@open-everywhere/provider-slack 0.6.0 → 0.8.0

package/dist/agent/channels/slack-attachments.d.ts

@@ -1,3 +1,4 @@
+import { type BindableContext } from "@open-everywhere/core/agent/adapter-api.js";
 /** A resolved attachment record — its `urlPrivate` came from a Slack event's `files[].url_private`
  *  (trusted provenance), never a model-supplied string. */
 export interface SlackAttachmentRecord {
@@ -48,6 +49,16 @@ export declare function persistSlackAttachment(fileId: string | undefined, rec:
  * defaults to the deployment org (single-tenant) when omitted.
  */
 export declare function resolveSlackAttachmentDurable(fileId: string, org?: string): Promise<SlackAttachmentRecord | undefined>;
+/**
+ * The size-guarded byte pull over a TRUSTED `url_private`: the bot-token, host-pinned fetch, then the Content-Length
+ * pre-check (rejects with {@link AttachmentOversizeError} phase "declared" BEFORE the body is read), then the post-read
+ * cap (phase "actual"). Two callers: the guarded resolver below, and the voice-clip loader (slack-voice-clips.ts),
+ * which reads a clip off the event that woke the agent. Both pass an event-supplied URL, never a model string.
+ */
+export declare function pullSlackAttachmentBytes(ctx: BindableContext, ref: {
+    readonly urlPrivate: string;
+    readonly id?: string;
+}, maxBytes: number): Promise<Uint8Array>;
 /**
  * Register Slack as an attachment-plane resolver (channels/attachments.ts) — the neutral seam
  * describe_image consults so its contract carries no per-platform union arm. The resolver wraps the

package/dist/agent/channels/slack-attachments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack-attachments.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-attachments.ts"],"names":[],"mappings":"AAsCA;2DAC2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;gFAC4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;wEACoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;2GACuG;IACvG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,qBAAqB,GAAG,IAAI,CASpG;AAED;;oFAEoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAExF;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAahI;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAY5H;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAoCtD;AAMD,2EAA2E;AAC3E,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD"}
+{"version":3,"file":"slack-attachments.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-attachments.ts"],"names":[],"mappings":"AA4BA,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,4CAA4C,CAAC;AAGpD;2DAC2D;AAC3D,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;gFAC4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;wEACoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;2GACuG;IACvG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,qBAAqB,GAAG,IAAI,CASpG;AAED;;oFAEoF;AACpF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAExF;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAahI;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAY5H;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAUtK;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CA0BtD;AAMD,2EAA2E;AAC3E,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD"}

package/dist/agent/channels/slack-attachments.js

@@ -109,6 +109,26 @@ export async function resolveSlackAttachmentDurable(fileId, org) {
         return undefined;
     }
 }
+/**
+ * The size-guarded byte pull over a TRUSTED `url_private`: the bot-token, host-pinned fetch, then the Content-Length
+ * pre-check (rejects with {@link AttachmentOversizeError} phase "declared" BEFORE the body is read), then the post-read
+ * cap (phase "actual"). Two callers: the guarded resolver below, and the voice-clip loader (slack-voice-clips.ts),
+ * which reads a clip off the event that woke the agent. Both pass an event-supplied URL, never a model string.
+ */
+export async function pullSlackAttachmentBytes(ctx, ref, maxBytes) {
+    const res = await fetchSlackAttachment(ctx, ref);
+    if (!res.ok)
+        throw new Error(`fetching the upload failed (HTTP ${res.status})`);
+    // Content-Length pre-check off the declared length — reject before reading the body.
+    const declared = Number.parseInt(res.headers.get("content-length") ?? "", 10);
+    if (Number.isFinite(declared) && declared > maxBytes)
+        throw new AttachmentOversizeError(declared, "declared", maxBytes);
+    const bytes = new Uint8Array(await res.arrayBuffer());
+    // Post-read cap — a chunked response can exceed the (possibly-absent) Content-Length.
+    if (bytes.byteLength > maxBytes)
+        throw new AttachmentOversizeError(bytes.byteLength, "actual", maxBytes);
+    return bytes;
+}
 /**
  * Register Slack as an attachment-plane resolver (channels/attachments.ts) — the neutral seam
  * describe_image consults so its contract carries no per-platform union arm. The resolver wraps the
@@ -146,20 +166,7 @@ export function registerSlackAttachmentResolver() {
                 ref: `slack-file:${attachmentId}`,
                 mimeType: rec.mimeType,
                 name: rec.name,
-                async pull({ maxBytes }) {
-                    const res = await fetchSlackAttachment(ctx, { urlPrivate: rec.urlPrivate, id: attachmentId });
-                    if (!res.ok)
-                        throw new Error(`fetching the upload failed (HTTP ${res.status})`);
-                    // Content-Length pre-check off the declared length — reject before reading the body.
-                    const declared = Number.parseInt(res.headers.get("content-length") ?? "", 10);
-                    if (Number.isFinite(declared) && declared > maxBytes)
-                        throw new AttachmentOversizeError(declared, "declared", maxBytes);
-                    const bytes = new Uint8Array(await res.arrayBuffer());
-                    // Post-read cap — a chunked response can exceed the (possibly-absent) Content-Length.
-                    if (bytes.byteLength > maxBytes)
-                        throw new AttachmentOversizeError(bytes.byteLength, "actual", maxBytes);
-                    return bytes;
-                },
+                pull: ({ maxBytes }) => pullSlackAttachmentBytes(ctx, { urlPrivate: rec.urlPrivate, id: attachmentId }, maxBytes),
             };
         },
     });

package/dist/agent/channels/slack-attachments.js.map

@@ -1 +1 @@
-{"version":3,"file":"slack-attachments.js","sourceRoot":"","sources":["../../../agent/channels/slack-attachments.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uDAAuD;AACvD,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,gGAAgG;AAChG,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,gGAAgG;AAChG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,qGAAqG;AACrG,gGAAgG;AAChG,mGAAmG;AACnG,4FAA4F;AAE5F,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,GAExB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAoB3E;;kDAEkD;AAClD,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0B,EAAE,GAA0B;IAC5F,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO;IACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC;IACvF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,4CAA4C;IACjG,OAAO,QAAQ,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;oFAEoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAA0B,EAAE,GAA0B,EAAE,GAAY;IAC/G,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO;IACvC,MAAM,GAAG,GAAuB;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;IACF,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC,kBAAkB,CAAC,GAAG,IAAI,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,6EAA6E,MAAM,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAAc,EAAE,GAAY;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC,kBAAkB,CAAC,GAAG,IAAI,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3F,2FAA2F;QAC3F,oEAAoE;QACpE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,sEAAsE,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B;IAC7C,0BAA0B,CAAC;QACzB,QAAQ,EAAE,OAAO;QACjB,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG;YAC7B,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,CAAC,oDAAoD;YAChF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,kBAAkB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACxG,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACvH,CAAC;QACD,+FAA+F;QAC/F,+FAA+F;QAC/F,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG;YACpC,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,CAAC,oDAAoD;YAChF,OAAO;gBACL,GAAG,EAAE,cAAc,YAAY,EAAE;gBACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE;oBACrB,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC9F,IAAI,CAAC,GAAG,CAAC,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;oBAChF,qFAAqF;oBACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC9E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;wBAAE,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;oBACxH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;oBACtD,sFAAsF;oBACtF,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;wBAAE,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACzG,OAAO,KAAK,CAAC;gBACf,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AAEjG,2EAA2E;AAC3E,MAAM,UAAU,6BAA6B;IAC3C,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}
+{"version":3,"file":"slack-attachments.js","sourceRoot":"","sources":["../../../agent/channels/slack-attachments.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uDAAuD;AACvD,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,mGAAmG;AACnG,gGAAgG;AAChG,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,+FAA+F;AAC/F,sFAAsF;AACtF,EAAE;AACF,gGAAgG;AAChG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,qGAAqG;AACrG,gGAAgG;AAChG,mGAAmG;AACnG,4FAA4F;AAE5F,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,GAGxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAoB3E;;kDAEkD;AAClD,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA0B,EAAE,GAA0B;IAC5F,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO;IACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC;IACvF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,4CAA4C;IACjG,OAAO,QAAQ,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;oFAEoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAA0B,EAAE,GAA0B,EAAE,GAAY;IAC/G,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO;IACvC,MAAM,GAAG,GAAuB;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;IACF,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC,kBAAkB,CAAC,GAAG,IAAI,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,6EAA6E,MAAM,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAAc,EAAE,GAAY;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE,CAAC,kBAAkB,CAAC,GAAG,IAAI,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3F,2FAA2F;QAC3F,oEAAoE;QACpE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,sEAAsE,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAoB,EAAE,GAA0D,EAAE,QAAgB;IAC/I,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAChF,qFAAqF;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,QAAQ;QAAE,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,sFAAsF;IACtF,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ;QAAE,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B;IAC7C,0BAA0B,CAAC;QACzB,QAAQ,EAAE,OAAO;QACjB,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG;YAC7B,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,CAAC,oDAAoD;YAChF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,kBAAkB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACxG,OAAO,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,YAAY,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACvH,CAAC;QACD,+FAA+F;QAC/F,+FAA+F;QAC/F,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG;YACpC,MAAM,GAAG,GAAG,MAAM,6BAA6B,CAAC,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,CAAC,oDAAoD;YAChF,OAAO;gBACL,GAAG,EAAE,cAAc,YAAY,EAAE;gBACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,QAAQ,CAAC;aAClH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,iGAAiG;AAEjG,2EAA2E;AAC3E,MAAM,UAAU,6BAA6B;IAC3C,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/agent/channels/slack-bot-ask.d.ts

@@ -0,0 +1,30 @@
+import type { BotAskProbe, BotReplyFacts } from "@open-everywhere/core/agent/adapter-api.js";
+import type { ParsedMessageEvent } from "./slack-events.js";
+/** The Slack calls the probe makes (injectable for the unit test). */
+export interface SlackBotAskDeps {
+    /** One Web API call with the bot token; resolves the parsed body, or undefined on a transport failure. */
+    readonly call: (method: string, body: Record<string, string>) => Promise<Record<string, unknown> | undefined>;
+    /** This app's own bot user id and bot id (`auth.test`), best-effort. */
+    readonly self: () => Promise<{
+        readonly userId?: string;
+        readonly botId?: string;
+    }>;
+}
+/** Does the text @mention this user id (`<@U123>` or `<@U123|name>`)? PURE. */
+export declare function mentionsUser(text: string, userId: string): boolean;
+/** Build Slack's probe. */
+export declare function slackBotAskProbe(deps: SlackBotAskDeps): BotAskProbe;
+/** The live deps: `slackForm` with the bot token, and the front route's cached `auth.test`. */
+export declare function liveSlackBotAskDeps(form: (method: string, body: string) => Promise<Record<string, unknown> | undefined>, self: () => Promise<{
+    readonly userId?: string;
+    readonly botId?: string;
+}>): SlackBotAskDeps;
+/** Is this parsed message a candidate for the asked-thread exception at all? A cheap, pure pre-filter, so a
+ *  human message never pays a store read. PURE. */
+export declare function botReplyCandidate(ev: ParsedMessageEvent): boolean;
+/** Core's facts for one parsed Slack message. PURE. */
+export declare function slackBotReplyFacts(ev: ParsedMessageEvent, org: string, self: {
+    readonly userId?: string;
+    readonly botId?: string;
+}): BotReplyFacts;
+//# sourceMappingURL=slack-bot-ask.d.ts.map

package/dist/agent/channels/slack-bot-ask.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-bot-ask.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-bot-ask.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAqB,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAEhH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,0GAA0G;IAC1G,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC;IAC9G,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrF;AAID,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,2BAA2B;AAC3B,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAoCnE;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EACpF,IAAI,EAAE,MAAM,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACzE,eAAe,CAEjB;AAED;mDACmD;AACnD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAEjE;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAclJ"}

package/dist/agent/channels/slack-bot-ask.js

@@ -0,0 +1,91 @@
+// SLACK'S ARM OF CHIEF-OF-STAFF DELEGATION (OPE-2426) — the probe that proves an ask to another bot, and
+// the facts the front route hands core for an inbound bot message. Core holds the policy
+// (core/agent/channels/bot-ask.ts); this file only reads Slack.
+//
+// THE PROBE reads three facts with the BOT token, never a model string:
+//   1. the ask message itself (`conversations.replies` on its ts). The bot token reads it only when this
+//      app is in the channel, and the app must be in the channel to receive the other bot's reply at all.
+//      So an unreadable message is a refusal that says "invite the agent";
+//   2. its author is the person who asks, and its own text @mentions the named bot;
+//   3. the named account is a bot (`users.info` `is_bot`), and not this app itself (`auth.test`). An
+//      unknown own identity refuses: it cannot prove "not this app".
+// Any failed call refuses (`unreadable`). The probe never throws.
+import { encodeSlackForm } from "./slack-web-api.js";
+/** Does the text @mention this user id (`<@U123>` or `<@U123|name>`)? PURE. */
+export function mentionsUser(text, userId) {
+    return text.includes(`<@${userId}>`) || text.includes(`<@${userId}|`);
+}
+/** Build Slack's probe. */
+export function slackBotAskProbe(deps) {
+    return async (q) => {
+        try {
+            const [platform, teamId] = q.workspaceKey.split("/");
+            if (platform !== "slack" || !teamId)
+                return { ok: false, reason: "unreadable" };
+            const replies = await deps.call("conversations.replies", { channel: q.channel, ts: q.messageTs, limit: "1", inclusive: "true" });
+            const messages = replies?.ok === true && Array.isArray(replies.messages) ? replies.messages : [];
+            const msg = messages.find((m) => m.ts === q.messageTs);
+            if (!msg)
+                return { ok: false, reason: "unreadable" };
+            if (msg.user !== q.personId)
+                return { ok: false, reason: "not-yours" };
+            const text = typeof msg.text === "string" ? msg.text : "";
+            if (!mentionsUser(text, q.bot))
+                return { ok: false, reason: "bot-not-named" };
+            const self = await deps.self().catch(() => ({}));
+            // FAIL-CLOSED: without this app's own user id, a mention of this app cannot be told from another bot's.
+            if (self.userId === undefined)
+                return { ok: false, reason: "unreadable" };
+            if (self.userId === q.bot)
+                return { ok: false, reason: "self" };
+            const info = await deps.call("users.info", { user: q.bot });
+            const user = info?.ok === true && info.user && typeof info.user === "object" ? info.user : undefined;
+            if (!user)
+                return { ok: false, reason: "unreadable" };
+            if (user.is_bot !== true)
+                return { ok: false, reason: "not-a-bot" };
+            const profile = user.profile && typeof user.profile === "object" ? user.profile : {};
+            const botId = typeof profile.bot_id === "string" && profile.bot_id.length > 0 ? profile.bot_id : undefined;
+            if (botId !== undefined && self.botId !== undefined && botId === self.botId)
+                return { ok: false, reason: "self" };
+            const label = [user.real_name, profile.display_name, user.name].find((v) => typeof v === "string" && v.trim().length > 0);
+            return {
+                ok: true,
+                threadTs: typeof msg.thread_ts === "string" && msg.thread_ts.length > 0 ? msg.thread_ts : q.messageTs,
+                botUserId: q.bot,
+                ...(botId === undefined ? {} : { botId }),
+                ...(label === undefined ? {} : { botLabel: label }),
+                askText: text,
+            };
+        }
+        catch {
+            return { ok: false, reason: "unreadable" };
+        }
+    };
+}
+/** The live deps: `slackForm` with the bot token, and the front route's cached `auth.test`. */
+export function liveSlackBotAskDeps(form, self) {
+    return { call: (method, body) => form(method, encodeSlackForm(body)), self };
+}
+/** Is this parsed message a candidate for the asked-thread exception at all? A cheap, pure pre-filter, so a
+ *  human message never pays a store read. PURE. */
+export function botReplyCandidate(ev) {
+    return (Boolean(ev.botId) || ev.subtype === "bot_message") && ev.threadTs !== undefined && ev.threadTs !== ev.ts;
+}
+/** Core's facts for one parsed Slack message. PURE. */
+export function slackBotReplyFacts(ev, org, self) {
+    return {
+        org,
+        platform: "slack",
+        workspace: ev.teamId,
+        channel: ev.channelId,
+        threadTs: ev.threadTs,
+        messageTs: ev.ts,
+        authorUserId: ev.userId,
+        authorBotId: ev.botId,
+        subtype: ev.subtype,
+        ...(self.userId === undefined ? {} : { selfUserId: self.userId }),
+        ...(self.botId === undefined ? {} : { selfBotId: self.botId }),
+    };
+}
+//# sourceMappingURL=slack-bot-ask.js.map

package/dist/agent/channels/slack-bot-ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-bot-ask.js","sourceRoot":"","sources":["../../../agent/channels/slack-bot-ask.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,yFAAyF;AACzF,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,yGAAyG;AACzG,0GAA0G;AAC1G,2EAA2E;AAC3E,oFAAoF;AACpF,qGAAqG;AACrG,qEAAqE;AACrE,kEAAkE;AAGlE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAarD,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc;IACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,2BAA2B;AAC3B,MAAM,UAAU,gBAAgB,CAAC,IAAqB;IACpD,OAAO,KAAK,EAAE,CAAC,EAA8B,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrD,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACjI,MAAM,QAAQ,GAAG,OAAO,EAAE,EAAE,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,QAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;YACrH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YACrD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACvE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAwC,CAAC,CAAC;YACxF,wGAAwG;YACxG,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC1E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClI,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,OAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClH,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3G,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAClH,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAuB,CAAC;YAChJ,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrG,SAAS,EAAE,CAAC,CAAC,GAAG;gBAChB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACnD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CACjC,IAAoF,EACpF,IAA0E;IAE1E,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,iBAAiB,CAAC,EAAsB;IACtD,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kBAAkB,CAAC,EAAsB,EAAE,GAAW,EAAE,IAA2D;IACjI,OAAO;QACL,GAAG;QACH,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,EAAE,CAAC,MAAM;QACpB,OAAO,EAAE,EAAE,CAAC,SAAS;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,SAAS,EAAE,EAAE,CAAC,EAAE;QAChB,YAAY,EAAE,EAAE,CAAC,MAAM;QACvB,WAAW,EAAE,EAAE,CAAC,KAAK;QACrB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC"}

package/dist/agent/channels/slack-commands.d.ts

@@ -1,6 +1,21 @@
-import { type BindableContext } from "@open-everywhere/core/agent/adapter-api.js";
+import { type BindableContext, type SurfaceBinding } from "@open-everywhere/core/agent/adapter-api.js";
 /** The public URL Slack POSTs the "/oe" slash command to (the app's Slash Command Request URL). */
 export declare const SLACK_COMMANDS_ROUTE = "/eve/v1/slack/commands";
+/** What the route learned about a command's trust before it binds. `dmPartnerTrust` is the invoker's own
+ *  verdict in a 1:1 DM. `room` is a channel's `conversations.info` verdict, present whenever Slack answered
+ *  it, whoever typed the command. `invokerMember` is present only when `users.info` CONFIRMED the invoker a
+ *  member (see {@link slashRoomVerdict}). The person's binding stamps `room` only beside `invokerMember`;
+ *  the room's binding stamps it alone (OPE-2588). */
+export interface SlashTrustFacts {
+    readonly dmPartnerTrust?: "internal" | "external";
+    readonly room?: {
+        readonly extShared: boolean;
+    };
+    readonly invokerMember?: true;
+}
+/** Which verdict a slash binding resolves: the PERSON's (the room's verdict folded with the invoker
+ *  check, which every member gate reads) or the ROOM's alone (which the room's budget reads). */
+export type SlashTrustLeg = "person" | "room";
 /** Build the BindableContext the identity seam (bindFrom/bindSlack) expects from Slack's
  *  slash-command form fields. Slack's slash-command payload carries no `channel_type` /
  *  `is_private` bit (unlike an app_mention/message event) — `bindSlack`'s existing fallbacks
@@ -13,15 +28,103 @@ export declare const SLACK_COMMANDS_ROUTE = "/eve/v1/slack/commands";
  *  reads — so a Grid declared once now answers here the same way it answers at every other door,
  *  instead of resolving as though the line were absent.
  *
- *  🔴 STATE ITS REACH EXACTLY, because this door is narrower than the wake doors. For a CHANNEL
- *  command it does NOT change `binding.trust`: this payload carries no `conversations.info` verdict,
- *  so `slackTrust(undefined, undefined, "channel")` fails closed to `external`, and `bindFrom` takes
- *  that raw verdict ahead of any vouch. So a channel `/oe` stays `trust: "external"` with the rung
- *  and without it, and the budget scope `domainNameForScope` picks is unchanged. The rung reaches
- *  `binding.trust` only on a DM-shaped `/oe` (a `D…` channel id), where the mapper leaves trust
- *  undefined and the vouch is what answers. Spread conditionally, like every other door: a
- *  single-workspace install stamps nothing. */
-export declare function bindableForSlashCommand(params: URLSearchParams): BindableContext;
+ *  🔴 STATE ITS REACH EXACTLY. For a CHANNEL command the rung does NOT change `binding.trust`: the
+ *  room's own verdict answers there (see below), and `bindFrom` takes that raw verdict ahead of any
+ *  vouch. The rung reaches `binding.trust` only on a DM-shaped `/oe` (a `D…` channel id), and only
+ *  when the invoker probe gave no verdict: the mapper then leaves trust undefined and the vouch
+ *  answers (see below). Spread conditionally, like every other door: a single-workspace install
+ *  stamps nothing.
+ *
+ *  🔴 A CHANNEL COMMAND CARRIES THE ROOM'S OWN VERDICT (OPE-2579). Slack's slash payload carries no
+ *  sharing bit, so before this every channel `/oe` bound `slackTrust(undefined, undefined,
+ *  "channel")`, which fails closed to `external`. A member in an internal channel was then refused
+ *  `/oe suggest on` as an outsider. The route now passes {@link slashRoomVerdict}'s answer as
+ *  `is_ext_shared` + `trust_checked`, the two attributes a channel message stamps from the same
+ *  TTL-cached `conversations.info`. So a channel command reads the room's `internal` or `external` as a
+ *  message in that room does. On the `person` leg (the default) the verdict is stamped only for an
+ *  invoker `users.info` confirms a member. On the `room` leg it is stamped for anybody, because that
+ *  leg answers the room's budget, not a member gate (OPE-2588, {@link bindSlashCommand}). No verdict
+ *  stamps nothing, and the command stays fail-closed `external`.
+ *
+ *  🔴 A DM COMMAND CARRIES THE INVOKER'S OWN VERDICT (OPE-2579). In a 1:1 DM the invoker IS the
+ *  partner, and the route passes {@link slashInvokerDmTrust}'s answer as `dm_partner_trust`, the
+ *  attribute the chat DM leg stamps from the same `users.info` probe. Before this, a workspace vouch
+ *  alone answered a DM command, so a guest or a Connect stranger in their DM with the app read
+ *  `internal` here while the same person read `external` in a DM turn. A verdict outranks the vouch
+ *  in both directions, exactly as in a DM turn: a guest reads `external` under a workspace vouch, and
+ *  a confirmed member reads `internal` with no declaration at all. No verdict leaves the attribute
+ *  unset and the binding resolves as before. This reaches every `/oe` command typed in a DM, not
+ *  only `watch`. */
+export declare function bindableForSlashCommand(params: URLSearchParams, invoker?: SlashTrustFacts, leg?: SlashTrustLeg): BindableContext;
+/**
+ * The invoker's own membership verdict for a 1:1 DM command, in `dm_partner_trust`'s vocabulary, or
+ * `{}` when there is none to give (OPE-2579). It is the chat DM leg's reading of the same probe
+ * (slack-front.ts `liveDmPartnerTrust`): `slackAuthorIsMember` decides, so the two doors cannot
+ * drift on what a guest is. A channel or group DM asks nothing here: there the ROOM's verdict is the
+ * binding's trust, and {@link slashRoomVerdict} reads it.
+ *
+ * 🔴 NO VERDICT IS NOT A VERDICT. No user id, no bot token, a refused `users.info`, a transport
+ * failure or a probe slower than {@link INVOKER_PROBE_MS} all answer `{}`, which leaves the binding
+ * exactly as it resolved before this probe existed. An unanswered probe never invents a guest, and
+ * never invents a member.
+ */
+export declare function slashInvokerDmTrust(params: URLSearchParams, probe?: (userId: string, teamId: string | undefined) => Promise<boolean | undefined>): Promise<{
+    readonly dmPartnerTrust?: "internal" | "external";
+}>;
+/** The room facts {@link slashRoomVerdict} reads: `slackChannelFactsFor`'s shape, which every channel wake reads. */
+export type SlashRoomFacts = (channelId: string) => Promise<{
+    readonly channelType?: string;
+    readonly extShared?: boolean;
+    readonly trustChecked?: boolean;
+}>;
+/**
+ * A CHANNEL command's room verdict and invoker check, or `{}` when there is no room verdict to give
+ * (OPE-2579). The room read is `slackChannelFactsFor`, the TTL-cached `conversations.info` every
+ * channel wake reads, so the command door and the message door cannot disagree about one room.
+ *
+ * 🔴 THE INVOKER LEG, AND IT FAILS CLOSED. A channel message keeps the room's verdict on the auth and marks
+ * a guest author on the side (slack-events.ts `slackWakeAuthorFacts`), because one guest's message must not
+ * demote the channel's memory for everybody. A command has no session to protect: its binding exists for
+ * one answer, and `/oe suggest on` and `/oe watch more|less` read `binding.trust` as "is this person a
+ * member". So the route folds the author leg into the binding's `trust`, the composition Discord and
+ * Teams make: `invokerMember` is set only when `users.info` CONFIRMS the invoker a member, and the
+ * person's binding stamps the room's verdict only beside it. A guest, a Slack Connect stranger, and a
+ * person the probe could not check (no `users:read`, a refusal, a timeout) all leave `trust` fail-closed
+ * `external`. The message door fails OPEN on an unanswered probe because it marks a turn. Here `trust`
+ * IS the member gate, and a channel has no declaration to fall back to the way a DM command does.
+ *
+ * 🔴 THE ROOM'S VERDICT IS RETURNED FOR EVERY INVOKER (OPE-2588). `/oe budget` names the room's budget,
+ * and a channel's turns are charged under the room's domain, whoever typed them. So {@link bindSlashCommand}
+ * binds the room's verdict alone into `roomTrust`, and the budget reads that. A guest's `trust` is
+ * unchanged, and `/oe budget` reads both to refuse a guest in an internal channel (commands/core.ts
+ * `budgetWithheldFrom`). `/oe cover on` refuses outside a DM before it reads trust.
+ *
+ * 🔴 ONLY A ROOM IN THE CHANNEL MODE IS STAMPED. A 1:1 DM has its own leg ({@link slashInvokerDmTrust}).
+ * A group DM, or a room whose type Slack did not report, stamps nothing, so its binding is unchanged.
+ * Stamping a sharing verdict on a group DM the binding still calls a channel would mix two modes' rules.
+ *
+ * 🔴 NO VERDICT IS NOT A VERDICT. A failed or refused `conversations.info`, a response without the check,
+ * or a read slower than {@link INVOKER_PROBE_MS} answers `{}`. The command then binds `external`, as
+ * before this read existed. The room read and the invoker probe run in parallel inside one ack budget.
+ */
+export declare function slashRoomVerdict(params: URLSearchParams, roomFacts?: SlashRoomFacts, probe?: (userId: string, teamId: string | undefined) => Promise<boolean | undefined>): Promise<SlashTrustFacts>;
+/** Both legs, for whichever kind of room the command came from. Never throws. */
+export declare function slashTrustFacts(params: URLSearchParams): Promise<SlashTrustFacts>;
+/**
+ * The slash command's binding, with the room's trust and the person's trust kept apart (OPE-2588).
+ *
+ * `trust` is the PERSON leg: the member gate `/oe suggest on`, `/oe watch more|less` and `/oe cover on`
+ * read. `roomTrust` is the ROOM leg: the same `bindFrom` walk over the room's verdict alone, so the
+ * declarations and the fail-closed default apply to it unchanged. `/oe budget` and the caps behind
+ * `raise` and `clear` read it through `roomTrustOf`. Before this the binding carried one value, so a
+ * guest in an internal channel read the external domain's budget while that channel's turns were
+ * charged under the internal domain. Now `/oe budget` refuses that guest, because a guest must not read
+ * an internal room's caps and spend (Tommy's ruling on #1431).
+ *
+ * In a DM both legs bind the same context, so the two values are equal. Every other field comes from
+ * the person's binding. The two bindings differ only in the two trust attributes, which move no key.
+ */
+export declare function bindSlashCommand(params: URLSearchParams, facts: SlashTrustFacts): SurfaceBinding;
 declare const _default: import("eve/channels").Channel<undefined, Record<string, unknown>, Record<string, unknown>>;
 export default _default;
 //# sourceMappingURL=slack-commands.d.ts.map

package/dist/agent/channels/slack-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slack-commands.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-commands.ts"],"names":[],"mappings":"AAqCA,OAAO,EAUL,KAAK,eAAe,EACrB,MAAM,4CAA4C,CAAC;AAOpD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAS7D;;;;;;;;;;;;;;;;;;;+CAmB+C;AAC/C,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAkBhF"}
+{"version":3,"file":"slack-commands.d.ts","sourceRoot":"","sources":["../../../agent/channels/slack-commands.ts"],"names":[],"mappings":"AAqCA,OAAO,EAYL,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,4CAA4C,CAAC;AASpD,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAS7D;;;;qDAIqD;AACrD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAC/B;AAED;iGACiG;AACjG,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAsCoB;AACpB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,GAAG,GAAE,aAAwB,GAAG,eAAe,CAqB1I;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,eAAe,EACvB,KAAK,GAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAuB,GACxG,OAAO,CAAC;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,CAAC,CAKhE;AAED,qHAAqH;AACrH,MAAM,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAE9J;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,SAAS,GAAE,cAAqC,EAChD,KAAK,GAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,OAAO,GAAG,SAAS,CAAuB,GACxG,OAAO,CAAC,eAAe,CAAC,CAW1B;AAED,iFAAiF;AACjF,wBAAsB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAEvF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,eAAe,GAAG,cAAc,CAIhG"}