		agentName: wsConfig.agentName,
-		source: "workspace"
+		source: "workspace",
+		grantAccessToMembers: wsConfig.grantAccessToMembers ?? true
 	};
 	return {
 		channelConfig,

package/dist/slack/services/commands/index.js

@@ -6,7 +6,7 @@ import { resolveEffectiveAgent } from "../agent-resolution.js";
 import { SlackStrings } from "../../i18n/strings.js";
 import { createAlreadyLinkedMessage, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage } from "../blocks/index.js";
 import { getSlackClient } from "../client.js";
-import { fetchAgentsForProject, fetchProjectsForTenant, getChannelAgentConfig, sendResponseUrlMessage } from "../events/utils.js";
+import { extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, getChannelAgentConfig, sendResponseUrlMessage } from "../events/utils.js";
 import { buildAgentSelectorModal } from "../modals.js";
 import { deleteWorkAppSlackUserMapping, findWorkAppSlackUserMapping, findWorkAppSlackUserMappingBySlackUser, flushTraces, getInProcessFetch, getWaitUntil, signSlackLinkToken, signSlackUserToken } from "@inkeep/agents-core";
 
@@ -232,21 +232,27 @@ async function handleQuestionCommand(payload, question, _dashboardUrl, tenantId)
 		id: resolvedAgent.agentId,
 		name: resolvedAgent.agentName || null,
 		projectId: resolvedAgent.projectId
-	}, question, userTenantId).catch((error) => {
+	}, question, userTenantId, {
+		slackAuthorized: resolvedAgent.grantAccessToMembers,
+		slackAuthSource: resolvedAgent.source === "none" ? void 0 : resolvedAgent.source,
+		slackChannelId: payload.channelId,
+		slackAuthorizedProjectId: resolvedAgent.projectId
+	}).catch((error) => {
 		logger.error({ error }, "Background execution promise rejected");
 	}).finally(() => flushTraces());
 	const waitUntil = await getWaitUntil();
 	if (waitUntil) waitUntil(questionWork);
 	return {};
 }
-async function executeAgentInBackground(payload, existingLink, targetAgent, question, tenantId) {
+async function executeAgentInBackground(payload, existingLink, targetAgent, question, tenantId, channelAuth) {
 	try {
 		const slackUserToken = await signSlackUserToken({
 			inkeepUserId: existingLink.inkeepUserId,
 			tenantId,
 			slackTeamId: payload.teamId,
 			slackUserId: payload.userId,
-			slackEnterpriseId: payload.enterpriseId
+			slackEnterpriseId: payload.enterpriseId,
+			...channelAuth
 		});
 		const apiBaseUrl = env.INKEEP_AGENTS_API_URL || "http://localhost:3002";
 		const controller = new AbortController();
@@ -295,9 +301,11 @@ async function executeAgentInBackground(payload, existingLink, targetAgent, ques
 				agentId: targetAgent.id,
 				projectId: targetAgent.projectId
 			}, "Run API call failed");
+			const apiMessage = extractApiErrorMessage(errorText);
+			const errorMessage = apiMessage ? `*Error.* ${apiMessage}` : `Failed to run agent: ${response.status} ${response.statusText}`;
 			await sendResponseUrlMessage(payload.responseUrl, {
 				response_type: "ephemeral",
-				text: `Failed to run agent: ${response.status} ${response.statusText}`
+				text: errorMessage
 			});
 		} else {
 			const result = await response.json();

package/dist/slack/services/events/app-mention.js

@@ -1,9 +1,10 @@
 import { env } from "../../../env.js";
 import { getLogger } from "../../../logger.js";
 import { findWorkspaceConnectionByTeamId } from "../nango.js";
+import { resolveEffectiveAgent } from "../agent-resolution.js";
 import { SlackStrings } from "../../i18n/strings.js";
 import { getSlackChannelInfo, getSlackClient, getSlackUserInfo, postMessageInThread } from "../client.js";
-import { checkIfBotThread, classifyError, findCachedUserMapping, formatChannelContext, generateSlackConversationId, getThreadContext, getUserFriendlyErrorMessage, resolveChannelAgentConfig, timedOp } from "./utils.js";
+import { checkIfBotThread, classifyError, findCachedUserMapping, formatChannelContext, generateSlackConversationId, getThreadContext, getUserFriendlyErrorMessage, timedOp } from "./utils.js";
 import { SLACK_SPAN_KEYS, SLACK_SPAN_NAMES, setSpanWithError, tracer } from "../../tracer.js";
 import { streamAgentResponse } from "./streaming.js";
 import { signSlackUserToken } from "@inkeep/agents-core";
@@ -86,7 +87,11 @@ async function handleAppMention(params) {
 		const hasQuery = Boolean(text && text.trim().length > 0);
 		let thinkingMessageTs;
 		try {
-			const { result: [agentConfig, existingLink] } = await timedOp(Promise.all([resolveChannelAgentConfig(teamId, channel, workspaceConnection), findCachedUserMapping(tenantId, slackUserId, teamId)]), {
+			const { result: [agentConfig, existingLink] } = await timedOp(Promise.all([resolveEffectiveAgent({
+				tenantId,
+				teamId,
+				channelId: channel
+			}), findCachedUserMapping(tenantId, slackUserId, teamId)]), {
 				label: "agent config / user mapping lookup",
 				context: {
 					teamId,
@@ -109,6 +114,8 @@ async function handleAppMention(params) {
 			}
 			span.setAttribute(SLACK_SPAN_KEYS.AGENT_ID, agentConfig.agentId);
 			span.setAttribute(SLACK_SPAN_KEYS.PROJECT_ID, agentConfig.projectId);
+			span.setAttribute(SLACK_SPAN_KEYS.AUTHORIZED, agentConfig.grantAccessToMembers);
+			span.setAttribute(SLACK_SPAN_KEYS.AUTH_SOURCE, agentConfig.source);
 			const agentDisplayName = agentConfig.agentName || agentConfig.agentId;
 			if (!existingLink) {
 				logger.info({
@@ -180,7 +187,11 @@ async function handleAppMention(params) {
 					inkeepUserId: existingLink.inkeepUserId,
 					tenantId,
 					slackTeamId: teamId,
-					slackUserId
+					slackUserId,
+					slackAuthorized: agentConfig?.grantAccessToMembers ?? false,
+					slackAuthSource: agentConfig?.source === "none" ? void 0 : agentConfig?.source,
+					slackChannelId: channel,
+					slackAuthorizedProjectId: agentConfig?.projectId
 				});
 				thinkingMessageTs = (await slackClient.chat.postMessage({
 					channel,
@@ -254,7 +265,11 @@ Respond naturally as if you're joining the conversation to help.`;
 				inkeepUserId: existingLink.inkeepUserId,
 				tenantId,
 				slackTeamId: teamId,
-				slackUserId
+				slackUserId,
+				slackAuthorized: agentConfig?.grantAccessToMembers ?? false,
+				slackAuthSource: agentConfig?.source === "none" ? void 0 : agentConfig?.source,
+				slackChannelId: channel,
+				slackAuthorizedProjectId: agentConfig?.projectId
 			});
 			thinkingMessageTs = (await slackClient.chat.postMessage({
 				channel,

package/dist/slack/services/events/index.d.ts

@@ -1,6 +1,6 @@
 import { InlineSelectorMetadata, handleAppMention } from "./app-mention.js";
 import { handleMessageShortcut, handleOpenAgentSelectorModal, handleOpenFollowUpModal } from "./block-actions.js";
 import { handleFollowUpSubmission, handleModalSubmission } from "./modal-submission.js";
-import { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
+import { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
 import { StreamResult, streamAgentResponse } from "./streaming.js";
-export { type InlineSelectorMetadata, SlackErrorType, type StreamResult, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, handleAppMention, handleFollowUpSubmission, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, markdownToMrkdwn, sendResponseUrlMessage, streamAgentResponse };
+export { type InlineSelectorMetadata, SlackErrorType, type StreamResult, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, handleAppMention, handleFollowUpSubmission, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, markdownToMrkdwn, sendResponseUrlMessage, streamAgentResponse };

package/dist/slack/services/events/index.js

@@ -1,7 +1,7 @@
-import { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
+import { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
 import { streamAgentResponse } from "./streaming.js";
 import { handleAppMention } from "./app-mention.js";
 import { handleMessageShortcut, handleOpenAgentSelectorModal, handleOpenFollowUpModal } from "./block-actions.js";
 import { handleFollowUpSubmission, handleModalSubmission } from "./modal-submission.js";
 
-export { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, handleAppMention, handleFollowUpSubmission, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, markdownToMrkdwn, sendResponseUrlMessage, streamAgentResponse };
+export { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, handleAppMention, handleFollowUpSubmission, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, markdownToMrkdwn, sendResponseUrlMessage, streamAgentResponse };

package/dist/slack/services/events/modal-submission.js

@@ -4,7 +4,7 @@ import { findWorkspaceConnectionByTeamId } from "../nango.js";
 import { SlackStrings } from "../../i18n/strings.js";
 import { buildConversationResponseBlocks } from "../blocks/index.js";
 import { getSlackClient } from "../client.js";
-import { classifyError, findCachedUserMapping, generateSlackConversationId, getThreadContext, getUserFriendlyErrorMessage, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
+import { classifyError, extractApiErrorMessage, findCachedUserMapping, generateSlackConversationId, getThreadContext, getUserFriendlyErrorMessage, markdownToMrkdwn, sendResponseUrlMessage } from "./utils.js";
 import { SLACK_SPAN_KEYS, SLACK_SPAN_NAMES, setSpanWithError, tracer } from "../../tracer.js";
 import { getInProcessFetch, signSlackUserToken } from "@inkeep/agents-core";
 
@@ -54,6 +54,7 @@ async function handleModalSubmission(view) {
 			}
 			span.setAttribute(SLACK_SPAN_KEYS.AGENT_ID, agentId);
 			span.setAttribute(SLACK_SPAN_KEYS.PROJECT_ID, projectId);
+			span.setAttribute(SLACK_SPAN_KEYS.AUTHORIZED, false);
 			const tenantId = metadata.tenantId;
 			const [workspaceConnection, existingLink] = await Promise.all([findWorkspaceConnectionByTeamId(metadata.teamId), findCachedUserMapping(tenantId, metadata.slackUserId, metadata.teamId)]);
 			if (!workspaceConnection?.botToken) {
@@ -99,7 +100,8 @@ async function handleModalSubmission(view) {
 				inkeepUserId: existingLink.inkeepUserId,
 				tenantId,
 				slackTeamId: metadata.teamId,
-				slackUserId: metadata.slackUserId
+				slackUserId: metadata.slackUserId,
+				slackAuthorized: false
 			});
 			const conversationId = generateSlackConversationId({
 				teamId: metadata.teamId,
@@ -200,6 +202,7 @@ async function handleFollowUpSubmission(view) {
 			span.setAttribute(SLACK_SPAN_KEYS.AGENT_ID, agentId);
 			span.setAttribute(SLACK_SPAN_KEYS.PROJECT_ID, projectId);
 			span.setAttribute(SLACK_SPAN_KEYS.CONVERSATION_ID, conversationId);
+			span.setAttribute(SLACK_SPAN_KEYS.AUTHORIZED, false);
 			const [workspaceConnection, existingLink] = await Promise.all([findWorkspaceConnectionByTeamId(teamId), findCachedUserMapping(tenantId, slackUserId, teamId)]);
 			if (!workspaceConnection?.botToken) {
 				logger.error({ teamId }, "No bot token for follow-up submission");
@@ -224,7 +227,8 @@ async function handleFollowUpSubmission(view) {
 				inkeepUserId: existingLink.inkeepUserId,
 				tenantId,
 				slackTeamId: teamId,
-				slackUserId
+				slackUserId,
+				slackAuthorized: false
 			});
 			const apiBaseUrl = env.INKEEP_AGENTS_API_URL || "http://localhost:3002";
 			await slackClient.chat.postEphemeral({
@@ -348,11 +352,15 @@ async function callAgentApi(params) {
 				isError: false
 			};
 		}
-		const errorText = getUserFriendlyErrorMessage(classifyError(null, response.status), agentId);
+		const errorBody = await response.text().catch(() => "");
+		const apiMessage = extractApiErrorMessage(errorBody);
+		const errorType = classifyError(null, response.status);
+		const errorText = apiMessage ? `*Error.* ${apiMessage}` : getUserFriendlyErrorMessage(errorType, agentId);
 		logger.warn({
 			status: response.status,
 			statusText: response.statusText,
-			agentId
+			agentId,
+			errorBody
 		}, "Agent API returned error");
 		apiSpan.end();
 		return {

package/dist/slack/services/events/streaming.js

@@ -1,7 +1,7 @@
 import { env } from "../../../env.js";
 import { getLogger } from "../../../logger.js";
 import { createContextBlock } from "../blocks/index.js";
-import { SlackErrorType, classifyError, getUserFriendlyErrorMessage } from "./utils.js";
+import { SlackErrorType, classifyError, extractApiErrorMessage, getUserFriendlyErrorMessage } from "./utils.js";
 import { SLACK_SPAN_KEYS, SLACK_SPAN_NAMES, setSpanWithError, tracer } from "../../tracer.js";
 import { getInProcessFetch } from "@inkeep/agents-core";
 
@@ -129,8 +129,9 @@ async function streamAgentResponse(params) {
 				status: response.status,
 				errorBody
 			}, "Agent streaming request failed");
+			const apiMessage = extractApiErrorMessage(errorBody);
 			const errorType = classifyError(null, response.status);
-			const errorMessage = getUserFriendlyErrorMessage(errorType, agentName);
+			const errorMessage = apiMessage ? `*Error.* ${apiMessage}` : getUserFriendlyErrorMessage(errorType, agentName);
 			await slackClient.chat.postMessage({
 				channel,
 				thread_ts: threadTs,

package/dist/slack/services/events/utils.d.ts

@@ -50,6 +50,7 @@ declare function classifyError(error: unknown, httpStatus?: number): SlackErrorT
 /**
  * Get a user-friendly error message based on error type
  */
+declare function extractApiErrorMessage(responseBody: string): string | null;
 declare function getUserFriendlyErrorMessage(errorType: SlackErrorType, agentName?: string): string;
 type ProjectOption = {
   id: string;
@@ -157,4 +158,4 @@ declare function formatChannelContext(channelInfo: {
   name?: string;
 } | null): string;
 //#endregion
-export { ProjectOption, SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };
+export { ProjectOption, SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };

package/dist/slack/services/events/utils.js

@@ -94,6 +94,13 @@ function classifyError(error, httpStatus) {
 /**
 * Get a user-friendly error message based on error type
 */
+function extractApiErrorMessage(responseBody) {
+	try {
+		const parsed = JSON.parse(responseBody);
+		if (typeof parsed.message === "string" && parsed.message.length > 0) return parsed.message;
+	} catch {}
+	return null;
+}
 function getUserFriendlyErrorMessage(errorType, agentName) {
 	const agent = agentName || "The agent";
 	switch (errorType) {
@@ -402,4 +409,4 @@ function formatChannelContext(channelInfo) {
 }
 
 //#endregion
-export { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };
+export { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };

package/dist/slack/services/index.d.ts

@@ -8,9 +8,9 @@ import { InlineSelectorMetadata, handleAppMention } from "./events/app-mention.j
 import { handleMessageShortcut, handleOpenAgentSelectorModal, handleOpenFollowUpModal } from "./events/block-actions.js";
 import { handleFollowUpSubmission, handleModalSubmission } from "./events/modal-submission.js";
 import { AgentOption, BuildAgentSelectorModalParams, BuildMessageShortcutModalParams, FollowUpModalMetadata, ModalMetadata, buildAgentSelectorModal, buildFollowUpModal, buildMessageShortcutModal } from "./modals.js";
-import { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./events/utils.js";
+import { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./events/utils.js";
 import { StreamResult, streamAgentResponse } from "./events/streaming.js";
 import "./events/index.js";
 import { parseSlackCommandBody, parseSlackEventBody, verifySlackRequest } from "./security.js";
 import { getBotTokenForTeam, setBotTokenForTeam } from "./workspace-tokens.js";
-export { AgentConfigSources, AgentOption, AgentResolutionParams, BuildAgentSelectorModalParams, BuildMessageShortcutModalParams, ContextBlockParams, DefaultAgentConfig, FollowUpButtonParams, FollowUpModalMetadata, InlineSelectorMetadata, ModalMetadata, ResolvedAgentConfig, SlackCommandPayload, SlackCommandResponse, SlackErrorType, SlackWorkspaceConnection, StreamResult, WorkspaceInstallData, buildAgentSelectorModal, buildConversationResponseBlocks, buildFollowUpButton, buildFollowUpModal, buildMessageShortcutModal, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserInfo, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleFollowUpSubmission, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, handleQuestionCommand, handleStatusCommand, handleUnlinkCommand, listWorkspaceInstallations, markdownToMrkdwn, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, verifySlackRequest };
+export { AgentConfigSources, AgentOption, AgentResolutionParams, BuildAgentSelectorModalParams, BuildMessageShortcutModalParams, ContextBlockParams, DefaultAgentConfig, FollowUpButtonParams, FollowUpModalMetadata, InlineSelectorMetadata, ModalMetadata, ResolvedAgentConfig, SlackCommandPayload, SlackCommandResponse, SlackErrorType, SlackWorkspaceConnection, StreamResult, WorkspaceInstallData, buildAgentSelectorModal, buildConversationResponseBlocks, buildFollowUpButton, buildFollowUpModal, buildMessageShortcutModal, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserInfo, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleFollowUpSubmission, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, handleQuestionCommand, handleStatusCommand, handleUnlinkCommand, listWorkspaceInstallations, markdownToMrkdwn, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, verifySlackRequest };

package/dist/slack/services/index.js

@@ -2,7 +2,7 @@ import { clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createConn
 import { getAgentConfigSources, resolveEffectiveAgent } from "./agent-resolution.js";
 import { buildConversationResponseBlocks, buildFollowUpButton, createAlreadyLinkedMessage, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage } from "./blocks/index.js";
 import { checkUserIsChannelMember, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackTeamInfo, getSlackUserInfo, postMessage, postMessageInThread, revokeSlackToken } from "./client.js";
-import { SlackErrorType, checkIfBotThread, classifyError, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./events/utils.js";
+import { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, sendResponseUrlMessage } from "./events/utils.js";
 import { buildAgentSelectorModal, buildFollowUpModal, buildMessageShortcutModal } from "./modals.js";
 import { handleAgentPickerCommand, handleCommand, handleHelpCommand, handleLinkCommand, handleQuestionCommand, handleStatusCommand, handleUnlinkCommand } from "./commands/index.js";
 import { streamAgentResponse } from "./events/streaming.js";
@@ -13,4 +13,4 @@ import "./events/index.js";
 import { parseSlackCommandBody, parseSlackEventBody, verifySlackRequest } from "./security.js";
 import { getBotTokenForTeam, setBotTokenForTeam } from "./workspace-tokens.js";
 
-export { SlackErrorType, buildAgentSelectorModal, buildConversationResponseBlocks, buildFollowUpButton, buildFollowUpModal, buildMessageShortcutModal, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserInfo, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleFollowUpSubmission, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, handleQuestionCommand, handleStatusCommand, handleUnlinkCommand, listWorkspaceInstallations, markdownToMrkdwn, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, verifySlackRequest };
+export { SlackErrorType, buildAgentSelectorModal, buildConversationResponseBlocks, buildFollowUpButton, buildFollowUpModal, buildMessageShortcutModal, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createErrorMessage, createJwtLinkMessage, createNotLinkedMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserInfo, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleFollowUpSubmission, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleOpenFollowUpModal, handleQuestionCommand, handleStatusCommand, handleUnlinkCommand, listWorkspaceInstallations, markdownToMrkdwn, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, verifySlackRequest };

package/dist/slack/services/nango.d.ts

@@ -18,6 +18,7 @@ interface DefaultAgentConfig {
   agentName?: string;
   projectId: string;
   projectName?: string;
+  grantAccessToMembers?: boolean;
 }
 interface SlackWorkspaceConnection {
   connectionId: string;

package/dist/slack/tracer.d.ts

@@ -36,6 +36,8 @@ declare const SLACK_SPAN_KEYS: {
   readonly IS_IN_THREAD: "slack.is_in_thread";
   readonly STREAM_FINALIZATION_FAILED: "slack.stream_finalization_failed";
   readonly CONTENT_ALREADY_DELIVERED: "slack.content_already_delivered";
+  readonly AUTHORIZED: "slack.authorized";
+  readonly AUTH_SOURCE: "slack.auth_source";
 };
 type SlackOutcome = 'handled' | 'ignored_bot_message' | 'ignored_unknown_event' | 'ignored_no_action_match' | 'ignored_slack_retry' | 'url_verification' | 'validation_error' | 'signature_invalid' | 'error';
 //#endregion

package/dist/slack/tracer.js

@@ -34,7 +34,9 @@ const SLACK_SPAN_KEYS = {
 	HAS_QUERY: "slack.has_query",
 	IS_IN_THREAD: "slack.is_in_thread",
 	STREAM_FINALIZATION_FAILED: "slack.stream_finalization_failed",
-	CONTENT_ALREADY_DELIVERED: "slack.content_already_delivered"
+	CONTENT_ALREADY_DELIVERED: "slack.content_already_delivered",
+	AUTHORIZED: "slack.authorized",
+	AUTH_SOURCE: "slack.auth_source"
 };
 
 //#endregion

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-work-apps",
-  "version": "0.50.3",
+  "version": "0.50.4",
   "description": "First party integrations for Inkeep Agents",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -33,7 +33,7 @@
     "jose": "^6.1.0",
     "minimatch": "^10.1.1",
     "slack-block-builder": "^2.8.0",
-    "@inkeep/agents-core": "0.50.3"
+    "@inkeep/agents-core": "0.50.4"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",