@openclaw/slack 2026.7.2-beta.5 → 2026.8.1-beta.2

package/node_modules/undici/lib/web/cookies/util.js

@@ -105,7 +105,7 @@ function validateCookiePath (path) {
 
     if (
       code < 0x20 || // exclude CTLs (0-31)
-      code === 0x7F || // DEL
+      code > 0x7E || // exclude DEL and non-ascii
       code === 0x3B // ;
     ) {
       throw new Error('Invalid cookie path')
@@ -114,16 +114,80 @@ function validateCookiePath (path) {
 }
 
 /**
- * I have no idea why these values aren't allowed to be honest,
- * but Deno tests these. - Khafra
+ * <let-dig> ::= <letter> | <digit>
+ *
+ * <letter> ::= any one of the 52 alphabetic characters A through Z in
+ * upper case and a through z in lower case
+ *
+ * <digit> ::= any one of the ten digits 0 through 9r
+ *
+ * @see https://www.rfc-editor.org/rfc/rfc1034#section-3.5
+ * @param {number} code
+ */
+function isLetterOrDigit (code) {
+  return (
+    (code >= 0x30 && code <= 0x39) || // 0-9
+    (code >= 0x41 && code <= 0x5A) || // A-Z
+    (code >= 0x61 && code <= 0x7A) // a-z
+  )
+}
+
+/**
+ * Validates a cookie domain against the "preferred name syntax".
+ *
+ * <domain>      ::= <subdomain> | " "
+ * <subdomain>   ::= <label> | <subdomain> "." <label>
+ * <label>       ::= <let-dig> [ [ <ldh-str> ] <let-dig> ]
+ * <ldh-str>     ::= <let-dig-hyp> | <let-dig-hyp> <ldh-str>
+ * <let-dig-hyp> ::= <let-dig> | "-"
+ *
+ * @see https://www.rfc-editor.org/rfc/rfc1034#section-3.5
+ * @see https://www.rfc-editor.org/rfc/rfc1123#section-2.1
+ * @see https://www.rfc-editor.org/rfc/rfc1035#section-2.3.4
  * @param {string} domain
  */
 function validateCookieDomain (domain) {
-  if (
-    domain.startsWith('-') ||
-    domain.endsWith('.') ||
-    domain.endsWith('-')
-  ) {
+  // <domain> ::= <subdomain> | " "
+  if (domain === ' ') {
+    return
+  }
+
+  if (domain.length > 255) {
+    throw new Error('Invalid cookie domain')
+  }
+
+  let labelLength = 0
+
+  for (let i = 0; i < domain.length; ++i) {
+    const code = domain.charCodeAt(i)
+
+    if (code === 0x2E) {
+      if (labelLength === 0) {
+        throw new Error('Invalid cookie domain')
+      }
+
+      if (domain.charCodeAt(i - 1) === 0x2D) { // "-"
+        throw new Error('Invalid cookie domain')
+      }
+
+      labelLength = 0
+      continue
+    }
+
+    if (labelLength === 0 && !isLetterOrDigit(code)) {
+      throw new Error('Invalid cookie domain')
+    }
+
+    if (!isLetterOrDigit(code) && code !== 0x2D) { // "-"
+      throw new Error('Invalid cookie domain')
+    }
+
+    if (++labelLength > 63) {
+      throw new Error('Invalid cookie domain')
+    }
+  }
+
+  if (labelLength === 0 || domain.charCodeAt(domain.length - 1) === 0x2D) { // "-"
     throw new Error('Invalid cookie domain')
   }
 }
@@ -266,7 +330,13 @@ function stringify (cookie) {
 
     const [key, ...value] = part.split('=')
 
-    out.push(`${key.trim()}=${value.join('=')}`)
+    const trimmedKey = key.trim()
+    const joinedValue = value.join('=')
+
+    validateCookieName(trimmedKey)
+    validateCookieValue(joinedValue)
+
+    out.push(`${trimmedKey}=${joinedValue}`)
   }
 
   return out.join('; ')

package/node_modules/undici/package.json

@@ -1,6 +1,6 @@
 {
   "name": "undici",
-  "version": "7.28.0",
+  "version": "7.29.0",
   "description": "An HTTP/1.1 client, written from scratch for Node.js",
   "homepage": "https://undici.nodejs.org",
   "bugs": {

package/openclaw.plugin.json

@@ -1,5 +1,8 @@
 {
   "id": "slack",
+  "doctorContract": {
+    "configRepair": true
+  },
   "name": "Slack",
   "description": "OpenClaw Slack channel plugin for channels, DMs, commands, and app events.",
   "skills": [
@@ -248,13 +251,6 @@
                     "exclusiveMinimum": 0,
                     "maximum": 9007199254740991
                   },
-                  "render": {
-                    "type": "string",
-                    "enum": [
-                      "text",
-                      "rich"
-                    ]
-                  },
                   "toolProgress": {
                     "type": "boolean"
                   },
@@ -381,9 +377,6 @@
               "relay"
             ]
           },
-          "enterpriseOrgInstall": {
-            "type": "boolean"
-          },
           "relay": {
             "type": "object",
             "properties": {
@@ -420,6 +413,29 @@
                         ],
                         "additionalProperties": false
                       },
+                      {
+                        "type": "object",
+                        "properties": {
+                          "source": {
+                            "type": "string",
+                            "const": "store"
+                          },
+                          "provider": {
+                            "type": "string",
+                            "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                          },
+                          "id": {
+                            "type": "string",
+                            "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                          }
+                        },
+                        "required": [
+                          "source",
+                          "provider",
+                          "id"
+                        ],
+                        "additionalProperties": false
+                      },
                       {
                         "type": "object",
                         "properties": {
@@ -504,6 +520,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -664,6 +703,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -742,6 +804,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -820,6 +905,29 @@
                     ],
                     "additionalProperties": false
                   },
+                  {
+                    "type": "object",
+                    "properties": {
+                      "source": {
+                        "type": "string",
+                        "const": "store"
+                      },
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                      },
+                      "id": {
+                        "type": "string",
+                        "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                      }
+                    },
+                    "required": [
+                      "source",
+                      "provider",
+                      "id"
+                    ],
+                    "additionalProperties": false
+                  },
                   {
                     "type": "object",
                     "properties": {
@@ -1540,13 +1648,6 @@
                           "exclusiveMinimum": 0,
                           "maximum": 9007199254740991
                         },
-                        "render": {
-                          "type": "string",
-                          "enum": [
-                            "text",
-                            "rich"
-                          ]
-                        },
                         "toolProgress": {
                           "type": "boolean"
                         },
@@ -1671,9 +1772,6 @@
                     "relay"
                   ]
                 },
-                "enterpriseOrgInstall": {
-                  "type": "boolean"
-                },
                 "relay": {
                   "type": "object",
                   "properties": {
@@ -1710,6 +1808,29 @@
                               ],
                               "additionalProperties": false
                             },
+                            {
+                              "type": "object",
+                              "properties": {
+                                "source": {
+                                  "type": "string",
+                                  "const": "store"
+                                },
+                                "provider": {
+                                  "type": "string",
+                                  "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                                },
+                                "id": {
+                                  "type": "string",
+                                  "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                                }
+                              },
+                              "required": [
+                                "source",
+                                "provider",
+                                "id"
+                              ],
+                              "additionalProperties": false
+                            },
                             {
                               "type": "object",
                               "properties": {
@@ -1794,6 +1915,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -1953,6 +2097,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -2031,6 +2198,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -2109,6 +2299,29 @@
                           ],
                           "additionalProperties": false
                         },
+                        {
+                          "type": "object",
+                          "properties": {
+                            "source": {
+                              "type": "string",
+                              "const": "store"
+                            },
+                            "provider": {
+                              "type": "string",
+                              "pattern": "^[a-z][a-z0-9_-]{0,63}$"
+                            },
+                            "id": {
+                              "type": "string",
+                              "pattern": "^[A-Z][A-Z0-9_]{0,127}$"
+                            }
+                          },
+                          "required": [
+                            "source",
+                            "provider",
+                            "id"
+                          ],
+                          "additionalProperties": false
+                        },
                         {
                           "type": "object",
                           "properties": {
@@ -2618,10 +2831,6 @@
           "label": "Slack",
           "help": "Slack channel provider configuration for bot/app tokens, streaming behavior, and DM policy controls. Keep token handling and thread behavior explicit to avoid noisy workspace interactions."
         },
-        "enterpriseOrgInstall": {
-          "label": "Slack Enterprise Grid Org Install",
-          "help": "Enable only for an Enterprise Grid org-wide bot installation. OpenClaw verifies the token with Slack auth.test at startup; DMs must be disabled or use dmPolicy=\"open\" with allowFrom=[\"*\"]."
-        },
         "postAs": {
           "label": "Slack Identity",
           "help": "Select \"bot\" (default) for the classic Slack app/bot identity or \"user\" to post as the authorizing human through a user token while the app carries event transport."
@@ -2674,6 +2883,66 @@
           "label": "Slack Thread Participation",
           "help": "Treat follow-ups in threads where the bot participated as implicit mentions when the channel reports that signal."
         },
+        "streaming": {
+          "label": "Slack Streaming Mode",
+          "help": "Unified Slack stream preview mode: \"off\" | \"partial\" | \"block\" | \"progress\" (default). Legacy boolean/streamMode keys are auto-mapped."
+        },
+        "streaming.mode": {
+          "label": "Slack Streaming Mode",
+          "help": "Canonical Slack preview mode: \"off\" | \"partial\" | \"block\" | \"progress\" (default)."
+        },
+        "streaming.chunkMode": {
+          "label": "Slack Chunk Mode",
+          "help": "Chunking mode for outbound Slack text delivery: \"length\" (default) or \"newline\"."
+        },
+        "streaming.block.enabled": {
+          "label": "Slack Block Streaming Enabled",
+          "help": "Enable chunked block-style Slack preview delivery when channels.slack.streaming.mode=\"block\"."
+        },
+        "streaming.block.coalesce": {
+          "label": "Slack Block Streaming Coalesce",
+          "help": "Merge streamed Slack block replies before final delivery."
+        },
+        "streaming.nativeTransport": {
+          "label": "Slack Native Streaming",
+          "help": "Enable native Slack text streaming (chat.startStream/chat.appendStream/chat.stopStream) when channels.slack.streaming.mode is partial (default: true). Native streaming and Slack assistant thread status require a reply thread target; top-level DMs can still use draft post-and-edit preview streaming."
+        },
+        "streaming.preview.toolProgress": {
+          "label": "Slack Draft Tool Progress",
+          "help": "Show tool/progress activity in the live draft preview message (default: true). Set false to hide interim tool updates while the draft preview stays active."
+        },
+        "streaming.preview.commandText": {
+          "label": "Slack Draft Command Text",
+          "help": "Command/exec detail in preview tool-progress lines: \"status\" is the safe default; \"raw\" opts into command text."
+        },
+        "streaming.progress.nativeTaskCards": {
+          "label": "Slack Native Progress Task Cards",
+          "help": "Slack native task-card progress updates when channels.slack.streaming.mode=\"progress\" and streaming.nativeTransport is enabled. Set false to fall back to the Block Kit progress card. Default: true."
+        },
+        "streaming.progress.label": {
+          "label": "Slack Progress Label",
+          "help": "Initial progress draft title. Use \"auto\" for built-in single-word labels, a custom string, or false to hide the title."
+        },
+        "streaming.progress.labels": {
+          "label": "Slack Progress Label Pool",
+          "help": "Candidate labels for streaming.progress.label=\"auto\". Leave unset to use OpenClaw built-in progress labels."
+        },
+        "streaming.progress.maxLines": {
+          "label": "Slack Progress Max Lines",
+          "help": "Maximum number of compact progress lines to keep below the draft label (default: 8)."
+        },
+        "streaming.progress.maxLineChars": {
+          "label": "Slack Progress Max Line Chars",
+          "help": "Maximum characters per compact progress line before truncation (default: 120). Prose cuts at word boundaries; commands and paths keep useful suffixes."
+        },
+        "streaming.progress.toolProgress": {
+          "label": "Slack Progress Tool Lines",
+          "help": "Show compact tool/progress lines in progress draft mode (default: true). Set false to keep only the label until final delivery."
+        },
+        "streaming.progress.commandText": {
+          "label": "Slack Progress Command Text",
+          "help": "Command/exec detail in progress draft lines: \"status\" is the safe default; \"raw\" opts into command text."
+        },
         "allowBots": {
           "label": "Slack Allow Bot Messages",
           "help": "Allow bot-authored messages to trigger Slack replies (default: false)."
@@ -2732,7 +3001,7 @@
         },
         "execApprovals": {
           "label": "Slack Exec Approvals",
-          "help": "Slack-native exec approval routing and approver authorization. When unset, OpenClaw auto-enables DM-first native approvals if approvers can be resolved for this workspace account."
+          "help": "Slack-native exec approval routing and approver authorization. When unset, OpenClaw auto-enables DM-first native approvals if approvers can be resolved for this Slack account."
         },
         "presenceEvents": {
           "label": "Slack Presence Events",
@@ -2766,70 +3035,6 @@
           "label": "Slack Exec Approval Target",
           "help": "Controls where Slack approval prompts are sent: \"dm\" sends to approver DMs (default), \"channel\" sends to the originating Slack chat/thread, and \"both\" sends to both. Channel delivery exposes the command text to the chat, so only use it in trusted channels."
         },
-        "streaming": {
-          "label": "Slack Streaming Mode",
-          "help": "Unified Slack stream preview mode: \"off\" | \"partial\" | \"block\" | \"progress\". Legacy boolean/streamMode keys are auto-mapped."
-        },
-        "streaming.mode": {
-          "label": "Slack Streaming Mode",
-          "help": "Canonical Slack preview mode: \"off\" | \"partial\" | \"block\" | \"progress\"."
-        },
-        "streaming.chunkMode": {
-          "label": "Slack Chunk Mode",
-          "help": "Chunking mode for outbound Slack text delivery: \"length\" (default) or \"newline\"."
-        },
-        "streaming.block.enabled": {
-          "label": "Slack Block Streaming Enabled",
-          "help": "Enable chunked block-style Slack preview delivery when channels.slack.streaming.mode=\"block\"."
-        },
-        "streaming.block.coalesce": {
-          "label": "Slack Block Streaming Coalesce",
-          "help": "Merge streamed Slack block replies before final delivery."
-        },
-        "streaming.nativeTransport": {
-          "label": "Slack Native Streaming",
-          "help": "Enable native Slack text streaming (chat.startStream/chat.appendStream/chat.stopStream) when channels.slack.streaming.mode is partial (default: true). Native streaming and Slack assistant thread status require a reply thread target; top-level DMs can still use draft post-and-edit preview streaming."
-        },
-        "streaming.preview.toolProgress": {
-          "label": "Slack Draft Tool Progress",
-          "help": "Show tool/progress activity in the live draft preview message (default: true). Set false to hide interim tool updates while the draft preview stays active."
-        },
-        "streaming.preview.commandText": {
-          "label": "Slack Draft Command Text",
-          "help": "Command/exec detail in preview tool-progress lines: \"raw\" preserves released behavior; \"status\" shows only the tool label."
-        },
-        "streaming.progress.label": {
-          "label": "Slack Progress Label",
-          "help": "Initial progress draft title. Use \"auto\" for built-in single-word labels, a custom string, or false to hide the title."
-        },
-        "streaming.progress.labels": {
-          "label": "Slack Progress Label Pool",
-          "help": "Candidate labels for streaming.progress.label=\"auto\". Leave unset to use OpenClaw built-in progress labels."
-        },
-        "streaming.progress.maxLines": {
-          "label": "Slack Progress Max Lines",
-          "help": "Maximum number of compact progress lines to keep below the draft label (default: 8)."
-        },
-        "streaming.progress.maxLineChars": {
-          "label": "Slack Progress Max Line Chars",
-          "help": "Maximum characters per compact progress line before truncation (default: 120). Prose cuts at word boundaries; commands and paths keep useful suffixes."
-        },
-        "streaming.progress.render": {
-          "label": "Slack Progress Renderer",
-          "help": "Progress draft renderer: \"text\" uses one portable text body; \"rich\" renders structured Slack Block Kit fields with the same text fallback."
-        },
-        "streaming.progress.nativeTaskCards": {
-          "label": "Slack Native Progress Task Cards",
-          "help": "Opt in to Slack native task-card progress updates when channels.slack.streaming.mode=\"progress\" and streaming.nativeTransport is enabled. Default: false."
-        },
-        "streaming.progress.toolProgress": {
-          "label": "Slack Progress Tool Lines",
-          "help": "Show compact tool/progress lines in progress draft mode (default: true). Set false to keep only the label until final delivery."
-        },
-        "streaming.progress.commandText": {
-          "label": "Slack Progress Command Text",
-          "help": "Command/exec detail in progress draft lines: \"raw\" preserves released behavior; \"status\" shows only the tool label."
-        },
         "thread.historyScope": {
           "label": "Slack Thread History Scope",
           "help": "Scope for Slack thread history context (\"thread\" isolates per thread; \"channel\" reuses channel history)."