@mastra/slack 1.5.1 → 1.6.0-alpha.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @mastra/slack
 
+## 1.6.0-alpha.0
+
+### Minor Changes
+
+- Slack connections can now be owned by an `AgentController`, not just a registered `Agent`. Call `connect` with an options object to connect an owner that has no registered agent: ([#19289](https://github.com/mastra-ai/mastra/pull/19289))
+
+  ```typescript
+  await mastra.channels.slack.connect({
+    id: 'my-controller',
+    name: 'Support Bot',
+  });
+  ```
+
+  Installations record an `ownerType` (`'agent'` by default, or `'agentController'`). Inbound Slack events and OAuth callbacks route to the owning `AgentController`'s channels when `ownerType` is `'agentController'`, so mentions and messages drive a controller session. Existing agent-owned installations are unaffected.
+
+### Patch Changes
+
+- Updated dependencies [[`ce93a3c`](https://github.com/mastra-ai/mastra/commit/ce93a3c114ea1cbfbd576f3db41d7c26c9844f5b), [`5718a22`](https://github.com/mastra-ai/mastra/commit/5718a229281dcfd36bcd1f42a242e3717e510a33), [`5807d3a`](https://github.com/mastra-ai/mastra/commit/5807d3ae1d259b8b7d6df7e5bf2b485c694af9c8), [`57661af`](https://github.com/mastra-ai/mastra/commit/57661afeca52ff9af4e72675ede2134fa503d5a5), [`57661af`](https://github.com/mastra-ai/mastra/commit/57661afeca52ff9af4e72675ede2134fa503d5a5), [`57661af`](https://github.com/mastra-ai/mastra/commit/57661afeca52ff9af4e72675ede2134fa503d5a5), [`5718a22`](https://github.com/mastra-ai/mastra/commit/5718a229281dcfd36bcd1f42a242e3717e510a33), [`57661af`](https://github.com/mastra-ai/mastra/commit/57661afeca52ff9af4e72675ede2134fa503d5a5), [`d1b7e3a`](https://github.com/mastra-ai/mastra/commit/d1b7e3a978a309a5653eeaa490d2d6c7c53bd093), [`c093146`](https://github.com/mastra-ai/mastra/commit/c0931466404d3c521308ea119cb165bb7e695155)]:
+  - @mastra/core@1.54.0-alpha.1
+
 ## 1.5.1
 
 ### Patch Changes

package/dist/index.cjs

@@ -181,6 +181,33 @@ var SlackManifestClient = class {
       throw new Error(`App deletion failed: ${data.error}`);
     }
   }
+  /**
+   * Check whether a Slack app still exists.
+   *
+   * Uses the read-only `apps.manifest.export` endpoint as an existence probe.
+   * Returns `false` when Slack reports the app is missing/inaccessible
+   * (e.g. it was deleted from the Slack admin UI), `true` when it exports
+   * successfully. Network/transport errors are re-thrown so callers can
+   * distinguish "app is gone" from "couldn't reach Slack".
+   */
+  async appExists(appId) {
+    await this.rotateToken();
+    const response = await fetch(`${SLACK_API_BASE}/apps.manifest.export`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${this.#token}`
+      },
+      body: JSON.stringify({ app_id: appId }),
+      signal: AbortSignal.timeout(SLACK_API_TIMEOUT_MS)
+    });
+    const data = await response.json();
+    if (data.ok) return true;
+    if (data.error === "app_not_found" || data.error === "invalid_app_id") {
+      return false;
+    }
+    throw new Error(`Failed to check whether Slack app exists: ${data.error ?? "unknown_error"}`);
+  }
   /**
    * Update an existing Slack app's manifest.
    */
@@ -228,7 +255,7 @@ var SlackManifestClient = class {
 };
 
 // src/crypto.ts
-var import_crypto = require("crypto");
+var import_node_crypto = require("crypto");
 function verifySlackRequest(params) {
   const { signingSecret, timestamp, body, signature } = params;
   const now = Math.floor(Date.now() / 1e3);
@@ -237,9 +264,9 @@ function verifySlackRequest(params) {
     return false;
   }
   const sigBasestring = `v0:${timestamp}:${body}`;
-  const expectedSignature = `v0=${(0, import_crypto.createHmac)("sha256", signingSecret).update(sigBasestring).digest("hex")}`;
+  const expectedSignature = `v0=${(0, import_node_crypto.createHmac)("sha256", signingSecret).update(sigBasestring).digest("hex")}`;
   try {
-    return (0, import_crypto.timingSafeEqual)(Buffer.from(signature), Buffer.from(expectedSignature));
+    return (0, import_node_crypto.timingSafeEqual)(Buffer.from(signature), Buffer.from(expectedSignature));
   } catch {
     return false;
   }
@@ -253,10 +280,10 @@ function parseSlackFormBody(body) {
 }
 var ALGO_PREFIX = "aes-256-gcm-hkdf";
 function encrypt(plaintext, key) {
-  const salt = (0, import_crypto.randomBytes)(16);
-  const derived = Buffer.from((0, import_crypto.hkdfSync)("sha256", key, salt, "mastra-slack-encryption", 32));
-  const iv = (0, import_crypto.randomBytes)(12);
-  const cipher = (0, import_crypto.createCipheriv)("aes-256-gcm", derived, iv);
+  const salt = (0, import_node_crypto.randomBytes)(16);
+  const derived = Buffer.from((0, import_node_crypto.hkdfSync)("sha256", key, salt, "mastra-slack-encryption", 32));
+  const iv = (0, import_node_crypto.randomBytes)(12);
+  const cipher = (0, import_node_crypto.createCipheriv)("aes-256-gcm", derived, iv);
   const encrypted = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
   const authTag = cipher.getAuthTag();
   return `${ALGO_PREFIX}:${salt.toString("base64")}:${iv.toString("base64")}:${authTag.toString("base64")}:${encrypted.toString("base64")}`;
@@ -276,11 +303,11 @@ function decrypt(ciphertext, key) {
     throw new Error("Invalid ciphertext payload");
   }
   const salt = Buffer.from(saltB64, "base64");
-  const derived = Buffer.from((0, import_crypto.hkdfSync)("sha256", key, salt, "mastra-slack-encryption", 32));
+  const derived = Buffer.from((0, import_node_crypto.hkdfSync)("sha256", key, salt, "mastra-slack-encryption", 32));
   const iv = Buffer.from(ivB64, "base64");
   const authTag = Buffer.from(authTagB64, "base64");
   const encrypted = Buffer.from(encryptedB64, "base64");
-  const decipher = (0, import_crypto.createDecipheriv)("aes-256-gcm", derived, iv);
+  const decipher = (0, import_node_crypto.createDecipheriv)("aes-256-gcm", derived, iv);
   decipher.setAuthTag(authTag);
   return Buffer.concat([decipher.update(encrypted), decipher.final()]).toString("utf8");
 }
@@ -14899,7 +14926,9 @@ var SlashCommandSchema = external_exports.object({
   usageHint: external_exports.string().optional(),
   prompt: external_exports.string().optional()
 });
+var OwnerTypeSchema = external_exports.enum(["agent", "agentController"]);
 var SlackInstallationDataSchema = external_exports.object({
+  ownerType: OwnerTypeSchema.optional(),
   appId: external_exports.string(),
   clientId: external_exports.string(),
   clientSecret: external_exports.string(),
@@ -14916,6 +14945,7 @@ var SlackInstallationDataSchema = external_exports.object({
   slashCommands: external_exports.array(SlashCommandSchema).optional()
 });
 var SlackPendingDataSchema = external_exports.object({
+  ownerType: OwnerTypeSchema.optional(),
   appId: external_exports.string(),
   clientId: external_exports.string(),
   clientSecret: external_exports.string(),
@@ -15245,6 +15275,7 @@ var SlackProvider = class {
       webhookId: installation.webhookId,
       configHash: installation.configHash,
       data: {
+        ownerType: installation.ownerType,
         appId: installation.appId,
         clientId: installation.clientId,
         clientSecret: installation.clientSecret,
@@ -15291,6 +15322,7 @@ var SlackProvider = class {
       webhookId: pending.webhookId,
       configHash: pending.configHash,
       data: {
+        ownerType: pending.ownerType,
         appId: pending.appId,
         clientId: pending.clientId,
         clientSecret: pending.clientSecret,
@@ -15418,7 +15450,7 @@ var SlackProvider = class {
           await this.#checkConfigDrift(installation, baseUrl);
         }
         console.log(
-          `[Slack] \u2713 Agent "${installation.agentId}" connected to workspace "${installation.teamName ?? installation.teamId}"`
+          `[Slack] \u2713 App "${installation.name ?? installation.agentId}" (${installation.appId}) connected to workspace "${installation.teamName ?? installation.teamId}"`
         );
       } catch (err) {
         console.error(`[Slack] Failed to restore installation "${installationEncrypted.id}":`, err);
@@ -15430,7 +15462,9 @@ var SlackProvider = class {
    * Creates and injects AgentChannels into the Agent if needed.
    */
   async #activateAdapter(installation) {
-    const agent = this.#mastra?.getAgentById(installation.agentId);
+    const isController = installation.ownerType === "agentController";
+    const controller = isController ? this.#resolveAgentController(installation.agentId) : void 0;
+    const agent = isController ? void 0 : this.#resolveAgent(installation.agentId);
     const displayName = installation.name || agent?.name || installation.agentId;
     const adapter = (0, import_slack.createSlackAdapter)({
       ...this.#forwardedAdapterOptions(),
@@ -15443,7 +15477,10 @@ var SlackProvider = class {
     if (installation.slashCommands?.length) {
       this.#slashCommands.set(installation.webhookId, installation.slashCommands);
     }
-    if (agent && this.#mastra) {
+    if (controller && this.#mastra) {
+      const controllerChannels = this.#createAgentControllerChannels(controller, adapter);
+      await controllerChannels.initialize(this.#mastra);
+    } else if (agent && this.#mastra) {
       const agentChannels = this.#createAgentChannels(agent, adapter);
       await agentChannels.initialize(this.#mastra);
     }
@@ -15453,7 +15490,8 @@ var SlackProvider = class {
    * If it has, update the Slack app manifest to match the current agent state.
    */
   async #checkConfigDrift(installation, baseUrl) {
-    const agent = this.#mastra?.getAgentById(installation.agentId);
+    if (installation.ownerType === "agentController") return;
+    const agent = this.#resolveAgent(installation.agentId);
     if (!agent) return;
     const resolvedAppName = installation.name ?? agent.name ?? installation.agentId;
     const resolvedDescription = installation.description || agent.getDescription() || "AI assistant powered by Mastra";
@@ -15481,7 +15519,9 @@ var SlackProvider = class {
       await this.#requireManifestClient().updateApp(installation.appId, manifest);
       const updated = { ...installation, configHash: currentHash };
       await this.#saveInstallation(this.#encryptInstallation(updated));
-      console.log(`[Slack] \u2713 Manifest updated for "${installation.agentId}" (app: ${installation.appId})`);
+      console.log(
+        `[Slack] \u2713 Manifest updated for app "${installation.name ?? installation.agentId}" (${installation.appId})`
+      );
     } catch (err) {
       const errMsg = err instanceof Error ? err.message : String(err);
       const isAppGone = errMsg.includes("app_not_found") || errMsg.includes("no_permission");
@@ -15514,7 +15554,15 @@ var SlackProvider = class {
    */
   #forwardedChannelOptions() {
     const { handlers, inlineMedia, inlineLinks, state, threadContext, tools, chatOptions } = this.#channelConfig;
-    const candidate = { handlers, inlineMedia, inlineLinks, state, threadContext, tools, chatOptions };
+    const candidate = {
+      handlers,
+      inlineMedia,
+      inlineLinks,
+      state,
+      threadContext,
+      tools,
+      chatOptions
+    };
     return Object.fromEntries(Object.entries(candidate).filter(([, value]) => value !== void 0));
   }
   /**
@@ -15579,6 +15627,68 @@ var SlackProvider = class {
     agent.setChannels(agentChannels);
     return agentChannels;
   }
+  /**
+   * Controller-parallel of {@link #createAgentChannels}: build a fresh
+   * {@link AgentControllerChannels} that preserves any config the controller
+   * already had (including other adapters) and layers this Slack adapter on,
+   * then swap it onto the controller via `setChannels`. Mirrors the agent path
+   * — a superset merge, not a mutation of the live instance.
+   *
+   * The swap discards the old instance's in-memory `autoApproveResourceIds`
+   * tracking. That's fine: the set is refreshed on every inbound message, and
+   * Slack renders approval buttons anyway so it stays empty here.
+   */
+  #createAgentControllerChannels(controller, adapter) {
+    const adapterConfig = this.#resolveSlackAdapterConfig();
+    const slackEntry = Object.keys(adapterConfig).length > 0 ? { adapter, ...adapterConfig } : adapter;
+    const existing = controller.getChannels();
+    const existingConfig = existing?.channelConfig;
+    const controllerChannels = new import_channels.AgentControllerChannels({
+      ...existingConfig,
+      ...this.#forwardedChannelOptions(),
+      adapters: { ...existingConfig?.adapters, slack: slackEntry },
+      userName: controller.id
+    });
+    controller.setChannels(controllerChannels);
+    return controllerChannels;
+  }
+  /**
+   * Resolve the live channels instance that should handle an incoming webhook
+   * for this installation, branching on `ownerType`. Reuses an existing
+   * instance when it already carries the current adapter (e.g. from startup
+   * activation), otherwise builds a fresh one and initializes it. Returns null
+   * when the owner (agent or controller) can't be resolved.
+   */
+  async #resolveChannelsForInstallation(installation, currentAdapter) {
+    if (!this.#mastra) {
+      console.error("[Slack] Mastra not attached");
+      return null;
+    }
+    if (installation.ownerType === "agentController") {
+      const controller = this.#resolveAgentController(installation.agentId);
+      if (!controller) {
+        console.error(`[Slack] Agent controller "${installation.agentId}" not found`);
+        return null;
+      }
+      let channels2 = controller.getChannels();
+      if (!channels2 || channels2.adapters.slack !== currentAdapter) {
+        channels2 = this.#createAgentControllerChannels(controller, currentAdapter);
+        await channels2.initialize(this.#mastra);
+      }
+      return channels2;
+    }
+    const agent = this.#resolveAgent(installation.agentId);
+    if (!agent) {
+      console.error(`[Slack] Agent "${installation.agentId}" not found`);
+      return null;
+    }
+    let channels = agent.getChannels();
+    if (!channels || channels.adapters.slack !== currentAdapter) {
+      channels = this.#createAgentChannels(agent, currentAdapter);
+      await channels.initialize(this.#mastra);
+    }
+    return channels;
+  }
   /**
    * Auto-initialize on first route hit.
    * Delegates to initialize() which handles idempotency.
@@ -15642,15 +15752,13 @@ var SlackProvider = class {
       }
     ];
   }
-  // ===========================================================================
-  // Public API
-  // ===========================================================================
-  /**
-   * Connect an agent to Slack by creating a new Slack app.
-   *
-   * @returns OAuth connect result with authorization URL for user redirect
-   */
-  async connect(agentId, options) {
+  async connect(agentIdOrOptions, maybeOptions) {
+    const isAgentIdForm = typeof agentIdOrOptions === "string";
+    const agentId = isAgentIdForm ? agentIdOrOptions : agentIdOrOptions.id;
+    const options = isAgentIdForm ? maybeOptions : agentIdOrOptions;
+    if (!isAgentIdForm && !agentIdOrOptions.name) {
+      throw new Error('connect({ id, name }): "name" is required when connecting without an agent id');
+    }
     const client = this.#requireManifestClient();
     const baseUrl = this.#getBaseUrl();
     if (!baseUrl) {
@@ -15659,26 +15767,45 @@ var SlackProvider = class {
       );
     }
     const agent = this.#resolveAgent(agentId);
-    if (!agent) {
+    if (isAgentIdForm && !agent) {
       throw new Error(`Agent "${agentId}" not found`);
     }
+    let ownerType = "agent";
+    if (!isAgentIdForm && !agent) {
+      const controller = this.#resolveAgentController(agentId);
+      if (!controller) {
+        throw new Error(`No agent or agent controller found with id "${agentId}"`);
+      }
+      ownerType = "agentController";
+    }
     const storage = await this.#getStorage();
     const existingRecord = await storage.getInstallationByAgent(PLATFORM, agentId);
     if (existingRecord?.status === "pending") {
       try {
         const pending = this.#parsePendingInstallation(existingRecord);
         const decrypted = this.#decryptPendingInstallation(pending);
-        if (options?.redirectUrl && decrypted.redirectUrl !== options.redirectUrl) {
-          await this.#savePendingInstallation(
-            this.#encryptPendingInstallation({ ...decrypted, redirectUrl: options.redirectUrl })
-          );
+        let appStillExists = true;
+        try {
+          appStillExists = await client.appExists(decrypted.appId);
+        } catch (err) {
+          console.warn(`[Slack] Could not verify existing app for "${agentId}", reusing pending installation:`, err);
+        }
+        if (!appStillExists) {
+          console.warn(`[Slack] Stored app for "${agentId}" no longer exists on Slack, creating a fresh installation`);
+          await storage.deleteInstallation(existingRecord.id);
+        } else {
+          if (options?.redirectUrl && decrypted.redirectUrl !== options.redirectUrl) {
+            await this.#savePendingInstallation(
+              this.#encryptPendingInstallation({ ...decrypted, redirectUrl: options.redirectUrl })
+            );
+          }
+          console.log(`[Slack] Reusing existing pending installation for "${agentId}"`);
+          return {
+            type: "oauth",
+            installationId: decrypted.id,
+            authorizationUrl: decrypted.authorizationUrl
+          };
         }
-        console.log(`[Slack] Reusing existing pending installation for "${agentId}"`);
-        return {
-          type: "oauth",
-          installationId: decrypted.id,
-          authorizationUrl: decrypted.authorizationUrl
-        };
       } catch {
         console.warn(`[Slack] Corrupt pending installation for "${agentId}", replacing it`);
         await storage.deleteInstallation(existingRecord.id);
@@ -15689,8 +15816,8 @@ var SlackProvider = class {
     }
     const config2 = options ?? {};
     const webhookId = crypto.randomUUID();
-    const appName = config2.name ?? agent.name ?? agentId;
-    const appDescription = config2.description || agent.getDescription() || "AI assistant powered by Mastra";
+    const appName = config2.name ?? agent?.name ?? agentId;
+    const appDescription = config2.description || agent?.getDescription() || "AI assistant powered by Mastra";
     const normalizedCommands = this.#normalizeCommands(config2.slashCommands);
     let manifest = buildManifest({
       name: appName,
@@ -15733,6 +15860,7 @@ var SlackProvider = class {
     const pendingInstallation = this.#encryptPendingInstallation({
       id: installationId,
       agentId,
+      ownerType,
       webhookId,
       appId: appCredentials.appId,
       clientId: appCredentials.clientId,
@@ -15941,6 +16069,7 @@ var SlackProvider = class {
       const installation = {
         id: pending.id,
         agentId: pending.agentId,
+        ownerType: pending.ownerType ?? "agent",
         webhookId: pending.webhookId,
         appId: pending.appId,
         clientId: pending.clientId,
@@ -15958,7 +16087,11 @@ var SlackProvider = class {
       };
       const encryptedInstallation = this.#encryptInstallation(installation);
       await this.#saveInstallation(encryptedInstallation);
-      const agent = this.#mastra?.getAgentById(pending.agentId);
+      let agent;
+      try {
+        agent = installation.ownerType === "agent" ? this.#mastra?.getAgentById(pending.agentId) : void 0;
+      } catch {
+      }
       const displayName = installation.name || agent?.name || pending.agentId;
       const adapter = (0, import_slack.createSlackAdapter)({
         ...this.#forwardedAdapterOptions(),
@@ -15975,7 +16108,9 @@ var SlackProvider = class {
         await this.#channelConfig.onInstall(installation);
       }
       const teamName = tokenData.team?.name ?? "";
-      console.log(`[Slack] \u2713 Agent "${pending.agentId}" installed to team "${teamName}"`);
+      console.log(
+        `[Slack] \u2713 App "${installation.name ?? installation.agentId}" (${installation.appId}) installed to workspace "${teamName || installation.teamId}"`
+      );
       const successUrl = pending.redirectUrl ?? this.#channelConfig.redirectPath ?? "/";
       const redirect = new URL(successUrl, c.req.url);
       redirect.searchParams.set("channel_connected", "true");
@@ -16030,16 +16165,11 @@ var SlackProvider = class {
         return c.json({ challenge: event.challenge });
       }
     }
-    const agent = this.#resolveAgent(installation.agentId);
-    if (!agent) {
-      console.error(`[Slack] Agent "${installation.agentId}" not found`);
-      return c.json({ ok: true });
-    }
     if (!this.#mastra) {
       console.error("[Slack] Mastra not attached");
       return c.json({ ok: true });
     }
-    const displayName = installation.name || agent.name || installation.agentId;
+    const displayName = installation.name || installation.agentId;
     const currentAdapter = this.#adapters.get(installation.id) ?? (0, import_slack.createSlackAdapter)({
       ...this.#forwardedAdapterOptions(),
       botToken: installation.botToken,
@@ -16047,10 +16177,9 @@ var SlackProvider = class {
       signingSecret: installation.signingSecret,
       userName: displayName
     });
-    let agentChannels = agent.getChannels();
-    if (!agentChannels || agentChannels.adapters.slack !== currentAdapter) {
-      agentChannels = this.#createAgentChannels(agent, currentAdapter);
-      await agentChannels.initialize(this.#mastra);
+    const agentChannels = await this.#resolveChannelsForInstallation(installation, currentAdapter);
+    if (!agentChannels) {
+      return c.json({ ok: true });
     }
     const delegateRequest = new Request(c.req.url, {
       method: c.req.method,
@@ -16101,6 +16230,12 @@ var SlackProvider = class {
     if (!commandConfig) {
       return c.json({ response_type: "ephemeral", text: `Unknown command: ${command}` });
     }
+    if (installation.ownerType === "agentController") {
+      return c.json({
+        response_type: "ephemeral",
+        text: "Slash commands are not supported for this app yet. Mention the bot in a thread to start a session."
+      });
+    }
     const agent = this.#resolveAgent(installation.agentId);
     if (!agent) {
       return c.json({ response_type: "ephemeral", text: "Agent not available" });
@@ -16142,6 +16277,13 @@ var SlackProvider = class {
       return void 0;
     }
   }
+  #resolveAgentController(controllerId) {
+    try {
+      return this.#mastra?.getAgentControllerById(controllerId);
+    } catch {
+      return void 0;
+    }
+  }
 };
 
 // src/index.ts