@inkeep/agents-work-apps 0.65.1 → 0.65.2

package/dist/github/index.d.ts

@@ -4,10 +4,10 @@ import "./routes/setup.js";
 import "./routes/tokenExchange.js";
 import { WebhookVerificationResult, verifyWebhookSignature } from "./routes/webhooks.js";
 import { Hono } from "hono";
-import * as hono_types0 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/github/index.d.ts
-declare function createGithubRoutes(): Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
-declare const githubRoutes: Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
+declare function createGithubRoutes(): Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
+declare const githubRoutes: Hono<hono_types6.BlankEnv, hono_types6.BlankSchema, "/">;
 //#endregion
 export { GenerateInstallationAccessTokenResult, GenerateTokenError, GenerateTokenResult, GitHubAppConfig, InstallationAccessToken, InstallationInfo, LookupInstallationError, LookupInstallationForRepoResult, LookupInstallationResult, WebhookVerificationResult, clearConfigCache, createAppJwt, createGithubRoutes, determineStatus, fetchInstallationDetails, fetchInstallationRepositories, generateInstallationAccessToken, getGitHubAppConfig, getGitHubAppName, getStateSigningSecret, getWebhookSecret, githubRoutes, isGitHubAppConfigured, isGitHubAppNameConfigured, isStateSigningConfigured, isWebhookConfigured, lookupInstallationForRepo, validateGitHubAppConfigOnStartup, validateGitHubInstallFlowConfigOnStartup, validateGitHubWebhookConfigOnStartup, verifyWebhookSignature };

package/dist/github/mcp/auth.d.ts

@@ -1,7 +1,7 @@
-import * as hono0 from "hono";
+import * as hono2 from "hono";
 
 //#region src/github/mcp/auth.d.ts
-declare const githubMcpAuth: () => hono0.MiddlewareHandler<{
+declare const githubMcpAuth: () => hono2.MiddlewareHandler<{
   Variables: {
     toolId: string;
     tenantId: string;

package/dist/github/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types10 from "hono/types";
 
 //#region src/github/mcp/index.d.ts
 declare const app: Hono<{
@@ -8,6 +8,6 @@ declare const app: Hono<{
     tenantId: string;
     projectId: string;
   };
-}, hono_types7.BlankSchema, "/">;
+}, hono_types10.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/mcp/schemas.d.ts

@@ -76,8 +76,8 @@ declare const ChangedFileSchema: z.ZodObject<{
   path: z.ZodString;
   status: z.ZodEnum<{
     added: "added";
-    removed: "removed";
     modified: "modified";
+    removed: "removed";
     renamed: "renamed";
     copied: "copied";
     changed: "changed";

package/dist/github/routes/setup.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types0 from "hono/types";
 
 //#region src/github/routes/setup.d.ts
-declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+declare const app: Hono<hono_types0.BlankEnv, hono_types0.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/tokenExchange.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/github/routes/tokenExchange.d.ts
-declare const app: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
+declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/webhooks.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types9 from "hono/types";
+import * as hono_types1 from "hono/types";
 
 //#region src/github/routes/webhooks.d.ts
 interface WebhookVerificationResult {
@@ -7,6 +7,6 @@ interface WebhookVerificationResult {
   error?: string;
 }
 declare function verifyWebhookSignature(payload: string, signature: string | undefined, secret: string): WebhookVerificationResult;
-declare const app: Hono<hono_types9.BlankEnv, hono_types9.BlankSchema, "/">;
+declare const app: Hono<hono_types1.BlankEnv, hono_types1.BlankSchema, "/">;
 //#endregion
 export { WebhookVerificationResult, app as default, verifyWebhookSignature };

package/dist/slack/dispatcher.js

@@ -8,6 +8,7 @@ import { handleMessageShortcut, handleOpenAgentSelectorModal, handleToolApproval
 import { handleDirectMessage } from "./services/events/direct-message.js";
 import { handleModalSubmission } from "./services/events/modal-submission.js";
 import "./services/events/index.js";
+import { cleanupWorkspaceInstallation } from "./services/workspace-cleanup.js";
 import "./services/index.js";
 import { flushTraces } from "@inkeep/agents-core";
 
@@ -131,6 +132,55 @@ async function dispatchSlackEvent(eventType, payload, options, span) {
 					errorStack
 				}, "Failed to handle direct message (outer catch)");
 			}).finally(() => flushTraces()));
+		} else if (innerEventType === "app_uninstalled" && teamId) {
+			outcome = "handled";
+			span.setAttribute(SLACK_SPAN_KEYS.OUTCOME, outcome);
+			span.updateName("slack.webhook app_uninstalled");
+			logger.info({ teamId }, "Handling event: app_uninstalled");
+			registerBackgroundWork(cleanupWorkspaceInstallation({
+				teamId,
+				skipTokenRevocation: true
+			}).then((result) => {
+				logger.info({
+					teamId,
+					success: result.success,
+					dbCleaned: result.dbCleaned
+				}, "app_uninstalled cleanup completed");
+			}).catch((err) => {
+				const errorMessage = err instanceof Error ? err.message : String(err);
+				logger.error({
+					errorMessage,
+					teamId
+				}, "Failed to handle app_uninstalled");
+			}).finally(() => flushTraces()));
+		} else if (innerEventType === "tokens_revoked" && teamId) {
+			outcome = "handled";
+			span.setAttribute(SLACK_SPAN_KEYS.OUTCOME, outcome);
+			span.updateName("slack.webhook tokens_revoked");
+			const tokensEvent = payload.event;
+			const revokedBotTokens = tokensEvent?.tokens?.bot ?? [];
+			const revokedOauthTokens = tokensEvent?.tokens?.oauth ?? [];
+			logger.info({
+				teamId,
+				revokedBotCount: revokedBotTokens.length,
+				revokedOauthCount: revokedOauthTokens.length
+			}, "Handling event: tokens_revoked");
+			if (revokedBotTokens.length > 0) registerBackgroundWork(cleanupWorkspaceInstallation({
+				teamId,
+				skipTokenRevocation: true
+			}).then((result) => {
+				logger.info({
+					teamId,
+					success: result.success,
+					dbCleaned: result.dbCleaned
+				}, "tokens_revoked (bot) cleanup completed");
+			}).catch((err) => {
+				const errorMessage = err instanceof Error ? err.message : String(err);
+				logger.error({
+					errorMessage,
+					teamId
+				}, "Failed to handle tokens_revoked (bot)");
+			}).finally(() => flushTraces()));
 		} else {
 			outcome = "ignored_unknown_event";
 			span.setAttribute(SLACK_SPAN_KEYS.OUTCOME, outcome);

package/dist/slack/mcp/auth.d.ts

@@ -1,7 +1,7 @@
-import * as hono0 from "hono";
+import * as hono1 from "hono";
 
 //#region src/slack/mcp/auth.d.ts
-declare const slackMcpAuth: () => hono0.MiddlewareHandler<{
+declare const slackMcpAuth: () => hono1.MiddlewareHandler<{
   Variables: {
     toolId: string;
     tenantId: string;

package/dist/slack/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types8 from "hono/types";
+import * as hono_types5 from "hono/types";
 
 //#region src/slack/mcp/index.d.ts
 interface ChannelInfo {
@@ -18,6 +18,6 @@ declare const app: Hono<{
     tenantId: string;
     projectId: string;
   };
-}, hono_types8.BlankSchema, "/">;
+}, hono_types5.BlankSchema, "/">;
 //#endregion
 export { ChannelInfo, app as default, pruneStaleChannelIds };

package/dist/slack/middleware/permissions.d.ts

@@ -1,5 +1,5 @@
 import { ManageAppVariables } from "../types.js";
-import * as hono1 from "hono";
+import * as hono0 from "hono";
 
 //#region src/slack/middleware/permissions.d.ts
 /**
@@ -14,7 +14,7 @@ declare const requireWorkspaceAdmin: <Env extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>() => hono1.MiddlewareHandler<Env, string, {}, Response>;
+}>() => hono0.MiddlewareHandler<Env, string, {}, Response>;
 /**
  * Middleware that requires either:
  * 1. Org admin/owner role (can modify any channel), OR
@@ -26,6 +26,6 @@ declare const requireChannelMemberOrAdmin: <Env extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>() => hono1.MiddlewareHandler<Env, string, {}, Response>;
+}>() => hono0.MiddlewareHandler<Env, string, {}, Response>;
 //#endregion
 export { isOrgAdmin, requireChannelMemberOrAdmin, requireWorkspaceAdmin };

package/dist/slack/routes/workspaces.js

@@ -1,12 +1,13 @@
 import { getLogger } from "../../logger.js";
 import runDbClient_default from "../../db/runDbClient.js";
-import { clearWorkspaceConnectionCache, computeWorkspaceConnectionId, deleteWorkspaceInstallation, findWorkspaceConnectionByTeamId, listWorkspaceInstallations, setWorkspaceDefaultAgent } from "../services/nango.js";
+import { findWorkspaceConnectionByTeamId, listWorkspaceInstallations, setWorkspaceDefaultAgent } from "../services/nango.js";
 import { lookupAgentName } from "../services/agent-resolution.js";
-import { getBotMemberChannels, getSlackChannels, getSlackClient, revokeSlackToken } from "../services/client.js";
+import { getBotMemberChannels, getSlackChannels, getSlackClient } from "../services/client.js";
+import { cleanupWorkspaceInstallation } from "../services/workspace-cleanup.js";
 import "../services/index.js";
 import { requireChannelMemberOrAdmin, requireWorkspaceAdmin } from "../middleware/permissions.js";
 import { OpenAPIHono, z } from "@hono/zod-openapi";
-import { WorkAppSlackAgentConfigRequestSchema, deleteAllSlackMcpToolAccessConfigsByTenant, deleteAllWorkAppSlackChannelAgentConfigsByTeam, deleteAllWorkAppSlackUserMappingsByTeam, deleteWorkAppSlackChannelAgentConfig, deleteWorkAppSlackWorkspaceByNangoConnectionId, findWorkAppSlackChannelAgentConfig, findWorkAppSlackWorkspaceByTeamId, listWorkAppSlackChannelAgentConfigsByTeam, listWorkAppSlackUserMappingsByTeam, updateWorkAppSlackWorkspace, upsertWorkAppSlackChannelAgentConfig } from "@inkeep/agents-core";
+import { WorkAppSlackAgentConfigRequestSchema, deleteWorkAppSlackChannelAgentConfig, findWorkAppSlackChannelAgentConfig, findWorkAppSlackWorkspaceByTeamId, listWorkAppSlackChannelAgentConfigsByTeam, listWorkAppSlackUserMappingsByTeam, updateWorkAppSlackWorkspace, upsertWorkAppSlackChannelAgentConfig } from "@inkeep/agents-core";
 import { createProtectedRoute, inheritedWorkAppsAuth } from "@inkeep/agents-core/middleware";
 
 //#region src/slack/routes/workspaces.ts
@@ -347,47 +348,21 @@ app.openapi(createProtectedRoute({
 }), async (c) => {
 	const { teamId: workspaceIdentifier } = c.req.valid("param");
 	let teamId;
-	let connectionId;
 	try {
 		if (workspaceIdentifier.includes(":")) {
-			connectionId = workspaceIdentifier;
 			const teamMatch = workspaceIdentifier.match(/T:([A-Z0-9]+)/);
 			if (!teamMatch) return c.json({ error: "Invalid connectionId format" }, 400);
 			teamId = teamMatch[1];
-		} else {
-			teamId = workspaceIdentifier;
-			connectionId = computeWorkspaceConnectionId({
-				teamId,
-				enterpriseId: void 0
-			});
-		}
+		} else teamId = workspaceIdentifier;
 		const workspace = await findWorkspaceConnectionByTeamId(teamId);
 		if (!workspace) return c.json({ error: "Workspace not found" }, 404);
-		if (workspace.botToken) if (await revokeSlackToken(workspace.botToken)) logger.info({ teamId }, "Revoked Slack bot token");
-		else logger.warn({ teamId }, "Failed to revoke Slack bot token, continuing with uninstall");
-		const tenantId = workspace.tenantId;
-		const deletedChannelConfigs = await deleteAllWorkAppSlackChannelAgentConfigsByTeam(runDbClient_default)(tenantId, teamId);
-		if (deletedChannelConfigs > 0) logger.info({
-			teamId,
-			deletedChannelConfigs
-		}, "Deleted channel configs for uninstalled workspace");
-		const deletedMappings = await deleteAllWorkAppSlackUserMappingsByTeam(runDbClient_default)(tenantId, teamId);
-		if (deletedMappings > 0) logger.info({
+		if (!verifyTenantOwnership(c, workspace.tenantId)) return c.json({ error: "Access denied" }, 403);
+		const result = await cleanupWorkspaceInstallation({ teamId });
+		if (!result.success) logger.error({
 			teamId,
-			deletedMappings
-		}, "Deleted user mappings for uninstalled workspace");
-		const deletedMcpConfigs = await deleteAllSlackMcpToolAccessConfigsByTenant(runDbClient_default)(tenantId);
-		if (deletedMcpConfigs > 0) logger.info({
-			teamId,
-			deletedMcpConfigs
-		}, "Deleted MCP tool access configs for uninstalled workspace");
-		if (await deleteWorkAppSlackWorkspaceByNangoConnectionId(runDbClient_default)(connectionId)) logger.info({ connectionId }, "Deleted workspace from database");
-		if (!await deleteWorkspaceInstallation(connectionId)) logger.error({ connectionId }, "deleteWorkspaceInstallation returned false (DB already cleaned up)");
-		clearWorkspaceConnectionCache(teamId);
-		logger.info({
-			connectionId,
-			teamId
-		}, "Deleted workspace installation and cleared cache");
+			result
+		}, "Workspace uninstall partially failed");
+		logger.info({ teamId }, "Workspace uninstalled via API");
 		return c.json({ success: true });
 	} catch (error) {
 		logger.error({

package/dist/slack/services/events/utils.d.ts

@@ -9,10 +9,10 @@ import { AgentOption } from "../modals.js";
  * Called on every @mention and /inkeep command — caching avoids redundant DB queries.
  */
 declare function findCachedUserMapping(tenantId: string, slackUserId: string, teamId: string, clientId?: string): Promise<{
+  slackUserId: string;
   id: string;
   createdAt: string;
   updatedAt: string;
-  slackUserId: string;
   tenantId: string;
   clientId: string;
   slackTeamId: string;

package/dist/slack/services/index.d.ts

@@ -14,5 +14,6 @@ import { PublicExecutionParams, executeAgentPublicly } from "./events/execution.
 import { handleModalSubmission } from "./events/modal-submission.js";
 import "./events/index.js";
 import { parseSlackCommandBody, parseSlackEventBody, verifySlackRequest } from "./security.js";
+import { WorkspaceCleanupResult, cleanupWorkspaceInstallation } from "./workspace-cleanup.js";
 import { getBotTokenForTeam, setBotTokenForTeam } from "./workspace-tokens.js";
-export { AgentConfigSources, AgentOption, AgentResolutionParams, BuildAgentSelectorModalParams, BuildMessageShortcutModalParams, ContextBlockParams, DefaultAgentConfig, InlineSelectorMetadata, ModalMetadata, PublicExecutionParams, ResolvedAgentConfig, SlackCommandPayload, SlackCommandResponse, SlackErrorType, SlackWorkspaceConnection, StreamResult, ToolApprovalButtonValue, ToolApprovalButtonValueSchema, WorkspaceInstallData, buildAgentSelectorModal, buildCitationsBlock, buildDataArtifactBlocks, buildDataComponentBlocks, buildMessageShortcutModal, buildSummaryBreadcrumbBlock, buildToolApprovalBlocks, buildToolApprovalDoneBlocks, buildToolApprovalExpiredBlocks, buildToolOutputErrorBlock, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createContextBlockFromText, createCreateInkeepAccountMessage, createErrorMessage, createNotLinkedMessage, createSmartLinkMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, executeAgentPublicly, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotMemberChannels, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserByEmail, getSlackUserInfo, getSlackUsers, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleDirectMessage, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleQuestionCommand, handleStatusCommand, handleToolApproval, handleUnlinkCommand, listWorkspaceInstallations, lookupAgentName, lookupProjectName, markdownToMrkdwn, openDmConversation, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, validateBotChannelMembership, verifySlackRequest };
+export { AgentConfigSources, AgentOption, AgentResolutionParams, BuildAgentSelectorModalParams, BuildMessageShortcutModalParams, ContextBlockParams, DefaultAgentConfig, InlineSelectorMetadata, ModalMetadata, PublicExecutionParams, ResolvedAgentConfig, SlackCommandPayload, SlackCommandResponse, SlackErrorType, SlackWorkspaceConnection, StreamResult, ToolApprovalButtonValue, ToolApprovalButtonValueSchema, WorkspaceCleanupResult, WorkspaceInstallData, buildAgentSelectorModal, buildCitationsBlock, buildDataArtifactBlocks, buildDataComponentBlocks, buildMessageShortcutModal, buildSummaryBreadcrumbBlock, buildToolApprovalBlocks, buildToolApprovalDoneBlocks, buildToolApprovalExpiredBlocks, buildToolOutputErrorBlock, checkIfBotThread, checkUserIsChannelMember, classifyError, cleanupWorkspaceInstallation, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createContextBlockFromText, createCreateInkeepAccountMessage, createErrorMessage, createNotLinkedMessage, createSmartLinkMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, executeAgentPublicly, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotMemberChannels, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserByEmail, getSlackUserInfo, getSlackUsers, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleDirectMessage, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleQuestionCommand, handleStatusCommand, handleToolApproval, handleUnlinkCommand, listWorkspaceInstallations, lookupAgentName, lookupProjectName, markdownToMrkdwn, openDmConversation, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, validateBotChannelMembership, verifySlackRequest };

package/dist/slack/services/index.js

@@ -13,6 +13,7 @@ import { handleDirectMessage } from "./events/direct-message.js";
 import { handleModalSubmission } from "./events/modal-submission.js";
 import "./events/index.js";
 import { parseSlackCommandBody, parseSlackEventBody, verifySlackRequest } from "./security.js";
+import { cleanupWorkspaceInstallation } from "./workspace-cleanup.js";
 import { getBotTokenForTeam, setBotTokenForTeam } from "./workspace-tokens.js";
 
-export { SlackErrorType, ToolApprovalButtonValueSchema, buildAgentSelectorModal, buildCitationsBlock, buildDataArtifactBlocks, buildDataComponentBlocks, buildMessageShortcutModal, buildSummaryBreadcrumbBlock, buildToolApprovalBlocks, buildToolApprovalDoneBlocks, buildToolApprovalExpiredBlocks, buildToolOutputErrorBlock, checkIfBotThread, checkUserIsChannelMember, classifyError, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createContextBlockFromText, createCreateInkeepAccountMessage, createErrorMessage, createNotLinkedMessage, createSmartLinkMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, executeAgentPublicly, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotMemberChannels, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserByEmail, getSlackUserInfo, getSlackUsers, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleDirectMessage, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleQuestionCommand, handleStatusCommand, handleToolApproval, handleUnlinkCommand, listWorkspaceInstallations, lookupAgentName, lookupProjectName, markdownToMrkdwn, openDmConversation, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, validateBotChannelMembership, verifySlackRequest };
+export { SlackErrorType, ToolApprovalButtonValueSchema, buildAgentSelectorModal, buildCitationsBlock, buildDataArtifactBlocks, buildDataComponentBlocks, buildMessageShortcutModal, buildSummaryBreadcrumbBlock, buildToolApprovalBlocks, buildToolApprovalDoneBlocks, buildToolApprovalExpiredBlocks, buildToolOutputErrorBlock, checkIfBotThread, checkUserIsChannelMember, classifyError, cleanupWorkspaceInstallation, clearWorkspaceConnectionCache, computeWorkspaceConnectionId, createAlreadyLinkedMessage, createConnectSession, createContextBlock, createContextBlockFromText, createCreateInkeepAccountMessage, createErrorMessage, createNotLinkedMessage, createSmartLinkMessage, createStatusMessage, createUnlinkSuccessMessage, createUpdatedHelpMessage, deleteWorkspaceInstallation, executeAgentPublicly, extractApiErrorMessage, fetchAgentsForProject, fetchProjectsForTenant, findCachedUserMapping, findWorkspaceConnectionByTeamId, generateSlackConversationId, getAgentConfigSources, getBotMemberChannels, getBotTokenForTeam, getChannelAgentConfig, getConnectionAccessToken, getSlackChannelInfo, getSlackChannels, getSlackClient, getSlackIntegrationId, getSlackNango, getSlackTeamInfo, getSlackUserByEmail, getSlackUserInfo, getSlackUsers, getThreadContext, getUserFriendlyErrorMessage, getWorkspaceDefaultAgent, getWorkspaceDefaultAgentFromNango, handleAgentPickerCommand, handleAppMention, handleCommand, handleDirectMessage, handleHelpCommand, handleLinkCommand, handleMessageShortcut, handleModalSubmission, handleOpenAgentSelectorModal, handleQuestionCommand, handleStatusCommand, handleToolApproval, handleUnlinkCommand, listWorkspaceInstallations, lookupAgentName, lookupProjectName, markdownToMrkdwn, openDmConversation, parseSlackCommandBody, parseSlackEventBody, postMessage, postMessageInThread, resolveEffectiveAgent, revokeSlackToken, sendResponseUrlMessage, setBotTokenForTeam, setWorkspaceDefaultAgent, storeWorkspaceInstallation, streamAgentResponse, updateConnectionMetadata, validateBotChannelMembership, verifySlackRequest };

package/dist/slack/services/workspace-cleanup.d.ts

@@ -0,0 +1,17 @@
+//#region src/slack/services/workspace-cleanup.d.ts
+interface WorkspaceCleanupResult {
+  success: boolean;
+  teamId: string;
+  tokenRevoked: boolean;
+  dbCleaned: boolean;
+  nangoCleaned: boolean;
+}
+declare function cleanupWorkspaceInstallation({
+  teamId,
+  skipTokenRevocation
+}: {
+  teamId: string;
+  skipTokenRevocation?: boolean;
+}): Promise<WorkspaceCleanupResult>;
+//#endregion
+export { WorkspaceCleanupResult, cleanupWorkspaceInstallation };

package/dist/slack/services/workspace-cleanup.js

@@ -0,0 +1,82 @@
+import { getLogger } from "../../logger.js";
+import runDbClient_default from "../../db/runDbClient.js";
+import { clearWorkspaceConnectionCache, deleteWorkspaceInstallation, findWorkspaceConnectionByTeamId } from "./nango.js";
+import { revokeSlackToken } from "./client.js";
+import "./index.js";
+import { deleteAllSlackMcpToolAccessConfigsByTenant, deleteAllWorkAppSlackChannelAgentConfigsByTeam, deleteAllWorkAppSlackUserMappingsByTeam, deleteWorkAppSlackWorkspaceByNangoConnectionId } from "@inkeep/agents-core";
+
+//#region src/slack/services/workspace-cleanup.ts
+const logger = getLogger("slack-workspace-cleanup");
+async function cleanupWorkspaceInstallation({ teamId, skipTokenRevocation = false }) {
+	const result = {
+		success: false,
+		teamId,
+		tokenRevoked: false,
+		dbCleaned: false,
+		nangoCleaned: false
+	};
+	const workspace = await findWorkspaceConnectionByTeamId(teamId);
+	if (!workspace) {
+		logger.warn({ teamId }, "No workspace found for cleanup");
+		clearWorkspaceConnectionCache(teamId);
+		result.success = true;
+		return result;
+	}
+	const { tenantId, botToken, connectionId } = workspace;
+	if (!skipTokenRevocation && botToken) {
+		result.tokenRevoked = await revokeSlackToken(botToken);
+		if (result.tokenRevoked) logger.info({ teamId }, "Revoked Slack bot token during cleanup");
+		else logger.warn({ teamId }, "Failed to revoke Slack bot token, continuing with cleanup");
+	}
+	const steps = [
+		{
+			name: "channel_configs",
+			run: () => deleteAllWorkAppSlackChannelAgentConfigsByTeam(runDbClient_default)(tenantId, teamId)
+		},
+		{
+			name: "user_mappings",
+			run: () => deleteAllWorkAppSlackUserMappingsByTeam(runDbClient_default)(tenantId, teamId)
+		},
+		{
+			name: "mcp_configs",
+			run: () => deleteAllSlackMcpToolAccessConfigsByTenant(runDbClient_default)(tenantId)
+		},
+		{
+			name: "workspace_row",
+			run: () => deleteWorkAppSlackWorkspaceByNangoConnectionId(runDbClient_default)(connectionId)
+		},
+		{
+			name: "nango_connection",
+			run: () => deleteWorkspaceInstallation(connectionId)
+		}
+	];
+	const failures = [];
+	for (const step of steps) try {
+		await step.run();
+	} catch (error) {
+		failures.push(step.name);
+		logger.error({
+			error,
+			teamId,
+			connectionId,
+			step: step.name
+		}, "Cleanup step failed");
+	}
+	result.dbCleaned = !failures.some((f) => f !== "nango_connection");
+	result.nangoCleaned = !failures.includes("nango_connection");
+	clearWorkspaceConnectionCache(teamId);
+	result.success = failures.length === 0;
+	if (failures.length > 0) logger.error({
+		teamId,
+		connectionId,
+		failures
+	}, "Workspace cleanup completed with failures");
+	else logger.info({
+		teamId,
+		connectionId
+	}, "Workspace cleanup completed");
+	return result;
+}
+
+//#endregion
+export { cleanupWorkspaceInstallation };

package/dist/slack/slack-app-manifest.js

@@ -7,7 +7,6 @@ var oauth_config = {
 			"app_mentions:read",
 			"channels:history",
 			"channels:read",
-			"channels:join",
 			"chat:write",
 			"chat:write.public",
 			"commands",
@@ -23,10 +22,7 @@ var oauth_config = {
 			"mpim:write",
 			"team:read",
 			"users:read",
-			"users:read.email",
-			"search:read.public",
-			"search:read.files",
-			"search:read.users"
+			"users:read.email"
 		]
 	}
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-work-apps",
-  "version": "0.65.1",
+  "version": "0.65.2",
   "description": "First party integrations for Inkeep Agents",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -35,7 +35,7 @@
     "minimatch": "^10.2.1",
     "oxfmt": "^0.42.0",
     "slack-block-builder": "^2.8.0",
-    "@inkeep/agents-core": "0.65.1"
+    "@inkeep/agents-core": "0.65.2"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",