@open-everywhere/provider-slack 0.1.3 → 0.1.4

package/dist/agent/setup/slack-api-setup.js

@@ -0,0 +1,138 @@
+// THE TWO SLACK CALLS A `/setup` RUN MAKES (OPE-2231) — create the app, then install it.
+//
+// Both go through `channels/slack-web-api.ts`, the ONE seam a Slack Web API call leaves this host
+// through (OPE-1211), so both carry the 429/`Retry-After` backoff and neither becomes a new
+// uncovered bypass in `slack-web-api-seam-test.ts`'s inventory.
+//
+// 1. `apps.manifest.create` — docs.slack.dev/reference/methods/apps.manifest.create. Authenticated by
+//    an APP CONFIGURATION TOKEN the operator pastes (api.slack.com/apps → "Your App Configuration
+//    Tokens", scope `app_configurations:write`, ~12 h life). It takes the manifest this bundle ships
+//    (`agent/app-manifest.ts`) with this deployment's host substituted, and returns the app's
+//    `app_id`, `client_id`, `client_secret`, `signing_secret` and `oauth_authorize_url`.
+//
+// 2. `oauth.v2.access` — docs.slack.dev/reference/methods/oauth.v2.access. Exchanges the `code` the
+//    install redirect brought back for the workspace bot `access_token`, and reports `team.id` and
+//    `authed_user.id`. Authenticated by the app's CLIENT CREDENTIALS IN THE BODY, so it is the one
+//    call in this tree that sends no `Authorization` header (`unauthenticated: true` — see the seam).
+//
+// 🔴 NOTHING HERE LOGS, AUDITS, RETURNS IN AN ERROR, OR OTHERWISE RENDERS A VALUE IT RECEIVED. Each
+// function returns a typed record the caller stores straight into the vault, and each failure is a
+// {@link SlackSetupApiError} carrying Slack's own `error` CODE and nothing else. Slack's error codes
+// are a closed vocabulary (`invalid_auth`, `token_expired`, `invalid_manifest`, …) and are the one
+// thing an operator needs to act; the response body that carried them is dropped unread, because on
+// the manifest call that body is the credential bundle.
+import { callSlackWebApi } from "../channels/slack-web-api.js";
+/**
+ * A Slack call that failed. `code` is Slack's own `error` string when it gave one, else a fixed
+ * local classification — never a message assembled from a response. The page renders this; see the
+ * header on why it carries no payload.
+ */
+export class SlackSetupApiError extends Error {
+    code;
+    constructor(operation, code) {
+        super(`Slack refused ${operation}: ${code}`);
+        this.name = "SlackSetupApiError";
+        this.code = code;
+    }
+}
+/** Read one non-empty string field, or throw a shaped error naming the FIELD, never the payload. */
+function requireString(operation, res, key) {
+    const v = res[key];
+    if (typeof v !== "string" || v.length === 0)
+        throw new SlackSetupApiError(operation, `missing_field:${key}`);
+    return v;
+}
+/** Slack's `error` code off an `ok:false` envelope, or a fixed stand-in when it named none. */
+function slackErrorCode(res) {
+    const e = res.error;
+    return typeof e === "string" && e.length > 0 ? e : "unknown_error";
+}
+/**
+ * Create the Slack app from this bundle's shipped manifest.
+ *
+ * `configToken` is the pasted app configuration token and is used ONCE, here, as the bearer. It is
+ * never stored: it expires in about 12 hours and `/setup` has no later use for it, so holding it
+ * would be a credential kept past its purpose.
+ *
+ * `manifest` is the already-substituted manifest JSON string (the caller resolves the host, so this
+ * function has no opinion about where the deployment lives).
+ */
+export async function createSlackApp(input, deps = {}) {
+    const call = deps.call ?? callSlackWebApi;
+    let res;
+    try {
+        res = (await call({
+            botToken: input.configToken,
+            operation: "apps.manifest.create",
+            body: { manifest: input.manifest },
+        }));
+    }
+    catch {
+        // A throw from the seam is a transport failure or a non-2xx — the caught value can carry Slack's
+        // response body, so it is dropped rather than inspected. See the header.
+        throw new SlackSetupApiError("apps.manifest.create", "request_failed");
+    }
+    if (res.ok !== true)
+        throw new SlackSetupApiError("apps.manifest.create", slackErrorCode(res));
+    const credentials = res.credentials;
+    if (typeof credentials !== "object" || credentials === null) {
+        throw new SlackSetupApiError("apps.manifest.create", "missing_field:credentials");
+    }
+    const c = credentials;
+    return {
+        appId: requireString("apps.manifest.create", res, "app_id"),
+        clientId: requireString("apps.manifest.create", c, "client_id"),
+        clientSecret: requireString("apps.manifest.create", c, "client_secret"),
+        signingSecret: requireString("apps.manifest.create", c, "signing_secret"),
+        oauthAuthorizeUrl: requireString("apps.manifest.create", res, "oauth_authorize_url"),
+    };
+}
+/**
+ * Exchange the install `code` for the workspace bot token.
+ *
+ * NO `Authorization` HEADER — Slack authenticates this one by `client_id` + `client_secret` in the
+ * body (see the module header and the seam's own note). The `redirect_uri` is sent back because Slack
+ * requires it to MATCH the one the authorize step used; omitting it when one was used is an
+ * `invalid_grant`-class refusal rather than a laxer check.
+ */
+export async function exchangeSlackOauthCode(input, deps = {}) {
+    const call = deps.call ?? callSlackWebApi;
+    let res;
+    try {
+        res = (await call({
+            unauthenticated: true,
+            operation: "oauth.v2.access",
+            body: {
+                client_id: input.clientId,
+                client_secret: input.clientSecret,
+                code: input.code,
+                redirect_uri: input.redirectUri,
+            },
+        }));
+    }
+    catch {
+        throw new SlackSetupApiError("oauth.v2.access", "request_failed");
+    }
+    if (res.ok !== true)
+        throw new SlackSetupApiError("oauth.v2.access", slackErrorCode(res));
+    const team = res.team;
+    const authedUser = res.authed_user;
+    if (typeof team !== "object" || team === null)
+        throw new SlackSetupApiError("oauth.v2.access", "missing_field:team");
+    if (typeof authedUser !== "object" || authedUser === null) {
+        throw new SlackSetupApiError("oauth.v2.access", "missing_field:authed_user");
+    }
+    const t = team;
+    const u = authedUser;
+    const teamName = typeof t.name === "string" && t.name.length > 0 ? t.name : undefined;
+    return {
+        // `access_token` on an `oauth.v2.access` response IS the bot token for a bot-scoped install —
+        // Slack puts the USER token under `authed_user.access_token`, which this flow never asks for and
+        // never reads. Taking the wrong one here would store a token with the installer's own access.
+        botToken: requireString("oauth.v2.access", res, "access_token"),
+        teamId: requireString("oauth.v2.access", t, "id"),
+        installerUserId: requireString("oauth.v2.access", u, "id"),
+        ...(teamName ? { teamName } : {}),
+    };
+}
+//# sourceMappingURL=slack-api-setup.js.map

package/dist/agent/setup/slack-api-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-api-setup.js","sourceRoot":"","sources":["../../../agent/setup/slack-api-setup.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,EAAE;AACF,kGAAkG;AAClG,4FAA4F;AAC5F,gEAAgE;AAChE,EAAE;AACF,sGAAsG;AACtG,kGAAkG;AAClG,qGAAqG;AACrG,8FAA8F;AAC9F,yFAAyF;AACzF,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,mGAAmG;AACnG,sGAAsG;AACtG,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,qGAAqG;AACrG,mGAAmG;AACnG,oGAAoG;AACpG,wDAAwD;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAS;IACtB,YAAY,SAAiB,EAAE,IAAY;QACzC,KAAK,CAAC,iBAAiB,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAmBD,oGAAoG;AACpG,SAAS,aAAa,CAAC,SAAiB,EAAE,GAA4B,EAAE,GAAW;IACjF,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,iBAAiB,GAAG,EAAE,CAAC,CAAC;IAC7G,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+FAA+F;AAC/F,SAAS,cAAc,CAAC,GAA4B;IAClD,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkE,EAClE,IAAI,GAAsB,EAAE;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;IAC1C,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC;YAChB,QAAQ,EAAE,KAAK,CAAC,WAAW;YAC3B,SAAS,EAAE,sBAAsB;YACjC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;SACnC,CAAC,CAA4B,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,iGAAiG;QACjG,yEAAyE;QACzE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/F,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACpC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,kBAAkB,CAAC,sBAAsB,EAAE,2BAA2B,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,CAAC,GAAG,WAAsC,CAAC;IACjD,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,sBAAsB,EAAE,GAAG,EAAE,QAAQ,CAAC;QAC3D,QAAQ,EAAE,aAAa,CAAC,sBAAsB,EAAE,CAAC,EAAE,WAAW,CAAC;QAC/D,YAAY,EAAE,aAAa,CAAC,sBAAsB,EAAE,CAAC,EAAE,eAAe,CAAC;QACvE,aAAa,EAAE,aAAa,CAAC,sBAAsB,EAAE,CAAC,EAAE,gBAAgB,CAAC;QACzE,iBAAiB,EAAE,aAAa,CAAC,sBAAsB,EAAE,GAAG,EAAE,qBAAqB,CAAC;KACrF,CAAC;AACJ,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAKC,EACD,IAAI,GAAsB,EAAE;IAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC;IAC1C,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC;YAChB,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,iBAAiB;YAC5B,IAAI,EAAE;gBACJ,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACzB,aAAa,EAAE,KAAK,CAAC,YAAY;gBACjC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,YAAY,EAAE,KAAK,CAAC,WAAW;aAChC;SACF,CAAC,CAA4B,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IACrH,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,CAAC,GAAG,UAAqC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,OAAO;QACL,8FAA8F;QAC9F,iGAAiG;QACjG,8FAA8F;QAC9F,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,GAAG,EAAE,cAAc,CAAC;QAC/D,MAAM,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,CAAC;QACjD,eAAe,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,EAAE,IAAI,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/agent/status.d.ts

@@ -0,0 +1,4 @@
+import { type SurfaceStatus } from "@open-everywhere/core/agent/adapter-api.js";
+/** The bundle's answer for `surfaces.slack`. */
+export declare function slackSurfaceStatus(env?: NodeJS.ProcessEnv): Promise<Partial<SurfaceStatus>>;
+//# sourceMappingURL=status.d.ts.map

package/dist/agent/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../agent/status.ts"],"names":[],"mappings":"AAcA,OAAO,EAA+D,KAAK,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAuD7I,gDAAgD;AAChD,wBAAsB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAU9G"}

package/dist/agent/status.js

@@ -0,0 +1,79 @@
+// The Slack arm of the deployment-status surface (OPE-2230) — what `GET /eve/v1/oe/status` reports
+// under `surfaces.slack`.
+//
+// It lives in the BUNDLE, not in core, for the same reason the telemetry credential probe does:
+// `SLACK_BOT_TOKEN` and `SLACK_SIGNING_SECRET` are this vendor's fingerprints, and core carries
+// none of them (`scripts/boundary-test.ts` rule 6).
+//
+// It lives in `status.ts` beside `register.ts` rather than in `ops.ts` because it READS THE
+// OPERATIONAL STORE. `ops.ts` imports core through the light door so the standalone ops MCP server
+// can register it without booting an agent; reaching the store from there would undo that.
+//
+// 🔴 EVERY ANSWER IS A VERDICT, AND EVERY VERDICT IS ONE THIS BUNDLE CAN DEFEND. The route is
+// public, so nothing here returns a token, a team id, a channel key, a count, or a timestamp.
+import { deploymentOrg, getOperationalStore, unifiedDomainSessionKey } from "@open-everywhere/core/agent/adapter-api.js";
+const set = (v) => v !== undefined && v.trim() !== "";
+/**
+ * The two `channel_session` key shapes a Slack turn can land under, and why BOTH are needed.
+ *
+ * A session row is keyed by the supervisor grain's `registryKey`
+ * (`packages/core/agent/channels/unified-supervisor.ts` `supervisorGrainFor`), and that key is NOT
+ * the surface key whenever window topology resolves a domain for the channel:
+ *
+ *   • topology off, or no domain  → the fully-qualified surface key, `slack/<team>/<channel>`;
+ *   • topology on, `solo` mode    → `oe-domain::slack/<team>/<channel>` (the windowId IS the
+ *                                   surface key, so the prefix still carries the platform);
+ *   • topology on, `unified` mode → `oe-domain::<domain name>`;
+ *   • a NAMED window group        → `oe-domain::<group name>`;
+ *   • a DM seat                   → the DM pseudo-domain's key.
+ *
+ * 🔴 THE LAST THREE CARRY NO PLATFORM MARKER AT ALL, so no prefix can find them. This deployment's
+ * shipped settings turn topology on, so the first shape alone matched nothing — the field could
+ * never read `yes`, which is worse than not having it. Matching both of the first two covers the
+ * default solo case; the rest stay `unknown`, and `docs/deploy/contract.md` says so.
+ */
+// Built with core's OWN key builder, never a copied prefix literal: a change to the key shape then
+// reaches this reporter instead of silently making it match nothing again.
+const SLACK_SESSION_PREFIXES = ["slack/", unifiedDomainSessionKey("slack/")];
+/**
+ * Has this deployment ever VERIFIED a signed Slack event?
+ *
+ * The evidence is a Slack channel session in the operational store. A session row is written by a
+ * turn, and a turn is reached only AFTER `/eve/v1/slack`'s `v0=` HMAC gate accepts the delivery, so
+ * a row is proof that a signed Slack event was verified by this deployment. It is NOT proof about
+ * the CURRENT signing secret: a rotation, or a restored database, leaves the row behind.
+ *
+ * 🔴 ONE-DIRECTIONAL ON PURPOSE. No row means NO EVIDENCE, not "no": a workspace that installed the
+ * app and has not yet addressed it writes nothing, a deployment whose store was just migrated
+ * writes nothing, and the three key shapes above carry no platform marker to find. "unknown" is the
+ * honest answer there, and reporting "no" would train the reader to ignore the field on exactly the
+ * deployments it is meant to help.
+ */
+async function eventsVerified() {
+    try {
+        const store = getOperationalStore();
+        const org = deploymentOrg();
+        for (const prefix of SLACK_SESSION_PREFIXES) {
+            const rows = await store.listChannelSessions(org, prefix);
+            if (rows.length > 0)
+                return "yes";
+        }
+        return "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+/** The bundle's answer for `surfaces.slack`. */
+export async function slackSurfaceStatus(env = process.env) {
+    const token = set(env.SLACK_BOT_TOKEN);
+    return {
+        credentials: token && set(env.SLACK_SIGNING_SECRET) ? "yes" : "no",
+        // Slack issues a bot token only when the app is installed to a workspace, so holding one is
+        // evidence of an install. It is NOT evidence that the install is still live — a revoked app
+        // leaves the stale token in place — and the detail in the contract page says so.
+        installed: token ? "yes" : "no",
+        eventsVerified: await eventsVerified(),
+    };
+}
+//# sourceMappingURL=status.js.map

package/dist/agent/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../agent/status.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,0BAA0B;AAC1B,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,oDAAoD;AACpD,EAAE;AACF,4FAA4F;AAC5F,mGAAmG;AACnG,2FAA2F;AAC3F,EAAE;AACF,8FAA8F;AAC9F,8FAA8F;AAE9F,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,uBAAuB,EAAsB,MAAM,4CAA4C,CAAC;AAE7I,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAW,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAEnF;;;;;;;;;;;;;;;;;;GAkBG;AACH,mGAAmG;AACnG,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAU,CAAC;AAEtF;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,MAAM,IAAI,sBAAsB,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACvC,OAAO;QACL,WAAW,EAAE,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAClE,4FAA4F;QAC5F,4FAA4F;QAC5F,iFAAiF;QACjF,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAC/B,cAAc,EAAE,MAAM,cAAc,EAAE;KACvC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-everywhere/provider-slack",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Open Everywhere Slack provider — Slack channel and DM surfaces, identity mapping, approval cards and slash commands.",
   "keywords": [
     "agent",
@@ -96,6 +96,10 @@
       "types": "./dist/agent/channels/slack-route-hold.d.ts",
       "default": "./dist/agent/channels/slack-route-hold.js"
     },
+    "./agent/channels/slack-setup-page.js": {
+      "types": "./dist/agent/channels/slack-setup-page.d.ts",
+      "default": "./dist/agent/channels/slack-setup-page.js"
+    },
     "./agent/channels/slack-shortcut.js": {
       "types": "./dist/agent/channels/slack-shortcut.d.ts",
       "default": "./dist/agent/channels/slack-shortcut.js"
@@ -148,6 +152,34 @@
       "types": "./dist/agent/register.d.ts",
       "default": "./dist/agent/register.js"
     },
+    "./agent/setup/claim.js": {
+      "types": "./dist/agent/setup/claim.d.ts",
+      "default": "./dist/agent/setup/claim.js"
+    },
+    "./agent/setup/credentials.js": {
+      "types": "./dist/agent/setup/credentials.d.ts",
+      "default": "./dist/agent/setup/credentials.js"
+    },
+    "./agent/setup/eve-credentials.js": {
+      "types": "./dist/agent/setup/eve-credentials.d.ts",
+      "default": "./dist/agent/setup/eve-credentials.js"
+    },
+    "./agent/setup/install-state.js": {
+      "types": "./dist/agent/setup/install-state.d.ts",
+      "default": "./dist/agent/setup/install-state.js"
+    },
+    "./agent/setup/page.js": {
+      "types": "./dist/agent/setup/page.d.ts",
+      "default": "./dist/agent/setup/page.js"
+    },
+    "./agent/setup/slack-api-setup.js": {
+      "types": "./dist/agent/setup/slack-api-setup.d.ts",
+      "default": "./dist/agent/setup/slack-api-setup.js"
+    },
+    "./agent/status.js": {
+      "types": "./dist/agent/status.d.ts",
+      "default": "./dist/agent/status.js"
+    },
     "./agent/surface-parity.js": {
       "types": "./dist/agent/surface-parity.d.ts",
       "default": "./dist/agent/surface-parity.js"
@@ -158,7 +190,7 @@
     "prepack": "npm run build",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "test": "npm run test:chain",
-    "test:chain": "npm run test:slack-e2e && npm run test:slack-context && npm run test:slack-wake-backscroll && npm run test:slack-identity && npm run test:slack-spend-gate && npm run test:slack-wake-mapping && npm run test:slack-tenant-fence && npm run test:slack-wake-drop-hold && npm run test:slack-engagement && npm run test:slack-grant-card &&npm run test:slack-supervisor-reply && npm run test:slack-replier-label && npm run test:slack-normalized-wake && npm run test:slack-wake-trust && npm run test:slack-nonmember-author && npm run test:slack-contextline-trust && npm run test:slack-dm-seat && npm run test:slack-dm-divert && npm run test:slack-shortcut && npm run test:slack-enterprise-rung && npm run test:slack-attachments && npm run test:slack-commands && npm run test:slack-reaction-ingest && npm run test:slack-chat-audit && npm run test:slack-scope-audit && npm run test:slack-app-manifest && npm run test:slack-workspace-roster && npm run test:slack-webhook-verifier && npm run test:slack-input-response && npm run test:slack-approval-card && npm run test:slack-mrkdwn && npm run test:slack-native-wake-heal && npm run test:slack-rate-limit && npm run test:slack-web-api-seam",
+    "test:chain": "npm run test:slack-e2e && npm run test:slack-context && npm run test:slack-wake-backscroll && npm run test:slack-identity && npm run test:slack-spend-gate && npm run test:slack-wake-mapping && npm run test:slack-tenant-fence && npm run test:slack-wake-drop-hold && npm run test:slack-engagement && npm run test:slack-grant-card &&npm run test:slack-supervisor-reply && npm run test:slack-replier-label && npm run test:slack-normalized-wake && npm run test:slack-wake-trust && npm run test:slack-nonmember-author && npm run test:slack-contextline-trust && npm run test:slack-dm-seat && npm run test:slack-dm-divert && npm run test:slack-shortcut && npm run test:slack-enterprise-rung && npm run test:slack-attachments && npm run test:slack-commands && npm run test:slack-reaction-ingest && npm run test:slack-chat-audit && npm run test:slack-scope-audit && npm run test:slack-app-manifest && npm run test:slack-workspace-roster && npm run test:slack-webhook-verifier && npm run test:slack-input-response && npm run test:slack-approval-card && npm run test:slack-mrkdwn && npm run test:slack-native-wake-heal && npm run test:slack-rate-limit && npm run test:slack-web-api-seam && npm run test:slack-setup",
     "test:slack-webhook-verifier": "NODE_NO_WARNINGS=1 tsx scripts/slack-webhook-verifier-test.ts",
     "test:slack-workspace-roster": "NODE_NO_WARNINGS=1 tsx scripts/slack-workspace-roster-test.ts",
     "test:slack-scope-audit": "NODE_NO_WARNINGS=1 tsx scripts/slack-scope-audit-test.ts",
@@ -192,10 +224,11 @@
     "test:slack-mrkdwn": "NODE_NO_WARNINGS=1 tsx scripts/slack-mrkdwn-test.ts",
     "test:slack-rate-limit": "NODE_NO_WARNINGS=1 tsx scripts/slack-rate-limit-test.ts",
     "test:slack-web-api-seam": "NODE_NO_WARNINGS=1 tsx scripts/slack-web-api-seam-test.ts",
+    "test:slack-setup": "NODE_NO_WARNINGS=1 tsx scripts/slack-setup-test.ts",
     "test:slack-wake-drop-hold": "NODE_NO_WARNINGS=1 tsx scripts/slack-wake-drop-hold-test.ts"
   },
   "dependencies": {
-    "@open-everywhere/core": "0.1.3",
+    "@open-everywhere/core": "0.1.4",
     "undici": "^7.28.0",
     "zod": "4.5.4"
   },