@moxxy/plugin-channel-slack 0.27.0

package/dist/channel.js

@@ -0,0 +1,286 @@
+import { newTurnId } from '@moxxy/core';
+import { TofuPairingWindow, TurnCoordinator } from '@moxxy/channel-kit';
+import { proxyTunnel } from '@moxxy/plugin-tunnel-proxy';
+import { SLACK_AUTHORIZED_KEY, authorizationMatches, parseAuthorization, resolveBotToken, resolveSigningSecret, } from './keys.js';
+import { buildSlackPermissionResolver } from './permission.js';
+import { SlackClient } from './channel/slack-client.js';
+import { runSlackTurn } from './channel/turn-runner.js';
+import { IngestServer, SLACK_EVENTS_PATH, } from './server/ingest-server.js';
+/** Routing label the proxy relay exposes this channel under. */
+const TUNNEL_LABEL = 'slack';
+export class SlackChannel {
+    name = 'slack';
+    /**
+     * Installed on the session by the CLI dispatcher. Replaced in `start()` once
+     * we can expand a `['*']` allow-list against the live tool registry; until
+     * then it denies everything (safe default before start).
+     */
+    permissionResolver;
+    opts;
+    session = null;
+    client = null;
+    ingest = null;
+    tunnel = null;
+    handle = null;
+    resolveRunning = null;
+    botUserId = '';
+    authorization = null;
+    model;
+    // Single-flight turn state (v1: one turn at a time across all threads): the
+    // `busy` guard, the per-turn AbortController, and the bounded own-turn-id set
+    // mirrorForeignTurn filters on (#8).
+    turns = new TurnCoordinator();
+    // Per-turn target so foreign-turn mirroring + permission prompts know the thread.
+    currentChannelId = null;
+    currentThreadTs = null;
+    lastChannelId = null;
+    lastThreadTs = null;
+    logUnsub = null;
+    // Pairing (TOFU) window: armed by `start({ pair: true })`, captures the first
+    // verified team/channel for the pair flow to confirm.
+    tofu;
+    publicUrl = null;
+    constructor(opts) {
+        this.opts = opts;
+        this.tofu = new TofuPairingWindow({
+            onListenerError: (err) => this.opts.logger?.warn?.('slack: pair listener threw', { err: String(err) }),
+        });
+        // Pre-start: deny-all. Replaced with the real allow-list resolver in start()
+        // once the tool registry is available (for `['*']` expansion).
+        this.permissionResolver = buildSlackPermissionResolver({
+            allowedTools: [],
+            allToolNames: [],
+            ...(opts.logger ? { logger: opts.logger } : {}),
+        });
+    }
+    /** The public Request URL to paste into Slack's Event Subscriptions. */
+    get requestUrl() {
+        return this.publicUrl;
+    }
+    /** Subscribe to pairing candidates (the setup/pair flows use this). */
+    onPairCandidate(listener) {
+        return this.tofu.onCandidate(listener);
+    }
+    /** Persist a team/channel as authorized (called by the pair flow on confirm). */
+    async confirmPairing(candidate) {
+        const auth = {
+            teamId: candidate.teamId,
+            channelId: candidate.channelId,
+        };
+        await this.opts.vault.set(SLACK_AUTHORIZED_KEY, JSON.stringify(auth), ['slack']);
+        this.authorization = auth;
+        this.tofu.disarm();
+    }
+    async start(startOpts) {
+        if (this.handle)
+            return this.handle;
+        this.session = startOpts.session;
+        this.model = startOpts.model;
+        if (startOpts.pair === true)
+            this.tofu.arm();
+        const token = await resolveBotToken(this.opts.vault);
+        if (!token) {
+            throw new Error('Slack bot token not found. Run `moxxy channels slack setup`, set MOXXY_SLACK_BOT_TOKEN, ' +
+                'or store one in the vault under slack_bot_token.');
+        }
+        const signingSecret = await resolveSigningSecret(this.opts.vault);
+        if (!signingSecret) {
+            throw new Error('Slack signing secret not found. Run `moxxy channels slack setup`, set ' +
+                'MOXXY_SLACK_SIGNING_SECRET, or store one in the vault under slack_signing_secret.');
+        }
+        // Load any persisted pairing.
+        this.authorization = parseAuthorization(await this.opts.vault.get(SLACK_AUTHORIZED_KEY));
+        if (!this.tofu.isArmed && !this.authorization) {
+            throw new Error('No Slack team/channel is paired yet. Run `moxxy channels slack pair` first.');
+        }
+        // Validate the token + capture the bot's own user id (for self-message drops).
+        this.client = this.opts.makeClient
+            ? this.opts.makeClient(token)
+            : new SlackClient({ token });
+        const auth = await this.client.authTest();
+        this.botUserId = auth.botUserId;
+        this.opts.logger?.info?.('slack: authenticated', {
+            botUserId: this.botUserId,
+            team: auth.team,
+        });
+        // Build the real allow-list resolver now that the tool registry is live, so
+        // `['*']` can expand to every registered tool name (mirror prompt.ts).
+        const allowedTools = startOpts.allowedTools ?? this.opts.allowedTools ?? [];
+        const allToolNames = this.session.tools.list().map((t) => t.name);
+        this.permissionResolver = buildSlackPermissionResolver({
+            allowedTools,
+            allToolNames,
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+        });
+        // Swap the (now-final) resolver in — start() was called AFTER the CLI
+        // installed the pre-start one, so re-install via the documented seam.
+        this.session.setPermissionResolver(this.permissionResolver);
+        // Mirror-to-thread: post the assistant's prose for a turn this channel did
+        // NOT initiate (e.g. a co-attached surface ran one) into the last thread we
+        // served. Our OWN turns stream via the frame pump (filtered by turnId).
+        this.logUnsub = this.session.log.subscribe((event) => this.mirrorForeignTurn(event));
+        // Stand up the local ingest server, then expose it via the proxy tunnel.
+        this.ingest = new IngestServer({
+            ...(this.opts.host ? { host: this.opts.host } : {}),
+            signingSecret,
+            ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+            hooks: {
+                botUserId: this.botUserId,
+                isAuthorized: (teamId, channel) => authorizationMatches(this.authorization, teamId, channel),
+                onVerifiedEvent: (ev) => this.handlePairingCandidate(ev),
+                dispatch: (ctx) => this.dispatchTurn(ctx),
+            },
+        });
+        const bound = await this.ingest.start();
+        await this.openTunnel(bound.host, bound.port);
+        const running = new Promise((resolve) => {
+            this.resolveRunning = resolve;
+        });
+        this.handle = {
+            running,
+            stop: async (reason = 'shutdown') => {
+                // Abort the in-flight turn FIRST so the model loop stops the moment the
+                // operator asks to shut down (shared/remote Session: spend continues
+                // otherwise and only its output is discarded).
+                this.turns.abort(reason);
+                this.logUnsub?.();
+                this.logUnsub = null;
+                if (this.tunnel) {
+                    try {
+                        await this.tunnel.close();
+                    }
+                    catch { /* ignore */ }
+                    this.tunnel = null;
+                }
+                if (this.ingest) {
+                    await this.ingest.stop();
+                    this.ingest = null;
+                }
+                this.publicUrl = null;
+                this.resolveRunning?.();
+                this.resolveRunning = null;
+            },
+        };
+        this.opts.logger?.info?.('slack: channel started', {
+            requestUrl: this.publicUrl,
+            paired: this.authorization != null,
+            pairing: this.tofu.isArmed,
+        });
+        return this.handle;
+    }
+    async openTunnel(host, port) {
+        // Default to the self-hosted proxy relay (imported directly, like the
+        // webhooks tunnel); tests inject a fake provider.
+        const provider = this.opts.tunnelProvider ?? proxyTunnel;
+        if (provider.name === 'localhost') {
+            // A no-op provider can't reach a loopback port from Slack. Surface the
+            // local URL so a manual reverse proxy can still be wired.
+            this.publicUrl = `http://${host}:${port}${SLACK_EVENTS_PATH}`;
+            this.opts.logger?.warn?.('slack: localhost tunnel provider — Slack cannot reach a loopback port', { localUrl: this.publicUrl });
+            return;
+        }
+        try {
+            this.tunnel = await provider.open({ port, host, label: TUNNEL_LABEL });
+            this.publicUrl = `${this.tunnel.url.replace(/\/+$/, '')}${SLACK_EVENTS_PATH}`;
+            this.opts.logger?.info?.('slack: tunnel open', {
+                provider: provider.name,
+                requestUrl: this.publicUrl,
+            });
+        }
+        catch (err) {
+            this.publicUrl = `http://${host}:${port}${SLACK_EVENTS_PATH}`;
+            this.opts.logger?.warn?.('slack: tunnel failed; using local URL', {
+                provider: provider.name,
+                err: String(err),
+            });
+        }
+    }
+    /**
+     * TOFU pairing hook: while a pairing window is armed, the first verified event
+     * captures the team/channel and notifies listeners. It's "consumed" (no turn)
+     * so the very first message just establishes trust. Returns true when consumed.
+     */
+    handlePairingCandidate(ev) {
+        if (!this.tofu.isArmed)
+            return false;
+        const teamId = ev.team_id;
+        const channelId = ev.event.channel;
+        if (!teamId || !channelId)
+            return false;
+        return this.tofu.offer({ teamId, channelId });
+    }
+    /**
+     * Fire-and-forget a turn for an authorized event. Single-flight (v1): if a
+     * turn is already running we drop the new event with a thread reply rather
+     * than corrupting the per-turn state. The ingest handler has already ACKed.
+     */
+    dispatchTurn(ctx) {
+        void this.runTurn(ctx).catch((err) => {
+            this.opts.logger?.warn?.('slack: turn dispatch failed', { err: String(err) });
+        });
+    }
+    async runTurn(ctx) {
+        if (!this.session || !this.client)
+            return;
+        // The turnId is minted here so the coordinator records it as an own-turn id
+        // — that's what mirrorForeignTurn filters on (#8).
+        const lease = this.turns.begin(newTurnId());
+        if (!lease) {
+            // Politely decline; v1 has no per-thread concurrency (see TECH_DEBT).
+            try {
+                await this.client.postMessage({
+                    channel: ctx.channel,
+                    threadTs: ctx.threadTs,
+                    text: 'I am still working on a previous request. One moment…',
+                });
+            }
+            catch { /* ignore */ }
+            return;
+        }
+        this.currentChannelId = ctx.channel;
+        this.currentThreadTs = ctx.threadTs;
+        this.lastChannelId = ctx.channel;
+        this.lastThreadTs = ctx.threadTs;
+        try {
+            await runSlackTurn({
+                session: this.session,
+                client: this.client,
+                editFrameMs: this.opts.editFrameMs ?? 1000,
+                ...(this.opts.logger ? { logger: this.opts.logger } : {}),
+            }, {
+                channel: ctx.channel,
+                threadTs: ctx.threadTs,
+                text: ctx.text,
+                ...(this.model ? { model: this.model } : {}),
+                controller: lease.controller,
+                turnId: lease.turnId,
+            });
+        }
+        finally {
+            lease.end();
+            this.currentChannelId = null;
+            this.currentThreadTs = null;
+        }
+    }
+    /**
+     * Post the assistant's prose for a turn this channel did not initiate. Gated by
+     * `!busy` (our own turns stream via the frame pump) and by having served a
+     * thread at least once. Skipped for our own turnIds (robust to async ordering /
+     * replay, invariant #8).
+     */
+    mirrorForeignTurn(event) {
+        // Skipped for our own turnIds (robust to async ordering / replay, #8) and
+        // while a turn of ours is streaming via the frame pump.
+        const text = this.turns.mirrorText(event);
+        if (text == null)
+            return;
+        if (!this.client || this.lastChannelId == null || this.lastThreadTs == null)
+            return;
+        void this.client
+            .postMessage({ channel: this.lastChannelId, threadTs: this.lastThreadTs, text })
+            .catch((err) => {
+            this.opts.logger?.warn?.('slack: mirror failed', { err: String(err) });
+        });
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAYzD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,GAErB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,iBAAiB,GAElB,MAAM,2BAA2B,CAAC;AAGnC,gEAAgE;AAChE,MAAM,YAAY,GAAG,OAAO,CAAC;AA6C7B,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,OAAO,CAAC;IACxB;;;;OAIG;IACH,kBAAkB,CAAqB;IAEtB,IAAI,CAAsB;IACnC,OAAO,GAAmB,IAAI,CAAC;IAC/B,MAAM,GAAuB,IAAI,CAAC;IAClC,MAAM,GAAwB,IAAI,CAAC;IACnC,MAAM,GAAwB,IAAI,CAAC;IACnC,MAAM,GAAyB,IAAI,CAAC;IACpC,cAAc,GAAwB,IAAI,CAAC;IAE3C,SAAS,GAAG,EAAE,CAAC;IACf,aAAa,GAA8B,IAAI,CAAC;IAChD,KAAK,CAAqB;IAElC,4EAA4E;IAC5E,8EAA8E;IAC9E,qCAAqC;IACpB,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC/C,kFAAkF;IAC1E,gBAAgB,GAAkB,IAAI,CAAC;IACvC,eAAe,GAAkB,IAAI,CAAC;IACtC,aAAa,GAAkB,IAAI,CAAC;IACpC,YAAY,GAAkB,IAAI,CAAC;IACnC,QAAQ,GAAwB,IAAI,CAAC;IAE7C,8EAA8E;IAC9E,sDAAsD;IACrC,IAAI,CAAmC;IAChD,SAAS,GAAkB,IAAI,CAAC;IAExC,YAAY,IAAyB;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAgB;YAC/C,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,4BAA4B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,6EAA6E;QAC7E,+DAA+D;QAC/D,IAAI,CAAC,kBAAkB,GAAG,4BAA4B,CAAC;YACrD,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,uEAAuE;IACvE,eAAe,CAAC,QAAoC;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,cAAc,CAAC,SAAwB;QAC3C,MAAM,IAAI,GAAuB;YAC/B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;QACF,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAyB;QACnC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC7B,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,0FAA0F;gBACxF,kDAAkD,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,mFAAmF,CACtF,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,aAAa,GAAG,kBAAkB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7B,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE;YAC/C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QAEH,4EAA4E;QAC5E,uEAAuE;QACvE,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5E,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,kBAAkB,GAAG,4BAA4B,CAAC;YACrD,YAAY;YACZ,YAAY;YACZ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE5D,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAErF,yEAAyE;QACzE,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,aAAa;YACb,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAChC,oBAAoB,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC;gBAC3D,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACxD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;aAC1C;SACF,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAExC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO;YACP,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,EAAE;gBAClC,wEAAwE;gBACxE,qEAAqE;gBACrE,+CAA+C;gBAC/C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACzB,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBACzD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrB,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACrB,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,CAAC;SACF,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,wBAAwB,EAAE;YACjD,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,MAAM,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YAClC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,IAAY;QACjD,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC;QACzD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,uEAAuE;YACvE,0DAA0D;YAC1D,IAAI,CAAC,SAAS,GAAG,UAAU,IAAI,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,uEAAuE,EACvE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAC7B,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,SAAS,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE;gBAC7C,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,UAAU,EAAE,IAAI,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,UAAU,IAAI,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,uCAAuC,EAAE;gBAChE,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,sBAAsB,CAAC,EAAsB;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;QAC1B,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,GAAoB;QACvC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAoB;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAC1C,4EAA4E;QAC5E,mDAAmD;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,sEAAsE;YACtE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,IAAI,EAAE,uDAAuD;iBAC9D,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAEjC,IAAI,CAAC;YACH,MAAM,YAAY,CAChB;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;gBAC1C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,EACD;gBACE,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CACF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CAAC,KAAiB;QACzC,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI;YAAE,OAAO;QACpF,KAAK,IAAI,CAAC,MAAM;aACb,WAAW,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;aAC/E,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACP,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+import { type Plugin } from '@moxxy/sdk';
+import type { VaultStore } from '@moxxy/plugin-vault';
+export { SlackChannel, type SlackChannelOptions, type SlackStartOpts, type PairCandidate, } from './channel.js';
+export { buildSlackPermissionResolver } from './permission.js';
+export { SlackClient } from './channel/slack-client.js';
+export { verifySlackSignature, SLACK_REPLAY_WINDOW_SEC } from './server/verify.js';
+export { slackEnvelopeSchema, eventCallbackSchema, urlVerificationSchema } from './server/schema.js';
+export { DeliveryDedupeCache } from './server/dedupe.js';
+export { IngestServer, SLACK_EVENTS_PATH } from './server/ingest-server.js';
+export { SLACK_BOT_TOKEN_KEY, SLACK_SIGNING_SECRET_KEY, SLACK_AUTHORIZED_KEY, SLACK_BOT_TOKEN_ENV, SLACK_SIGNING_SECRET_ENV, resolveBotToken, resolveSigningSecret, parseAuthorization, authorizationMatches, type SlackAuthorization, } from './keys.js';
+export interface BuildSlackPluginOptions {
+    /** Host-injected encrypted secret store (available immediately). */
+    readonly vault: VaultStore;
+}
+/**
+ * Build the Slack channel plugin. The CLI passes the concrete vault (mirroring
+ * the Telegram plugin's vault injection). The channel exposes its own ingest
+ * server publicly via the self-hosted `proxyTunnel` (imported directly, like
+ * the webhooks tunnel).
+ */
+export declare function buildSlackPlugin(opts: BuildSlackPluginOptions): Plugin;
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + subcommands read the vault via
+ * `getVault()`, so resolution is deferred to call time — after `onInit` wired it.
+ */
+export declare const slackPlugin: Plugin;
+export default slackPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,MAAM,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAetD,OAAO,EACL,YAAY,EACZ,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAEtE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,EAAE,MAgBtB,CAAC;AAEL,eAAe,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,207 @@
+import { defineChannel, definePlugin, } from '@moxxy/sdk';
+import { SlackChannel } from './channel.js';
+import { SLACK_AUTHORIZED_KEY, SLACK_BOT_TOKEN_ENV, SLACK_BOT_TOKEN_KEY, SLACK_SIGNING_SECRET_ENV, SLACK_SIGNING_SECRET_KEY, parseAuthorization, resolveBotToken, resolveSigningSecret, } from './keys.js';
+import { runSlackWizard } from './setup-wizard.js';
+import { runSlackPairFlow } from './pair-flow.js';
+export { SlackChannel, } from './channel.js';
+export { buildSlackPermissionResolver } from './permission.js';
+export { SlackClient } from './channel/slack-client.js';
+export { verifySlackSignature, SLACK_REPLAY_WINDOW_SEC } from './server/verify.js';
+export { slackEnvelopeSchema, eventCallbackSchema, urlVerificationSchema } from './server/schema.js';
+export { DeliveryDedupeCache } from './server/dedupe.js';
+export { IngestServer, SLACK_EVENTS_PATH } from './server/ingest-server.js';
+export { SLACK_BOT_TOKEN_KEY, SLACK_SIGNING_SECRET_KEY, SLACK_AUTHORIZED_KEY, SLACK_BOT_TOKEN_ENV, SLACK_SIGNING_SECRET_ENV, resolveBotToken, resolveSigningSecret, parseAuthorization, authorizationMatches, } from './keys.js';
+/**
+ * Build the Slack channel plugin. The CLI passes the concrete vault (mirroring
+ * the Telegram plugin's vault injection). The channel exposes its own ingest
+ * server publicly via the self-hosted `proxyTunnel` (imported directly, like
+ * the webhooks tunnel).
+ */
+export function buildSlackPlugin(opts) {
+    return makeSlackPlugin(() => opts.vault);
+}
+/**
+ * Discovery-loadable default export: resolves the vault from the inter-plugin
+ * service registry in `onInit` (the vault plugin publishes `'vault'`). Requires
+ * `@moxxy/plugin-vault` to load first (declared in `package.json`
+ * `moxxy.requirements`). The channel + subcommands read the vault via
+ * `getVault()`, so resolution is deferred to call time — after `onInit` wired it.
+ */
+export const slackPlugin = (() => {
+    let resolved = null;
+    const getVault = () => {
+        if (!resolved) {
+            throw new Error('@moxxy/plugin-channel-slack: the "vault" service is unavailable — @moxxy/plugin-vault must load first');
+        }
+        return resolved;
+    };
+    const hooks = {
+        onInit: (ctx) => {
+            resolved = ctx.services.require('vault');
+        },
+    };
+    return makeSlackPlugin(getVault, hooks);
+})();
+export default slackPlugin;
+function readAllowedTools(options) {
+    const raw = options?.['allowedTools'];
+    if (Array.isArray(raw))
+        return raw.map((x) => String(x));
+    return undefined;
+}
+function makeSlackPlugin(getVault, hooks) {
+    return definePlugin({
+        name: '@moxxy/plugin-channel-slack',
+        version: '0.0.0',
+        ...(hooks ? { hooks } : {}),
+        // NB: we do NOT register a tunnelProvider here. The channel opens its ingest
+        // tunnel by importing `proxyTunnel` directly (see ingest-server), exactly like
+        // the webhooks plugin. Registering it would throw "already registered" when the
+        // web channel (which does register `proxyTunnel`) is also loaded, silently
+        // dropping this whole plugin — the tunnel-providers registry rejects duplicates.
+        channels: [
+            defineChannel({
+                name: 'slack',
+                description: 'Slack bot channel: ingests the Events API over the proxy relay and streams threaded replies. Autonomous allow-list permissions (no human in the loop).',
+                // Runs on its own dedicated, isolated runner (separate socket + sticky
+                // session) so the bot operates independently of the user's desktop/TUI.
+                // The CLI reads these generically — no per-channel name list.
+                dedicatedRunner: true,
+                sessionSource: 'slack',
+                // Self-described config so a control surface (TUI `/channels`, `moxxy
+                // channels start`) can configure + run Slack without a hardcoded table.
+                // The vault keys named here are the ones the channel reads at boot.
+                config: {
+                    fields: [
+                        {
+                            name: 'botToken',
+                            label: 'Bot token',
+                            vaultKey: SLACK_BOT_TOKEN_KEY,
+                            required: true,
+                            secret: true,
+                            placeholder: 'xoxb-…',
+                            help: 'Slack app → OAuth & Permissions → Bot User OAuth Token',
+                        },
+                        {
+                            name: 'signingSecret',
+                            label: 'Signing secret',
+                            vaultKey: SLACK_SIGNING_SECRET_KEY,
+                            required: true,
+                            secret: true,
+                            help: 'Slack app → Basic Information → App Credentials → Signing Secret',
+                        },
+                    ],
+                    hasRequestUrl: true,
+                    runHint: 'Paste the Request URL into your Slack app → Event Subscriptions, subscribe to the app_mention bot event, then mention the bot in a channel to pair.',
+                    connect: {
+                        kind: 'url',
+                        title: 'Request URL',
+                        hint: 'Paste this into your Slack app → Event Subscriptions, subscribe to the app_mention bot event, then mention the bot in a channel to pair.',
+                    },
+                },
+                create: (deps) => {
+                    const options = deps.options;
+                    const allowedTools = readAllowedTools(options);
+                    const editFrameMs = options?.['editFrameMs'];
+                    const host = options?.['host'];
+                    const channelOpts = {
+                        vault: getVault(),
+                        ...(allowedTools ? { allowedTools } : {}),
+                        ...(typeof editFrameMs === 'number' ? { editFrameMs } : {}),
+                        ...(typeof host === 'string' ? { host } : {}),
+                        logger: deps.logger,
+                    };
+                    return new SlackChannel(channelOpts);
+                },
+                isAvailable: async () => {
+                    // Env-first: a fully env-configured bot is available even in a probe
+                    // context (e.g. the `moxxy channels` listing) where onInit has not yet
+                    // wired the vault service, so `getVault()` would throw.
+                    let hasToken = (process.env[SLACK_BOT_TOKEN_ENV]?.trim() ?? '') !== '';
+                    let hasSecret = (process.env[SLACK_SIGNING_SECRET_ENV]?.trim() ?? '') !== '';
+                    if (hasToken && hasSecret)
+                        return { ok: true };
+                    try {
+                        const vault = getVault();
+                        if (!hasToken)
+                            hasToken = (await resolveBotToken(vault)) != null;
+                        if (!hasSecret)
+                            hasSecret = (await resolveSigningSecret(vault)) != null;
+                    }
+                    catch {
+                        // Vault unavailable in a probe/listing context — fall through to the
+                        // "missing secrets" message below (env was already checked above).
+                    }
+                    if (hasToken && hasSecret)
+                        return { ok: true };
+                    const missing = [];
+                    if (!hasToken)
+                        missing.push('bot token (slack_bot_token / MOXXY_SLACK_BOT_TOKEN)');
+                    if (!hasSecret)
+                        missing.push('signing secret (slack_signing_secret / MOXXY_SLACK_SIGNING_SECRET)');
+                    return {
+                        ok: false,
+                        reason: `Missing ${missing.join(' and ')}. Run \`moxxy channels slack setup\`.`,
+                    };
+                },
+                interactiveCommand: 'setup',
+                subcommands: {
+                    setup: {
+                        description: 'Interactive setup: store the bot token + signing secret, validate via auth.test, pick the allow-list, open the tunnel, and print the Slack Request URL. Shown by default for `moxxy slack` on a TTY.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                // Headless: just start the channel (secrets must already be set).
+                                return ctx.startChannel();
+                            }
+                            return runSlackWizard(ctx);
+                        },
+                    },
+                    pair: {
+                        description: 'TOFU pairing: arm a window, then authorize the first team/channel that @mentions the bot.',
+                        run: async (ctx) => {
+                            if (process.stdin.isTTY !== true) {
+                                process.stderr.write('Pairing needs a TTY (you confirm the team/channel). Run `moxxy slack pair` interactively.\n');
+                                return 1;
+                            }
+                            return runSlackPairFlow(ctx);
+                        },
+                    },
+                    status: {
+                        description: 'Report token/secret/authorization state as JSON.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const botTokenConfigured = (await resolveBotToken(vault)) != null;
+                            const signingSecretConfigured = (await resolveSigningSecret(vault)) != null;
+                            const authorized = parseAuthorization(await vault.get(SLACK_AUTHORIZED_KEY));
+                            process.stdout.write(JSON.stringify({
+                                botTokenConfigured,
+                                signingSecretConfigured,
+                                authorized,
+                                tunnelUrl: null,
+                            }, null, 2) + '\n');
+                            return 0;
+                        },
+                    },
+                    unpair: {
+                        description: 'Forget the authorized Slack team/channel.',
+                        run: async (ctx) => {
+                            const vault = ctx.deps.vault;
+                            if (!vault) {
+                                process.stderr.write('vault unavailable\n');
+                                return 1;
+                            }
+                            const removed = await vault.delete(SLACK_AUTHORIZED_KEY);
+                            process.stdout.write(removed ? 'unpaired\n' : 'no pairing was active\n');
+                            return 0;
+                        },
+                    },
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,YAAY,GAGb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAA4B,MAAM,cAAc,CAAC;AACtE,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EACL,YAAY,GAIb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,WAAW,CAAC;AAOnB;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA6B;IAC5D,OAAO,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAW,CAAC,GAAG,EAAE;IACvC,IAAI,QAAQ,GAAsB,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAe,EAAE;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,uGAAuG,CACxG,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAmB;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACd,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAa,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IACF,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC,CAAC,EAAE,CAAC;AAEL,eAAe,WAAW,CAAC;AAE3B,SAAS,gBAAgB,CAAC,OAA4C;IACpE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B,EAAE,KAAsB;IACzE,OAAO,YAAY,CAAC;QAClB,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,6EAA6E;QAC7E,+EAA+E;QAC/E,gFAAgF;QAChF,2EAA2E;QAC3E,iFAAiF;QACjF,QAAQ,EAAE;YACR,aAAa,CAAC;gBACZ,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,wJAAwJ;gBAC1J,uEAAuE;gBACvE,wEAAwE;gBACxE,8DAA8D;gBAC9D,eAAe,EAAE,IAAI;gBACrB,aAAa,EAAE,OAAO;gBACtB,sEAAsE;gBACtE,wEAAwE;gBACxE,oEAAoE;gBACpE,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN;4BACE,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE,WAAW;4BAClB,QAAQ,EAAE,mBAAmB;4BAC7B,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE,QAAQ;4BACrB,IAAI,EAAE,wDAAwD;yBAC/D;wBACD;4BACE,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,gBAAgB;4BACvB,QAAQ,EAAE,wBAAwB;4BAClC,QAAQ,EAAE,IAAI;4BACd,MAAM,EAAE,IAAI;4BACZ,IAAI,EAAE,kEAAkE;yBACzE;qBACF;oBACD,aAAa,EAAE,IAAI;oBACnB,OAAO,EACL,qJAAqJ;oBACvJ,OAAO,EAAE;wBACP,IAAI,EAAE,KAAK;wBACX,KAAK,EAAE,aAAa;wBACpB,IAAI,EAAE,0IAA0I;qBACjJ;iBACF;gBACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAC/C,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;oBAC7C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;oBAC/B,MAAM,WAAW,GAAwB;wBACvC,KAAK,EAAE,QAAQ,EAAE;wBACjB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7C,MAAM,EAAE,IAAI,CAAC,MAAe;qBAC7B,CAAC;oBACF,OAAO,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;gBACvC,CAAC;gBACD,WAAW,EAAE,KAAK,IAAI,EAAE;oBACtB,qEAAqE;oBACrE,uEAAuE;oBACvE,wDAAwD;oBACxD,IAAI,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;oBACvE,IAAI,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;oBAC7E,IAAI,QAAQ,IAAI,SAAS;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBAC/C,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;wBACzB,IAAI,CAAC,QAAQ;4BAAE,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;wBACjE,IAAI,CAAC,SAAS;4BAAE,SAAS,GAAG,CAAC,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;oBAC1E,CAAC;oBAAC,MAAM,CAAC;wBACP,qEAAqE;wBACrE,mEAAmE;oBACrE,CAAC;oBACD,IAAI,QAAQ,IAAI,SAAS;wBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;oBAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;oBAC7B,IAAI,CAAC,QAAQ;wBAAE,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;oBACnF,IAAI,CAAC,SAAS;wBAAE,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;oBACnG,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,uCAAuC;qBAChF,CAAC;gBACJ,CAAC;gBACD,kBAAkB,EAAE,OAAO;gBAC3B,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,WAAW,EACT,sMAAsM;wBACxM,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,kEAAkE;gCAClE,OAAO,GAAG,CAAC,YAAY,EAAE,CAAC;4BAC5B,CAAC;4BACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;wBAC7B,CAAC;qBACF;oBACD,IAAI,EAAE;wBACJ,WAAW,EACT,2FAA2F;wBAC7F,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gCACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6FAA6F,CAC9F,CAAC;gCACF,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;wBAC/B,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,kDAAkD;wBAC/D,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,kBAAkB,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;4BAClE,MAAM,uBAAuB,GAAG,CAAC,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;4BAC5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;4BAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,CAAC,SAAS,CACZ;gCACE,kBAAkB;gCAClB,uBAAuB;gCACvB,UAAU;gCACV,SAAS,EAAE,IAAI;6BAChB,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,CACT,CAAC;4BACF,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;oBACD,MAAM,EAAE;wBACN,WAAW,EAAE,2CAA2C;wBACxD,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;4BACjB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAA+B,CAAC;4BACvD,IAAI,CAAC,KAAK,EAAE,CAAC;gCACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;gCAC5C,OAAO,CAAC,CAAC;4BACX,CAAC;4BACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;4BACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;4BACzE,OAAO,CAAC,CAAC;wBACX,CAAC;qBACF;iBACF;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Vault keys + env overrides + token validators shared by the channel, its
+ * subcommands, and the interactive setup wizard. Kept in their own module so the
+ * wizard / pair-flow helpers can import them without pulling in the plugin's
+ * full index.
+ */
+import { z } from '@moxxy/sdk';
+/** Vault key for the Slack bot OAuth token (`xoxb-…`). */
+export declare const SLACK_BOT_TOKEN_KEY = "slack_bot_token";
+/** Vault key for the Slack app signing secret (HMAC over the raw request body). */
+export declare const SLACK_SIGNING_SECRET_KEY = "slack_signing_secret";
+/**
+ * Vault key for the authorized team/channel set (TOFU pairing). Stored as a
+ * JSON string of an authorization record so we can grow what we pin without a
+ * format change (today: `{ teamId, channelId? }`).
+ */
+export declare const SLACK_AUTHORIZED_KEY = "slack_authorized";
+/** Env override for the bot token (beats the vault, matching every other channel). */
+export declare const SLACK_BOT_TOKEN_ENV = "MOXXY_SLACK_BOT_TOKEN";
+/** Env override for the signing secret. */
+export declare const SLACK_SIGNING_SECRET_ENV = "MOXXY_SLACK_SIGNING_SECRET";
+/** A Slack bot token always starts with `xoxb-`. */
+export declare const SLACK_BOT_TOKEN_RE: RegExp;
+/** zod validator for a bot token (shape only — connectivity is tested via `auth.test`). */
+export declare const slackBotTokenSchema: z.ZodString;
+/** zod validator for a signing secret (hex-ish; Slack uses a 32-byte hex secret). */
+export declare const slackSigningSecretSchema: z.ZodString;
+/**
+ * Resolve the bot token: env override first, then the vault (the shared
+ * env→vault resolution in @moxxy/channel-kit). Returns null when neither is
+ * set. Trimmed; never returns an empty string.
+ */
+export declare function resolveBotToken(vault: {
+    get(name: string): Promise<string | null>;
+}): Promise<string | null>;
+/** Resolve the signing secret: env override first, then the vault. */
+export declare function resolveSigningSecret(vault: {
+    get(name: string): Promise<string | null>;
+}): Promise<string | null>;
+/** What we persist under {@link SLACK_AUTHORIZED_KEY}. */
+export interface SlackAuthorization {
+    readonly teamId: string;
+    /** Optionally narrow authorization to a single channel. */
+    readonly channelId?: string;
+}
+/** Parse the stored authorization record. Returns null for missing/corrupt. */
+export declare function parseAuthorization(raw: string | null | undefined): SlackAuthorization | null;
+/** Does an inbound event from `(teamId, channelId)` match the stored authorization? */
+export declare function authorizationMatches(auth: SlackAuthorization | null, teamId: string | undefined, channelId: string | undefined): boolean;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAG/B,0DAA0D;AAC1D,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AACrD,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,sFAAsF;AACtF,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAC3D,2CAA2C;AAC3C,eAAO,MAAM,wBAAwB,+BAA+B,CAAC;AAErE,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,QAA6B,CAAC;AAE7D,2FAA2F;AAC3F,eAAO,MAAM,mBAAmB,aAGwC,CAAC;AAEzE,qFAAqF;AACrF,eAAO,MAAM,wBAAwB,aAIO,CAAC;AAE7C;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEzB;AAED,sEAAsE;AACtE,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAKzB;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,kBAAkB,GAAG,IAAI,CAa5F;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,kBAAkB,GAAG,IAAI,EAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAKT"}