@open-everywhere/provider-slack 0.1.5 → 0.3.0

package/dist/agent/channels/slack-task-card.js

@@ -0,0 +1,156 @@
+// THE TASK CARD'S CONFIDENTIALITY SEAM (OPE-2255).
+//
+// eve 0.69 posts a live TASK CARD for every turn that starts a task: one message per turn, one row
+// per task, updated in place. OE adopts eve's own card (Tommy's principle: native first), so this
+// file draws nothing itself. Every card still comes from eve's `renderDefaultSlackTaskCard` through
+// `next`. This file only changes the VIEW that eve draws from.
+//
+// WHY A SEAM. An agent task's row title is the worker BRIEF (`<agent>: <brief>`, or the brief alone
+// for a call to the agent's own copy). The model writes that brief from the whole session context.
+// On a unified domain seat, that context can hold another conversation, for example a DM. eve gates
+// only a failure line and a blocker's label on the room's audience, and eve's `private` audience
+// covers private channels and group DMs too, which have several readers. The title, the
+// notification `text` (`Working on 1 task: <the whole brief>`, not cut) and a completed row's
+// `Done in Xs: <first sentence of the worker's reply>` reach a public channel unchanged
+// (OPE-2246 Q7, measured on a real `actions.requested`).
+//
+// THE RULE. OE cannot trace the provenance of one model-written string. So the rule is on the ROOM,
+// and it fails closed:
+//   * A task row shows its own title only in a 1:1 DM whose only human is the turn's own caller.
+//   * In every other room (a public channel, a private channel, a group DM, an unknown room) the row
+//     shows a generic label made from the task's NAME only. The name is code, not model text. A
+//     blocked row there keeps only the KIND of its blocker (`Waiting for a response`), never the
+//     request's prompt or the connection's name.
+//   * A completed row NEVER shows the worker's result excerpt, in any room. That excerpt bypasses
+//     `approvals/review-surface.ts`, which frames a delegated verdict as a model opinion. eve keeps
+//     the `Done in Xs` line, so the card still says the task finished.
+// eve builds the notification `text` from the row titles, so the same redaction covers it.
+//
+// WHY A SESSION STATE SLOT. The `taskCard` hook is pure and synchronous, and its view carries no room.
+// The view's `turnId` is no key either: eve numbers turns per session (`turn_<sequence>`), so two
+// sessions in one process share turn ids. eve dispatches each session event inside that session's
+// eve context, and `withTaskCards` writes the card inside the same dispatch. So each tracked event
+// handler below records the room in a `defineState` slot, which is keyed to the session and
+// durable, and the `taskCard` link reads back the LATEST room this session recorded. Most writes
+// follow the handler of their own event. One does not: on `task.started`, eve's `closeSettledCard`
+// writes the closing card BEFORE the handler runs, so that write reads the room an earlier event of
+// the session recorded. That is safe because a session's channel and its DM partner do not change.
+// No slot, or no eve context, reads as a shared room: the card then shows the generic label. It
+// never shows the brief by accident.
+import { defineState } from "eve/context";
+/** The label for a call to the agent's own copy, whose eve name (`agent`) says nothing to a reader. */
+export const GENERIC_SELF_TASK_LABEL = "Delegated task";
+/** eve's tool name for a call to the agent's own copy (`tools/framework/agent-contract.js`). */
+const AGENT_SELF_TOOL_NAME = "agent";
+/**
+ * Decide the room. A 1:1 DM needs all three facts: the caller's auth says `channel_type: "im"`, the
+ * auth names the SAME channel the card posts to, and eve does not call the room public. Anything
+ * else, a missing fact included, is a shared room. Pure and total.
+ */
+export function taskCardRoomOf(facts) {
+    const channelId = facts?.state?.channelId;
+    const attrs = facts?.attributes;
+    if (typeof channelId !== "string" || channelId === "" || attrs === null || attrs === undefined)
+        return "shared";
+    if (attrs.channel_type !== "im")
+        return "shared";
+    if (attrs.channel_id !== channelId)
+        return "shared";
+    if (facts?.state?.audience === "public")
+        return "shared";
+    return "direct-message";
+}
+/** A task's generic label: its name in words, never its brief or its tool's start label. */
+export function genericTaskLabel(task) {
+    if (task.kind === "agent" && task.name === AGENT_SELF_TOOL_NAME)
+        return GENERIC_SELF_TASK_LABEL;
+    // eve's own `displayTitle` shape: the last `__` segment, words split on case, `_` and `-`.
+    const segment = task.name.split("__").findLast((s) => s !== "") ?? task.name;
+    const words = segment
+        .replace(/([a-z0-9])([A-Z])/gu, "$1 $2")
+        .split(/[\s_-]+/u)
+        .filter((w) => w !== "")
+        .map((w) => (w.length > 1 && w === w.toUpperCase() ? w : w.toLowerCase()));
+    if (words.length === 0)
+        return GENERIC_SELF_TASK_LABEL;
+    const text = words.join(" ");
+    return text.charAt(0).toUpperCase() + text.slice(1);
+}
+/**
+ * The view eve draws for this room. Every row loses its result excerpt. In a shared room every row
+ * also loses its title for the generic label, and a blocked row loses its blocker's label. A pure
+ * function: the input view is never changed.
+ */
+export function confidentialTaskCardView(view, room) {
+    const tasks = view.tasks.map((task) => {
+        const { summary: _summary, blockedOn, ...rest } = task;
+        if (room === "direct-message")
+            return blockedOn === undefined ? rest : { ...rest, blockedOn };
+        const redacted = { ...rest, title: genericTaskLabel(task) };
+        return blockedOn === undefined ? redacted : { ...redacted, blockedOn: { kind: blockedOn.kind } };
+    });
+    return { ...view, tasks };
+}
+const roomSlot = defineState("open-everywhere.slack-task-card-room", () => null);
+/** Record the room for this session's next card write. Outside an eve context it does nothing. */
+function recordTaskCardRoom(channel, ctx) {
+    const attributes = ctx
+        ?.session?.auth?.current?.attributes;
+    const state = channel.state;
+    const room = taskCardRoomOf({ attributes, state });
+    try {
+        roomSlot.update(() => room);
+    }
+    catch {
+        // No eve context: nothing to record. The card then reads no room and shows the generic label.
+    }
+}
+/** The room this session recorded, or `shared` when none is readable. */
+function readTaskCardRoom() {
+    try {
+        return roomSlot.get() ?? "shared";
+    }
+    catch {
+        return "shared";
+    }
+}
+/** The `taskCard` link: redact the view for the recorded room, then let eve draw its default card. */
+export function confidentialTaskCard(view, next, room = readTaskCardRoom()) {
+    return next(confidentialTaskCardView(view, room));
+}
+// The events after which eve writes a card: eve's `TRACKED_EVENTS` in
+// `public/channels/slack/task-card.js`, all eleven. `authorization.required` gets eve's private
+// delivery surface as its channel, which still carries the session's `state`.
+const RECORDING_EVENTS = [
+    "authorization.required",
+    "actions.requested",
+    "action.result",
+    "task.started",
+    "task.settled",
+    "input.requested",
+    "input.resolved",
+    "authorization.completed",
+    "turn.completed",
+    "turn.failed",
+    "turn.cancelled",
+];
+function recordingEvents() {
+    const events = {};
+    for (const name of RECORDING_EVENTS) {
+        events[name] = async (_data, channel, ctx, next) => {
+            recordTaskCardRoom(channel, ctx);
+            await next();
+        };
+    }
+    return events;
+}
+/**
+ * The renderer link. Put it FIRST in the chain, so its handlers record the room before any later
+ * link, which may not call `next`, ends the chain. Each handler records and then calls `next`, so it
+ * changes no rendering of its own.
+ */
+export const taskCardConfidentiality = {
+    events: recordingEvents(),
+    taskCard: (view, next) => confidentialTaskCard(view, next),
+};
+//# sourceMappingURL=slack-task-card.js.map

package/dist/agent/channels/slack-task-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-task-card.js","sourceRoot":"","sources":["../../../agent/channels/slack-task-card.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,oGAAoG;AACpG,+DAA+D;AAC/D,EAAE;AACF,oGAAoG;AACpG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,wFAAwF;AACxF,8FAA8F;AAC9F,wFAAwF;AACxF,yDAAyD;AACzD,EAAE;AACF,oGAAoG;AACpG,uBAAuB;AACvB,iGAAiG;AACjG,qGAAqG;AACrG,gGAAgG;AAChG,iGAAiG;AACjG,iDAAiD;AACjD,kGAAkG;AAClG,oGAAoG;AACpG,uEAAuE;AACvE,2FAA2F;AAC3F,EAAE;AACF,uGAAuG;AACvG,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,4FAA4F;AAC5F,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,mGAAmG;AACnG,gGAAgG;AAChG,qCAAqC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa1C,uGAAuG;AACvG,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD,gGAAgG;AAChG,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAUrC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAA2C;IACxE,MAAM,SAAS,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,EAAE,UAAU,CAAC;IAChC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAChH,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACpD,IAAI,KAAK,EAAE,KAAK,EAAE,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACzD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,IAAyC;IACxE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,uBAAuB,CAAC;IAChG,2FAA2F;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;IAC7E,MAAM,KAAK,GAAG,OAAO;SAClB,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC;SACvC,KAAK,CAAC,UAAU,CAAC;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAkB,EAAE,IAAkB;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAgB,EAAE;QAClD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACvD,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9F,MAAM,QAAQ,GAAiB,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;IACnG,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,QAAQ,GAAG,WAAW,CAAsB,sCAAsC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAEtG,kGAAkG;AAClG,SAAS,kBAAkB,CAAC,OAAyC,EAAE,GAAY;IACjF,MAAM,UAAU,GAAI,GAA0G;QAC5H,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAA8C,CAAC;IACrE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;IAChG,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,oBAAoB,CAClC,IAAkB,EAClB,IAAkD,EAClD,IAAI,GAAiB,gBAAgB,EAAE;IAEvC,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,sEAAsE;AACtE,gGAAgG;AAChG,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG;IACvB,wBAAwB;IACxB,mBAAmB;IACnB,eAAe;IACf,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,gBAAgB;IAChB,yBAAyB;IACzB,gBAAgB;IAChB,aAAa;IACb,gBAAgB;CACR,CAAC;AAEX,SAAS,eAAe;IACtB,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,KAAc,EAAE,OAA0B,EAAE,GAAY,EAAE,IAAyB,EAAE,EAAE;YAC3G,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACjC,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAA6B,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAkB;IACpD,MAAM,EAAE,eAAe,EAAE;IACzB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC;CAC3D,CAAC"}

package/dist/agent/channels/slack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,YAAY,EAGjB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAQL,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AA4K7B;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI5G;AA+QD;mDACmD;AACnD,KAAK,cAAc,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC;AA4OrH;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,OAAO,EACb,GAAG,GAAE,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC,cAAc,CAAuD,GAClH,OAAO,CAAC,cAAc,CAAC,CAYzB"}
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,YAAY,EAGjB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAQL,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AA8K7B;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI5G;AA+QD;mDACmD;AACnD,KAAK,cAAc,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC;AA4OrH;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,OAAO,EACb,GAAG,GAAE,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC,cAAc,CAAuD,GAClH,OAAO,CAAC,cAAc,CAAC,CAYzB"}