@inkeep/agents-work-apps 0.53.7 → 0.53.8

package/dist/github/index.d.ts

@@ -4,10 +4,10 @@ import "./routes/setup.js";
 import "./routes/tokenExchange.js";
 import { WebhookVerificationResult, verifyWebhookSignature } from "./routes/webhooks.js";
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types0 from "hono/types";
 
 //#region src/github/index.d.ts
-declare function createGithubRoutes(): Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
-declare const githubRoutes: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+declare function createGithubRoutes(): Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare const githubRoutes: Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
 //#endregion
 export { GenerateInstallationAccessTokenResult, GenerateTokenError, GenerateTokenResult, GitHubAppConfig, InstallationAccessToken, InstallationInfo, LookupInstallationError, LookupInstallationForRepoResult, LookupInstallationResult, WebhookVerificationResult, clearConfigCache, createAppJwt, createGithubRoutes, determineStatus, fetchInstallationDetails, fetchInstallationRepositories, generateInstallationAccessToken, getGitHubAppConfig, getGitHubAppName, getStateSigningSecret, getWebhookSecret, githubRoutes, isGitHubAppConfigured, isGitHubAppNameConfigured, isStateSigningConfigured, isWebhookConfigured, lookupInstallationForRepo, validateGitHubAppConfigOnStartup, validateGitHubInstallFlowConfigOnStartup, validateGitHubWebhookConfigOnStartup, verifyWebhookSignature };

package/dist/github/mcp/schemas.d.ts

@@ -76,8 +76,8 @@ declare const ChangedFileSchema: z.ZodObject<{
   path: z.ZodString;
   status: z.ZodEnum<{
     added: "added";
-    modified: "modified";
     removed: "removed";
+    modified: "modified";
     renamed: "renamed";
     copied: "copied";
     changed: "changed";

package/dist/github/routes/setup.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types0 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/github/routes/setup.d.ts
-declare const app: Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/tokenExchange.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types1 from "hono/types";
+import * as hono_types5 from "hono/types";
 
 //#region src/github/routes/tokenExchange.d.ts
-declare const app: Hono<hono_types1.BlankEnv, hono_types1.BlankSchema, "/">;
+declare const app: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/slack/services/blocks/index.js

@@ -1,3 +1,4 @@
+import { escapeSlackLinkText, escapeSlackMrkdwn } from "../events/utils.js";
 import { SlackStrings } from "../../i18n/strings.js";
 import { z } from "zod";
 import { Blocks, Elements, Md, Message } from "slack-block-builder";
@@ -12,7 +13,7 @@ function createContextBlock(params) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: SlackStrings.context.poweredBy(agentName)
+			text: SlackStrings.context.poweredBy(escapeSlackMrkdwn(agentName))
 		}]
 	};
 }
@@ -73,15 +74,16 @@ function buildToolApprovalBlocks(params) {
 		type: "section",
 		text: {
 			type: "mrkdwn",
-			text: `*Approval required - \`${toolName}\`*`
+			text: `*Approval required - \`${escapeSlackMrkdwn(toolName)}\`*`
 		}
 	}];
 	if (input && Object.keys(input).length > 0) {
 		const fields = Object.entries(input).slice(0, 10).map(([k, v]) => {
 			const val = typeof v === "object" ? JSON.stringify(v) : String(v ?? "");
+			const truncated = val.length > 80 ? `${val.slice(0, 80)}…` : val;
 			return {
 				type: "mrkdwn",
-				text: `*${k}:*\n${val.length > 80 ? `${val.slice(0, 80)}…` : val}`
+				text: `*${escapeSlackMrkdwn(k)}:*\n${escapeSlackMrkdwn(truncated)}`
 			};
 		});
 		blocks.push({
@@ -121,7 +123,7 @@ function buildToolApprovalDoneBlocks(params) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: approved ? `✅ Approved \`${toolName}\` · <@${actorUserId}>` : `❌ Denied \`${toolName}\` · <@${actorUserId}>`
+			text: approved ? `✅ Approved \`${escapeSlackMrkdwn(toolName)}\` · <@${actorUserId}>` : `❌ Denied \`${escapeSlackMrkdwn(toolName)}\` · <@${actorUserId}>`
 		}]
 	}];
 }
@@ -130,16 +132,17 @@ function buildToolApprovalExpiredBlocks(params) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: `⏱️ Expired · \`${params.toolName}\``
+			text: `⏱️ Expired · \`${escapeSlackMrkdwn(params.toolName)}\``
 		}]
 	}];
 }
 function buildToolOutputErrorBlock(toolName, errorText) {
+	const truncated = errorText.length > 100 ? `${errorText.slice(0, 100)}…` : errorText;
 	return {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: `⚠️ *${toolName}* · failed: ${errorText.length > 100 ? `${errorText.slice(0, 100)}…` : errorText}`
+			text: `⚠️ *${escapeSlackMrkdwn(toolName)}* · failed: ${escapeSlackMrkdwn(truncated)}`
 		}]
 	};
 }
@@ -148,7 +151,7 @@ function buildSummaryBreadcrumbBlock(labels) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: labels.join(" → ")
+			text: labels.map(escapeSlackMrkdwn).join(" → ")
 		}]
 	};
 }
@@ -179,9 +182,10 @@ function buildDataComponentBlocks(component) {
 	if (Object.keys(payload).length > 0) if (isFlatRecord(payload)) {
 		const fields = Object.entries(payload).slice(0, 10).map(([k, v]) => {
 			const val = String(v ?? "");
+			const truncated = val.length > 80 ? `${val.slice(0, 80)}…` : val;
 			return {
 				type: "mrkdwn",
-				text: `*${k}*\n${val.length > 80 ? `${val.slice(0, 80)}…` : val}`
+				text: `*${escapeSlackMrkdwn(k)}*\n${escapeSlackMrkdwn(truncated)}`
 			};
 		});
 		blocks.push({
@@ -203,7 +207,7 @@ function buildDataComponentBlocks(component) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: `data component · type: ${componentType}`
+			text: `data component · type: ${escapeSlackMrkdwn(componentType)}`
 		}]
 	});
 	return {
@@ -219,7 +223,8 @@ function buildDataArtifactBlocks(artifact) {
 		const MAX_SOURCES = 10;
 		const lines = sourcesArray.slice(0, MAX_SOURCES).map((s) => {
 			const url = s.url || s.href;
-			const title = s.title || s.name || url;
+			const rawTitle = s.title || s.name || url;
+			const title = rawTitle ? escapeSlackLinkText(rawTitle) : rawTitle;
 			return url ? `• <${url}|${title}>` : null;
 		}).filter((l) => l !== null);
 		if (lines.length > 0) {
@@ -247,7 +252,7 @@ function buildDataArtifactBlocks(artifact) {
 		type: "context",
 		elements: [{
 			type: "mrkdwn",
-			text: `type: ${artifactType}`
+			text: `type: ${escapeSlackMrkdwn(artifactType)}`
 		}]
 	});
 	let overflowContent;
@@ -267,10 +272,11 @@ function buildDataArtifactBlocks(artifact) {
 }
 function buildCitationsBlock(citations) {
 	const MAX_CITATIONS = 10;
-	const lines = citations.slice(0, MAX_CITATIONS).map((c) => {
+	const lines = citations.slice(0, MAX_CITATIONS).map((c, i) => {
 		const url = c.url;
-		const title = c.title || url;
-		return url ? `• <${url}|${title}>` : null;
+		const rawTitle = c.title || url;
+		const title = rawTitle ? escapeSlackLinkText(rawTitle) : rawTitle;
+		return url ? `<${url}|[${i + 1}] ${title}>` : null;
 	}).filter((l) => l !== null);
 	if (lines.length === 0) return [];
 	const suffix = citations.length > MAX_CITATIONS ? `\n_and ${citations.length - MAX_CITATIONS} more_` : "";

package/dist/slack/services/commands/index.js

@@ -262,7 +262,8 @@ async function handleQuestionCommand(payload, question, _dashboardUrl, tenantId,
 		agentId: resolvedAgent.agentId,
 		agentName: resolvedAgent.agentName || resolvedAgent.agentId,
 		question,
-		conversationId
+		conversationId,
+		entryPoint: "slash_command"
 	}).catch(async (error) => {
 		logger.error({ error }, "Background execution promise rejected");
 		if (payload.responseUrl) try {

package/dist/slack/services/events/app-mention.js

@@ -238,7 +238,8 @@ Respond naturally as if you're joining the conversation to help.`;
 					agentId: agentConfig.agentId,
 					agentName: agentDisplayName,
 					question: threadQuery,
-					conversationId: conversationId$1
+					conversationId: conversationId$1,
+					entryPoint: "app_mention"
 				});
 				span.end();
 				return;
@@ -308,7 +309,8 @@ Respond naturally as if you're joining the conversation to help.`;
 				agentId: agentConfig.agentId,
 				agentName: agentDisplayName,
 				question: queryText,
-				conversationId
+				conversationId,
+				entryPoint: "app_mention"
 			});
 			span.end();
 		} catch (error) {

package/dist/slack/services/events/block-actions.js

@@ -71,7 +71,9 @@ async function handleToolApproval(params) {
 					"Content-Type": "application/json",
 					Authorization: `Bearer ${slackUserToken}`,
 					"x-inkeep-project-id": projectId,
-					"x-inkeep-agent-id": agentId
+					"x-inkeep-agent-id": agentId,
+					"x-inkeep-invocation-type": "slack",
+					"x-inkeep-invocation-entry-point": "tool_approval"
 				},
 				body: JSON.stringify({
 					conversationId,

package/dist/slack/services/events/direct-message.js

@@ -118,7 +118,8 @@ async function handleDirectMessage(params) {
 				agentId: defaultAgent.agentId,
 				agentName: agentDisplayName,
 				question: queryText,
-				conversationId
+				conversationId,
+				entryPoint: "direct_message"
 			});
 			span.end();
 		} catch (error) {

package/dist/slack/services/events/execution.d.ts

@@ -2,6 +2,7 @@ import { getSlackClient } from "../client.js";
 import { StreamResult } from "./streaming.js";
 
 //#region src/slack/services/events/execution.d.ts
+type SlackEntryPoint = 'app_mention' | 'direct_message' | 'slash_command' | 'message_shortcut' | 'modal_submission' | 'smart_link_resume' | 'tool_approval';
 interface PublicExecutionParams {
   slackClient: ReturnType<typeof getSlackClient>;
   channel: string;
@@ -14,7 +15,8 @@ interface PublicExecutionParams {
   agentName: string;
   question: string;
   conversationId: string;
+  entryPoint?: SlackEntryPoint;
 }
 declare function executeAgentPublicly(params: PublicExecutionParams): Promise<StreamResult>;
 //#endregion
-export { PublicExecutionParams, executeAgentPublicly };
+export { PublicExecutionParams, SlackEntryPoint, executeAgentPublicly };

package/dist/slack/services/events/execution.js

@@ -38,7 +38,8 @@ async function executeAgentPublicly(params) {
 		agentId: params.agentId,
 		question: params.question,
 		agentName,
-		conversationId: params.conversationId
+		conversationId: params.conversationId,
+		entryPoint: params.entryPoint
 	});
 }
 

package/dist/slack/services/events/modal-submission.js

@@ -94,7 +94,8 @@ async function handleModalSubmission(view) {
 				agentId,
 				agentName: agentDisplayName,
 				question: fullQuestion,
-				conversationId
+				conversationId,
+				entryPoint: metadata.messageContext ? "message_shortcut" : "modal_submission"
 			});
 			logger.info({
 				agentId,

package/dist/slack/services/events/streaming.d.ts

@@ -21,6 +21,7 @@ declare function streamAgentResponse(params: {
   question: string;
   agentName: string;
   conversationId: string;
+  entryPoint?: string;
 }): Promise<StreamResult>;
 //#endregion
 export { StreamResult, streamAgentResponse };

package/dist/slack/services/events/streaming.js

@@ -62,7 +62,7 @@ async function cleanupThinkingMessage(params) {
 }
 async function streamAgentResponse(params) {
 	return tracer.startActiveSpan(SLACK_SPAN_NAMES.STREAM_AGENT_RESPONSE, async (span) => {
-		const { slackClient, channel, threadTs, thinkingMessageTs, slackUserId, teamId, jwtToken, projectId, agentId, question, agentName, conversationId } = params;
+		const { slackClient, channel, threadTs, thinkingMessageTs, slackUserId, teamId, jwtToken, projectId, agentId, question, agentName, conversationId, entryPoint } = params;
 		const threadParam = threadTs ? { thread_ts: threadTs } : {};
 		const cleanupParams = {
 			slackClient,
@@ -109,7 +109,9 @@ async function streamAgentResponse(params) {
 					"Content-Type": "application/json",
 					Authorization: `Bearer ${jwtToken}`,
 					"x-inkeep-project-id": projectId,
-					"x-inkeep-agent-id": agentId
+					"x-inkeep-agent-id": agentId,
+					"x-inkeep-invocation-type": "slack",
+					...entryPoint && { "x-inkeep-invocation-entry-point": entryPoint }
 				},
 				body: JSON.stringify({
 					messages: [{
@@ -349,10 +351,14 @@ async function streamAgentResponse(params) {
 							const artifactData = data.data;
 							if (typeof artifactData.type === "string" && artifactData.type.toLowerCase() === "citation") {
 								const summary = artifactData.artifactSummary;
-								if (summary?.url && !citations.some((c) => c.url === summary.url)) citations.push({
-									title: summary.title,
-									url: summary.url
-								});
+								if (summary?.url && !citations.some((c) => c.url === summary.url)) {
+									citations.push({
+										title: summary.title,
+										url: summary.url
+									});
+									const citationIndex = citations.length;
+									if (fullText.length > 0) await withTimeout(streamer.append({ markdown_text: `<${summary.url}|[${citationIndex}]>` }), CHATSTREAM_OP_TIMEOUT_MS, "streamer.append").catch((e) => logger.warn({ error: e }, "Failed to append inline citation"));
+								}
 							} else if (richMessageCount < MAX_RICH_MESSAGES) {
 								const { blocks, overflowContent, artifactName } = buildDataArtifactBlocks({ data: artifactData });
 								if (overflowContent) {

package/dist/slack/services/events/utils.d.ts

@@ -8,10 +8,10 @@ import { AgentOption } from "../modals.js";
  * Called on every @mention and /inkeep command — caching avoids redundant DB queries.
  */
 declare function findCachedUserMapping(tenantId: string, slackUserId: string, teamId: string, clientId?: string): Promise<{
+  slackUserId: string;
   id: string;
   createdAt: string;
   updatedAt: string;
-  slackUserId: string;
   tenantId: string;
   clientId: string;
   slackTeamId: string;
@@ -22,6 +22,18 @@ declare function findCachedUserMapping(tenantId: string, slackUserId: string, te
   linkedAt: string;
   lastUsedAt: string | null;
 } | null>;
+/**
+ * Escape special characters in Slack mrkdwn link display text.
+ * In Slack's <url|text> format, `>` terminates the link, `<` opens a new one,
+ * and `&` begins an HTML entity — all must be escaped.
+ */
+declare function escapeSlackLinkText(text: string): string;
+/**
+ * Escape special characters in Slack mrkdwn text.
+ * In Slack's mrkdwn, `&`, `<`, and `>` are treated as HTML entities/tags
+ * and must be escaped in all dynamic mrkdwn text fields.
+ */
+declare function escapeSlackMrkdwn(text: string): string;
 /**
  * Convert standard Markdown to Slack's mrkdwn format
  *
@@ -167,4 +179,4 @@ declare function formatChannelContext(channelInfo: {
   name?: string;
 } | null): string;
 //#endregion
-export { ProjectOption, SlackAttachment, SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatAttachments, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };
+export { ProjectOption, SlackAttachment, SlackErrorType, checkIfBotThread, classifyError, escapeSlackLinkText, escapeSlackMrkdwn, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatAttachments, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };

package/dist/slack/services/events/utils.js

@@ -50,6 +50,22 @@ async function findCachedUserMapping(tenantId, slackUserId, teamId, clientId = "
 	return mapping;
 }
 /**
+* Escape special characters in Slack mrkdwn link display text.
+* In Slack's <url|text> format, `>` terminates the link, `<` opens a new one,
+* and `&` begins an HTML entity — all must be escaped.
+*/
+function escapeSlackLinkText(text) {
+	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+/**
+* Escape special characters in Slack mrkdwn text.
+* In Slack's mrkdwn, `&`, `<`, and `>` are treated as HTML entities/tags
+* and must be escaped in all dynamic mrkdwn text fields.
+*/
+function escapeSlackMrkdwn(text) {
+	return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+/**
 * Convert standard Markdown to Slack's mrkdwn format
 *
 * Key differences:
@@ -63,7 +79,7 @@ function markdownToMrkdwn(markdown) {
 	if (!markdown) return markdown;
 	let result = markdown;
 	result = result.replace(/^#{1,6}\s+(.+)$/gm, "*$1*");
-	result = result.replace(/\[([^\]]+)\]\(([^)]+)\)/g, "<$2|$1>");
+	result = result.replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_, text, url) => `<${url}|${escapeSlackLinkText(text)}>`);
 	result = result.replace(/\*\*([^*]+)\*\*/g, "*$1*");
 	result = result.replace(/__([^_]+)__/g, "*$1*");
 	result = result.replace(/~~([^~]+)~~/g, "~$1~");
@@ -426,4 +442,4 @@ function formatChannelContext(channelInfo) {
 }
 
 //#endregion
-export { SlackErrorType, checkIfBotThread, classifyError, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatAttachments, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };
+export { SlackErrorType, checkIfBotThread, classifyError, escapeSlackLinkText, escapeSlackMrkdwn, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, formatAttachments, formatChannelContext, formatChannelLabel, generateSlackConversationId, getChannelAgentConfig, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, markdownToMrkdwn, resolveChannelAgentConfig, sendResponseUrlMessage, timedOp };

package/dist/slack/services/resume-intent.js

@@ -7,7 +7,7 @@ import { createContextBlock } from "./blocks/index.js";
 import { getSlackClient } from "./client.js";
 import { streamAgentResponse } from "./events/streaming.js";
 import { executeAgentPublicly } from "./events/execution.js";
-import { signSlackUserToken } from "@inkeep/agents-core";
+import { getInProcessFetch, signSlackUserToken } from "@inkeep/agents-core";
 
 //#region src/slack/services/resume-intent.ts
 const logger = getLogger("slack-resume-intent");
@@ -130,7 +130,8 @@ async function resumeMention(intent, slackClient, tokenCtx, teamId, tenantId) {
 		agentId: intent.agentId,
 		question: intent.question,
 		agentName: intent.agentId,
-		conversationId
+		conversationId,
+		entryPoint: "smart_link_resume"
 	});
 }
 async function resumeDirectMessage(intent, slackClient, tokenCtx, teamId) {
@@ -166,7 +167,8 @@ async function resumeDirectMessage(intent, slackClient, tokenCtx, teamId) {
 		agentId: intent.agentId,
 		agentName: intent.agentId,
 		question: intent.question,
-		conversationId
+		conversationId,
+		entryPoint: "smart_link_resume"
 	});
 }
 async function resumeCommand(intent, slackClient, tokenCtx, teamId, tenantId) {
@@ -291,13 +293,15 @@ async function executeAndDeliver(params) {
 	const timeout = setTimeout(() => controller.abort(), 3e4);
 	let response;
 	try {
-		response = await fetch(`${apiBaseUrl}/run/api/chat`, {
+		response = await getInProcessFetch()(`${apiBaseUrl}/run/api/chat`, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
 				Authorization: `Bearer ${slackUserToken}`,
 				"x-inkeep-project-id": projectId,
-				"x-inkeep-agent-id": agentId
+				"x-inkeep-agent-id": agentId,
+				"x-inkeep-invocation-type": "slack",
+				"x-inkeep-invocation-entry-point": "smart_link_resume"
 			},
 			body: JSON.stringify({
 				messages: [{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-work-apps",
-  "version": "0.53.7",
+  "version": "0.53.8",
   "description": "First party integrations for Inkeep Agents",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -33,7 +33,7 @@
     "jose": "^6.1.0",
     "minimatch": "^10.1.1",
     "slack-block-builder": "^2.8.0",
-    "@inkeep/agents-core": "0.53.7"
+    "@inkeep/agents-core": "0.53.8"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",