@openclaw/slack 2026.7.2-beta.2 → 2026.7.2-beta.4

package/dist/{relay-source-DMmgtvg4.js → relay-source-Df9EaiTF.js}

@@ -1,4 +1,4 @@
-import { c as formatUnknownError, s as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-CmeoUiIM.js";
+import { c as formatUnknownError, s as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-htuIJGFD.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { computeBackoff, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { Buffer } from "node:buffer";
@@ -27,7 +27,7 @@ async function monitorSlackRelaySource(params) {
 			params.runtime.log?.(`slack relay mode connected gateway_id:${params.config.gatewayId}`);
 			await runRelayWebSocket({
 				connection,
-				handleSlackMessage: params.handleSlackMessage,
+				acceptRelayEvent: params.acceptRelayEvent,
 				runtime: params.runtime,
 				abortSignal: params.abortSignal,
 				setStatus: params.setStatus,
@@ -90,7 +90,6 @@ function openRelayWebSocket(config, abortSignal) {
 }
 function runRelayWebSocket(params) {
 	const ws = params.connection;
-	const relayState = {};
 	let pending = Promise.resolve();
 	return new Promise((resolve, reject) => {
 		const cleanup = () => {
@@ -111,8 +110,7 @@ function runRelayWebSocket(params) {
 			pending = pending.then(() => handleRelayFrame({
 				ws,
 				data,
-				handleSlackMessage: params.handleSlackMessage,
-				relayState,
+				acceptRelayEvent: params.acceptRelayEvent,
 				setStatus: params.setStatus,
 				setIdentity: params.setIdentity
 			})).catch((err) => {
@@ -150,7 +148,6 @@ async function handleRelayFrame(params) {
 	const frame = parseRelayFrame(params.data);
 	const hello = extractRelayHello(frame);
 	if (hello) {
-		params.relayState.identity = hello.identity;
 		params.setIdentity?.(hello.identity);
 		params.setStatus?.({ relayIdentity: hello.identity ?? null });
 		return;
@@ -163,11 +160,9 @@ async function handleRelayFrame(params) {
 		lastInboundAt: now
 	});
 	params.setStatus?.({ relayRoute: event.route });
-	await params.handleSlackMessage(event.message, {
-		source: "message",
-		wasMentioned: true,
-		awaitDispatch: true,
-		...params.relayState.identity ? { relayIdentity: params.relayState.identity } : {}
+	await params.acceptRelayEvent({
+		deliveryId: event.deliveryId,
+		message: event.message
 	});
 	sendRelayAck(params.ws, event.deliveryId);
 }

package/dist/{replies-CJJCp6qz.js → replies-Cgr2Gli4.js}

@@ -1,6 +1,6 @@
-import { A as buildSlackBlocksFallbackText, I as SLACK_TEXT_LIMIT, O as markdownToSlackMrkdwnChunks, S as buildSlackNativeDataAccessibilityText, T as isSlackInvalidBlocksError, g as resolveSlackReplyBlocks, h as resolveSlackReplyBlockResolution, p as hasSlackReplyStructuredContent, w as hasSlackNativeDataBlock } from "./group-policy-85UWiriS.js";
-import { l as buildSlackNativeDataDeliveryPlan, r as sendMessageSlack, u as chunkSlackTextAtHardLimit } from "./send-DYp8ca-l.js";
-import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-CmeoUiIM.js";
+import { C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, F as SLACK_TEXT_LIMIT, f as hasSlackReplyStructuredContent, h as resolveSlackReplyBlocks, k as buildSlackBlocksFallbackText, m as resolveSlackReplyBlockResolution, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText } from "./group-policy-CdnQzQBI.js";
+import { d as chunkSlackTextAtHardLimit, r as sendMessageSlack, u as buildSlackNativeDataDeliveryPlan } from "./send-BZ1tPv7-.js";
+import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-htuIJGFD.js";
 import { createReplyReferencePlanner } from "openclaw/plugin-sdk/reply-reference";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { SILENT_REPLY_TOKEN, chunkMarkdownTextWithMode, isSilentReplyText } from "openclaw/plugin-sdk/reply-chunking";

package/dist/{resolve-channels-Rfts6POK.js → resolve-channels-DodP2TFx.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { n as createSlackLookupClient } from "./client-WIPAS3Yr.js";
+import { a as createSlackLookupClient } from "./probe-CVRuArHA.js";
 import { t as collectSlackCursorPages } from "./cursor-pages-DSmTg0su.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";

package/dist/{resolve-users-y6wAxR8E.js → resolve-users-M9eF8891.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { n as createSlackLookupClient } from "./client-WIPAS3Yr.js";
+import { a as createSlackLookupClient } from "./probe-CVRuArHA.js";
 import { t as collectSlackCursorPages } from "./cursor-pages-DSmTg0su.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";

package/dist/{runtime-api-BGDyOt1D.js → runtime-api-D5XYMMsf.js}

@@ -1,9 +1,10 @@
 import "./target-parsing-N6lHogYZ.js";
-import "./client-WIPAS3Yr.js";
-import "./config-api-Df9a1B8C.js";
+import "./probe-CVRuArHA.js";
+import "./config-schema-B4j4tCOI.js";
 import "openclaw/plugin-sdk/account-id";
 import { createActionGate as createActionGate$1, imageResultFromFile, jsonResult, readPositiveIntegerParam, readReactionParams, readStringParam, withNormalizedTimestamp } from "openclaw/plugin-sdk/channel-actions";
 import "openclaw/plugin-sdk/channel-status";
+import "openclaw/plugin-sdk/channel-config-schema";
 import "openclaw/plugin-sdk/channel-plugin-common";
 import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
 export { readPositiveIntegerParam as a, withNormalizedTimestamp as c, loadOutboundMediaFromUrl as i, imageResultFromFile as n, readReactionParams as o, jsonResult as r, readStringParam as s, createActionGate$1 as t };

package/dist/runtime-api.js

@@ -1,14 +1,14 @@
 import { t as registerSlackPluginHttpRoutes } from "./plugin-routes-CLp4obpN.js";
-import { a as resolveSlackAccount, f as resolveSlackAppToken, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, p as resolveSlackBotToken, t as listEnabledSlackAccounts } from "./accounts-BOJJiHSr.js";
-import { n as resolveSlackGroupRequireMention, r as resolveSlackGroupToolPolicy } from "./group-policy-85UWiriS.js";
+import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, t as listEnabledSlackAccounts } from "./accounts-BSr252c_.js";
+import { n as resolveSlackGroupRequireMention, r as resolveSlackGroupToolPolicy } from "./group-policy-CdnQzQBI.js";
+import { t as probeSlack } from "./probe-CVRuArHA.js";
 import { r as setSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { a as listSlackEmojis, c as pinSlackMessage, d as removeOwnSlackReactions, f as removeSlackReaction, h as unpinSlackMessage, i as getSlackMemberInfo, l as reactSlackMessage, m as sendSlackMessage, o as listSlackPins, r as editSlackMessage, s as listSlackReactions, t as deleteSlackMessage, u as readSlackMessages } from "./actions-BZiuSTIq.js";
-import { r as sendMessageSlack } from "./send-DYp8ca-l.js";
-import { t as probeSlack } from "./probe-CN0ssfLN.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-Rfts6POK.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-y6wAxR8E.js";
-import { t as monitorSlackProvider } from "./provider-CmeoUiIM.js";
-import { n as slackActionRuntime, t as handleSlackAction } from "./action-runtime-Cee2ih0s.js";
-import { n as listSlackDirectoryGroupsLive, r as listSlackDirectoryPeersLive } from "./directory-live-D_yZhjgp.js";
-import "./monitor-CalGciTs.js";
+import { a as listSlackEmojis, c as pinSlackMessage, d as removeOwnSlackReactions, f as removeSlackReaction, h as unpinSlackMessage, i as getSlackMemberInfo, l as reactSlackMessage, m as sendSlackMessage, o as listSlackPins, r as editSlackMessage, s as listSlackReactions, t as deleteSlackMessage, u as readSlackMessages } from "./actions-D51foiwR.js";
+import { r as sendMessageSlack } from "./send-BZ1tPv7-.js";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-DodP2TFx.js";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-M9eF8891.js";
+import { t as monitorSlackProvider } from "./provider-htuIJGFD.js";
+import { n as slackActionRuntime, t as handleSlackAction } from "./action-runtime-CFU52n4W.js";
+import { n as listSlackDirectoryGroupsLive, r as listSlackDirectoryPeersLive } from "./directory-live-DpPKzPrn.js";
+import "./monitor-CnB_WKvF.js";
 export { deleteSlackMessage, editSlackMessage, getSlackMemberInfo, handleSlackAction, listEnabledSlackAccounts, listSlackAccountIds, listSlackDirectoryGroupsLive, listSlackDirectoryPeersLive, listSlackEmojis, listSlackPins, listSlackReactions, monitorSlackProvider, pinSlackMessage, probeSlack, reactSlackMessage, readSlackMessages, registerSlackPluginHttpRoutes, removeOwnSlackReactions, removeSlackReaction, resolveDefaultSlackAccountId, resolveSlackAccount, resolveSlackAppToken, resolveSlackBotToken, resolveSlackChannelAllowlist, resolveSlackGroupRequireMention, resolveSlackGroupToolPolicy, resolveSlackUserAllowlist, sendMessageSlack, sendSlackMessage, setSlackRuntime, slackActionRuntime, unpinSlackMessage };

package/dist/{scopes-CuxNQZ6v.js → scopes-CJRpHkDC.js}

@@ -1,5 +1,4 @@
-import { i as formatSlackError } from "./group-policy-85UWiriS.js";
-import { a as createSlackWebClient } from "./client-WIPAS3Yr.js";
+import { c as createSlackWebClient, r as formatSlackError } from "./probe-CVRuArHA.js";
 import { isRecord, normalizeOptionalString, normalizeStringEntries, sortUniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/slack/src/scopes.ts
 function collectScopes(value, into) {

package/dist/{secret-contract-CMohXFWS.js → secret-contract-DxmvbxBF.js}

@@ -73,6 +73,7 @@ function collectRuntimeConfigAssignments(params) {
 		defaults: params.defaults,
 		context: params.context,
 		topLevelActive: surface.channelEnabled && (!surface.hasExplicitAccounts && baseMode === "relay" || surface.accounts.some(({ account, enabled }) => enabled && resolveAccountMode(account) === "relay" && !hasNestedAuthTokenOverride(account))),
+		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "relay" && !hasNestedAuthTokenOverride(account),
 		topInactiveReason: "no enabled Slack relay-mode surface inherits this top-level relay authToken.",
 		accountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "relay",
 		accountInactiveReason: "Slack account is disabled or not running in relay mode."

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-CMohXFWS.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DxmvbxBF.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/{security-audit-CikQhBUY.js → security-audit-Cz6erklv.js}

@@ -17,16 +17,6 @@ async function collectSlackSecurityAuditFindings(params) {
 		providerSetting: coerceNativeSetting(slackCfg.commands?.nativeSkills),
 		globalSetting: params.cfg.commands?.nativeSkills
 	}))) return findings;
-	if (!(params.cfg.commands?.useAccessGroups !== false)) {
-		findings.push({
-			checkId: "channels.slack.commands.slash.useAccessGroups_off",
-			severity: "critical",
-			title: "Slack slash commands bypass access groups",
-			detail: "Slack slash/native commands are enabled while commands.useAccessGroups=false; this can allow unrestricted /… command execution from channels/users you didn't explicitly authorize.",
-			remediation: "Set commands.useAccessGroups=true (recommended)."
-		});
-		return findings;
-	}
 	const allowFromRaw = slackCfg.allowFrom;
 	const legacyAllowFromRaw = params.account.dm?.allowFrom;
 	const allowFrom = Array.isArray(allowFromRaw) ? allowFromRaw : Array.isArray(legacyAllowFromRaw) ? legacyAllowFromRaw : [];

package/dist/security-contract-api.js

@@ -1,2 +1,2 @@
-import { t as collectSlackSecurityAuditFindings } from "./security-audit-CikQhBUY.js";
+import { t as collectSlackSecurityAuditFindings } from "./security-audit-Cz6erklv.js";
 export { collectSlackSecurityAuditFindings };

package/dist/{send-DYp8ca-l.js → send-BZ1tPv7-.js}

@@ -1,10 +1,10 @@
-import { a as resolveSlackAccount, l as resolveSlackOperationToken, p as resolveSlackBotToken } from "./accounts-BOJJiHSr.js";
+import { a as resolveSlackAccount, l as resolveSlackOperationToken } from "./accounts-BSr252c_.js";
 import { i as parseSlackTarget, t as canonicalizeSlackApiTargetId } from "./target-parsing-N6lHogYZ.js";
-import { B as truncateSlackText, C as createSlackNativeDataBaseTextConsumer, D as chunkSlackMrkdwnText, E as stripSlackNativeDataBlocks, F as SLACK_MESSAGE_TEXT_HARD_LIMIT, I as SLACK_TEXT_LIMIT, M as renderSlackBlockFallbackText, O as markdownToSlackMrkdwnChunks, Q as validateSlackBlocksArray, S as buildSlackNativeDataAccessibilityText, T as isSlackInvalidBlocksError, a as assertSlackDirectSendAllowed, j as buildSlackCompleteBlocksFallbackText, w as hasSlackNativeDataBlock, x as appendSlackNativeDataPlainTextFallback } from "./group-policy-85UWiriS.js";
+import { A as buildSlackCompleteBlocksFallbackText, C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, E as chunkSlackMrkdwnText, F as SLACK_TEXT_LIMIT, P as SLACK_MESSAGE_TEXT_HARD_LIMIT, S as createSlackNativeDataBaseTextConsumer, T as stripSlackNativeDataBlocks, b as appendSlackNativeDataPlainTextFallback, et as validateSlackBlocksArray, i as assertSlackDirectSendAllowed, j as renderSlackBlockFallbackText, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText, z as truncateSlackText } from "./group-policy-CdnQzQBI.js";
 import { n as resolveSlackThreadTsValue, t as normalizeSlackThreadTsCandidate } from "./thread-ts-DUGhaYKq.js";
-import { a as createSlackWebClient, c as getSlackWriteClient, i as createSlackTokenCacheKey } from "./client-WIPAS3Yr.js";
+import { c as createSlackWebClient, d as getSlackWriteClient, s as createSlackTokenCacheKey } from "./probe-CVRuArHA.js";
 import { t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { i as loadOutboundMediaFromUrl } from "./runtime-api-BGDyOt1D.js";
+import { i as loadOutboundMediaFromUrl } from "./runtime-api-D5XYMMsf.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { logVerbose } from "openclaw/plugin-sdk/runtime-env";
@@ -389,6 +389,7 @@ async function uploadSlackFile(params) {
 				...contentType ? { headers: { "Content-Type": contentType } } : {},
 				body: new Uint8Array(buffer)
 			},
+			timeoutMs: SLACK_UPLOAD_POST_TIMEOUT_MS,
 			signal: uploadTimeoutSignal,
 			requireHttps: uploadTransport.requireHttps,
 			policy: uploadTransport.policy,
@@ -545,6 +546,22 @@ function resolvePostedMessageThreadTs(response) {
 	const threadTs = response.message?.thread_ts;
 	return typeof threadTs === "string" ? normalizeSlackThreadTsCandidate(threadTs) : void 0;
 }
+async function updateMessageSlack(params) {
+	const account = resolveSlackAccount({
+		cfg: requireRuntimeConfig(params.cfg, "Slack update"),
+		accountId: params.accountId
+	});
+	await getSlackWriteClient(resolveToken({
+		accountId: account.accountId,
+		fallbackToken: account.botToken,
+		fallbackSource: account.botTokenSource
+	})).chat.update({
+		channel: params.channelId,
+		ts: params.messageTs,
+		text: truncateSlackText(params.text, SLACK_TEXT_LIMIT),
+		blocks: validateSlackBlocksArray(params.blocks)
+	});
+}
 function createSlackSendReceipt(params) {
 	return createMessageReceiptFromOutboundResults({
 		results: params.platformMessageIds.map((messageId) => messageId.trim()).filter((messageId) => messageId && messageId !== "unknown" && messageId !== "suppressed").map((messageId) => {
@@ -560,12 +577,12 @@ function createSlackSendReceipt(params) {
 	});
 }
 function resolveToken(params) {
-	const explicit = resolveSlackBotToken(params.explicit);
+	const explicit = normalizeOptionalString(params.explicit);
 	if (explicit) return explicit;
-	const fallback = resolveSlackBotToken(params.fallbackToken);
+	const fallback = normalizeOptionalString(params.fallbackToken);
 	if (!fallback) {
-		logVerbose(`slack send: missing bot token for account=${params.accountId} explicit=${Boolean(params.explicit)} source=${params.fallbackSource ?? "unknown"}`);
-		throw new Error(`Slack bot token missing for account "${params.accountId}" (set channels.slack.accounts.${params.accountId}.botToken or SLACK_BOT_TOKEN for default).`);
+		logVerbose(`slack send: missing write token for account=${params.accountId} explicit=${Boolean(params.explicit)} source=${params.fallbackSource ?? "unknown"}`);
+		throw new Error(`Slack write token missing for account "${params.accountId}".`);
 	}
 	return fallback;
 }
@@ -969,8 +986,8 @@ async function sendMessageSlack(to, message, opts) {
 	const token = enterpriseDelivery ? SLACK_ENTERPRISE_LISTENER_QUEUE_CREDENTIAL : resolveToken({
 		explicit: opts.token,
 		accountId: account.accountId,
-		fallbackToken: account.botToken,
-		fallbackSource: account.botTokenSource
+		fallbackToken: resolveSlackOperationToken(account, "write"),
+		fallbackSource: account.identity === "user" ? account.userTokenSource : account.botTokenSource
 	});
 	const recipient = enterpriseDelivery ? parseEnterpriseEventRecipient(to) : parseRecipient(to);
 	const queueKey = createSlackSendQueueKey({
@@ -1263,4 +1280,4 @@ async function sendMessageSlackQueuedInner(params) {
 	};
 }
 //#endregion
-export { clearSlackThreadParticipationCache as a, recordSlackThreadParticipation as c, setSlackDefaultSendIdentity as i, buildSlackNativeDataDeliveryPlan as l, resolveSlackDmChannelId as n, hasSlackThreadParticipation as o, sendMessageSlack as r, hasSlackThreadParticipationWithPersistence as s, reconcileSlackUnknownSend as t, chunkSlackTextAtHardLimit as u };
+export { updateMessageSlack as a, hasSlackThreadParticipationWithPersistence as c, chunkSlackTextAtHardLimit as d, setSlackDefaultSendIdentity as i, recordSlackThreadParticipation as l, resolveSlackDmChannelId as n, clearSlackThreadParticipationCache as o, sendMessageSlack as r, hasSlackThreadParticipation as s, reconcileSlackUnknownSend as t, buildSlackNativeDataDeliveryPlan as u };

package/dist/send.runtime-a2pilFor.js

@@ -0,0 +1,2 @@
+import { a as updateMessageSlack, n as resolveSlackDmChannelId, r as sendMessageSlack, t as reconcileSlackUnknownSend } from "./send-BZ1tPv7-.js";
+export { reconcileSlackUnknownSend, resolveSlackDmChannelId, sendMessageSlack, updateMessageSlack };