@openclaw/slack 2026.7.2-beta.3 → 2026.7.2-beta.4

package/dist/{relay-source-Ea_P9VcO.js → relay-source-Df9EaiTF.js}

@@ -1,4 +1,4 @@
-import { c as formatUnknownError, s as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-B-HVL5ZE.js";
+import { c as formatUnknownError, s as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-htuIJGFD.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { computeBackoff, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { Buffer } from "node:buffer";

package/dist/{replies-B4bOdrYb.js → replies-Cgr2Gli4.js}

@@ -1,6 +1,6 @@
-import { C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, F as SLACK_TEXT_LIMIT, f as hasSlackReplyStructuredContent, h as resolveSlackReplyBlocks, k as buildSlackBlocksFallbackText, m as resolveSlackReplyBlockResolution, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText } from "./group-policy-Bw-65m3V.js";
-import { d as chunkSlackTextAtHardLimit, r as sendMessageSlack, u as buildSlackNativeDataDeliveryPlan } from "./send-KuTDky7i.js";
-import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-B-HVL5ZE.js";
+import { C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, F as SLACK_TEXT_LIMIT, f as hasSlackReplyStructuredContent, h as resolveSlackReplyBlocks, k as buildSlackBlocksFallbackText, m as resolveSlackReplyBlockResolution, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText } from "./group-policy-CdnQzQBI.js";
+import { d as chunkSlackTextAtHardLimit, r as sendMessageSlack, u as buildSlackNativeDataDeliveryPlan } from "./send-BZ1tPv7-.js";
+import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-htuIJGFD.js";
 import { createReplyReferencePlanner } from "openclaw/plugin-sdk/reply-reference";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { SILENT_REPLY_TOKEN, chunkMarkdownTextWithMode, isSilentReplyText } from "openclaw/plugin-sdk/reply-chunking";

package/dist/{resolve-channels-KTc568SU.js → resolve-channels-DodP2TFx.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as createSlackLookupClient } from "./probe-Borhn9PQ.js";
+import { a as createSlackLookupClient } from "./probe-CVRuArHA.js";
 import { t as collectSlackCursorPages } from "./cursor-pages-DSmTg0su.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";

package/dist/{resolve-users-DeGJf1yp.js → resolve-users-M9eF8891.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as createSlackLookupClient } from "./probe-Borhn9PQ.js";
+import { a as createSlackLookupClient } from "./probe-CVRuArHA.js";
 import { t as collectSlackCursorPages } from "./cursor-pages-DSmTg0su.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";

package/dist/{runtime-api-BFfNpzDe.js → runtime-api-D5XYMMsf.js}

@@ -1,9 +1,10 @@
 import "./target-parsing-N6lHogYZ.js";
-import "./probe-Borhn9PQ.js";
-import "./config-api-Df9a1B8C.js";
+import "./probe-CVRuArHA.js";
+import "./config-schema-B4j4tCOI.js";
 import "openclaw/plugin-sdk/account-id";
 import { createActionGate as createActionGate$1, imageResultFromFile, jsonResult, readPositiveIntegerParam, readReactionParams, readStringParam, withNormalizedTimestamp } from "openclaw/plugin-sdk/channel-actions";
 import "openclaw/plugin-sdk/channel-status";
+import "openclaw/plugin-sdk/channel-config-schema";
 import "openclaw/plugin-sdk/channel-plugin-common";
 import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
 export { readPositiveIntegerParam as a, withNormalizedTimestamp as c, loadOutboundMediaFromUrl as i, imageResultFromFile as n, readReactionParams as o, jsonResult as r, readStringParam as s, createActionGate$1 as t };

package/dist/runtime-api.js

@@ -1,14 +1,14 @@
 import { t as registerSlackPluginHttpRoutes } from "./plugin-routes-CLp4obpN.js";
-import { a as resolveSlackAccount, f as resolveSlackAppToken, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, p as resolveSlackBotToken, t as listEnabledSlackAccounts } from "./accounts-DQEbYKh9.js";
-import { n as resolveSlackGroupRequireMention, r as resolveSlackGroupToolPolicy } from "./group-policy-Bw-65m3V.js";
-import { t as probeSlack } from "./probe-Borhn9PQ.js";
+import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, t as listEnabledSlackAccounts } from "./accounts-BSr252c_.js";
+import { n as resolveSlackGroupRequireMention, r as resolveSlackGroupToolPolicy } from "./group-policy-CdnQzQBI.js";
+import { t as probeSlack } from "./probe-CVRuArHA.js";
 import { r as setSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { a as listSlackEmojis, c as pinSlackMessage, d as removeOwnSlackReactions, f as removeSlackReaction, h as unpinSlackMessage, i as getSlackMemberInfo, l as reactSlackMessage, m as sendSlackMessage, o as listSlackPins, r as editSlackMessage, s as listSlackReactions, t as deleteSlackMessage, u as readSlackMessages } from "./actions-CF0tUY5q.js";
-import { r as sendMessageSlack } from "./send-KuTDky7i.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-KTc568SU.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-DeGJf1yp.js";
-import { t as monitorSlackProvider } from "./provider-B-HVL5ZE.js";
-import { n as slackActionRuntime, t as handleSlackAction } from "./action-runtime-DqkRwO3Z.js";
-import { n as listSlackDirectoryGroupsLive, r as listSlackDirectoryPeersLive } from "./directory-live-CzUIB7th.js";
-import "./monitor-CNFeF30h.js";
+import { a as listSlackEmojis, c as pinSlackMessage, d as removeOwnSlackReactions, f as removeSlackReaction, h as unpinSlackMessage, i as getSlackMemberInfo, l as reactSlackMessage, m as sendSlackMessage, o as listSlackPins, r as editSlackMessage, s as listSlackReactions, t as deleteSlackMessage, u as readSlackMessages } from "./actions-D51foiwR.js";
+import { r as sendMessageSlack } from "./send-BZ1tPv7-.js";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-DodP2TFx.js";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-M9eF8891.js";
+import { t as monitorSlackProvider } from "./provider-htuIJGFD.js";
+import { n as slackActionRuntime, t as handleSlackAction } from "./action-runtime-CFU52n4W.js";
+import { n as listSlackDirectoryGroupsLive, r as listSlackDirectoryPeersLive } from "./directory-live-DpPKzPrn.js";
+import "./monitor-CnB_WKvF.js";
 export { deleteSlackMessage, editSlackMessage, getSlackMemberInfo, handleSlackAction, listEnabledSlackAccounts, listSlackAccountIds, listSlackDirectoryGroupsLive, listSlackDirectoryPeersLive, listSlackEmojis, listSlackPins, listSlackReactions, monitorSlackProvider, pinSlackMessage, probeSlack, reactSlackMessage, readSlackMessages, registerSlackPluginHttpRoutes, removeOwnSlackReactions, removeSlackReaction, resolveDefaultSlackAccountId, resolveSlackAccount, resolveSlackAppToken, resolveSlackBotToken, resolveSlackChannelAllowlist, resolveSlackGroupRequireMention, resolveSlackGroupToolPolicy, resolveSlackUserAllowlist, sendMessageSlack, sendSlackMessage, setSlackRuntime, slackActionRuntime, unpinSlackMessage };

package/dist/{scopes-lx08L56K.js → scopes-CJRpHkDC.js}

@@ -1,4 +1,4 @@
-import { c as createSlackWebClient, r as formatSlackError } from "./probe-Borhn9PQ.js";
+import { c as createSlackWebClient, r as formatSlackError } from "./probe-CVRuArHA.js";
 import { isRecord, normalizeOptionalString, normalizeStringEntries, sortUniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/slack/src/scopes.ts
 function collectScopes(value, into) {

package/dist/{security-audit-CikQhBUY.js → security-audit-Cz6erklv.js}

@@ -17,16 +17,6 @@ async function collectSlackSecurityAuditFindings(params) {
 		providerSetting: coerceNativeSetting(slackCfg.commands?.nativeSkills),
 		globalSetting: params.cfg.commands?.nativeSkills
 	}))) return findings;
-	if (!(params.cfg.commands?.useAccessGroups !== false)) {
-		findings.push({
-			checkId: "channels.slack.commands.slash.useAccessGroups_off",
-			severity: "critical",
-			title: "Slack slash commands bypass access groups",
-			detail: "Slack slash/native commands are enabled while commands.useAccessGroups=false; this can allow unrestricted /… command execution from channels/users you didn't explicitly authorize.",
-			remediation: "Set commands.useAccessGroups=true (recommended)."
-		});
-		return findings;
-	}
 	const allowFromRaw = slackCfg.allowFrom;
 	const legacyAllowFromRaw = params.account.dm?.allowFrom;
 	const allowFrom = Array.isArray(allowFromRaw) ? allowFromRaw : Array.isArray(legacyAllowFromRaw) ? legacyAllowFromRaw : [];

package/dist/security-contract-api.js

@@ -1,2 +1,2 @@
-import { t as collectSlackSecurityAuditFindings } from "./security-audit-CikQhBUY.js";
+import { t as collectSlackSecurityAuditFindings } from "./security-audit-Cz6erklv.js";
 export { collectSlackSecurityAuditFindings };

package/dist/{send-KuTDky7i.js → send-BZ1tPv7-.js}

@@ -1,10 +1,10 @@
-import { a as resolveSlackAccount, l as resolveSlackOperationToken } from "./accounts-DQEbYKh9.js";
+import { a as resolveSlackAccount, l as resolveSlackOperationToken } from "./accounts-BSr252c_.js";
 import { i as parseSlackTarget, t as canonicalizeSlackApiTargetId } from "./target-parsing-N6lHogYZ.js";
-import { A as buildSlackCompleteBlocksFallbackText, C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, E as chunkSlackMrkdwnText, F as SLACK_TEXT_LIMIT, P as SLACK_MESSAGE_TEXT_HARD_LIMIT, S as createSlackNativeDataBaseTextConsumer, T as stripSlackNativeDataBlocks, b as appendSlackNativeDataPlainTextFallback, et as validateSlackBlocksArray, i as assertSlackDirectSendAllowed, j as renderSlackBlockFallbackText, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText, z as truncateSlackText } from "./group-policy-Bw-65m3V.js";
+import { A as buildSlackCompleteBlocksFallbackText, C as hasSlackNativeDataBlock, D as markdownToSlackMrkdwnChunks, E as chunkSlackMrkdwnText, F as SLACK_TEXT_LIMIT, P as SLACK_MESSAGE_TEXT_HARD_LIMIT, S as createSlackNativeDataBaseTextConsumer, T as stripSlackNativeDataBlocks, b as appendSlackNativeDataPlainTextFallback, et as validateSlackBlocksArray, i as assertSlackDirectSendAllowed, j as renderSlackBlockFallbackText, w as isSlackInvalidBlocksError, x as buildSlackNativeDataAccessibilityText, z as truncateSlackText } from "./group-policy-CdnQzQBI.js";
 import { n as resolveSlackThreadTsValue, t as normalizeSlackThreadTsCandidate } from "./thread-ts-DUGhaYKq.js";
-import { c as createSlackWebClient, d as getSlackWriteClient, s as createSlackTokenCacheKey } from "./probe-Borhn9PQ.js";
+import { c as createSlackWebClient, d as getSlackWriteClient, s as createSlackTokenCacheKey } from "./probe-CVRuArHA.js";
 import { t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { i as loadOutboundMediaFromUrl } from "./runtime-api-BFfNpzDe.js";
+import { i as loadOutboundMediaFromUrl } from "./runtime-api-D5XYMMsf.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { logVerbose } from "openclaw/plugin-sdk/runtime-env";

package/dist/{send.runtime-CXyxws1D.js → send.runtime-a2pilFor.js}

@@ -1,2 +1,2 @@
-import { a as updateMessageSlack, n as resolveSlackDmChannelId, r as sendMessageSlack, t as reconcileSlackUnknownSend } from "./send-KuTDky7i.js";
+import { a as updateMessageSlack, n as resolveSlackDmChannelId, r as sendMessageSlack, t as reconcileSlackUnknownSend } from "./send-BZ1tPv7-.js";
 export { reconcileSlackUnknownSend, resolveSlackDmChannelId, sendMessageSlack, updateMessageSlack };

package/dist/{setup-core-CeiAVwQ3.js → setup-core-tPxMuFez.js}

@@ -1,8 +1,9 @@
-import { t as inspectSlackAccount } from "./account-inspect-Bvbtu3iH.js";
+import { t as inspectSlackAccount } from "./account-inspect-jn1xLaVi.js";
 import { t as isSlackPluginAccountConfigured } from "./account-configured-BwfXBo_F.js";
 import { hasConfiguredSecretInput, normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { DEFAULT_ACCOUNT_ID, createAccountScopedAllowFromSection, createAccountScopedGroupAccessSection, createAllowlistSetupWizardProxy, createLegacyCompatChannelDmPolicy, createPatchedAccountSetupAdapter, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, parseMentionOrPrefixedId, patchChannelConfigForAccount, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup-runtime";
+import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
+import { DEFAULT_ACCOUNT_ID, createAccountScopedAllowFromSection, createAccountScopedGroupAccessSection, createAllowlistSetupWizardProxy, createPatchedAccountSetupAdapter, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, mergeAllowFromEntries, parseMentionOrPrefixedId, patchChannelConfigForAccount, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup-runtime";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 //#region extensions/slack/src/setup-shared.ts
@@ -24,8 +25,8 @@ function buildSlackManifest(botName = "OpenClaw") {
 				messages_tab_enabled: true,
 				messages_tab_read_only_enabled: false
 			},
-			assistant_view: {
-				assistant_description: `${safeName} connects Slack assistant threads to OpenClaw agents.`,
+			agent_view: {
+				agent_description: `${safeName} connects Slack Agent View conversations to OpenClaw agents.`,
 				suggested_prompts: [
 					{
 						title: "What can you do?",
@@ -77,8 +78,7 @@ function buildSlackManifest(botName = "OpenClaw") {
 			event_subscriptions: { bot_events: [
 				"app_home_opened",
 				"app_mention",
-				"assistant_thread_context_changed",
-				"assistant_thread_started",
+				"app_context_changed",
 				"channel_rename",
 				"member_joined_channel",
 				"member_left_channel",
@@ -100,8 +100,8 @@ function buildSlackSetupLines() {
 		"1) Slack API -> Create App -> From scratch or From manifest (with the JSON below)",
 		"2) Add Socket Mode + enable it to get the app-level token (xapp-...)",
 		"3) Install App to workspace to get the xoxb- bot token",
-		"4) Enable Event Subscriptions (socket) for message, App Home, and assistant events",
-		"5) App Home -> enable the Home tab, Messages tab for DMs, and AI assistant view",
+		"4) Enable Event Subscriptions (socket) for message, App Home, and Agent View events",
+		"5) App Home -> enable the Home tab, Messages tab for DMs, and Agent View",
 		"Manifest JSON follows as plain text for copy/paste.",
 		"Tip: set SLACK_BOT_TOKEN + SLACK_APP_TOKEN in your env.",
 		`Docs: ${formatDocsLink("/slack", "slack")}`
@@ -157,14 +157,14 @@ function setSlackSetupIdentity(params) {
 		cfg: params.cfg,
 		channel: SLACK_CHANNEL,
 		accountId: params.accountId,
-		patch: params.identity === "user" ? { identity: "user" } : {}
+		patch: params.identity === "user" ? { postAs: "user" } : {}
 	});
 	if (params.identity === "user") return next;
 	const slack = next.channels?.slack;
 	if (!slack) return next;
 	if (params.accountId === DEFAULT_ACCOUNT_ID) {
 		const nextSlack = { ...slack };
-		delete nextSlack.identity;
+		delete nextSlack.postAs;
 		return {
 			...next,
 			channels: {
@@ -176,8 +176,8 @@ function setSlackSetupIdentity(params) {
 	const account = slack.accounts?.[params.accountId];
 	if (!account) return next;
 	const nextAccount = { ...account };
-	if (slack.identity === "user") nextAccount.identity = "bot";
-	else delete nextAccount.identity;
+	if (slack.postAs === "user") nextAccount.postAs = "bot";
+	else delete nextAccount.postAs;
 	return {
 		...next,
 		channels: {
@@ -263,55 +263,153 @@ function hasSlackSetupCredentials(params) {
 const slackSetupAdapterBase = createPatchedAccountSetupAdapter({
 	channelKey: SLACK_CHANNEL,
 	validateInput: ({ cfg, accountId, input }) => {
-		if (input.useEnv && accountId !== DEFAULT_ACCOUNT_ID) return "Slack env tokens can only be used for the default account.";
+		const setupInput = input;
+		if (setupInput.useEnv && accountId !== DEFAULT_ACCOUNT_ID) return "Slack env tokens can only be used for the default account.";
 		const account = inspectSlackAccount({
 			cfg,
 			accountId
 		});
-		const identity = input.identity ?? account.config.identity ?? "bot";
-		const mode = input.mode ?? account.config.mode ?? "socket";
+		const identity = setupInput.identity ?? account.config.postAs ?? "bot";
+		const mode = setupInput.mode ?? account.config.mode ?? "socket";
 		if (identity === "user" && mode === "relay") return "Slack user identity setup supports mode \"socket\" or \"http\", not \"relay\".";
-		if (input.useEnv) return identity === "user" ? "Slack user identity setup does not support --use-env; configure userToken and the transport credential explicitly." : null;
+		if (setupInput.useEnv) return identity === "user" ? "Slack user identity setup does not support --use-env; configure userToken and the transport credential explicitly." : null;
 		if (hasSlackSetupCredentials({
-			input,
+			input: setupInput,
 			identity,
 			mode
 		})) return null;
 		if (identity === "user") return mode === "http" ? "Slack user identity requires --user-token and --signing-secret." : "Slack user identity requires --user-token and --app-token.";
 		return "Slack requires --bot-token and --app-token (or --use-env).";
 	},
-	buildPatch: (input) => ({
-		...input.identity ? { identity: input.identity } : {},
-		...input.identity === "user" && input.mode ? { mode: input.mode } : {},
-		...input.botToken ? { botToken: input.botToken } : {},
-		...input.appToken ? { appToken: input.appToken } : {},
-		...input.userToken ? { userToken: input.userToken } : {},
-		...input.signingSecret ? { signingSecret: input.signingSecret } : {}
-	})
+	buildPatch: (input) => {
+		const setupInput = input;
+		return {
+			...setupInput.identity ? { postAs: setupInput.identity } : {},
+			...setupInput.identity === "user" && setupInput.mode ? { mode: setupInput.mode } : {},
+			...setupInput.botToken ? { botToken: setupInput.botToken } : {},
+			...setupInput.appToken ? { appToken: setupInput.appToken } : {},
+			...setupInput.userToken ? { userToken: setupInput.userToken } : {},
+			...setupInput.signingSecret ? { signingSecret: setupInput.signingSecret } : {}
+		};
+	}
 });
 const slackSetupAdapter = {
 	...slackSetupAdapterBase,
+	singleAccountKeysToMove: ["appToken"],
 	applyAccountConfig: ({ cfg, accountId, input }) => {
-		const identity = input.identity ?? inspectSlackAccount({
+		const setupInput = input;
+		const identity = setupInput.identity ?? inspectSlackAccount({
 			cfg,
 			accountId
-		}).config.identity;
+		}).config.postAs;
 		return slackSetupAdapterBase.applyAccountConfig({
 			cfg,
 			accountId,
 			input: identity === "user" ? {
-				...input,
+				...setupInput,
 				identity
-			} : input
+			} : setupInput
 		});
 	}
 };
+const slackSetupContract = defineChannelSetupContract({
+	fields: {
+		botToken: {
+			kind: "string",
+			sensitive: true,
+			cli: {
+				flags: "--bot-token <token>",
+				description: "Slack bot token"
+			}
+		},
+		appToken: {
+			kind: "string",
+			sensitive: true,
+			cli: {
+				flags: "--app-token <token>",
+				description: "Slack app token"
+			}
+		},
+		userToken: {
+			kind: "string",
+			sensitive: true,
+			cli: {
+				flags: "--user-token <token>",
+				description: "Slack user token"
+			}
+		},
+		signingSecret: {
+			kind: "string",
+			sensitive: true,
+			cli: {
+				flags: "--signing-secret <secret>",
+				description: "Slack signing secret"
+			}
+		},
+		identity: {
+			kind: "choice",
+			choices: ["bot", "user"],
+			cli: {
+				flags: "--identity <kind>",
+				description: "Slack identity"
+			}
+		},
+		mode: {
+			kind: "choice",
+			choices: ["socket", "http"],
+			cli: {
+				flags: "--mode <mode>",
+				description: "Slack connection mode"
+			}
+		},
+		useEnv: {
+			kind: "boolean",
+			cli: {
+				flags: "--use-env",
+				description: "Use Slack environment credentials"
+			}
+		}
+	},
+	legacyAdapter: slackSetupAdapter
+});
 function createSlackSetupWizardBase(handlers) {
-	const slackDmPolicy = createLegacyCompatChannelDmPolicy({
+	const slackDmPolicy = {
 		label: "Slack",
 		channel: SLACK_CHANNEL,
+		policyKey: "channels.slack.dmPolicy",
+		allowFromKey: "channels.slack.allowFrom",
+		resolveConfigKeys: (_cfg, accountId) => accountId && accountId !== DEFAULT_ACCOUNT_ID ? {
+			policyKey: `channels.slack.accounts.${accountId}.dmPolicy`,
+			allowFromKey: `channels.slack.accounts.${accountId}.allowFrom`
+		} : {
+			policyKey: "channels.slack.dmPolicy",
+			allowFromKey: "channels.slack.allowFrom"
+		},
+		getCurrent: (cfg, accountId) => inspectSlackAccount({
+			cfg,
+			accountId
+		}).config.dmPolicy ?? "pairing",
+		setPolicy: (cfg, policy, accountId) => {
+			const account = inspectSlackAccount({
+				cfg,
+				accountId
+			});
+			return patchChannelConfigForAccount({
+				cfg,
+				channel: SLACK_CHANNEL,
+				accountId: account.accountId,
+				patch: {
+					dmPolicy: policy,
+					...policy === "open" ? { allowFrom: mergeAllowFromEntries(account.config.allowFrom ?? [], ["*"]) } : {},
+					dm: {
+						...account.config.dm,
+						enabled: typeof account.config.dm?.enabled === "boolean" ? account.config.dm.enabled : true
+					}
+				}
+			});
+		},
 		promptAllowFrom: handlers.promptAllowFrom
-	});
+	};
 	return {
 		channel: SLACK_CHANNEL,
 		status: createStandardChannelSetupStatus({
@@ -332,7 +430,7 @@ function createSlackSetupWizardBase(handlers) {
 				cfg,
 				accountId
 			});
-			if (currentAccount.configured && currentAccount.config.identity !== "user") return { cfg };
+			if (currentAccount.configured && currentAccount.config.postAs !== "user") return { cfg };
 			const identity = await prompter.select({
 				message: "How should OpenClaw appear in Slack?",
 				options: [{
@@ -344,14 +442,14 @@ function createSlackSetupWizardBase(handlers) {
 					label: "Slack user",
 					hint: "Post as the authorizing human"
 				}],
-				initialValue: currentAccount.config.identity ?? "bot"
+				initialValue: currentAccount.config.postAs ?? "bot"
 			});
 			const next = setSlackSetupIdentity({
 				cfg,
 				accountId,
 				identity
 			});
-			if (currentAccount.configured && identity === currentAccount.config.identity) return { cfg: next };
+			if (currentAccount.configured && identity === currentAccount.config.postAs) return { cfg: next };
 			if (identity === "user") {
 				if (currentAccount.config.mode === "relay") throw new Error("Slack user identity setup supports mode \"socket\" or \"http\", not \"relay\".");
 				await prompter.note([
@@ -375,7 +473,7 @@ function createSlackSetupWizardBase(handlers) {
 			isAvailable: ({ cfg, accountId }) => accountId === DEFAULT_ACCOUNT_ID && (inspectSlackAccount({
 				cfg,
 				accountId
-			}).config.identity ?? "bot") === "bot" && Boolean(process.env.SLACK_BOT_TOKEN?.trim()) && Boolean(process.env.SLACK_APP_TOKEN?.trim()) && !inspectSlackAccount({
+			}).config.postAs ?? "bot") === "bot" && Boolean(process.env.SLACK_BOT_TOKEN?.trim()) && Boolean(process.env.SLACK_APP_TOKEN?.trim()) && !inspectSlackAccount({
 				cfg,
 				accountId
 			}).configured,
@@ -392,7 +490,7 @@ function createSlackSetupWizardBase(handlers) {
 				shouldPrompt: ({ cfg, accountId }) => (inspectSlackAccount({
 					cfg,
 					accountId
-				}).config.identity ?? "bot") === "bot"
+				}).config.postAs ?? "bot") === "bot"
 			}),
 			createSlackTokenCredential({
 				inputKey: "userToken",
@@ -404,7 +502,7 @@ function createSlackSetupWizardBase(handlers) {
 				shouldPrompt: ({ cfg, accountId }) => inspectSlackAccount({
 					cfg,
 					accountId
-				}).config.identity === "user"
+				}).config.postAs === "user"
 			}),
 			createSlackTokenCredential({
 				inputKey: "appToken",
@@ -418,7 +516,7 @@ function createSlackSetupWizardBase(handlers) {
 						cfg,
 						accountId
 					});
-					return (account.config.identity ?? "bot") === "bot" || (account.config.mode ?? "socket") === "socket";
+					return (account.config.postAs ?? "bot") === "bot" || (account.config.mode ?? "socket") === "socket";
 				}
 			}),
 			createSlackTokenCredential({
@@ -432,7 +530,7 @@ function createSlackSetupWizardBase(handlers) {
 						cfg,
 						accountId
 					});
-					return account.config.identity === "user" && account.config.mode === "http";
+					return account.config.postAs === "user" && account.config.mode === "http";
 				}
 			})
 		],
@@ -499,4 +597,4 @@ function createSlackSetupWizardProxy(loadWizard) {
 	});
 }
 //#endregion
-export { describeSlackSetupAccount as a, SLACK_CHANNEL as i, createSlackSetupWizardProxy as n, isSlackSetupAccountConfigured as o, slackSetupAdapter as r, createSlackSetupWizardBase as t };
+export { SLACK_CHANNEL as a, slackSetupContract as i, createSlackSetupWizardProxy as n, describeSlackSetupAccount as o, slackSetupAdapter as r, isSlackSetupAccountConfigured as s, createSlackSetupWizardBase as t };

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as slackSetupPlugin } from "./channel.setup-CgkADtZg.js";
+import { t as slackSetupPlugin } from "./channel.setup-DOSTEDfA.js";
 export { slackSetupPlugin };

package/dist/{setup-surface-DLA0vHXp.js → setup-surface-wV-S1dE_.js}

@@ -1,17 +1,16 @@
-import { i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom } from "./accounts-DQEbYKh9.js";
-import { t as inspectSlackAccount } from "./account-inspect-Bvbtu3iH.js";
-import "./shared-C4yVB0Q-.js";
-import { i as SLACK_CHANNEL, t as createSlackSetupWizardBase } from "./setup-core-CeiAVwQ3.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-KTc568SU.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-DeGJf1yp.js";
+import { i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom } from "./accounts-BSr252c_.js";
+import { t as inspectSlackAccount } from "./account-inspect-jn1xLaVi.js";
+import "./shared-BfMskaMx.js";
+import { a as SLACK_CHANNEL, t as createSlackSetupWizardBase } from "./setup-core-tPxMuFez.js";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-DodP2TFx.js";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-M9eF8891.js";
 import { normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { adaptScopedAccountAccessor } from "openclaw/plugin-sdk/channel-config-helpers";
-import { createSetupTranslator, noteChannelLookupFailure, noteChannelLookupSummary, parseMentionOrPrefixedId, promptLegacyChannelAllowFromForAccount, resolveEntriesWithOptionalToken } from "openclaw/plugin-sdk/setup-runtime";
+import { createSetupTranslator, noteChannelLookupFailure, noteChannelLookupSummary, parseMentionOrPrefixedId, patchChannelConfigForAccount, promptResolvedAllowFrom, resolveEntriesWithOptionalToken, resolveSetupAccountId, splitSetupEntries } from "openclaw/plugin-sdk/setup-runtime";
 import { formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/slack/src/setup-surface.ts
 const t = createSetupTranslator();
 function resolveSlackSetupAuth(account, credentialValues) {
-	if (account.config.identity === "user") return credentialValues.userToken || account.userToken;
+	if (account.config.postAs === "user") return credentialValues.userToken || account.userToken;
 	return credentialValues.botToken || account.botToken;
 }
 async function resolveSlackAllowFromEntries(params) {
@@ -41,29 +40,34 @@ async function promptSlackAllowFrom(params) {
 		idPattern: /^[A-Z][A-Z0-9]+$/i,
 		normalizeId: (id) => id.toUpperCase()
 	});
-	return await promptLegacyChannelAllowFromForAccount({
+	const accountId = resolveSetupAccountId({
+		accountId: params.accountId,
+		defaultAccountId: resolveDefaultSlackAccountId(params.cfg)
+	});
+	const account = inspectSlackAccount({
 		cfg: params.cfg,
-		channel: SLACK_CHANNEL,
+		accountId
+	});
+	const noteTitle = t("wizard.slack.allowlistTitle");
+	await params.prompter.note([
+		t("wizard.slack.allowlistIntro"),
+		t("wizard.slack.examples"),
+		"- U12345678",
+		"- @alice",
+		t("wizard.slack.multipleEntries"),
+		t("wizard.channels.docs", { link: formatDocsLink("/slack", "slack") })
+	].join("\n"), noteTitle);
+	const allowFrom = await promptResolvedAllowFrom({
 		prompter: params.prompter,
-		accountId: params.accountId,
-		defaultAccountId: resolveDefaultSlackAccountId(params.cfg),
-		resolveAccount: adaptScopedAccountAccessor(inspectSlackAccount),
-		resolveExisting: (account, cfg) => resolveSlackAccountAllowFrom({
-			cfg,
-			accountId: account.accountId
+		existing: resolveSlackAccountAllowFrom({
+			cfg: params.cfg,
+			accountId
 		}) ?? [],
-		resolveToken: (account) => account.userToken ?? account.botToken ?? "",
-		noteTitle: t("wizard.slack.allowlistTitle"),
-		noteLines: [
-			t("wizard.slack.allowlistIntro"),
-			t("wizard.slack.examples"),
-			"- U12345678",
-			"- @alice",
-			t("wizard.slack.multipleEntries"),
-			t("wizard.channels.docs", { link: formatDocsLink("/slack", "slack") })
-		],
+		token: account.userToken ?? account.botToken ?? "",
 		message: t("wizard.slack.allowFromPrompt"),
 		placeholder: "@alice, U12345678",
+		label: noteTitle,
+		parseInputs: splitSetupEntries,
 		parseId,
 		invalidWithoutTokenNote: t("wizard.slack.allowFromInvalidWithoutToken"),
 		resolveEntries: async ({ token, entries }) => (await resolveSlackUserAllowlist({
@@ -75,6 +79,18 @@ async function promptSlackAllowFrom(params) {
 			id: entry.id ?? null
 		}))
 	});
+	return patchChannelConfigForAccount({
+		cfg: params.cfg,
+		channel: SLACK_CHANNEL,
+		accountId: account.accountId,
+		patch: {
+			allowFrom,
+			dm: {
+				...account.config.dm,
+				enabled: typeof account.config.dm?.enabled === "boolean" ? account.config.dm.enabled : true
+			}
+		}
+	});
 }
 async function resolveSlackGroupAllowlist(params) {
 	let keys = params.entries;

package/dist/{shared-C4yVB0Q-.js → shared-BfMskaMx.js}

@@ -1,11 +1,11 @@
-import { a as resolveSlackAccount, c as resolveSlackConfigAccessorAccount, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, o as resolveSlackAccountAllowFrom, r as mergeSlackAccountConfig, s as resolveSlackAccountDmPolicy } from "./accounts-DQEbYKh9.js";
-import { t as inspectSlackAccount } from "./account-inspect-Bvbtu3iH.js";
+import { a as resolveSlackAccount, c as resolveSlackConfigAccessorAccount, i as resolveDefaultSlackAccountId, n as listSlackAccountIds, o as resolveSlackAccountAllowFrom, r as mergeSlackAccountConfig, s as resolveSlackAccountDmPolicy } from "./accounts-BSr252c_.js";
+import { t as inspectSlackAccount } from "./account-inspect-jn1xLaVi.js";
 import { t as isSlackPluginAccountConfigured } from "./account-configured-BwfXBo_F.js";
-import { n as isSlackInteractiveRepliesEnabled } from "./interactive-replies-Dm_t2R9S.js";
-import { t as probeSlack, v as getChatChannelMeta } from "./probe-Borhn9PQ.js";
-import { i as SLACK_CHANNEL } from "./setup-core-CeiAVwQ3.js";
-import { t as SlackChannelConfigSchema } from "./config-schema-XjJGfwQC.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-DKpe5VBr.js";
+import { n as isSlackInteractiveRepliesEnabled } from "./interactive-replies-C3ffk6oN.js";
+import { t as probeSlack, v as getChatChannelMeta } from "./probe-CVRuArHA.js";
+import { a as SLACK_CHANNEL } from "./setup-core-tPxMuFez.js";
+import { t as SlackChannelConfigSchema } from "./config-schema-B4j4tCOI.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-U6oVntbM.js";
 import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DxmvbxBF.js";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
@@ -46,7 +46,7 @@ const collectSlackSecurityWarnings = createOpenProviderConfiguredRouteWarningCol
 		remediation: "Set channels.slack.groupPolicy=\"allowlist\" and configure channels.slack.channels"
 	}
 });
-const loadSlackSecurityAuditModule = createLazyRuntimeModule(() => import("./security-audit-CikQhBUY.js").then((n) => n.n));
+const loadSlackSecurityAuditModule = createLazyRuntimeModule(() => import("./security-audit-Cz6erklv.js").then((n) => n.n));
 const slackSecurityAdapter = {
 	resolveDmPolicy: resolveSlackDmPolicy,
 	collectWarnings: collectSlackSecurityWarnings,
@@ -216,6 +216,7 @@ function createSlackPluginBase(params) {
 			preferSessionLookupForAnnounceTarget: true
 		},
 		setupWizard: params.setupWizard,
+		...params.setupContract ? { setupContract: params.setupContract } : {},
 		capabilities: {
 			chatTypes: [
 				"direct",

package/dist/{slash-dispatch.runtime-BT-mMm-f.js → slash-dispatch.runtime-lfeIsXTX.js}

@@ -1,4 +1,4 @@
-import { r as deliverSlackSlashReplies$1 } from "./replies-B4bOdrYb.js";
+import { r as deliverSlackSlashReplies$1 } from "./replies-Cgr2Gli4.js";
 import { resolveAgentRoute as resolveAgentRoute$1 } from "openclaw/plugin-sdk/routing";
 import { resolveMarkdownTableMode as resolveMarkdownTableMode$1 } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { recordInboundSessionMetaSafe as recordInboundSessionMetaSafe$1, resolveConversationLabel as resolveConversationLabel$1 } from "openclaw/plugin-sdk/conversation-runtime";

package/node_modules/@types/node/README.md

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 
 ### Additional Details
- * Last updated: Wed, 01 Jul 2026 11:03:38 GMT
+ * Last updated: Wed, 08 Jul 2026 06:47:45 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 
 # Credits