@openclaw/slack 2026.7.2-beta.5 → 2026.7.33

package/dist/runtime-api-jpn3vQ7e.js

@@ -1,10 +0,0 @@
-import "./target-parsing-N6lHogYZ.js";
-import "./probe-BhQTDVBQ.js";
-import "./config-schema-BajbuJGL.js";
-import "openclaw/plugin-sdk/account-id";
-import { createActionGate as createActionGate$1, imageResultFromFile, jsonResult, readPositiveIntegerParam, readReactionParams, readStringParam, withNormalizedTimestamp } from "openclaw/plugin-sdk/channel-actions";
-import "openclaw/plugin-sdk/channel-status";
-import "openclaw/plugin-sdk/channel-config-schema";
-import "openclaw/plugin-sdk/channel-plugin-common";
-import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
-export { readPositiveIntegerParam as a, withNormalizedTimestamp as c, loadOutboundMediaFromUrl as i, imageResultFromFile as n, readReactionParams as o, jsonResult as r, readStringParam as s, createActionGate$1 as t };

package/dist/scopes-B2SqZ--4.js

@@ -1,73 +0,0 @@
-import { c as createSlackWebClient, r as formatSlackError } from "./probe-BhQTDVBQ.js";
-import { isRecord, normalizeOptionalString, normalizeStringEntries, sortUniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
-//#region extensions/slack/src/scopes.ts
-function collectScopes(value, into) {
-	if (!value) return;
-	if (Array.isArray(value)) {
-		for (const entry of value) if (typeof entry === "string" && entry.trim()) into.push(entry.trim());
-		return;
-	}
-	if (typeof value === "string") {
-		const raw = value.trim();
-		if (!raw) return;
-		const parts = raw.split(/[,\s]+/).map((part) => part.trim());
-		for (const part of parts) if (part) into.push(part);
-		return;
-	}
-	if (!isRecord(value)) return;
-	for (const entry of Object.values(value)) if (Array.isArray(entry) || typeof entry === "string") collectScopes(entry, into);
-}
-function normalizeScopes(scopes) {
-	return sortUniqueStrings(normalizeStringEntries(scopes));
-}
-function extractScopes(payload) {
-	if (!isRecord(payload)) return [];
-	const scopes = [];
-	collectScopes(payload.scopes, scopes);
-	collectScopes(payload.scope, scopes);
-	if (isRecord(payload.response_metadata)) collectScopes(payload.response_metadata.scopes, scopes);
-	if (isRecord(payload.info)) {
-		collectScopes(payload.info.scopes, scopes);
-		collectScopes(payload.info.scope, scopes);
-		collectScopes(payload.info.user_scopes, scopes);
-		collectScopes(payload.info.bot_scopes, scopes);
-	}
-	return normalizeScopes(scopes);
-}
-async function callSlack(client, method) {
-	try {
-		const result = await client.apiCall(method);
-		return isRecord(result) ? result : null;
-	} catch (err) {
-		return {
-			ok: false,
-			error: formatSlackError(err)
-		};
-	}
-}
-async function fetchSlackScopes(token, timeoutMs) {
-	const client = createSlackWebClient(token, { timeout: timeoutMs });
-	const attempts = [
-		"auth.test",
-		"auth.scopes",
-		"apps.permissions.info"
-	];
-	const errors = [];
-	for (const method of attempts) {
-		const result = await callSlack(client, method);
-		const scopes = extractScopes(result);
-		if (scopes.length > 0) return {
-			ok: true,
-			scopes,
-			source: method
-		};
-		const error = isRecord(result) ? normalizeOptionalString(result.error) : void 0;
-		if (error) errors.push(`${method}: ${error}`);
-	}
-	return {
-		ok: false,
-		error: errors.length > 0 ? errors.join(" | ") : "no scopes returned"
-	};
-}
-//#endregion
-export { fetchSlackScopes };

package/dist/secret-contract-DxmvbxBF.js

@@ -1,87 +0,0 @@
-import { collectConditionalChannelFieldAssignments, collectNestedChannelFieldAssignments, collectSimpleChannelFieldAssignments, createChannelSecretTargetRegistryEntries, getChannelSurface, hasOwnProperty } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
-//#region extensions/slack/src/secret-contract.ts
-const secretTargetRegistryEntries = createChannelSecretTargetRegistryEntries({
-	channelKey: "slack",
-	account: [
-		"appToken",
-		"relay.authToken",
-		"botToken",
-		"signingSecret",
-		"userToken"
-	],
-	channel: [
-		"appToken",
-		"botToken",
-		"relay.authToken",
-		"signingSecret",
-		"userToken"
-	]
-});
-function collectRuntimeConfigAssignments(params) {
-	const resolved = getChannelSurface(params.config, "slack");
-	if (!resolved) return;
-	const { channel: slack, surface } = resolved;
-	const resolveMode = (value) => value === "http" || value === "socket" || value === "relay" ? value : void 0;
-	const baseMode = resolveMode(slack.mode) ?? "socket";
-	for (const field of ["botToken", "userToken"]) collectSimpleChannelFieldAssignments({
-		channelKey: "slack",
-		field,
-		channel: slack,
-		surface,
-		defaults: params.defaults,
-		context: params.context,
-		topInactiveReason: `no enabled account inherits this top-level Slack ${field}.`,
-		accountInactiveReason: "Slack account is disabled."
-	});
-	const resolveAccountMode = (account) => resolveMode(account.mode) ?? baseMode;
-	const hasNestedAuthTokenOverride = (account) => {
-		const relay = account.relay;
-		return relay !== null && typeof relay === "object" && !Array.isArray(relay) && hasOwnProperty(relay, "authToken");
-	};
-	collectConditionalChannelFieldAssignments({
-		channelKey: "slack",
-		field: "appToken",
-		channel: slack,
-		surface,
-		defaults: params.defaults,
-		context: params.context,
-		topLevelActiveWithoutAccounts: baseMode === "socket",
-		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && !hasOwnProperty(account, "appToken") && resolveAccountMode(account) === "socket",
-		accountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "socket",
-		topInactiveReason: "no enabled Slack socket-mode surface inherits this top-level appToken.",
-		accountInactiveReason: "Slack account is disabled or not running in socket mode."
-	});
-	collectConditionalChannelFieldAssignments({
-		channelKey: "slack",
-		field: "signingSecret",
-		channel: slack,
-		surface,
-		defaults: params.defaults,
-		context: params.context,
-		topLevelActiveWithoutAccounts: baseMode === "http",
-		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && !hasOwnProperty(account, "signingSecret") && resolveAccountMode(account) === "http",
-		accountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "http",
-		topInactiveReason: "no enabled Slack HTTP-mode surface inherits this top-level signingSecret.",
-		accountInactiveReason: "Slack account is disabled or not running in HTTP mode."
-	});
-	collectNestedChannelFieldAssignments({
-		channelKey: "slack",
-		nestedKey: "relay",
-		field: "authToken",
-		channel: slack,
-		surface,
-		defaults: params.defaults,
-		context: params.context,
-		topLevelActive: surface.channelEnabled && (!surface.hasExplicitAccounts && baseMode === "relay" || surface.accounts.some(({ account, enabled }) => enabled && resolveAccountMode(account) === "relay" && !hasNestedAuthTokenOverride(account))),
-		topLevelInheritedAccountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "relay" && !hasNestedAuthTokenOverride(account),
-		topInactiveReason: "no enabled Slack relay-mode surface inherits this top-level relay authToken.",
-		accountActive: ({ account, enabled }) => enabled && resolveAccountMode(account) === "relay",
-		accountInactiveReason: "Slack account is disabled or not running in relay mode."
-	});
-}
-const channelSecrets = {
-	secretTargetRegistryEntries,
-	collectRuntimeConfigAssignments
-};
-//#endregion
-export { collectRuntimeConfigAssignments as n, secretTargetRegistryEntries as r, channelSecrets as t };

package/dist/security-audit-DR097212.js

@@ -1,41 +0,0 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { coerceNativeSetting, normalizeAllowFromList } from "openclaw/plugin-sdk/channel-policy";
-import { readChannelAllowFromStore } from "openclaw/plugin-sdk/conversation-runtime";
-import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "openclaw/plugin-sdk/native-command-config-runtime";
-//#region extensions/slack/src/security-audit.ts
-var security_audit_exports = /* @__PURE__ */ __exportAll({ collectSlackSecurityAuditFindings: () => collectSlackSecurityAuditFindings });
-async function collectSlackSecurityAuditFindings(params) {
-	const findings = [];
-	const slackCfg = params.account.config ?? {};
-	const accountId = params.accountId?.trim() || params.account.accountId || "default";
-	if (!(slackCfg.slashCommand?.enabled === true || resolveNativeCommandsEnabled({
-		providerId: "slack",
-		providerSetting: coerceNativeSetting(slackCfg.commands?.native),
-		globalSetting: params.cfg.commands?.native
-	}) || resolveNativeSkillsEnabled({
-		providerId: "slack",
-		providerSetting: coerceNativeSetting(slackCfg.commands?.nativeSkills),
-		globalSetting: params.cfg.commands?.nativeSkills
-	}))) return findings;
-	const allowFromRaw = slackCfg.allowFrom;
-	const legacyAllowFromRaw = params.account.dm?.allowFrom;
-	const allowFrom = Array.isArray(allowFromRaw) ? allowFromRaw : Array.isArray(legacyAllowFromRaw) ? legacyAllowFromRaw : [];
-	const storeAllowFrom = await readChannelAllowFromStore("slack", process.env, accountId).catch(() => []);
-	const ownerAllowFromConfigured = normalizeAllowFromList([...allowFrom, ...storeAllowFrom]).length > 0;
-	const channels = slackCfg.channels ?? {};
-	const hasAnyChannelUsersAllowlist = Object.values(channels).some((value) => {
-		if (!value || typeof value !== "object") return false;
-		const channel = value;
-		return Array.isArray(channel.users) && channel.users.length > 0;
-	});
-	if (!ownerAllowFromConfigured && !hasAnyChannelUsersAllowlist) findings.push({
-		checkId: "channels.slack.commands.slash.no_allowlists",
-		severity: "warn",
-		title: "Slack slash commands have no allowlists",
-		detail: "Slack slash/native commands are enabled, but neither an owner allowFrom list nor any channels.<id>.users allowlist is configured; /… commands will be rejected for everyone.",
-		remediation: "Approve yourself via pairing (recommended), or set channels.slack.allowFrom and/or channels.slack.channels.<id>.users."
-	});
-	return findings;
-}
-//#endregion
-export { security_audit_exports as n, collectSlackSecurityAuditFindings as t };