@open-everywhere/provider-slack 0.3.0 → 0.4.0

package/dist/agent/channels/slack-events.d.ts

@@ -598,7 +598,7 @@ export declare function auditDmBotAuthorDrop(ev: ParsedMessageEvent, dmKind: "im
  * DM leg in the pack exercised a synthetic envelope and a regression in Slack's own DM delivery to
  * us was invisible. This carve-out lets the driver in through the real front door.
  *
- * WHY IT IS NOT THE `OE_TEST_DRIVER_IDS` ALLOWLIST, which already lifts the same bot at the
+ * WHY IT IS NOT THE `wake.driverAllowlist` SETTING, which already lifts the same bot at the
  * engagement and mention doors. A DM seat holds a window token, delegation and memory, so admitting
  * a bot into a DM is a strictly larger grant than admitting one into a watched channel. Reusing the
  * channel allowlist would have widened the DM door for every deployment that already sets it, on
@@ -780,7 +780,7 @@ export interface NameDropRouteDeps {
     }) => Promise<WakeBackscrollLines | null>;
     /** The per-author membership probe the hydrated-context withhold uses (OPE-525,
      *  {@link withholdNameDropContext}). Defaults to the live {@link slackAuthorIsMember}; injectable
-     *  so the withhold is testable without Slack. Never called on the shipped `taint` grain. */
+     *  so the withhold is testable without Slack. Never called on the `taint` opt-out grain. */
     readonly authorIsMember?: SlackMemberProbe;
     /** Start the judged turn in a thread rooted at the triggering message. `context` (when present)
      *  is the backscroll — ADDITIONAL history the channel appends before the delivery turn. */
@@ -1024,7 +1024,7 @@ export declare function applySlackExternalPolicy(ev: ParsedMessageEvent, p: Part
  * other in the plane. A `bot` line carries a bot id, and a machine author is never excluded, so only
  * `senderType: "user"` lines are asked about.
  *
- * COSTS NOTHING ON THE SHIPPED GRAIN: `taint` returns the wake by reference before any probe runs.
+ * COSTS NOTHING ON THE OPT-OUT GRAIN: `taint` returns the wake by reference before any probe runs.
  * On `withhold` it costs one TTL-cached `users.info` per DISTINCT hydrated author, resolved in
  * parallel, and the render budget caps the hydration at ten lines.
  */
@@ -1332,7 +1332,7 @@ export interface SupervisorRouteDeps {
      *  {@link withholdNameDropContext}) — the same dep, spelled the same way, as the native route it
      *  replaces ({@link NameDropRouteDeps.authorIsMember}). Defaults to the live
      *  {@link slackAuthorIsMember}; injectable so the withhold is testable without Slack. Never called
-     *  on the shipped `taint` grain, and never on a wake that carries no hydrated lines. */
+     *  on the `taint` opt-out grain, and never on a wake that carries no hydrated lines. */
     readonly authorIsMember?: SlackMemberProbe;
     /**
      * Start/continue the supervisor session under its reserved token. `window` is present ONLY on
@@ -1404,7 +1404,7 @@ export interface SupervisorRouteDeps {
  * Route one unowned message to the channel supervisor: pure disqualifiers, then the
  * fail-closed internal-channel confirmation (which also surfaces the member count for the
  * envelope), then create-or-fetch the supervisor session and deliver the judged wake. The
- * caller (slack-front) only reaches here once the domain has opted into ambientSupervisor.
+ * caller (slack-front) only reaches here once the domain has ambientSupervisor on (the default).
  *
  * `opts.directMention` (SINGLE-WINDOW @mention routing — the GitHub reference's
  * `treatMentionAsDirect`/`directMention` shape): the trigger is the `message.channels` SIBLING of

package/dist/agent/channels/slack-events.js

@@ -1070,8 +1070,8 @@ export async function routeMessageEvent(ev, deps) {
         ...(ev.enterpriseId === undefined ? {} : { enterpriseId: ev.enterpriseId }),
     });
     // ── THE EXTERNAL-PARTICIPANT POLICY (OPE-507 / OPE-504) ────────────────────────────────────────
-    // Inert on the shipped grains (`taint` / `engage`), so a deployment that has not opted in is
-    // byte-identical. It sits here because this is where the author evidence first exists — see the
+    // Inert only on the `taint` / `engage` opt-out, where it is byte-identical to before it
+    // existed; the shipped grains suppress here. It sits here because this is where the author evidence first exists — see the
     // block comment on `slackExternalVerdict` for why that is lower than Discord's gate.
     {
         const verdict = await applySlackExternalPolicy(ev, p, { trust: wakeTrust, refuted: authorFacts.refuted }, "routeMessageEvent");
@@ -1450,7 +1450,7 @@ export async function auditDmBotAuthorDrop(ev, dmKind, selfBotId) {
         dmKind,
         botId: ev.botId,
         team: ev.teamId ?? null,
-        // TRUE ⇒ the `OE_TEST_DRIVER_IDS` allowlist vouches for this bot at the engagement and mention
+        // TRUE ⇒ the `wake.driverAllowlist` setting vouches for this bot at the engagement and mention
         // doors, and the DM door dropped it anyway. That is not a defect: the DM door reads its OWN,
         // narrower lever (`wake.e2eDrivers`, {@link dmDoorAdmitsDriver}), so a bot on the channel
         // allowlist has no DM standing. The row carries the distinction as data.
@@ -1471,7 +1471,7 @@ export async function auditDmBotAuthorDrop(ev, dmKind, selfBotId) {
  * DM leg in the pack exercised a synthetic envelope and a regression in Slack's own DM delivery to
  * us was invisible. This carve-out lets the driver in through the real front door.
  *
- * WHY IT IS NOT THE `OE_TEST_DRIVER_IDS` ALLOWLIST, which already lifts the same bot at the
+ * WHY IT IS NOT THE `wake.driverAllowlist` SETTING, which already lifts the same bot at the
  * engagement and mention doors. A DM seat holds a window token, delegation and memory, so admitting
  * a bot into a DM is a strictly larger grant than admitting one into a watched channel. Reusing the
  * channel allowlist would have widened the DM door for every deployment that already sets it, on
@@ -1871,7 +1871,7 @@ export async function routeNameDropEvent(ev, deps) {
         // reference-only and marks the taint join too — not just the trigger's own author. Fail-soft:
         // a regrade failure keeps the fetched (ungraded) lines, exactly like every other backscroll leg.
         // 🔴 THE REGRADE KEEPS THE LIVE PROBE, and `deps.authorIsMember` must NOT be threaded here. That
-        // dep is the WITHHOLD's probe and its contract is "never called on the shipped `taint` grain"
+        // dep is the WITHHOLD's probe and its contract is "never called on the `taint` opt-out grain"
         // (OPE-525); this regrade runs on every hydration, whatever the grain, so sharing the dep would
         // break that contract and make a grain-gated lookup look grain-blind. The two share the
         // TTL-cached probe underneath, which is where the call is actually saved.
@@ -1988,7 +1988,7 @@ export async function routeNameDropEvent(ev, deps) {
     });
     // ── THE EXTERNAL-PARTICIPANT POLICY (OPE-507 / OPE-504) ────────────────────────────────────────
     // A name-drop is AMBIENT by construction (the gate above disqualifies an @mention), so an excluded
-    // author's name-drop is owed nothing and is suppressed in silence. Inert on the shipped grains.
+    // author's name-drop is owed nothing and is suppressed in silence. Inert only on the opt-out grains.
     {
         const verdict = await applySlackExternalPolicy(ev, p, { trust: wakeTrust, refuted: authorFacts.refuted }, "routeNameDropEvent");
         if (verdict !== "proceed")
@@ -2005,7 +2005,7 @@ export async function routeNameDropEvent(ev, deps) {
     // about the people quoted in that hydration: a member name-drops the bot in a channel where a
     // refuted guest has been talking, and without this the guest's bytes reach the model verbatim.
     // `withholdNameDropContext` runs the shared transform and returns the wake BY REFERENCE on the
-    // shipped `taint` grain, so nothing moves for a deployment that has not opted in.
+    // `taint` opt-out grain, so nothing moves for a deployment that opted out.
     const rendered = renderWake(await withholdNameDropContext(slackNameDropWake(ev, name, {
         trust: wakeTrust,
         triggerAuthorName: triggerName.authorName,
@@ -2491,7 +2491,7 @@ function externalPolicyDropReason(verdict) {
  * other in the plane. A `bot` line carries a bot id, and a machine author is never excluded, so only
  * `senderType: "user"` lines are asked about.
  *
- * COSTS NOTHING ON THE SHIPPED GRAIN: `taint` returns the wake by reference before any probe runs.
+ * COSTS NOTHING ON THE OPT-OUT GRAIN: `taint` returns the wake by reference before any probe runs.
  * On `withhold` it costs one TTL-cached `users.info` per DISTINCT hydrated author, resolved in
  * parallel, and the render budget caps the hydration at ten lines.
  */
@@ -3077,8 +3077,8 @@ export function liveNameDropDeps(send) {
 }
 // --- channel-supervisor delivery (Slack Claude-Tag parity, T1.3) ---------------
 //
-// The "always-on teammate" leg. When a channel's domain opts into ambientSupervisor
-// (memory/domain.ts, fail-closed off) AND the channel is POSITIVELY confirmed internal,
+// The "always-on teammate" leg. When a channel's domain has ambientSupervisor on
+// (memory/domain.ts, default ON since OPE-2409) AND the channel is POSITIVELY confirmed internal,
 // an unowned message (top-level, or in-thread but not engaged) is delivered to a single
 // long-lived CHANNEL-SUPERVISOR session instead of the name-drop-only path. The supervisor
 // is one durable eve session per channel, addressed by a RESERVED continuation token
@@ -3148,7 +3148,7 @@ export function shouldSupervisorWake(input) {
  * Route one unowned message to the channel supervisor: pure disqualifiers, then the
  * fail-closed internal-channel confirmation (which also surfaces the member count for the
  * envelope), then create-or-fetch the supervisor session and deliver the judged wake. The
- * caller (slack-front) only reaches here once the domain has opted into ambientSupervisor.
+ * caller (slack-front) only reaches here once the domain has ambientSupervisor on (the default).
  *
  * `opts.directMention` (SINGLE-WINDOW @mention routing — the GitHub reference's
  * `treatMentionAsDirect`/`directMention` shape): the trigger is the `message.channels` SIBLING of
@@ -3280,7 +3280,7 @@ export async function routeSupervisorEvent(ev, deps, opts) {
     });
     // ── THE EXTERNAL-PARTICIPANT POLICY (OPE-507 / OPE-504) ────────────────────────────────────────
     // ABOVE THE SESSION MINT, deliberately: a suppressed wake must not rotate a generation or claim a
-    // fresh generation's first-wake backscroll. Inert on the shipped grains (`taint` / `engage`).
+    // fresh generation's first-wake backscroll. Inert only on the `taint` / `engage` opt-out.
     const externalPolicy = slackExternalPolicyForRoom(domainKeyOf(p));
     {
         const verdict = await applySlackExternalPolicy(ev, p, { trust: wakeTrust, refuted: authorFacts.refuted }, "routeSupervisorEvent");
@@ -3417,8 +3417,8 @@ export async function routeSupervisorEvent(ev, deps, opts) {
     // BEHAVIOUR 3 (OPE-507) — the ARRIVED-MARKER over the first-wake backscroll. The trigger author
     // cleared the gate above, so this wake fires; a SIBLING the probe refuted has not, and under
     // `withhold` their bytes must not enter. The transform replaces the body, the pre-edit body and the
-    // attachments, and it returns the SAME ARRAY by reference on the shipped `taint` grain, so no
-    // golden moves on a deployment that has not opted in.
+    // attachments, and it returns the SAME ARRAY by reference on the `taint` opt-out grain, so no
+    // golden moves on a deployment that opted out.
     const backscroll = priorContext.map((m) => (withholdsBody(m, externalPolicy) ? withheldWakeMessage(m) : m));
     // POSITIVELY confirmed internal → stamp the trust verdict into the wake auth, exactly like the
     // name-drop / engaged-thread paths. An UNSTAMPED wake auth downgrades the whole session to
@@ -3432,7 +3432,7 @@ export async function routeSupervisorEvent(ev, deps, opts) {
     //
     // 🔴 A WITHHELD SIBLING NEVER KEYS TAINT. `ingestedAfterWithholding` REMOVES the entries the
     // transform above stripped, because their bytes did not enter — a join over a message that did not
-    // ingest would claim an exposure that did not happen. On the shipped `taint` grain it returns the
+    // ingest would claim an exposure that did not happen. On the `taint` opt-out grain it returns the
     // SAME ARRAY by reference, so the auth bag is byte-identical.
     //
     // 🔴 THE HYDRATED NAME-DROP LINES JOIN TOO (OPE-475/OPE-525, carried onto the seat road by
@@ -3531,8 +3531,8 @@ export async function routeSupervisorEvent(ev, deps, opts) {
         // and without this the guest's bytes reach the model verbatim. It is the SAME function the
         // native route calls, over the WHOLE wake — so the envelope backscroll's own withholding (the
         // `priorContext` map above) and the hydrated lines are decided by one transform, and it returns
-        // the wake BY REFERENCE on the shipped `taint` grain, so nothing moves for a deployment that has
-        // not opted in. Run only on the name-drop tier, which is the only tier that carries the slot.
+        // the wake BY REFERENCE on the `taint` opt-out grain, so nothing moves for a deployment that
+        // opted out. Run only on the name-drop tier, which is the only tier that carries the slot.
         const wake = slackChannelWatchWake(ev, {
             mode: "supervisor",
             trust: wakeTrust,