@open-everywhere/provider-slack 0.1.0

package/dist/agent/channels/slack-mrkdwn.js

@@ -0,0 +1,53 @@
+// slack-mrkdwn — markdown (what the model writes) → Slack's mrkdwn dialect (OPE-870).
+//
+// Slack renders mrkdwn, not GitHub markdown: `*bold*` (not `**bold**`), `_italic_`, `~strike~`,
+// `<url|text>` links, no heading syntax. Every Slack post shipped the model's raw markdown
+// verbatim until this file existed, so `**bold**` and `[text](url)` rendered as literal
+// characters — observed live 2026-08-20, #oe-soak-ops, the channel-join intro's
+// `**Track soak health**`.
+//
+// PURE — no I/O. Applied at the Slack provider's delivery seam (slack-post-arm.ts): the reply
+// tool, edit_reply, and the join intro all post through dispatchSlackReply / liveSlackPost /
+// editSlackMessage, so converting there covers all three without touching core or any other
+// provider (Linear/GitHub take real markdown; Notion has its own block model).
+//
+// Code fences and inline code are protected FIRST and restored LAST — their contents must never
+// change, even when they look like markdown. Text that is already valid Slack mrkdwn (a single
+// `*bold*`, an existing `_italic_`, a `>` blockquote) is left untouched: Slack has no `**`/`__`
+// bold marker, so those are unambiguous GFM syntax safe to convert, but a single `*`/`_` is
+// ALREADY Slack's own syntax, and converting it again would corrupt it. That is also why this
+// function is idempotent — running it twice on its own output is a no-op.
+const CODE_PLACEHOLDER = "";
+/** Convert model-authored markdown to Slack mrkdwn. */
+export function markdownToSlackMrkdwn(text) {
+    if (!text)
+        return text;
+    // 1. Protect fenced code blocks, then inline code spans — restored verbatim at the end. Fences
+    //    first: an inline-code regex would otherwise match the single backticks INSIDE a fence.
+    const blocks = [];
+    const stash = (s) => {
+        const token = `${CODE_PLACEHOLDER}${blocks.length}${CODE_PLACEHOLDER}`;
+        blocks.push(s);
+        return token;
+    };
+    let out = text.replace(/```[\s\S]*?```/g, (m) => stash(m));
+    out = out.replace(/`[^`\n]+`/g, (m) => stash(m));
+    // 2. Headers → a bold line (Slack has no heading syntax).
+    out = out.replace(/^ {0,3}#{1,6}[ \t]+(.+)$/gm, (_m, body) => `*${body.trim()}*`);
+    // 3. Links: [text](url) → <url|text>.
+    out = out.replace(/\[([^\]\n]+)\]\((\S+?)\)/g, (_m, label, url) => `<${url}|${label}>`);
+    // 4. Bold: **text** / __text__ → *text* — unambiguous, Slack has no ** or __ marker so this
+    //    never fires on text that is already Slack mrkdwn.
+    out = out.replace(/\*\*([^*\n]+)\*\*/g, (_m, body) => `*${body}*`);
+    out = out.replace(/__([^_\n]+)__/g, (_m, body) => `*${body}*`);
+    // 5. Strikethrough: ~~text~~ → ~text~.
+    out = out.replace(/~~([^~\n]+)~~/g, (_m, body) => `~${body}~`);
+    // 6. Bullet lists: "- item" / "* item" → "• item". The dash/star must be followed by
+    //    whitespace to match — a line opening on **bold** or *bold* never qualifies (no space
+    //    right after the marker), so this never collides with rule 4's untouched single-star text.
+    out = out.replace(/^(\s*)[-*][ \t]+/gm, (_m, indent) => `${indent}• `);
+    // 7. Restore code spans/fences untouched — no rule above ever saw their contents.
+    out = out.replace(new RegExp(`${CODE_PLACEHOLDER}(\\d+)${CODE_PLACEHOLDER}`, "g"), (_m, i) => blocks[Number(i)] ?? "");
+    return out;
+}
+//# sourceMappingURL=slack-mrkdwn.js.map

package/dist/agent/channels/slack-mrkdwn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-mrkdwn.js","sourceRoot":"","sources":["../../../agent/channels/slack-mrkdwn.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,EAAE;AACF,gGAAgG;AAChG,2FAA2F;AAC3F,wFAAwF;AACxF,gFAAgF;AAChF,2BAA2B;AAC3B,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,4FAA4F;AAC5F,+EAA+E;AAC/E,EAAE;AACF,gGAAgG;AAChG,+FAA+F;AAC/F,gGAAgG;AAChG,4FAA4F;AAC5F,8FAA8F;AAC9F,0EAA0E;AAE1E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,+FAA+F;IAC/F,4FAA4F;IAC5F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;QAClC,MAAM,KAAK,GAAG,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjD,0DAA0D;IAC1D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,4BAA4B,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAE1F,sCAAsC;IACtC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC,EAAE,EAAE,KAAa,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC;IAExG,4FAA4F;IAC5F,uDAAuD;IACvD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAC3E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEvE,uCAAuC;IACvC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAEvE,qFAAqF;IACrF,0FAA0F;IAC1F,+FAA+F;IAC/F,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAE/E,kFAAkF;IAClF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,gBAAgB,SAAS,gBAAgB,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/H,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent/channels/slack-origin-codec.d.ts

@@ -0,0 +1,7 @@
+import type { UnifiedWakeOrigin, WakeOriginCodec } from "@open-everywhere/core/agent/adapter-api.js";
+type SlackOrigin = Extract<UnifiedWakeOrigin, {
+    platform: "slack";
+}>;
+export declare const slackWakeOriginCodec: WakeOriginCodec<SlackOrigin>;
+export {};
+//# sourceMappingURL=slack-origin-codec.d.ts.map

package/dist/agent/channels/slack-origin-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-origin-codec.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-origin-codec.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAErG,KAAK,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAMrE,eAAO,MAAM,oBAAoB,EAAE,eAAe,CAAC,WAAW,CAwC7D,CAAC"}

package/dist/agent/channels/slack-origin-codec.js

@@ -0,0 +1,55 @@
+// The Slack UnifiedWakeOrigin codec — MOVED VERBATIM out of core's
+// channels/wake-origin-codecs.ts (OPE-114 stage 4). STORED-DATA COMPATIBILITY IS THE
+// CONTRACT: a Slack origin is JSON-serialised into the durable operational store and
+// fail-closed re-validated on read, so every behaviour here is frozen by core's
+// scripts/wake-origin-fixtures-test.ts (run from the app root with this bundle's boot
+// wiring — scripts/wake-origin-fixtures-boot.ts). Validator tolerances (typeof-only
+// optional checks, extra unknown fields) are LOAD-BEARING for rows already on disk — never
+// tighten them here.
+//
+// The `UnifiedWakeOrigin` TYPE union (including its slack arm) stays in core — it is the
+// wire schema for stored rows; only the codec BEHAVIOUR lives in the bundle, registered by
+// registerSlackProvider() (../register.ts).
+/** COLON-FREE by construction (a task windowId is `[^:]+` — core channels/window-key.ts): any colon
+ *  in a raw surface id is folded to `_`, deterministically, so spawn + ingress agree on identity. */
+const noColon = (s) => s.replace(/:/g, "_");
+export const slackWakeOriginCodec = {
+    validate: (o) => typeof o.channelId === "string" &&
+        o.channelId.length > 0 &&
+        (o.threadTs === undefined || typeof o.threadTs === "string") &&
+        (o.replyAnchorTs === undefined || typeof o.replyAnchorTs === "string"),
+    threadRef: (origin) => ({ channelKey: noColon(`slack/${origin.channelId}`), threadKey: noColon(origin.threadTs ?? origin.channelId) }),
+    // threadTs present ⇔ the trigger was itself in a thread (the exact same presence threadRef keys
+    // on). Absent = a top-level trigger, which stays top-level for IDENTITY even though its reply
+    // opens a thread on it — that placement rides `replyAnchorTs`, which nothing here reads (OPE-759).
+    isThreadScoped: (origin) => typeof origin.threadTs === "string" && origin.threadTs.length > 0,
+    containerId: (origin) => origin.channelId,
+    // THE PLACEMENT CARRY (OPE-1824) — Slack is the one surface that needs it, and the line above says
+    // why: `replyAnchorTs` is placement ONLY and stays outside `threadRef`, so two top-level wakes in
+    // one channel are ONE conversation holding two different anchors, and a wake minted for a message
+    // that answers nothing (a routine fire, a webhook post-back) holds none. The reply fence admits a
+    // sibling wake on the conversation test alone; without this carry it would hand the post arm an
+    // anchorless origin and the answer would land FLAT on the channel.
+    // NARROWING-ONLY, and both guards are load-bearing. A `threadTs` target is already placed — its
+    // answer goes in that thread and must never re-anchor on a trigger message (the rule
+    // slackThreadTarget states) — and a target that already holds an anchor keeps it, because the model
+    // named THAT wake. So this fills exactly one gap: no placement at all, where the source has one.
+    // EMPTINESS IS ABSENCE ON ALL THREE READS, matching `slackThreadTarget` and `isThreadScoped`: a
+    // stored `""` is not a thread, not an anchor, and not an anchor worth carrying. No mint site writes
+    // one today, and reading it three ways in one file is how that stops being true quietly.
+    carryPlacement: (target, source) => !(target.threadTs && target.threadTs.length > 0) && !(target.replyAnchorTs && target.replyAnchorTs.length > 0) && typeof source.replyAnchorTs === "string" && source.replyAnchorTs.length > 0
+        ? { ...target, replyAnchorTs: source.replyAnchorTs }
+        : target,
+    // THE PLACEMENT AXIS ITSELF (OPE-1826) — the declaration `carryPlacement` above always implied and
+    // never stated. `replyAnchorTs` is the whole of it: `threadTs` is IDENTITY (it is what `threadRef`
+    // keys on and what `isThreadScoped` answers from), so a threaded origin's placement is already
+    // settled by the conversation test and naming it here would make two origins of one thread compare
+    // unequal on an axis that cannot differ. EMPTINESS IS ABSENCE, the third of the three reads this
+    // file takes that way.
+    placementRef: (origin) => (typeof origin.replyAnchorTs === "string" && origin.replyAnchorTs.length > 0 ? origin.replyAnchorTs : undefined),
+    // A `dmOrigin` arm lived here (OPE-306) to mint a DM delegation anchor's reply origin from the
+    // binding. OPE-368 deleted the anchor and the interface member with it — a Slack 1:1 or group DM
+    // now diverts into its own first-class window (OPE-351 stages 2 + 4), so its origin is minted and
+    // STORED at dispatch time by `scheduleDmWake` like every other wake.
+};
+//# sourceMappingURL=slack-origin-codec.js.map

package/dist/agent/channels/slack-origin-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-origin-codec.js","sourceRoot":"","sources":["../../../agent/channels/slack-origin-codec.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,qFAAqF;AACrF,qFAAqF;AACrF,gFAAgF;AAChF,sFAAsF;AACtF,oFAAoF;AACpF,2FAA2F;AAC3F,qBAAqB;AACrB,EAAE;AACF,yFAAyF;AACzF,2FAA2F;AAC3F,4CAA4C;AAM5C;qGACqG;AACrG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,oBAAoB,GAAiC;IAChE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC5D,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;IACxE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IACtI,gGAAgG;IAChG,8FAA8F;IAC9F,mGAAmG;IACnG,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;IAC7F,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS;IACzC,mGAAmG;IACnG,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG,gGAAgG;IAChG,mEAAmE;IACnE,gGAAgG;IAChG,qFAAqF;IACrF,oGAAoG;IACpG,iGAAiG;IACjG,gGAAgG;IAChG,oGAAoG;IACpG,yFAAyF;IACzF,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAC3L,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;QACpD,CAAC,CAAC,MAAM;IACZ,mGAAmG;IACnG,mGAAmG;IACnG,+FAA+F;IAC/F,mGAAmG;IACnG,iGAAiG;IACjG,uBAAuB;IACvB,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1I,+FAA+F;IAC/F,iGAAiG;IACjG,kGAAkG;IAClG,qEAAqE;CACtE,CAAC"}

package/dist/agent/channels/slack-post-arm.d.ts

@@ -0,0 +1,54 @@
+import type { PostArm, ReplierLabel, UnifiedWakeOrigin, DirectMessageAction } from "@open-everywhere/core/agent/adapter-api.js";
+type SlackOrigin = Extract<UnifiedWakeOrigin, {
+    platform: "slack";
+}>;
+/** Pure: the extra `chat.postMessage` params for a worker-turn reply. `username` is set to
+ *  "<agentName> [<taskLabel>]" only when BOTH a resolvable agent name and a replier label are
+ *  present; `{}` (no override — the bot's own default name renders, bare) for a supervisor/ambient
+ *  reply OR when the agent name can't be resolved — fail-open to today's behaviour, never blocks
+ *  the post over a cosmetic name. */
+export declare function slackReplierParams(agentName: string | undefined, replier: ReplierLabel | undefined): Record<string, string>;
+/** The minimal shape {@link postSlackMessage} needs from a `chat.postMessage` response — the same
+ *  fields `slackForm` already returns, narrowed so a test double doesn't need the real client. */
+export interface SlackPostResult {
+    readonly ok?: boolean;
+    readonly ts?: unknown;
+    readonly error?: unknown;
+}
+/** The injectable `chat.postMessage` dispatch {@link postSlackMessage} calls — defaults to the live
+ *  `slackForm` client; a test supplies a scripted one. */
+export type SlackPostFn = (body: URLSearchParams) => Promise<SlackPostResult | undefined>;
+/**
+ * POST `chat.postMessage` with the OPE-508 replier-tier fallback: `base` (channel/thread/text, no
+ * tier params) is the request that must ALWAYS have a chance to land. When `replier` resolves to
+ * non-empty params (a worker turn with a resolvable agent name), the FIRST attempt adds them; on
+ * any non-`ok` response to THAT attempt, retries ONCE with `base` alone. A response that was never
+ * tier-bearing (no replier, or an unresolvable agent name) gets no retry — a real failure there is
+ * real, not scope-shaped. `post` defaults to the live Slack client; `resolveDisplayName` defaults
+ * to the live `botDisplayName()`; a test injects scripted versions of both (the live
+ * `botDisplayName` reaches its own module-level memoized Slack call, which a `post`-only test
+ * double can't reach — see slack-replier-label-test.ts).
+ */
+export declare function postSlackMessage(base: URLSearchParams, replier: ReplierLabel | undefined, errPrefix: string, post?: SlackPostFn, resolveDisplayName?: () => Promise<string | undefined>): Promise<string>;
+/**
+ * The `thread_ts` a unified reply posts under, or undefined for a top-level post. PURE, and the ONE
+ * statement of Slack's reply placement:
+ *   • `threadTs` — the trigger was already in a thread, so the answer goes in that thread.
+ *   • `replyAnchorTs` — the trigger was a top-level channel message, so the answer opens a thread on
+ *     it (OPE-759; slack-events.ts mints the anchor for an addressed mention AND an ambient wake).
+ *   • neither — a post with no triggering message (a routine fire, a webhook post-back). It lands
+ *     top-level, which is the right placement for a message that answers nothing.
+ * Exported so the placement is pinned by a test rather than by reading one `??` inside an
+ * un-injectable network call (scripts/slack-replier-label-test.ts).
+ */
+export declare function slackThreadTarget(origin: Pick<SlackOrigin, "threadTs" | "replyAnchorTs">): string | undefined;
+/**
+ * PURE: the exact `chat.postMessage` form a unified card post sends. Split out from the dispatch so
+ * the BLOCK PAYLOAD itself is pinned by a contract test with no Slack token and no transport — the
+ * shape is the contract, and a shape Slack rejects costs the room the whole message, not just the
+ * buttons.
+ */
+export declare function slackUnifiedActionForm(origin: Pick<SlackOrigin, "channelId" | "threadTs" | "replyAnchorTs">, text: string, actions: readonly DirectMessageAction[]): URLSearchParams;
+export declare const slackPostArm: PostArm;
+export {};
+//# sourceMappingURL=slack-post-arm.d.ts.map

package/dist/agent/channels/slack-post-arm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-post-arm.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-post-arm.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,OAAO,EAGP,YAAY,EAEZ,iBAAiB,EAIjB,mBAAmB,EACpB,MAAM,4CAA4C,CAAC;AAGpD,KAAK,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAyBrE;;;;qCAIqC;AACrC,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG3H;AAED;kGACkG;AAClG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;0DAC0D;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;AAI1F;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,WAAsB,EAC5B,kBAAkB,GAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAkB,GACrE,OAAO,CAAC,MAAM,CAAC,CAuBjB;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,eAAe,CAAC,GAAG,MAAM,GAAG,SAAS,CAG7G;AAuBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,mBAAmB,EAAE,GAAG,eAAe,CAapL;AA6FD,eAAO,MAAM,YAAY,EAAE,OAwB1B,CAAC"}

package/dist/agent/channels/slack-post-arm.js

@@ -0,0 +1,268 @@
+// slack-post-arm — Slack's POST arm for the post-arms registry (OPE-114 stage 1c). Absorbs, VERBATIM,
+// Slack's arms out of the three reply/delivery spines: reply-post.ts (resolveReplyTarget's slack
+// case + dispatchReply's chat.postMessage branch), unified-reply.ts (liveSlackPost), and
+// unified-redrive.ts (the slack describe/container cases). Slack's ONE bot-token write client is
+// slackForm (slack-events.ts) — every Slack post here funnels through it.
+import { slackForm, botDisplayName } from "./slack-events.js";
+import { markdownToSlackMrkdwn } from "./slack-mrkdwn.js";
+import { markNotApplied } from "@open-everywhere/core/agent/adapter-api.js";
+// --- OPE-508: the reply TIER signal, native on Slack ------------------------------------------
+//
+// Slack is the one surface OE's send path can vary the display NAME on, per message: chat.postMessage
+// takes an optional `username` override on a bot-token post — needs the `chat:write.customize` scope
+// (see docs/deploy/surfaces/slack.md). Every other wired surface (Discord's bot-token REST message
+// create, Teams' Bot-Framework activity, Notion's/Linear's comment APIs) has no equivalent per-message
+// override in what OE's send path already uses, so they get the shared bracket-BODY fallback instead
+// (reply-post.ts / unified-reply.ts, gated on `displayNameCapable` being false/absent for them).
+//
+// 🔴 SCOPE-OPTIONAL, GRACEFUL FALLBACK — BY CONSTRUCTION, NOT BY AN ASSUMPTION ABOUT SLACK'S OWN
+// BEHAVIOUR. Whether an app WITHOUT `chat:write.customize` gets `username` silently ignored or the
+// WHOLE post refused (`missing_scope`) is a Slack-side behaviour this codebase has not measured
+// against a real unscoped app — asserting one over the other would be an unmeasured vendor claim
+// baked into an availability-critical path. {@link postSlackMessage} makes the answer not matter: a
+// username-bearing post that comes back non-`ok` is retried EXACTLY ONCE with the tier-signal params
+// stripped, so a missing scope costs only the bracket, never the reply. A genuine failure (a
+// non-scope error, or a failure on the retry too) still throws — the fallback only ever widens what
+// counts as "the reply landed", never swallows a real one.
+//
+// PURE core: {@link slackReplierParams} decides WHAT to send; {@link postSlackMessage} is the thin
+// impure shell (resolve the bot's own name, dispatch, retry-on-reject). The `post` seam is injected
+// so the retry behaviour is unit-testable against a SCRIPTED bridge, without a live Slack token.
+/** Pure: the extra `chat.postMessage` params for a worker-turn reply. `username` is set to
+ *  "<agentName> [<taskLabel>]" only when BOTH a resolvable agent name and a replier label are
+ *  present; `{}` (no override — the bot's own default name renders, bare) for a supervisor/ambient
+ *  reply OR when the agent name can't be resolved — fail-open to today's behaviour, never blocks
+ *  the post over a cosmetic name. */
+export function slackReplierParams(agentName, replier) {
+    if (!replier || !agentName || agentName.trim().length === 0)
+        return {};
+    return { username: `${agentName} [${replier.taskLabel}]` };
+}
+const livePost = (body) => slackForm("chat.postMessage", body.toString());
+/**
+ * POST `chat.postMessage` with the OPE-508 replier-tier fallback: `base` (channel/thread/text, no
+ * tier params) is the request that must ALWAYS have a chance to land. When `replier` resolves to
+ * non-empty params (a worker turn with a resolvable agent name), the FIRST attempt adds them; on
+ * any non-`ok` response to THAT attempt, retries ONCE with `base` alone. A response that was never
+ * tier-bearing (no replier, or an unresolvable agent name) gets no retry — a real failure there is
+ * real, not scope-shaped. `post` defaults to the live Slack client; `resolveDisplayName` defaults
+ * to the live `botDisplayName()`; a test injects scripted versions of both (the live
+ * `botDisplayName` reaches its own module-level memoized Slack call, which a `post`-only test
+ * double can't reach — see slack-replier-label-test.ts).
+ */
+export async function postSlackMessage(base, replier, errPrefix, post = livePost, resolveDisplayName = botDisplayName) {
+    let usedReplierParams = false;
+    let attempt = base;
+    if (replier) {
+        const name = await resolveDisplayName().catch(() => undefined);
+        const params = slackReplierParams(name, replier);
+        if (Object.keys(params).length > 0) {
+            attempt = new URLSearchParams(base);
+            for (const [k, v] of Object.entries(params))
+                attempt.set(k, v);
+            usedReplierParams = true;
+        }
+    }
+    const res = await post(attempt);
+    const ts = typeof res?.ts === "string" ? res.ts : undefined;
+    if (res?.ok === true && ts)
+        return ts;
+    if (usedReplierParams) {
+        // A rejected tier-signal param must never cost the reply itself — retry bare, exactly once.
+        const retry = await post(base);
+        const retryTs = typeof retry?.ts === "string" ? retry.ts : undefined;
+        if (retry?.ok === true && retryTs)
+            return retryTs;
+        throw classifiedPostError(retry, `${errPrefix} — ${retry?.error ?? res?.error ?? "no ts returned (check SLACK_BOT_TOKEN)"}`);
+    }
+    throw classifiedPostError(res, `${errPrefix} — ${res?.error ?? "no ts returned (check SLACK_BOT_TOKEN)"}`);
+}
+/**
+ * The failure error for a `chat.postMessage` that did not return a usable ts, CLASSIFIED (OPE-821).
+ *
+ * `ok:false` IS DEFINITIVE, AND ONLY THAT. Slack answers HTTP 200 with `ok:false` when it read the
+ * request and refused it (`channel_not_found`, `not_in_channel`, `invalid_auth`) — nothing reached
+ * the room, so the post spine may release its dedupe claim and let an identical retry through. There
+ * is no HTTP status to carry that fact, so the arm states it (channels/platform-failure.ts).
+ *
+ * 🔴 `ok:true` WITH NO `ts` IS NOT DEFINITIVE, and the distinction is the whole point. Slack saying
+ * "ok" means the message DID post; a missing `ts` then means this host cannot name it, not that the
+ * room is empty. Marking that case would tell the spine to let a retry through and put the message
+ * in the room twice. A transport throw from `post()` never reaches here at all and stays AMBIGUOUS,
+ * which is the honest answer: a request that got no reply may still have applied.
+ */
+function classifiedPostError(res, message) {
+    const err = new Error(message);
+    return res?.ok === false ? markNotApplied(err) : err;
+}
+/** MID-TURN: post via chat.postMessage (returns `ts`), thread-anchored when the trigger was threaded. */
+async function dispatchSlackReply(target, text, replier) {
+    const body = new URLSearchParams({ channel: target.channelId, text: markdownToSlackMrkdwn(text) });
+    if (target.threadTs)
+        body.set("thread_ts", target.threadTs);
+    return postSlackMessage(body, replier, "reply couldn't post to Slack");
+}
+/**
+ * The `thread_ts` a unified reply posts under, or undefined for a top-level post. PURE, and the ONE
+ * statement of Slack's reply placement:
+ *   • `threadTs` — the trigger was already in a thread, so the answer goes in that thread.
+ *   • `replyAnchorTs` — the trigger was a top-level channel message, so the answer opens a thread on
+ *     it (OPE-759; slack-events.ts mints the anchor for an addressed mention AND an ambient wake).
+ *   • neither — a post with no triggering message (a routine fire, a webhook post-back). It lands
+ *     top-level, which is the right placement for a message that answers nothing.
+ * Exported so the placement is pinned by a test rather than by reading one `??` inside an
+ * un-injectable network call (scripts/slack-replier-label-test.ts).
+ */
+export function slackThreadTarget(origin) {
+    const anchor = origin.threadTs ?? origin.replyAnchorTs;
+    return anchor && anchor.length > 0 ? anchor : undefined;
+}
+/** UNIFIED: post into the wake origin's channel/thread (planSupervisorReply's exact semantics). */
+async function liveSlackPost(origin, text, replier) {
+    const body = new URLSearchParams({ channel: origin.channelId, text: markdownToSlackMrkdwn(text) });
+    const threadTarget = slackThreadTarget(origin);
+    if (threadTarget)
+        body.set("thread_ts", threadTarget);
+    return postSlackMessage(body, replier, "unified reply couldn't post to Slack");
+}
+/**
+ * UNIFIED, WITH BUTTONS (OPE-1720) — `liveSlackPost` plus one `actions` block, so an interactive card
+ * can reach a unified origin (a DM seat, a single-window channel) instead of only a DM.
+ *
+ * IDENTICAL GEOMETRY TO THE PLAIN POST: same channel, same `thread_ts` resolution, same replier
+ * fallback through {@link postSlackMessage} — the ONLY difference is the `blocks` field, so a card
+ * lands exactly where the same reply would have. An `actions` list that renders to NOTHING (every
+ * entry over Slack's caps) posts the plain message rather than a `blocks` array with an empty row.
+ */
+async function liveSlackPostWithActions(origin, text, actions, replier) {
+    return postSlackMessage(slackUnifiedActionForm(origin, text, actions), replier, "unified reply couldn't post to Slack");
+}
+/**
+ * PURE: the exact `chat.postMessage` form a unified card post sends. Split out from the dispatch so
+ * the BLOCK PAYLOAD itself is pinned by a contract test with no Slack token and no transport — the
+ * shape is the contract, and a shape Slack rejects costs the room the whole message, not just the
+ * buttons.
+ */
+export function slackUnifiedActionForm(origin, text, actions) {
+    const rendered = markdownToSlackMrkdwn(text);
+    const body = new URLSearchParams({ channel: origin.channelId, text: rendered });
+    const threadTarget = slackThreadTarget(origin);
+    if (threadTarget)
+        body.set("thread_ts", threadTarget);
+    const actionBlock = slackDirectMessageActionBlock(actions);
+    if (actionBlock !== undefined) {
+        // The text block rides ALONGSIDE the buttons, for the reason `deliverSlackDirectMessage` states:
+        // once `blocks` is present `text` is only the notification fallback, so without the section the
+        // room would see a row of buttons over an empty message.
+        body.set("blocks", JSON.stringify([{ text: { text: rendered, type: "mrkdwn" }, type: "section" }, actionBlock]));
+    }
+    return body;
+}
+/**
+ * THE COMPONENT PLANE (OPE-1060 S3) — the `actions` a {@link DirectMessageRequest} carries, rendered
+ * as ONE Slack `actions` block of buttons. Shared since OPE-1720 with the unified post above, so a
+ * bridged approval card and a DM card cannot drift in how a button is built or capped.
+ *
+ * 🔴 THE TEXT STILL STANDS ON ITS OWN. `post-arms.ts` states the contract: an arm with no component
+ * plane delivers the text alone and never fakes the buttons, so every caller's copy already says what
+ * the answers ARE in words. These buttons are a shortcut over that copy, never a replacement for it —
+ * which is also why the `text` field below stays the full message rather than a placeholder.
+ *
+ * 🔴 THE ACTION ID IS THE WHOLE DECISION AND THE LABEL IS HOST COPY. Neither is model-authored: the
+ * caller composes both (`access/credential-grant-card.ts`), and this arm only transports them. Slack
+ * caps an `action_id` at 255 characters and a button label at 75; an id or a label past its cap makes
+ * Slack reject the WHOLE `chat.postMessage`, which would cost the person the message as well as the
+ * buttons. So an over-long action drops out and the text still goes.
+ *
+ * `intent` maps to Slack's own button styles: `reject` renders `danger`, `affirm` renders default
+ * (never `primary` — four buttons of which three are primary reads as no emphasis at all, and the
+ * grant card's three affirms are genuinely equal choices).
+ */
+function slackDirectMessageActionBlock(actions) {
+    const elements = actions
+        .filter((a) => a.id.length > 0 && a.id.length <= 255 && a.label.length > 0 && a.label.length <= 75)
+        .map((a) => ({
+        action_id: a.id,
+        text: { emoji: true, text: a.label, type: "plain_text" },
+        type: "button",
+        ...(a.intent === "reject" ? { style: "danger" } : {}),
+    }));
+    return elements.length > 0 ? { elements, type: "actions" } : undefined;
+}
+/**
+ * DM: open (or reuse) the 1:1 IM with a Slack member and post there (OPE-44's DM-delivery arm).
+ * `conversations.open` is idempotent — repeat calls return the SAME `im` channel id — so there is no
+ * "already open" branch to write. Needs the `im:write` bot scope on top of `chat:write`; without it
+ * Slack answers `missing_scope`, which this surfaces as a loud token-free throw so the governance
+ * arm refuses (and never falls back to rendering pane substance in the room).
+ *
+ * A request carrying `actions` also gets a row of buttons (OPE-1060 S3). The clicks come back on the
+ * app's interactivity URL, which the front route classifies by the action-id prefix.
+ */
+async function deliverSlackDirectMessage(input) {
+    const opened = await slackForm("conversations.open", new URLSearchParams({ users: input.principalId }).toString());
+    const channel = opened?.channel;
+    const dmChannelId = typeof channel?.id === "string" ? channel.id : undefined;
+    if (opened?.ok !== true || !dmChannelId) {
+        throw new Error(`couldn't open a Slack DM with the requester — ${opened?.error ?? "no channel returned (check SLACK_BOT_TOKEN and the im:write bot scope)"}`);
+    }
+    const rendered = markdownToSlackMrkdwn(input.text);
+    const actionBlock = input.actions === undefined ? undefined : slackDirectMessageActionBlock(input.actions);
+    const form = new URLSearchParams({ channel: dmChannelId, text: rendered });
+    if (actionBlock !== undefined) {
+        // The text block rides ALONGSIDE the buttons. `text` alone is only the notification fallback once
+        // `blocks` is present, so without this section the person's Slack client would show a row of
+        // buttons over an empty message.
+        form.set("blocks", JSON.stringify([{ text: { text: rendered, type: "mrkdwn" }, type: "section" }, actionBlock]));
+    }
+    const posted = await slackForm("chat.postMessage", form.toString());
+    const ts = typeof posted?.ts === "string" ? posted.ts : undefined;
+    if (posted?.ok !== true || !ts) {
+        throw new Error(`couldn't post the Slack DM — ${posted?.error ?? "no ts returned (check SLACK_BOT_TOKEN)"}`);
+    }
+    return { surfaceId: dmChannelId, messageId: ts };
+}
+/**
+ * EDIT (OPE-793): rewrite one of our own posted messages via `chat.update` (channel + ts + text).
+ * Slack renders an "(edited)" marker on the message, so the room sees that it changed.
+ *
+ * Ownership is NOT decided here — channels/reply-edit.ts already refused anything outside the
+ * own-post ledger before this runs. Slack's own rule (an app may only update a message its own token
+ * posted) is the backstop under that, and its refusal arrives as a token-free throw the model reads.
+ * `chat.update` needs the same `chat:write` scope the post path already has.
+ */
+async function editSlackMessage(locus, messageId, text) {
+    const body = new URLSearchParams({ channel: locus.channelId, ts: messageId, text: markdownToSlackMrkdwn(text) });
+    const res = await slackForm("chat.update", body.toString());
+    if (res?.ok !== true) {
+        // DEFINITIVE (OPE-802): `chat.update` answers HTTP 200 with `ok:false`, so Slack read the request
+        // and decided against it — the message did not change. There is no status to carry that, so the
+        // arm says it. A transport throw from `slackForm` carries neither and stays AMBIGUOUS, which is
+        // the honest answer: a request that never got a reply may still have applied.
+        throw markNotApplied(new Error(`edit_reply couldn't update the Slack message — ${res?.error ?? "chat.update returned no ok (check SLACK_BOT_TOKEN)"}`));
+    }
+}
+export const slackPostArm = {
+    platform: "slack",
+    resolveTarget: (bag) => {
+        const channelId = bag.str("channelId");
+        // Slack threads its replies; bag.threadTs is the anchor (undefined ⇒ top-level).
+        return channelId ? { platform: "slack", channelId, threadTs: bag.threadTs } : null;
+    },
+    displayNameCapable: true,
+    dispatchReply: (target, text, replier) => dispatchSlackReply(target, text, replier),
+    dispatchUnified: (origin, text, deps, replier) => deps.postSlack ? deps.postSlack(origin, text) : liveSlackPost(origin, text, replier),
+    // OPE-1720: Slack declares the unified component plane because the tap route exists on it —
+    // `slack-front.ts` classifies the `oe_input:` click and `slack-approval-card.ts` settles it. The
+    // injected `postSlack` override is honoured VERBATIM and drops the buttons: a test that scripted a
+    // text-only post must not start receiving a card it never asked for.
+    dispatchUnifiedActions: (origin, text, actions, deps, replier) => deps.postSlack ? deps.postSlack(origin, text) : liveSlackPostWithActions(origin, text, actions, replier),
+    describeRedriveTarget: (origin) => {
+        const o = origin;
+        return `slack ${o.threadTs ? `thread in ${o.channelId}` : `channel ${o.channelId}`}`;
+    },
+    redriveContainerId: (origin) => origin.channelId,
+    deliverDirectMessage: deliverSlackDirectMessage,
+    editMessage: editSlackMessage,
+};
+//# sourceMappingURL=slack-post-arm.js.map

package/dist/agent/channels/slack-post-arm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-post-arm.js","sourceRoot":"","sources":["../../../agent/channels/slack-post-arm.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,iGAAiG;AACjG,yFAAyF;AACzF,iGAAiG;AACjG,0EAA0E;AAE1E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAiB5E,iGAAiG;AACjG,EAAE;AACF,sGAAsG;AACtG,qGAAqG;AACrG,mGAAmG;AACnG,uGAAuG;AACvG,qGAAqG;AACrG,iGAAiG;AACjG,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,oGAAoG;AACpG,qGAAqG;AACrG,6FAA6F;AAC7F,oGAAoG;AACpG,2DAA2D;AAC3D,EAAE;AACF,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AAEjG;;;;qCAIqC;AACrC,MAAM,UAAU,kBAAkB,CAAC,SAA6B,EAAE,OAAiC;IACjG,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvE,OAAO,EAAE,QAAQ,EAAE,GAAG,SAAS,KAAK,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;AAC7D,CAAC;AAcD,MAAM,QAAQ,GAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEvF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAqB,EACrB,OAAiC,EACjC,SAAiB,EACjB,IAAI,GAAgB,QAAQ,EAC5B,kBAAkB,GAAsC,cAAc;IAEtE,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,kBAAkB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,iBAAiB,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,4FAA4F;QAC5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,KAAK,EAAE,EAAE,KAAK,IAAI,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAClD,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,SAAS,MAAO,KAAK,EAAE,KAAgB,IAAK,GAAG,EAAE,KAAgB,IAAI,wCAAwC,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,SAAS,MAAO,GAAG,EAAE,KAAgB,IAAI,wCAAwC,EAAE,CAAC,CAAC;AACzH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,mBAAmB,CAAC,GAAgC,EAAE,OAAe;IAC5E,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,GAAG,EAAE,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,kBAAkB,CAAC,MAAmB,EAAE,IAAY,EAAE,OAAsB;IACzF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,MAAM,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAuD;IACvF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC;IACvD,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,aAAa,CAAC,MAAmB,EAAE,IAAY,EAAE,OAAsB;IACpF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACtD,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,sCAAsC,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,wBAAwB,CAAC,MAAmB,EAAE,IAAY,EAAE,OAAuC,EAAE,OAAsB;IACxI,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,sCAAsC,CAAC,CAAC;AAC1H,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAqE,EAAE,IAAY,EAAE,OAAuC;IACjK,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,iGAAiG;QACjG,gGAAgG;QAChG,yDAAyD;QACzD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,6BAA6B,CAAC,OAAuC;IAC5E,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;SAClG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,SAAS,EAAE,CAAC,CAAC,EAAE;QACf,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE;QACxD,IAAI,EAAE,QAAQ;QACd,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC,CAAC;IACN,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,yBAAyB,CAAC,KAA2B;IAClE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,oBAAoB,EAAE,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnH,MAAM,OAAO,GAAG,MAAM,EAAE,OAAuC,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,OAAO,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,iDAAkD,MAAM,EAAE,KAAgB,IAAI,wEAAwE,EAAE,CACzJ,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3G,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,kGAAkG;QAClG,6FAA6F;QAC7F,iCAAiC;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,OAAO,MAAM,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,gCAAiC,MAAM,EAAE,KAAgB,IAAI,wCAAwC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,gBAAgB,CAAC,KAAgB,EAAE,SAAiB,EAAE,IAAY;IAC/E,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,IAAI,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;QACrB,kGAAkG;QAClG,gGAAgG;QAChG,gGAAgG;QAChG,8EAA8E;QAC9E,MAAM,cAAc,CAClB,IAAI,KAAK,CAAC,kDAAmD,GAAG,EAAE,KAAgB,IAAI,oDAAoD,EAAE,CAAC,CAC9I,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,QAAQ,EAAE,OAAO;IACjB,aAAa,EAAE,CAAC,GAAqB,EAAsB,EAAE;QAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvC,iFAAiF;QACjF,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IACD,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAqB,EAAE,IAAI,EAAE,OAAO,CAAC;IAClG,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAsB,EAAE,OAAO,EAAE,EAAE,CACjE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAqB,EAAE,IAAI,EAAE,OAAO,CAAC;IACpH,4FAA4F;IAC5F,iGAAiG;IACjG,mGAAmG;IACnG,qEAAqE;IACrE,sBAAsB,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAsB,EAAE,OAAO,EAAE,EAAE,CACjF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAqB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;IACxI,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE;QAChC,MAAM,CAAC,GAAG,MAAqB,CAAC;QAChC,OAAO,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAE,MAAsB,CAAC,SAAS;IACjE,oBAAoB,EAAE,yBAAyB;IAC/C,WAAW,EAAE,gBAAgB;CAC9B,CAAC"}

package/dist/agent/channels/slack-read.d.ts

@@ -0,0 +1,84 @@
+import { ChannelScopeError, type BindableContext, type ReadScopeAuditDeps, type RenderedLine, type WakeReadAddress } from "@open-everywhere/core/agent/adapter-api.js";
+import { type SlackMemberProbe } from "./slack-events.js";
+export { ChannelScopeError };
+/**
+ * The Slack channel ids this session may read: every Slack channel in its explicit domain,
+ * PLUS its own current channel (always readable — it's where the agent was engaged). A DM,
+ * an unassigned channel, or a criteria pseudo-domain (org/public/dm — no channel list)
+ * yields just the current channel. Empty only when the surface isn't a Slack channel.
+ */
+export declare function allowedChannelIds(ctx: BindableContext): {
+    ids: Set<string>;
+    domain?: string;
+};
+/**
+ * Assert a requested channel id is readable by this session — else AUDIT the refusal and throw
+ * (fail closed). The error names the domain so the model gets an actionable message, not a bare
+ * denial. The decision is unchanged from the silent version; only the row is new
+ * (core channels/read-scope-audit.ts).
+ */
+export declare function assertChannelAllowed(ctx: BindableContext, channelId: string, deps?: ReadScopeAuditDeps): Promise<void>;
+interface SlackReadResponse {
+    readonly ok: boolean;
+    readonly error?: string;
+    readonly [key: string]: unknown;
+}
+/**
+ * Low-level POST to a (read-only) Slack Web API method with the bot token, via OE's
+ * `callSlackWebApi` (form-encoded — Slack's JSON support is partial: `conversations.replies`/
+ * `history` want form). Throws on a missing token or a non-ok Slack response so the tool
+ * surfaces a real error. The explicit env pre-check keeps the actionable "not set" message
+ * (the seam itself throws a terser "SLACK_BOT_TOKEN is required.").
+ */
+export declare function callSlackRead(operation: string, params: Record<string, string | number | boolean>): Promise<SlackReadResponse>;
+/** One Slack message rendered to a compact, model-friendly line. */
+export interface RenderedMessage {
+    readonly author: string;
+    readonly ts: string;
+    readonly text: string;
+    /** The author's Slack USER id, for the OPE-474 non-member probe. Absent on a machine-authored or
+     *  unattributable line. It never reaches the model — the read verbs project author/ts/text only. */
+    readonly authorId?: string;
+    /** A machine author (`bot_id` present). Excluded from the probe: a bot is below a member but is
+     *  not a person outside the org — the same exclusion access/taint-signal.ts makes for `relay`. */
+    readonly bot?: boolean;
+}
+/**
+ * Normalize a raw Slack messages array (history/replies) to rendered lines, oldest-first.
+ *
+ * `author` IS UNCHANGED and stays the display string the model reads (`user`, else `bot_id`, else
+ * `(unknown)`) — every render golden depends on it. OPE-474 adds the two GRADING fields beside it
+ * rather than reinterpreting it: `author` is chosen for legibility and cannot be parsed back into an
+ * identity, which is exactly why the read leg had nothing to probe before.
+ *
+ * `bot_id` WINS over `user` for the machine classification, even on the messages that carry both (an
+ * app posting as a bot user). That direction is fail-OPEN — a machine is dropped from the probe and
+ * marks nothing — which is the posture the whole author leg takes.
+ */
+export declare function renderMessages(raw: unknown, opts?: {
+    oldestFirst?: boolean;
+}): RenderedMessage[];
+/** The Slack read transport — injectable for offline tests (defaults to the live callSlackRead). */
+export type SlackReadCall = typeof callSlackRead;
+/** Slack read via OE's callSlackWebApi — domain-allowlist-gated, rendered oldest-first. */
+export declare const slackReadAdapter: {
+    platform: "slack";
+    /**
+     * OPE-929 — Slack's own spelling of "which room and which thread is this turn in".
+     *
+     * The CONTAINER is the channel the post-back target names. The THREAD ROOT is `threadTs`, which
+     * eve's Slack adapter falls back to the triggering message's own ts — so a bare channel mention
+     * carries one too, and reading "this thread" on such a turn reads the one-message thread the
+     * mention started, which is what a person means by it.
+     */
+    wakeAddress(ctx: BindableContext): WakeReadAddress | undefined;
+    readChannel(ctx: BindableContext, channel: string, limit?: number, call?: SlackReadCall): Promise<readonly RenderedLine[]>;
+    readThread(ctx: BindableContext, channel: string, threadTs: string, limit?: number, call?: SlackReadCall): Promise<readonly RenderedLine[]>;
+    /** OPE-474 / OPE-534. Both legs run: Slack's own `users.info` refutation, and the operator's
+     *  author-trust register (which most Slack deployments leave unarmed, so it costs nothing there).
+     *  It answers with the refuted AUTHOR IDS, because core reads the one answer twice — the turn mark
+     *  and the `withhold` body replacement. `probe` is injected ONLY so a test can drive the grading
+     *  without a live Slack — every live call defaults. */
+    refutedAuthorIds(ctx: BindableContext, lines: readonly RenderedLine[], probe?: SlackMemberProbe): Promise<readonly string[]>;
+};
+//# sourceMappingURL=slack-read.d.ts.map

package/dist/agent/channels/slack-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-read.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-read.ts"],"names":[],"mappings":"AAeA,OAAO,EAOL,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,eAAe,EAErB,MAAM,4CAA4C,CAAC;AAIpD,OAAO,EAAuB,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAM/E,OAAO,EAAE,iBAAiB,EAAE,CAAC;AAW7B;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG;IAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAa7F;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAc5H;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAcpI;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;wGACoG;IACpG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;sGACkG;IAClG,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,eAAe,EAAE,CAmBpG;AAUD,oGAAoG;AACpG,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC;AA2BjD,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB;IAC3B,QAAQ,EAAE,OAAO;IACjB;;;;;;;OAOG;IACH,WAAW,MAAM,eAAe,GAAG,eAAe,GAAG,SAAS;IAMxD,WAAW,MAAM,eAAe,WAAW,MAAM,UAAU,MAAM,SAAQ,aAAa,GAAmB,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAKzI,UAAU,MAAM,eAAe,WAAW,MAAM,YAAY,MAAM,UAAU,MAAM,SAAQ,aAAa,GAAmB,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAKhK;;;;2DAIuD;IACjD,gBAAgB,MAAM,eAAe,SAAS,SAAS,YAAY,EAAE,UAAS,gBAAgB,GAAyB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;CAWxJ,CAAC"}