@openclaw/slack 2026.8.1 → 2026.8.2

package/dist/{policy-CtQVbde1.js → policy-CUpBeOt9.js}

@@ -1,5 +1,5 @@
-import { n as buildSlackChannelPolicyScope, t as buildSlackChannelIdCandidates } from "./group-policy-BdwszjYn.js";
-import { d as normalizeSlackSlug, p as resolveSlackUserAllowListForTeam } from "./probe-0usmAb0i.js";
+import { n as buildSlackChannelPolicyScope, t as buildSlackChannelIdCandidates } from "./group-policy-BYH74y50.js";
+import { D as resolveSlackUserAllowListForTeam, T as normalizeSlackSlug } from "./probe-gj5yQgN2.js";
 import { applyChannelMatchMeta, buildChannelKeyCandidates } from "openclaw/plugin-sdk/channel-targets";
 import { mergePairLoopGuardConfig } from "openclaw/plugin-sdk/pair-loop-guard-runtime";
 //#region extensions/slack/src/monitor/channel-config.ts
@@ -18,9 +18,10 @@ function resolveSlackChannelConfig(params) {
 	const keys = channelKeys ?? Object.keys(entries);
 	const normalizedName = channelName ? normalizeSlackSlug(channelName) : "";
 	const directName = channelName ? channelName.trim() : "";
+	const candidates = buildChannelKeyCandidates(...buildSlackChannelIdCandidates(channelId, params.teamId, { allowUnscoped: params.allowUnscoped }), allowNameMatching ? channelName ? `#${directName}` : void 0 : void 0, allowNameMatching ? directName : void 0, allowNameMatching ? normalizedName : void 0);
 	const match = buildSlackChannelPolicyScope({
 		channels: entries,
-		candidates: buildChannelKeyCandidates(...buildSlackChannelIdCandidates(channelId, params.teamId, { allowUnscoped: params.allowUnscoped }), allowNameMatching ? channelName ? `#${directName}` : void 0 : void 0, allowNameMatching ? directName : void 0, allowNameMatching ? normalizedName : void 0)
+		candidates
 	});
 	const { entry: matched, wildcardEntry: fallback } = match;
 	const requireMentionDefault = defaultRequireMention ?? true;
@@ -47,7 +48,7 @@ function resolveSlackChannelConfig(params) {
 	const skills = firstDefined(resolved.skills, fallback?.skills);
 	const systemPrompt = firstDefined(resolved.systemPrompt, fallback?.systemPrompt);
 	const presenceEvents = firstDefined(resolved.presenceEvents, fallback?.presenceEvents);
-	return applyChannelMatchMeta({
+	const result = {
 		allowed,
 		requireMention,
 		ignoreOtherMentions,
@@ -58,7 +59,8 @@ function resolveSlackChannelConfig(params) {
 		skills,
 		systemPrompt,
 		presenceEvents
-	}, match);
+	};
+	return applyChannelMatchMeta(result, match);
 }
 //#endregion
 //#region extensions/slack/src/monitor/policy.ts

package/dist/{probe-0usmAb0i.js → probe-gj5yQgN2.js}

@@ -1,20 +1,128 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { u as formatSlackBotTokenIdentityWarning } from "./accounts-Dm_H77gH.js";
-import { a as parseSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
+import { a as parseSlackTarget } from "./target-parsing-PbxGDbr9.js";
 import { createRequire } from "node:module";
 import { isRecord, normalizeOptionalLowercaseString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { compileAllowlist, resolveCompiledAllowlistMatch } from "openclaw/plugin-sdk/allow-from";
+import { normalizeHyphenSlug, normalizeStringEntries as normalizeStringEntries$1, normalizeStringEntriesLower } from "openclaw/plugin-sdk/string-normalization-runtime";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { createHash } from "node:crypto";
 import { WebClient } from "@slack/web-api";
 import { addActiveManagedProxyTlsOptions, resolveEnvHttpProxyAgentOptions, resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { isDebugProxyGlobalFetchPatchInstalled } from "openclaw/plugin-sdk/proxy-capture";
-import { compileAllowlist, resolveCompiledAllowlistMatch } from "openclaw/plugin-sdk/allow-from";
-import { normalizeHyphenSlug, normalizeStringEntries as normalizeStringEntries$1, normalizeStringEntriesLower } from "openclaw/plugin-sdk/string-normalization-runtime";
 import { redactSensitiveText } from "openclaw/plugin-sdk/logging-core";
 import { defineStableChannelIngressIdentity } from "openclaw/plugin-sdk/channel-ingress-runtime";
+//#region extensions/slack/src/monitor/allow-list.ts
+const SLACK_SLUG_CACHE_MAX = 512;
+const SLACK_STABLE_USER_ID_RE = /^[ubw][a-z0-9]+$/;
+const slackSlugCache = /* @__PURE__ */ new Map();
+function normalizeSlackSlug(raw) {
+	const key = raw ?? "";
+	const cached = slackSlugCache.get(key);
+	if (cached !== void 0) return cached;
+	const normalized = normalizeHyphenSlug(raw);
+	slackSlugCache.set(key, normalized);
+	if (slackSlugCache.size > SLACK_SLUG_CACHE_MAX) {
+		const oldest = slackSlugCache.keys().next();
+		if (!oldest.done) slackSlugCache.delete(oldest.value);
+	}
+	return normalized;
+}
+function normalizeAllowList(list) {
+	return normalizeStringEntries$1(list);
+}
+function normalizeAllowListLower(list) {
+	return normalizeStringEntriesLower(list);
+}
+function normalizeSlackAllowOwnerEntry(entry) {
+	const trimmed = normalizeOptionalLowercaseString(entry);
+	if (!trimmed || trimmed === "*") return;
+	try {
+		const target = parseSlackTarget(trimmed);
+		if (target?.kind === "user" && target.teamId) return target.id.toLowerCase();
+	} catch {
+		return;
+	}
+	const withoutPrefix = trimmed.replace(/^(slack:|user:)/, "");
+	return SLACK_STABLE_USER_ID_RE.test(withoutPrefix) ? withoutPrefix : void 0;
+}
+function resolveSlackAllowListMatch(params) {
+	const compiledAllowList = compileAllowlist(params.allowList);
+	const teamId = normalizeOptionalLowercaseString(params.teamId);
+	const id = normalizeOptionalLowercaseString(params.id);
+	const name = normalizeOptionalLowercaseString(params.name);
+	const slug = normalizeSlackSlug(name);
+	const scopedCandidates = [{
+		value: teamId && id ? `team:${teamId}:user:${id}` : void 0,
+		source: "workspace-id"
+	}];
+	const unscopedCandidates = [
+		{
+			value: id,
+			source: "id"
+		},
+		{
+			value: id ? `slack:${id}` : void 0,
+			source: "prefixed-id"
+		},
+		{
+			value: id ? `user:${id}` : void 0,
+			source: "prefixed-user"
+		},
+		...params.allowNameMatching === true ? [
+			{
+				value: name,
+				source: "name"
+			},
+			{
+				value: name ? `slack:${name}` : void 0,
+				source: "prefixed-name"
+			},
+			{
+				value: slug,
+				source: "slug"
+			}
+		] : []
+	];
+	return resolveCompiledAllowlistMatch({
+		compiledAllowlist: compiledAllowList,
+		candidates: [...scopedCandidates, ...unscopedCandidates]
+	});
+}
+function allowListMatches(params) {
+	return resolveSlackAllowListMatch(params).allowed;
+}
+function resolveSlackUserAllowed(params) {
+	const allowList = normalizeAllowListLower(params.allowList);
+	if (allowList.length === 0) return true;
+	return allowListMatches({
+		allowList,
+		teamId: params.teamId,
+		id: params.userId,
+		name: params.userName,
+		allowNameMatching: params.allowNameMatching
+	});
+}
+function resolveSlackUserAllowListForTeam(params) {
+	const allowList = normalizeAllowListLower(params.allowList);
+	const teamId = normalizeOptionalLowercaseString(params.teamId);
+	return allowList.flatMap((entry) => {
+		if (entry === "*") return [entry];
+		if (!entry.startsWith("team:")) return [entry];
+		try {
+			const target = parseSlackTarget(entry);
+			if (target?.kind === "user" && target.teamId?.toLowerCase() === teamId) return [entry];
+			return params.preserveUnmatchedScopedEntries ? [entry] : [];
+		} catch {
+			return params.preserveUnmatchedScopedEntries ? [entry] : [];
+		}
+	});
+}
+//#endregion
 //#region extensions/slack/src/client-options.ts
 const requireFromSlackSocketMode = (() => {
-	return createRequire(createRequire(import.meta.url).resolve("@slack/socket-mode/package.json"));
+	const require = createRequire(import.meta.url);
+	return createRequire(require.resolve("@slack/socket-mode/package.json"));
 })();
 function loadSlackUndiciRuntime() {
 	return requireFromSlackSocketMode("undici");
@@ -179,113 +287,6 @@ function getSlackListenerUploadCompletionClient(params) {
 	return client;
 }
 //#endregion
-//#region extensions/slack/src/monitor/allow-list.ts
-const SLACK_SLUG_CACHE_MAX = 512;
-const SLACK_STABLE_USER_ID_RE = /^[ubw][a-z0-9]+$/;
-const slackSlugCache = /* @__PURE__ */ new Map();
-function normalizeSlackSlug(raw) {
-	const key = raw ?? "";
-	const cached = slackSlugCache.get(key);
-	if (cached !== void 0) return cached;
-	const normalized = normalizeHyphenSlug(raw);
-	slackSlugCache.set(key, normalized);
-	if (slackSlugCache.size > SLACK_SLUG_CACHE_MAX) {
-		const oldest = slackSlugCache.keys().next();
-		if (!oldest.done) slackSlugCache.delete(oldest.value);
-	}
-	return normalized;
-}
-function normalizeAllowList(list) {
-	return normalizeStringEntries$1(list);
-}
-function normalizeAllowListLower(list) {
-	return normalizeStringEntriesLower(list);
-}
-function normalizeSlackAllowOwnerEntry(entry) {
-	const trimmed = normalizeOptionalLowercaseString(entry);
-	if (!trimmed || trimmed === "*") return;
-	try {
-		const target = parseSlackTarget(trimmed);
-		if (target?.kind === "user" && target.teamId) return target.id.toLowerCase();
-	} catch {
-		return;
-	}
-	const withoutPrefix = trimmed.replace(/^(slack:|user:)/, "");
-	return SLACK_STABLE_USER_ID_RE.test(withoutPrefix) ? withoutPrefix : void 0;
-}
-function resolveSlackAllowListMatch(params) {
-	const compiledAllowList = compileAllowlist(params.allowList);
-	const teamId = normalizeOptionalLowercaseString(params.teamId);
-	const id = normalizeOptionalLowercaseString(params.id);
-	const name = normalizeOptionalLowercaseString(params.name);
-	const slug = normalizeSlackSlug(name);
-	const scopedCandidates = [{
-		value: teamId && id ? `team:${teamId}:user:${id}` : void 0,
-		source: "workspace-id"
-	}];
-	const unscopedCandidates = [
-		{
-			value: id,
-			source: "id"
-		},
-		{
-			value: id ? `slack:${id}` : void 0,
-			source: "prefixed-id"
-		},
-		{
-			value: id ? `user:${id}` : void 0,
-			source: "prefixed-user"
-		},
-		...params.allowNameMatching === true ? [
-			{
-				value: name,
-				source: "name"
-			},
-			{
-				value: name ? `slack:${name}` : void 0,
-				source: "prefixed-name"
-			},
-			{
-				value: slug,
-				source: "slug"
-			}
-		] : []
-	];
-	return resolveCompiledAllowlistMatch({
-		compiledAllowlist: compiledAllowList,
-		candidates: [...scopedCandidates, ...unscopedCandidates]
-	});
-}
-function allowListMatches(params) {
-	return resolveSlackAllowListMatch(params).allowed;
-}
-function resolveSlackUserAllowed(params) {
-	const allowList = normalizeAllowListLower(params.allowList);
-	if (allowList.length === 0) return true;
-	return allowListMatches({
-		allowList,
-		teamId: params.teamId,
-		id: params.userId,
-		name: params.userName,
-		allowNameMatching: params.allowNameMatching
-	});
-}
-function resolveSlackUserAllowListForTeam(params) {
-	const allowList = normalizeAllowListLower(params.allowList);
-	const teamId = normalizeOptionalLowercaseString(params.teamId);
-	return allowList.flatMap((entry) => {
-		if (entry === "*") return [entry];
-		if (!entry.startsWith("team:")) return [entry];
-		try {
-			const target = parseSlackTarget(entry);
-			if (target?.kind === "user" && target.teamId?.toLowerCase() === teamId) return [entry];
-			return params.preserveUnmatchedScopedEntries ? [entry] : [];
-		} catch {
-			return params.preserveUnmatchedScopedEntries ? [entry] : [];
-		}
-	});
-}
-//#endregion
 //#region extensions/slack/src/errors.ts
 const NO_ERROR_DETAIL = "no error detail";
 function redact(value) {
@@ -549,4 +550,4 @@ async function probeSlack(token, timeoutMs = 2500, opts) {
 	}));
 }
 //#endregion
-export { SLACK_DEFAULT_RETRY_OPTIONS as C, resolveSlackWebClientOptions as D, resolveSlackProxyDispatcher as E, resolveSlackWriteClientOptions as O, getSlackWriteClient as S, resolveSlackLookupClientOptions as T, createSlackStartupAuthClient as _, slackIngressIdentity as a, createSlackWriteClient as b, normalizeAllowList as c, normalizeSlackSlug as d, resolveSlackAllowListMatch as f, createSlackReadClient as g, createSlackLookupClient as h, createSlackIngressSubject as i, normalizeAllowListLower as l, resolveSlackUserAllowed as m, probe_exports as n, formatSlackError as o, resolveSlackUserAllowListForTeam as p, SLACK_USER_NAME_KIND as r, allowListMatches as s, probeSlack as t, normalizeSlackAllowOwnerEntry as u, createSlackTokenCacheKey as v, SLACK_WRITE_RETRY_OPTIONS as w, getSlackListenerUploadCompletionClient as x, createSlackWebClient as y };
+export { normalizeAllowListLower as C, resolveSlackUserAllowListForTeam as D, resolveSlackAllowListMatch as E, resolveSlackUserAllowed as O, normalizeAllowList as S, normalizeSlackSlug as T, resolveSlackLookupClientOptions as _, slackIngressIdentity as a, resolveSlackWriteClientOptions as b, createSlackReadClient as c, createSlackWebClient as d, createSlackWriteClient as f, SLACK_WRITE_RETRY_OPTIONS as g, SLACK_DEFAULT_RETRY_OPTIONS as h, createSlackIngressSubject as i, createSlackStartupAuthClient as l, getSlackWriteClient as m, probe_exports as n, formatSlackError as o, getSlackListenerUploadCompletionClient as p, SLACK_USER_NAME_KIND as r, createSlackLookupClient as s, probeSlack as t, createSlackTokenCacheKey as u, resolveSlackProxyDispatcher as v, normalizeSlackAllowOwnerEntry as w, allowListMatches as x, resolveSlackWebClientOptions as y };

package/dist/{provider-CN_8hFv2.js → provider-DW9YC_no.js}

@@ -1,15 +1,15 @@
 import { n as registerSlackHttpHandler, r as normalizeSlackWebhookPath } from "./registry-bbjH7IHX.js";
 import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom, s as resolveSlackAccountDmPolicy, u as formatSlackBotTokenIdentityWarning } from "./accounts-Dm_H77gH.js";
-import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
-import { Ct as isSlackApprovalAuthorizedSender, G as isSlackCallbackActionId, J as decodeSlackQuestionAction, K as isSlackQuestionActionId, L as truncateSlackText, M as SLACK_TEXT_LIMIT, Tt as isSlackExecApprovalAuthorizedSender, W as isSlackApprovalActionId, Y as resolveSlackQuestionAction, a as qualifySlackConversationId, et as escapeSlackMrkdwn, lt as isSlackAnyNativeApprovalClientEnabled, nt as decodeSlackApprovalAction, o as qualifySlackRoutePeerId, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, xt as registerSlackInstallationState } from "./group-policy-BdwszjYn.js";
-import { D as resolveSlackWebClientOptions, E as resolveSlackProxyDispatcher, T as resolveSlackLookupClientOptions, _ as createSlackStartupAuthClient, a as slackIngressIdentity, c as normalizeAllowList, d as normalizeSlackSlug, f as resolveSlackAllowListMatch, i as createSlackIngressSubject, l as normalizeAllowListLower, o as formatSlackError, p as resolveSlackUserAllowListForTeam, s as allowListMatches, u as normalizeSlackAllowOwnerEntry, x as getSlackListenerUploadCompletionClient, y as createSlackWebClient } from "./probe-0usmAb0i.js";
+import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-PbxGDbr9.js";
+import { Ct as isSlackApprovalAuthorizedSender, G as isSlackCallbackActionId, J as decodeSlackQuestionAction, K as isSlackQuestionActionId, L as truncateSlackText, M as SLACK_TEXT_LIMIT, Tt as isSlackExecApprovalAuthorizedSender, W as isSlackApprovalActionId, Y as resolveSlackQuestionAction, a as qualifySlackConversationId, et as escapeSlackMrkdwn, lt as isSlackAnyNativeApprovalClientEnabled, nt as decodeSlackApprovalAction, o as qualifySlackRoutePeerId, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, xt as registerSlackInstallationState } from "./group-policy-BYH74y50.js";
+import { C as normalizeAllowListLower, D as resolveSlackUserAllowListForTeam, E as resolveSlackAllowListMatch, S as normalizeAllowList, T as normalizeSlackSlug, _ as resolveSlackLookupClientOptions, a as slackIngressIdentity, d as createSlackWebClient, i as createSlackIngressSubject, l as createSlackStartupAuthClient, o as formatSlackError, p as getSlackListenerUploadCompletionClient, v as resolveSlackProxyDispatcher, w as normalizeSlackAllowOwnerEntry, x as allowListMatches, y as resolveSlackWebClientOptions } from "./probe-gj5yQgN2.js";
 import { n as getSlackRuntime, t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { C as hasSlackMessageTableBlock, b as saveRemoteMedia, f as readSlackMessages, y as isGovSlackClient } from "./actions-BI7JkfVm.js";
-import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-DS9ICrBI.js";
+import { C as hasSlackMessageTableBlock, b as saveRemoteMedia, f as readSlackMessages, y as isGovSlackClient } from "./actions-BOxiu2Vy.js";
+import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-GUz4_v2E.js";
 import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-Czheznc8.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-BAOlNimr.js";
-import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-CtQVbde1.js";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-Bv6IiGZ4.js";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-BXw2pA7y.js";
+import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-CUpBeOt9.js";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-resolution";
 import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { asNonArrayRecord, asOptionalRecord, isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -20,11 +20,11 @@ import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { computeBackoff, createNonExitingRuntime, createSubsystemLogger, danger, getChildLogger, logVerbose, shouldLogVerbose, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { chunkItems } from "openclaw/plugin-sdk/text-chunking";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
+import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { parseExecApprovalCommandText } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { withTimeout } from "openclaw/plugin-sdk/text-utility-runtime";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { WebAPIHTTPError, WebAPIPlatformError, WebAPIRateLimitedError, WebAPIRequestError, WebClient } from "@slack/web-api";
-import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { buildPluginBindingResolvedText, parsePluginBindingApprovalCustomId, resolveConversationLabel as resolveConversationLabel$1, resolvePluginConversationBindingApproval, resolveRuntimeConversationBindingRoute, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { createChannelIngressResolver, readChannelIngressStoreAllowFromForDmPolicy } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, isApprovalNotFoundError, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
@@ -237,8 +237,8 @@ function createSlackAgentViewState(params) {
 //#endregion
 //#region extensions/slack/src/monitor/assistant-thread-context.ts
 const SLACK_ASSISTANT_THREAD_CONTEXT_METADATA_EVENT = "assistant_thread_context";
-const SLACK_ASSISTANT_CONTEXT_TTL_MS = 1440 * 60 * 1e3;
-const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 600 * 1e3;
+const SLACK_ASSISTANT_CONTEXT_TTL_MS = 864e5;
+const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 6e5;
 function buildSlackAssistantThreadMetadata(context) {
 	const eventPayload = {};
 	if (context.channelId) eventPayload.channel_id = context.channelId;
@@ -477,12 +477,12 @@ function resolveSlackSystemEventRoute(params) {
 const SLACK_CHANNEL_CACHE_MAX_ENTRIES = 1024;
 const SLACK_USER_CACHE_MAX_ENTRIES = 2048;
 const SLACK_AVATAR_CACHE_MAX_ENTRIES = 128;
-const SLACK_AVATAR_MAX_BYTES = 256 * 1024;
+const SLACK_AVATAR_MAX_BYTES = 262144;
 const SLACK_AVATAR_SSRF_POLICY = {
 	allowedHostnames: ["avatars.slack-edge.com", "*.slack-edge.com"],
 	hostnameAllowlist: ["avatars.slack-edge.com", "*.slack-edge.com"]
 };
-const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 5 * 6e4;
+const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 3e5;
 const SLACK_CHANNEL_DENIAL_WARNING_MAX_ENTRIES = 1024;
 function createSlackMonitorContext(params) {
 	const channelHistories = /* @__PURE__ */ new Map();
@@ -587,7 +587,8 @@ function createSlackMonitorContext(params) {
 		}
 	};
 	const resolveUserAvatar = (userId, eventScope) => {
-		if (isGovSlackClient(eventScope?.client ?? params.app.client)) return;
+		const client = eventScope?.client ?? params.app.client;
+		if (isGovSlackClient(client)) return;
 		const imageUrl = readLruMapEntry(userCache, scopedKey(userId, eventScope))?.imageUrl;
 		if (!imageUrl) return;
 		const cacheKey = scopedKey(`${userId}\0${imageUrl}`, eventScope);
@@ -1389,7 +1390,8 @@ function createSlackDurableIngress(options) {
 				}
 			};
 			try {
-				if (asOptionalRecord(raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0)?.type === "channel_id_changed") {
+				const event = raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0;
+				if (asOptionalRecord(event)?.type === "channel_id_changed") {
 					const channelTurns = activeChannelTurns.get(laneKey);
 					if (channelTurns && channelTurns.size > 0) {
 						adoptOnCompletion = true;
@@ -1501,7 +1503,8 @@ async function resolveThreadTsFromHistory(params) {
 		inclusive: true,
 		limit: 1
 	});
-	return normalizeOptionalString((response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0])?.thread_ts);
+	const message = response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0];
+	return normalizeOptionalString(message?.thread_ts);
 }
 function createSlackThreadTsResolver(params) {
 	const ttlMs = Math.max(0, parseFiniteNumber(params.cacheTtlMs) ?? DEFAULT_THREAD_TS_CACHE_TTL_MS);
@@ -1957,7 +1960,8 @@ function resolveSlackEventScope(params) {
 		ok: false,
 		reason: "enterprise_event_for_workspace_account"
 	} : { ok: true };
-	const apiAppId = normalizeOptionalString((params.body && typeof params.body === "object" ? params.body : {}).api_app_id);
+	const body = params.body && typeof params.body === "object" ? params.body : {};
+	const apiAppId = normalizeOptionalString(body.api_app_id);
 	if (apiAppId && params.identity.apiAppId && apiAppId !== params.identity.apiAppId) return {
 		ok: false,
 		reason: "wrong_app"
@@ -2120,9 +2124,10 @@ function registerSlackChannelIdChangedEvent(params) {
 			const oldChannelId = payload.old_channel_id;
 			const newChannelId = payload.new_channel_id;
 			if (!oldChannelId || !newChannelId) return;
+			const channelInfo = await ctx.resolveChannelName(newChannelId);
 			const label = resolveSlackChannelLabel({
 				channelId: newChannelId,
-				channelName: (await ctx.resolveChannelName(newChannelId))?.name
+				channelName: channelInfo?.name
 			});
 			ctx.runtime.log?.(warn(`[slack] Channel ID changed: ${oldChannelId} → ${newChannelId} (${label})`));
 			if (!resolveChannelConfigWrites({
@@ -2375,7 +2380,8 @@ function isSlackReplyActionId(actionId) {
 	return actionId === "openclaw:reply_button" || actionId === "openclaw:reply_select" || actionId.startsWith(`openclaw:reply_button:`) || actionId.startsWith(`openclaw:reply_select:`);
 }
 function readSlackApprovalAction(parsed) {
-	return decodeSlackApprovalAction(normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry)));
+	const value = normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry));
+	return decodeSlackApprovalAction(value);
 }
 function isSlackReplyLinkAction(parsed) {
 	if (parsed.actionId === "openclaw:session_link") return true;
@@ -2500,11 +2506,19 @@ async function handleSlackPluginBindingApproval(params) {
 	await respondEphemeral(params.respond, buildPluginBindingResolvedText(resolved));
 	return true;
 }
+function formatSlackPluginApprovalSenderId(userId, eventScope) {
+	return formatSlackTarget({
+		kind: "user",
+		id: userId,
+		teamId: eventScope?.teamId
+	});
+}
 async function handleSlackApprovalInteraction(params) {
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginApprovalAuthorizedSender = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execApprovalAuthorizedSender = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2524,7 +2538,7 @@ async function handleSlackApprovalInteraction(params) {
 			decision: params.approval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId
+			senderId: params.approval.approvalKind === "plugin" ? pluginSenderId : params.parsed.userId
 		});
 		const terminalLabel = resolveSlackApprovalTerminalLabel(result.approval);
 		const prefix = result.applied ? "Resolved" : "Already resolved";
@@ -2560,10 +2574,11 @@ async function handleSlackApprovalInteraction(params) {
 async function handleSlackLegacyApprovalInteraction(params) {
 	const parsedApproval = parseExecApprovalCommandText(params.pluginInteractionData);
 	if (!parsedApproval) return false;
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginAuthorized = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execAuthorized = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2585,7 +2600,7 @@ async function handleSlackLegacyApprovalInteraction(params) {
 			decision: parsedApproval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId,
+			senderId: resolveMethod === "plugin" ? pluginSenderId : params.parsed.userId,
 			resolveMethod
 		});
 		try {
@@ -3629,7 +3644,8 @@ function registerSlackMemberEvents(params) {
 				eventScope
 			});
 			if (!ingressContext) return;
-			enqueueRoutedSystemEvent(`Slack: ${(payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone"} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
+			const userLabel = (payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone";
+			enqueueRoutedSystemEvent(`Slack: ${userLabel} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack ${paramsLocal.verb} handler failed: ${formatErrorMessage(err)}`));
 			if (err instanceof SlackSystemEventAuthRetryError) throw err;
@@ -3819,7 +3835,8 @@ function addUserCandidate(candidates, value, botUserId) {
 	candidates.add(id);
 }
 function collectMetadataUserCandidates(candidates, value, botUserId) {
-	const payload = asOptionalRecord(asOptionalRecord(value)?.event_payload);
+	const metadata = asOptionalRecord(value);
+	const payload = asOptionalRecord(metadata?.event_payload);
 	if (!payload) return;
 	for (const key of [
 		"user",
@@ -4119,7 +4136,8 @@ function registerSlackReactionEvents(params) {
 			const emojiLabel = event.reaction ?? "emoji";
 			const authorLabel = authorInfo?.name ?? event.item_user;
 			const baseText = `Slack reaction ${action}: :${emojiLabel}: by ${actorLabel} in ${ingressContext.channelLabel} msg ${item.ts}`;
-			enqueueRoutedSystemEvent(authorLabel ? `${baseText} from ${authorLabel}` : baseText, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
+			const text = authorLabel ? `${baseText} from ${authorLabel}` : baseText;
+			enqueueRoutedSystemEvent(text, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack reaction handler failed: ${formatErrorMessage(err)}`));
 		}
@@ -4198,7 +4216,7 @@ function registerSlackWorkspaceEvents(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-dispatch-dedupe.ts
-const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 864e5;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_MEMORY_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_STATE_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_NAMESPACE = "global";
@@ -4265,7 +4283,7 @@ function buildSlackDebounceKey(message, accountId, teamId) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-handler.ts
-const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-Bd22U0ga.js"));
+const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-CcdujV99.js"));
 const RETRYABLE_FLUSH_MAX_ATTEMPTS = 3;
 const RETRYABLE_FLUSH_RETRY_DELAY_MS = 1e3;
 const REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE = /reply session initialization conflicted for \S+/u;
@@ -4273,8 +4291,9 @@ function isRetryableSlackInboundError(error) {
 	return collectErrorGraphCandidates(error, (current) => [current.cause, current.error]).some((candidate) => REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE.test(formatErrorMessage(candidate)));
 }
 function shouldDebounceSlackMessage(message, cfg) {
+	const textForCommandDetection = stripSlackMentionsForCommandDetection(message.text ?? "");
 	return shouldDebounceTextInbound({
-		text: stripSlackMentionsForCommandDetection(message.text ?? ""),
+		text: textForCommandDetection,
 		cfg,
 		hasMedia: Boolean(message.files && message.files.length > 0) || hasSlackMessageTableBlock(message)
 	});
@@ -4532,11 +4551,11 @@ function createSlackMessageHandler(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/presence-monitor.ts
-const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 480 * 60 * 1e3;
+const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 288e5;
 const SLACK_PRESENCE_REQUEST_TIMEOUT_MS = 3e4;
 const SLACK_PRESENCE_POLL_INTERVAL_MS = 6e4;
 const SLACK_PRESENCE_AUTO_MAX_PARTICIPANTS = 8;
-const SLACK_PRESENCE_TARGET_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_PRESENCE_TARGET_TTL_MS = 864e5;
 const SLACK_PRESENCE_MAX_POLLS_PER_INTERVAL = 45;
 const SLACK_PRESENCE_MAX_TARGETS = 2e3;
 const DEFAULT_SLACK_PRESENCE_EVENT_PROMPT = ["Before greeting, retrieve relevant memory and wiki context for this immutable user_id, including a known timezone when available. Use their local time; if their timezone is unknown, do not guess.", "Send at most one short, natural greeting in this Slack conversation. Do not reveal private memory. If no greeting is appropriate, stay silent."];
@@ -5144,8 +5163,8 @@ async function authorizeSlackDirectMessage(params) {
 //#endregion
 //#region extensions/slack/src/monitor/external-arg-menu-store.ts
 const SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES = 18;
-const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES * 8 / 6)}}$`);
-const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 600 * 1e3;
+const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(24)}}$`);
+const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 6e5;
 const SLACK_EXTERNAL_ARG_MENU_PREFIX = "openclaw_cmdarg_ext:";
 function pruneSlackExternalArgMenuStore(store, rawNow) {
 	const now = asDateTimestampMs(rawNow);
@@ -5237,7 +5256,7 @@ const SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX = 300;
 const SLACK_HEADER_TEXT_MAX = 150;
 const SLACK_COMMAND_ARG_ACTION_BLOCKS_MAX = 47;
 const loadSlashCommandsRuntime = createLazyRuntimeModule(() => import("./slash-commands.runtime-BTTMlmwy.js"));
-const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-CilDmI0c.js"));
+const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-C2015r6s.js"));
 const loadSlashSkillCommandsRuntime = createLazyRuntimeModule(() => import("./slash-skill-commands.runtime-CD1J2ODY.js"));
 const loadPluginCommandRuntime = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/plugin-command-runtime"));
 function resolveSlackCommandMenuModelContext(params) {
@@ -5288,6 +5307,8 @@ function resolveSlackCommandMenuModelContext(params) {
 }
 const slackExternalArgMenuStore = createSlackExternalArgMenuStore();
 function buildSlackArgMenuConfirm(params) {
+	const command = escapeSlackMrkdwn(params.command);
+	const arg = escapeSlackMrkdwn(params.arg);
 	return {
 		title: {
 			type: "plain_text",
@@ -5295,7 +5316,7 @@ function buildSlackArgMenuConfirm(params) {
 		},
 		text: {
 			type: "mrkdwn",
-			text: truncateSlackText(`Run */${escapeSlackMrkdwn(params.command)}* with *${escapeSlackMrkdwn(params.arg)}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
+			text: truncateSlackText(`Run */${command}* with *${arg}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
 		},
 		confirm: {
 			type: "plain_text",
@@ -6096,12 +6117,13 @@ async function deliverSlackSlashResponseWithWebApi(params) {
 	const mrkdwn = "mrkdwn" in payload && typeof payload.mrkdwn === "boolean" ? payload.mrkdwn : void 0;
 	if (payload.response_type === "in_channel") {
 		const postSlackMessage = params.client.chat.postMessage;
-		requireSlackPostMessageTimestamp(await postSlackMessage({
+		const response = await postSlackMessage({
 			channel: params.command.channel_id,
 			text,
 			...blocks ? { blocks } : {},
 			...mrkdwn !== void 0 ? { mrkdwn } : {}
-		}));
+		});
+		requireSlackPostMessageTimestamp(response);
 	} else await params.client.chat.postEphemeral({
 		channel: params.command.channel_id,
 		user: params.command.user_id,
@@ -6133,8 +6155,8 @@ async function getSlackBoltInterop() {
 	}
 	return slackBoltInterop;
 }
-const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-BNGpsdwV.js"));
-const SLACK_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
+const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-BLMdBrAw.js"));
+const SLACK_WEBHOOK_MAX_BODY_BYTES = 1048576;
 const SLACK_WEBHOOK_BODY_TIMEOUT_MS = 3e4;
 function resolveSlackRuntimeIdentity(params) {
 	const botUserId = normalizeOptionalString(params.botUserId);
@@ -6275,8 +6297,9 @@ async function monitorSlackProvider(opts = {}) {
 	const groupDmChannels = dmConfig?.groupChannels;
 	let channelsConfig = slackCfg.channels;
 	const defaultGroupPolicy = resolveDefaultGroupPolicy(cfg);
+	const providerConfigPresent = cfg.channels?.slack !== void 0;
 	const { groupPolicy, providerMissingFallbackApplied } = resolveOpenProviderRuntimeGroupPolicy$1({
-		providerConfigPresent: cfg.channels?.slack !== void 0,
+		providerConfigPresent,
 		groupPolicy: slackCfg.groupPolicy,
 		defaultGroupPolicy
 	});
@@ -6577,10 +6600,11 @@ async function monitorSlackProvider(opts = {}) {
 				summarizeMapping("slack users", mapping, [], runtime);
 			}
 			if (allowNameMatching) try {
-				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+				const resolvedUsers = await resolveSlackUserAllowlist({
 					token: resolveToken,
 					entries: allowEntries
-				}), { formatResolved: formatSlackUserResolved });
+				});
+				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 				allowFrom = mergeAllowlist({
 					existing: allowFrom,
 					additions
@@ -6607,10 +6631,11 @@ async function monitorSlackProvider(opts = {}) {
 					summarizeMapping("slack channel users", mapping, [], runtime);
 				}
 				if (allowNameMatching) try {
-					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+					const resolvedUsers = await resolveSlackUserAllowlist({
 						token: resolveToken,
 						entries: Array.from(userEntries)
-					}), { formatResolved: formatSlackUserResolved });
+					});
+					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 					const nextChannels = patchAllowlistUsersInConfigEntries({
 						entries: channelsConfig,
 						resolvedMap