@inkeep/agents-work-apps 0.70.2 → 0.70.4

package/dist/github/mcp/auth.d.ts

@@ -1,7 +1,7 @@
-import * as hono2 from "hono";
+import * as hono0 from "hono";
 
 //#region src/github/mcp/auth.d.ts
-declare const githubMcpAuth: () => hono2.MiddlewareHandler<{
+declare const githubMcpAuth: () => hono0.MiddlewareHandler<{
   Variables: {
     toolId: string;
     tenantId: string;

package/dist/github/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types10 from "hono/types";
+import * as hono_types6 from "hono/types";
 
 //#region src/github/mcp/index.d.ts
 declare const app: Hono<{
@@ -8,6 +8,6 @@ declare const app: Hono<{
     tenantId: string;
     projectId: string;
   };
-}, hono_types10.BlankSchema, "/">;
+}, hono_types6.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/setup.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types3 from "hono/types";
+import * as hono_types7 from "hono/types";
 
 //#region src/github/routes/setup.d.ts
-declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
+declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/tokenExchange.d.ts

@@ -1,7 +1,7 @@
 import { Hono } from "hono";
-import * as hono_types5 from "hono/types";
+import * as hono_types9 from "hono/types";
 
 //#region src/github/routes/tokenExchange.d.ts
-declare const app: Hono<hono_types5.BlankEnv, hono_types5.BlankSchema, "/">;
+declare const app: Hono<hono_types9.BlankEnv, hono_types9.BlankSchema, "/">;
 //#endregion
 export { app as default };

package/dist/github/routes/webhooks.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types7 from "hono/types";
+import * as hono_types3 from "hono/types";
 
 //#region src/github/routes/webhooks.d.ts
 interface WebhookVerificationResult {
@@ -7,6 +7,6 @@ interface WebhookVerificationResult {
   error?: string;
 }
 declare function verifyWebhookSignature(payload: string, signature: string | undefined, secret: string): WebhookVerificationResult;
-declare const app: Hono<hono_types7.BlankEnv, hono_types7.BlankSchema, "/">;
+declare const app: Hono<hono_types3.BlankEnv, hono_types3.BlankSchema, "/">;
 //#endregion
 export { WebhookVerificationResult, app as default, verifyWebhookSignature };

package/dist/slack/mcp/auth.d.ts

@@ -1,7 +1,7 @@
-import * as hono1 from "hono";
+import * as hono0 from "hono";
 
 //#region src/slack/mcp/auth.d.ts
-declare const slackMcpAuth: () => hono1.MiddlewareHandler<{
+declare const slackMcpAuth: () => hono0.MiddlewareHandler<{
   Variables: {
     toolId: string;
     tenantId: string;

package/dist/slack/mcp/index.d.ts

@@ -1,5 +1,5 @@
 import { Hono } from "hono";
-import * as hono_types9 from "hono/types";
+import * as hono_types5 from "hono/types";
 
 //#region src/slack/mcp/index.d.ts
 interface ChannelInfo {
@@ -18,6 +18,6 @@ declare const app: Hono<{
     tenantId: string;
     projectId: string;
   };
-}, hono_types9.BlankSchema, "/">;
+}, hono_types5.BlankSchema, "/">;
 //#endregion
 export { ChannelInfo, app as default, pruneStaleChannelIds };

package/dist/slack/middleware/permissions.d.ts

@@ -1,5 +1,5 @@
 import { ManageAppVariables } from "../types.js";
-import * as hono0 from "hono";
+import * as hono1 from "hono";
 
 //#region src/slack/middleware/permissions.d.ts
 /**
@@ -14,7 +14,7 @@ declare const requireWorkspaceAdmin: <Env extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>() => hono0.MiddlewareHandler<Env, string, {}, Response>;
+}>() => hono1.MiddlewareHandler<Env, string, {}, Response>;
 /**
  * Middleware that requires either:
  * 1. Org admin/owner role (can modify any channel), OR
@@ -26,6 +26,6 @@ declare const requireChannelMemberOrAdmin: <Env extends {
   Variables: ManageAppVariables;
 } = {
   Variables: ManageAppVariables;
-}>() => hono0.MiddlewareHandler<Env, string, {}, Response>;
+}>() => hono1.MiddlewareHandler<Env, string, {}, Response>;
 //#endregion
 export { isOrgAdmin, requireChannelMemberOrAdmin, requireWorkspaceAdmin };

package/dist/slack/middleware/permissions.js

@@ -58,7 +58,7 @@ const requireWorkspaceAdmin = () => {
 			await next();
 			return;
 		}
-		const teamId = c.req.param("teamId") || c.req.param("workspaceId");
+		const teamId = c.req.param("teamId");
 		if (teamId && !c.get("tenantRole")) await resolveWorkAppTenantContext(c, teamId, userId);
 		const tenantId = c.get("tenantId");
 		const tenantRole = c.get("tenantRole");

package/dist/slack/routes/workspaces.js

@@ -42,6 +42,12 @@ function verifyTenantOwnership(c, workspaceTenantId) {
 	return sessionTenantId === workspaceTenantId;
 }
 const app = new OpenAPIHono();
+const SlackTeamIdSchema = z.string().regex(/^T[A-Z0-9]+$/, "teamId must be a raw Slack team ID (e.g. T012AB3C4)").openapi({ example: "T012AB3C4" });
+const WorkspaceTeamIdParams = z.object({ teamId: SlackTeamIdSchema });
+const WorkspaceTeamAndChannelIdParams = z.object({
+	teamId: SlackTeamIdSchema,
+	channelId: z.string()
+});
 const WorkspaceSettingsResponseSchema = z.object({ defaultAgent: WorkAppSlackAgentConfigRequestSchema.optional() });
 const WorkspaceSettingsRequestSchema = z.object({ defaultAgent: WorkAppSlackAgentConfigRequestSchema.optional() });
 const JoinFromWorkspaceSettingsSchema = z.object({ shouldAllowJoinFromWorkspace: z.boolean() });
@@ -120,7 +126,7 @@ app.openapi(createProtectedRoute({
 		"Workspaces"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: {
 		200: {
 			description: "Workspace details",
@@ -162,7 +168,7 @@ app.openapi(createProtectedRoute({
 		"Workspaces"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: { 200: {
 		description: "Workspace settings",
 		content: { "application/json": { schema: WorkspaceSettingsResponseSchema } }
@@ -193,7 +199,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireWorkspaceAdmin(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		body: { content: { "application/json": { schema: WorkspaceSettingsRequestSchema } } }
 	},
 	responses: {
@@ -252,7 +258,7 @@ app.openapi(createProtectedRoute({
 		"Workspaces"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: {
 		200: {
 			description: "Join from workspace setting",
@@ -281,7 +287,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireWorkspaceAdmin(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		body: { content: { "application/json": { schema: JoinFromWorkspaceSettingsSchema } } }
 	},
 	responses: {
@@ -327,7 +333,7 @@ app.openapi(createProtectedRoute({
 	method: "delete",
 	path: "/{teamId}",
 	summary: "Uninstall Workspace",
-	description: "Uninstall Slack app from workspace. Accepts either teamId or connectionId.",
+	description: "Uninstall the Inkeep Slack app from a workspace. The path parameter must be the raw Slack team ID (e.g. T012AB3C4).",
 	operationId: "slack-delete-workspace",
 	tags: [
 		"Work Apps",
@@ -335,25 +341,19 @@ app.openapi(createProtectedRoute({
 		"Workspaces"
 	],
 	permission: requireWorkspaceAdmin(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: {
 		200: {
 			description: "Workspace uninstalled",
 			content: { "application/json": { schema: z.object({ success: z.boolean() }) } }
 		},
-		400: { description: "Invalid connectionId format" },
+		403: { description: "Access denied" },
 		404: { description: "Workspace not found" },
 		500: { description: "Failed to uninstall workspace" }
 	}
 }), async (c) => {
-	const { teamId: workspaceIdentifier } = c.req.valid("param");
-	let teamId;
+	const { teamId } = c.req.valid("param");
 	try {
-		if (workspaceIdentifier.includes(":")) {
-			const teamMatch = workspaceIdentifier.match(/T:([A-Z0-9]+)/);
-			if (!teamMatch) return c.json({ error: "Invalid connectionId format" }, 400);
-			teamId = teamMatch[1];
-		} else teamId = workspaceIdentifier;
 		const workspace = await findWorkspaceConnectionByTeamId(teamId);
 		if (!workspace) return c.json({ error: "Workspace not found" }, 404);
 		if (!verifyTenantOwnership(c, workspace.tenantId)) return c.json({ error: "Access denied" }, 403);
@@ -367,7 +367,7 @@ app.openapi(createProtectedRoute({
 	} catch (error) {
 		logger.error({
 			error,
-			workspaceIdentifier
+			teamId
 		}, "Failed to uninstall workspace");
 		return c.json({ error: "Failed to uninstall workspace" }, 500);
 	}
@@ -385,7 +385,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: inheritedWorkAppsAuth(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		query: z.object({
 			limit: z.coerce.number().optional().default(100),
 			cursor: z.string().optional(),
@@ -469,10 +469,7 @@ app.openapi(createProtectedRoute({
 		"Channels"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({
-		teamId: z.string(),
-		channelId: z.string()
-	}) },
+	request: { params: WorkspaceTeamAndChannelIdParams },
 	responses: { 200: {
 		description: "Channel settings",
 		content: { "application/json": { schema: z.object({
@@ -514,10 +511,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireChannelMemberOrAdmin(),
 	request: {
-		params: z.object({
-			teamId: z.string(),
-			channelId: z.string()
-		}),
+		params: WorkspaceTeamAndChannelIdParams,
 		body: { content: { "application/json": { schema: z.object({
 			agentConfig: WorkAppSlackAgentConfigRequestSchema,
 			channelName: z.string().optional(),
@@ -597,7 +591,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireWorkspaceAdmin(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		body: { content: { "application/json": { schema: z.object({
 			channelIds: z.array(z.string()).min(1),
 			agentConfig: WorkAppSlackAgentConfigRequestSchema
@@ -712,7 +706,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireWorkspaceAdmin(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		body: { content: { "application/json": { schema: z.object({ channelIds: z.array(z.string()).min(1) }) } } }
 	},
 	responses: { 200: {
@@ -759,10 +753,7 @@ app.openapi(createProtectedRoute({
 		"Channels"
 	],
 	permission: requireChannelMemberOrAdmin(),
-	request: { params: z.object({
-		teamId: z.string(),
-		channelId: z.string()
-	}) },
+	request: { params: WorkspaceTeamAndChannelIdParams },
 	responses: { 200: {
 		description: "Channel config removed",
 		content: { "application/json": { schema: z.object({ success: z.boolean() }) } }
@@ -795,7 +786,7 @@ app.openapi(createProtectedRoute({
 		"Users"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: { 200: {
 		description: "List of linked users",
 		content: { "application/json": { schema: z.object({ linkedUsers: z.array(z.object({
@@ -846,7 +837,7 @@ app.openapi(createProtectedRoute({
 		"Workspaces"
 	],
 	permission: inheritedWorkAppsAuth(),
-	request: { params: z.object({ teamId: z.string() }) },
+	request: { params: WorkspaceTeamIdParams },
 	responses: {
 		200: {
 			description: "Health check result",
@@ -944,7 +935,7 @@ app.openapi(createProtectedRoute({
 	],
 	permission: requireWorkspaceAdmin(),
 	request: {
-		params: z.object({ teamId: z.string() }),
+		params: WorkspaceTeamIdParams,
 		body: { content: { "application/json": { schema: z.object({
 			channelId: z.string(),
 			message: z.string().optional()

package/dist/slack/services/events/utils.d.ts

@@ -12,9 +12,9 @@ declare function findCachedUserMapping(tenantId: string, slackUserId: string, te
   id: string;
   createdAt: string;
   updatedAt: string;
-  slackUserId: string;
   tenantId: string;
   clientId: string;
+  slackUserId: string;
   slackTeamId: string;
   slackEnterpriseId: string | null;
   inkeepUserId: string;

package/dist/slack/services/link-prompt.d.ts

@@ -1,5 +1,5 @@
 import { SlackLinkIntent } from "@inkeep/agents-core";
-import * as slack_block_builder7 from "slack-block-builder";
+import * as slack_block_builder0 from "slack-block-builder";
 
 //#region src/slack/services/link-prompt.d.ts
 type LinkPromptResult = {
@@ -22,6 +22,6 @@ interface ResolveLinkActionParams {
   intent?: SlackLinkIntent;
 }
 declare function resolveUnlinkedUserAction(params: ResolveLinkActionParams): Promise<LinkPromptResult>;
-declare function buildLinkPromptMessage(result: LinkPromptResult): Readonly<slack_block_builder7.SlackMessageDto>;
+declare function buildLinkPromptMessage(result: LinkPromptResult): Readonly<slack_block_builder0.SlackMessageDto>;
 //#endregion
 export { LinkPromptResult, ResolveLinkActionParams, buildLinkPromptMessage, resolveUnlinkedUserAction };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inkeep/agents-work-apps",
-  "version": "0.70.2",
+  "version": "0.70.4",
   "description": "First party integrations for Inkeep Agents",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE.md",
@@ -35,7 +35,7 @@
     "minimatch": "^10.2.1",
     "oxfmt": "^0.42.0",
     "slack-block-builder": "^2.8.0",
-    "@inkeep/agents-core": "0.70.2"
+    "@inkeep/agents-core": "0.70.4"
   },
   "peerDependencies": {
     "@hono/zod-openapi": "^1.1.5",