@openclaw/slack 2026.8.1 → 2026.8.33

package/dist/{provider-CN_8hFv2.js → .setup/provider-1mRMBuV5.mjs}

@@ -1,15 +1,15 @@
-import { n as registerSlackHttpHandler, r as normalizeSlackWebhookPath } from "./registry-bbjH7IHX.js";
-import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom, s as resolveSlackAccountDmPolicy, u as formatSlackBotTokenIdentityWarning } from "./accounts-Dm_H77gH.js";
-import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
-import { Ct as isSlackApprovalAuthorizedSender, G as isSlackCallbackActionId, J as decodeSlackQuestionAction, K as isSlackQuestionActionId, L as truncateSlackText, M as SLACK_TEXT_LIMIT, Tt as isSlackExecApprovalAuthorizedSender, W as isSlackApprovalActionId, Y as resolveSlackQuestionAction, a as qualifySlackConversationId, et as escapeSlackMrkdwn, lt as isSlackAnyNativeApprovalClientEnabled, nt as decodeSlackApprovalAction, o as qualifySlackRoutePeerId, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, xt as registerSlackInstallationState } from "./group-policy-BdwszjYn.js";
-import { D as resolveSlackWebClientOptions, E as resolveSlackProxyDispatcher, T as resolveSlackLookupClientOptions, _ as createSlackStartupAuthClient, a as slackIngressIdentity, c as normalizeAllowList, d as normalizeSlackSlug, f as resolveSlackAllowListMatch, i as createSlackIngressSubject, l as normalizeAllowListLower, o as formatSlackError, p as resolveSlackUserAllowListForTeam, s as allowListMatches, u as normalizeSlackAllowOwnerEntry, x as getSlackListenerUploadCompletionClient, y as createSlackWebClient } from "./probe-0usmAb0i.js";
-import { n as getSlackRuntime, t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { C as hasSlackMessageTableBlock, b as saveRemoteMedia, f as readSlackMessages, y as isGovSlackClient } from "./actions-BI7JkfVm.js";
-import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-DS9ICrBI.js";
-import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-Czheznc8.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-BAOlNimr.js";
-import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-CtQVbde1.js";
+import { n as registerSlackHttpHandler, r as normalizeSlackWebhookPath } from "./registry-bbjH7IHX.mjs";
+import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom, s as resolveSlackAccountDmPolicy, u as formatSlackBotTokenIdentityWarning } from "./accounts-C1FspRF-.mjs";
+import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-PbxGDbr9.mjs";
+import { Ct as isSlackApprovalAuthorizedSender, G as isSlackCallbackActionId, J as decodeSlackQuestionAction, K as isSlackQuestionActionId, L as truncateSlackText, M as SLACK_TEXT_LIMIT, Tt as isSlackExecApprovalAuthorizedSender, W as isSlackApprovalActionId, Y as resolveSlackQuestionAction, a as qualifySlackConversationId, et as escapeSlackMrkdwn, lt as isSlackAnyNativeApprovalClientEnabled, nt as decodeSlackApprovalAction, o as qualifySlackRoutePeerId, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, xt as registerSlackInstallationState } from "./group-policy-9pMyFFRP.mjs";
+import { C as normalizeAllowListLower, D as resolveSlackUserAllowListForTeam, E as resolveSlackAllowListMatch, S as normalizeAllowList, T as normalizeSlackSlug, _ as resolveSlackLookupClientOptions, a as slackIngressIdentity, d as createSlackWebClient, i as createSlackIngressSubject, l as createSlackStartupAuthClient, o as formatSlackError, p as getSlackListenerUploadCompletionClient, v as resolveSlackProxyDispatcher, w as normalizeSlackAllowOwnerEntry, x as allowListMatches, y as resolveSlackWebClientOptions } from "./probe-DnWN6oBa.mjs";
+import { n as getSlackRuntime, t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.mjs";
+import { C as hasSlackMessageTableBlock, b as saveRemoteMedia, f as readSlackMessages, y as isGovSlackClient } from "./actions-8uuOLGDR.mjs";
+import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-CBfhmYDj.mjs";
+import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.mjs";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-Dpv7OyKO.mjs";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-DmyA3D_2.mjs";
+import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-CpLMTEad.mjs";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-resolution";
 import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { asNonArrayRecord, asOptionalRecord, isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -20,11 +20,11 @@ import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { computeBackoff, createNonExitingRuntime, createSubsystemLogger, danger, getChildLogger, logVerbose, shouldLogVerbose, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { chunkItems } from "openclaw/plugin-sdk/text-chunking";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
+import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { parseExecApprovalCommandText } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { withTimeout } from "openclaw/plugin-sdk/text-utility-runtime";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { WebAPIHTTPError, WebAPIPlatformError, WebAPIRateLimitedError, WebAPIRequestError, WebClient } from "@slack/web-api";
-import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { buildPluginBindingResolvedText, parsePluginBindingApprovalCustomId, resolveConversationLabel as resolveConversationLabel$1, resolvePluginConversationBindingApproval, resolveRuntimeConversationBindingRoute, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { createChannelIngressResolver, readChannelIngressStoreAllowFromForDmPolicy } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, isApprovalNotFoundError, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
@@ -237,8 +237,8 @@ function createSlackAgentViewState(params) {
 //#endregion
 //#region extensions/slack/src/monitor/assistant-thread-context.ts
 const SLACK_ASSISTANT_THREAD_CONTEXT_METADATA_EVENT = "assistant_thread_context";
-const SLACK_ASSISTANT_CONTEXT_TTL_MS = 1440 * 60 * 1e3;
-const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 600 * 1e3;
+const SLACK_ASSISTANT_CONTEXT_TTL_MS = 864e5;
+const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 6e5;
 function buildSlackAssistantThreadMetadata(context) {
 	const eventPayload = {};
 	if (context.channelId) eventPayload.channel_id = context.channelId;
@@ -477,12 +477,12 @@ function resolveSlackSystemEventRoute(params) {
 const SLACK_CHANNEL_CACHE_MAX_ENTRIES = 1024;
 const SLACK_USER_CACHE_MAX_ENTRIES = 2048;
 const SLACK_AVATAR_CACHE_MAX_ENTRIES = 128;
-const SLACK_AVATAR_MAX_BYTES = 256 * 1024;
+const SLACK_AVATAR_MAX_BYTES = 262144;
 const SLACK_AVATAR_SSRF_POLICY = {
 	allowedHostnames: ["avatars.slack-edge.com", "*.slack-edge.com"],
 	hostnameAllowlist: ["avatars.slack-edge.com", "*.slack-edge.com"]
 };
-const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 5 * 6e4;
+const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 3e5;
 const SLACK_CHANNEL_DENIAL_WARNING_MAX_ENTRIES = 1024;
 function createSlackMonitorContext(params) {
 	const channelHistories = /* @__PURE__ */ new Map();
@@ -587,7 +587,8 @@ function createSlackMonitorContext(params) {
 		}
 	};
 	const resolveUserAvatar = (userId, eventScope) => {
-		if (isGovSlackClient(eventScope?.client ?? params.app.client)) return;
+		const client = eventScope?.client ?? params.app.client;
+		if (isGovSlackClient(client)) return;
 		const imageUrl = readLruMapEntry(userCache, scopedKey(userId, eventScope))?.imageUrl;
 		if (!imageUrl) return;
 		const cacheKey = scopedKey(`${userId}\0${imageUrl}`, eventScope);
@@ -1389,7 +1390,8 @@ function createSlackDurableIngress(options) {
 				}
 			};
 			try {
-				if (asOptionalRecord(raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0)?.type === "channel_id_changed") {
+				const event = raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0;
+				if (asOptionalRecord(event)?.type === "channel_id_changed") {
 					const channelTurns = activeChannelTurns.get(laneKey);
 					if (channelTurns && channelTurns.size > 0) {
 						adoptOnCompletion = true;
@@ -1501,7 +1503,8 @@ async function resolveThreadTsFromHistory(params) {
 		inclusive: true,
 		limit: 1
 	});
-	return normalizeOptionalString((response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0])?.thread_ts);
+	const message = response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0];
+	return normalizeOptionalString(message?.thread_ts);
 }
 function createSlackThreadTsResolver(params) {
 	const ttlMs = Math.max(0, parseFiniteNumber(params.cacheTtlMs) ?? DEFAULT_THREAD_TS_CACHE_TTL_MS);
@@ -1957,7 +1960,8 @@ function resolveSlackEventScope(params) {
 		ok: false,
 		reason: "enterprise_event_for_workspace_account"
 	} : { ok: true };
-	const apiAppId = normalizeOptionalString((params.body && typeof params.body === "object" ? params.body : {}).api_app_id);
+	const body = params.body && typeof params.body === "object" ? params.body : {};
+	const apiAppId = normalizeOptionalString(body.api_app_id);
 	if (apiAppId && params.identity.apiAppId && apiAppId !== params.identity.apiAppId) return {
 		ok: false,
 		reason: "wrong_app"
@@ -2120,9 +2124,10 @@ function registerSlackChannelIdChangedEvent(params) {
 			const oldChannelId = payload.old_channel_id;
 			const newChannelId = payload.new_channel_id;
 			if (!oldChannelId || !newChannelId) return;
+			const channelInfo = await ctx.resolveChannelName(newChannelId);
 			const label = resolveSlackChannelLabel({
 				channelId: newChannelId,
-				channelName: (await ctx.resolveChannelName(newChannelId))?.name
+				channelName: channelInfo?.name
 			});
 			ctx.runtime.log?.(warn(`[slack] Channel ID changed: ${oldChannelId} → ${newChannelId} (${label})`));
 			if (!resolveChannelConfigWrites({
@@ -2375,7 +2380,8 @@ function isSlackReplyActionId(actionId) {
 	return actionId === "openclaw:reply_button" || actionId === "openclaw:reply_select" || actionId.startsWith(`openclaw:reply_button:`) || actionId.startsWith(`openclaw:reply_select:`);
 }
 function readSlackApprovalAction(parsed) {
-	return decodeSlackApprovalAction(normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry)));
+	const value = normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry));
+	return decodeSlackApprovalAction(value);
 }
 function isSlackReplyLinkAction(parsed) {
 	if (parsed.actionId === "openclaw:session_link") return true;
@@ -2500,11 +2506,19 @@ async function handleSlackPluginBindingApproval(params) {
 	await respondEphemeral(params.respond, buildPluginBindingResolvedText(resolved));
 	return true;
 }
+function formatSlackPluginApprovalSenderId(userId, eventScope) {
+	return formatSlackTarget({
+		kind: "user",
+		id: userId,
+		teamId: eventScope?.teamId
+	});
+}
 async function handleSlackApprovalInteraction(params) {
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginApprovalAuthorizedSender = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execApprovalAuthorizedSender = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2524,7 +2538,7 @@ async function handleSlackApprovalInteraction(params) {
 			decision: params.approval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId
+			senderId: params.approval.approvalKind === "plugin" ? pluginSenderId : params.parsed.userId
 		});
 		const terminalLabel = resolveSlackApprovalTerminalLabel(result.approval);
 		const prefix = result.applied ? "Resolved" : "Already resolved";
@@ -2560,10 +2574,11 @@ async function handleSlackApprovalInteraction(params) {
 async function handleSlackLegacyApprovalInteraction(params) {
 	const parsedApproval = parseExecApprovalCommandText(params.pluginInteractionData);
 	if (!parsedApproval) return false;
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginAuthorized = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execAuthorized = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2585,7 +2600,7 @@ async function handleSlackLegacyApprovalInteraction(params) {
 			decision: parsedApproval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId,
+			senderId: resolveMethod === "plugin" ? pluginSenderId : params.parsed.userId,
 			resolveMethod
 		});
 		try {
@@ -3629,7 +3644,8 @@ function registerSlackMemberEvents(params) {
 				eventScope
 			});
 			if (!ingressContext) return;
-			enqueueRoutedSystemEvent(`Slack: ${(payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone"} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
+			const userLabel = (payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone";
+			enqueueRoutedSystemEvent(`Slack: ${userLabel} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack ${paramsLocal.verb} handler failed: ${formatErrorMessage(err)}`));
 			if (err instanceof SlackSystemEventAuthRetryError) throw err;
@@ -3819,7 +3835,8 @@ function addUserCandidate(candidates, value, botUserId) {
 	candidates.add(id);
 }
 function collectMetadataUserCandidates(candidates, value, botUserId) {
-	const payload = asOptionalRecord(asOptionalRecord(value)?.event_payload);
+	const metadata = asOptionalRecord(value);
+	const payload = asOptionalRecord(metadata?.event_payload);
 	if (!payload) return;
 	for (const key of [
 		"user",
@@ -4119,7 +4136,8 @@ function registerSlackReactionEvents(params) {
 			const emojiLabel = event.reaction ?? "emoji";
 			const authorLabel = authorInfo?.name ?? event.item_user;
 			const baseText = `Slack reaction ${action}: :${emojiLabel}: by ${actorLabel} in ${ingressContext.channelLabel} msg ${item.ts}`;
-			enqueueRoutedSystemEvent(authorLabel ? `${baseText} from ${authorLabel}` : baseText, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
+			const text = authorLabel ? `${baseText} from ${authorLabel}` : baseText;
+			enqueueRoutedSystemEvent(text, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack reaction handler failed: ${formatErrorMessage(err)}`));
 		}
@@ -4198,7 +4216,7 @@ function registerSlackWorkspaceEvents(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-dispatch-dedupe.ts
-const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 864e5;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_MEMORY_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_STATE_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_NAMESPACE = "global";
@@ -4265,7 +4283,7 @@ function buildSlackDebounceKey(message, accountId, teamId) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-handler.ts
-const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-Bd22U0ga.js"));
+const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-xjOJ8ltM.mjs"));
 const RETRYABLE_FLUSH_MAX_ATTEMPTS = 3;
 const RETRYABLE_FLUSH_RETRY_DELAY_MS = 1e3;
 const REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE = /reply session initialization conflicted for \S+/u;
@@ -4273,8 +4291,9 @@ function isRetryableSlackInboundError(error) {
 	return collectErrorGraphCandidates(error, (current) => [current.cause, current.error]).some((candidate) => REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE.test(formatErrorMessage(candidate)));
 }
 function shouldDebounceSlackMessage(message, cfg) {
+	const textForCommandDetection = stripSlackMentionsForCommandDetection(message.text ?? "");
 	return shouldDebounceTextInbound({
-		text: stripSlackMentionsForCommandDetection(message.text ?? ""),
+		text: textForCommandDetection,
 		cfg,
 		hasMedia: Boolean(message.files && message.files.length > 0) || hasSlackMessageTableBlock(message)
 	});
@@ -4532,11 +4551,11 @@ function createSlackMessageHandler(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/presence-monitor.ts
-const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 480 * 60 * 1e3;
+const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 288e5;
 const SLACK_PRESENCE_REQUEST_TIMEOUT_MS = 3e4;
 const SLACK_PRESENCE_POLL_INTERVAL_MS = 6e4;
 const SLACK_PRESENCE_AUTO_MAX_PARTICIPANTS = 8;
-const SLACK_PRESENCE_TARGET_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_PRESENCE_TARGET_TTL_MS = 864e5;
 const SLACK_PRESENCE_MAX_POLLS_PER_INTERVAL = 45;
 const SLACK_PRESENCE_MAX_TARGETS = 2e3;
 const DEFAULT_SLACK_PRESENCE_EVENT_PROMPT = ["Before greeting, retrieve relevant memory and wiki context for this immutable user_id, including a known timezone when available. Use their local time; if their timezone is unknown, do not guess.", "Send at most one short, natural greeting in this Slack conversation. Do not reveal private memory. If no greeting is appropriate, stay silent."];
@@ -5144,8 +5163,8 @@ async function authorizeSlackDirectMessage(params) {
 //#endregion
 //#region extensions/slack/src/monitor/external-arg-menu-store.ts
 const SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES = 18;
-const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES * 8 / 6)}}$`);
-const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 600 * 1e3;
+const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(24)}}$`);
+const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 6e5;
 const SLACK_EXTERNAL_ARG_MENU_PREFIX = "openclaw_cmdarg_ext:";
 function pruneSlackExternalArgMenuStore(store, rawNow) {
 	const now = asDateTimestampMs(rawNow);
@@ -5236,9 +5255,9 @@ const SLACK_COMMAND_ARG_BUTTON_VALUE_MAX = 2e3;
 const SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX = 300;
 const SLACK_HEADER_TEXT_MAX = 150;
 const SLACK_COMMAND_ARG_ACTION_BLOCKS_MAX = 47;
-const loadSlashCommandsRuntime = createLazyRuntimeModule(() => import("./slash-commands.runtime-BTTMlmwy.js"));
-const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-CilDmI0c.js"));
-const loadSlashSkillCommandsRuntime = createLazyRuntimeModule(() => import("./slash-skill-commands.runtime-CD1J2ODY.js"));
+const loadSlashCommandsRuntime = createLazyRuntimeModule(() => import("./slash-commands.runtime-BTTMlmwy.mjs"));
+const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-D5WAai-5.mjs"));
+const loadSlashSkillCommandsRuntime = createLazyRuntimeModule(() => import("./slash-skill-commands.runtime-CD1J2ODY.mjs"));
 const loadPluginCommandRuntime = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/plugin-command-runtime"));
 function resolveSlackCommandMenuModelContext(params) {
 	if (!params.sessionKey.trim()) return {};
@@ -5288,6 +5307,8 @@ function resolveSlackCommandMenuModelContext(params) {
 }
 const slackExternalArgMenuStore = createSlackExternalArgMenuStore();
 function buildSlackArgMenuConfirm(params) {
+	const command = escapeSlackMrkdwn(params.command);
+	const arg = escapeSlackMrkdwn(params.arg);
 	return {
 		title: {
 			type: "plain_text",
@@ -5295,7 +5316,7 @@ function buildSlackArgMenuConfirm(params) {
 		},
 		text: {
 			type: "mrkdwn",
-			text: truncateSlackText(`Run */${escapeSlackMrkdwn(params.command)}* with *${escapeSlackMrkdwn(params.arg)}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
+			text: truncateSlackText(`Run */${command}* with *${arg}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
 		},
 		confirm: {
 			type: "plain_text",
@@ -6096,12 +6117,13 @@ async function deliverSlackSlashResponseWithWebApi(params) {
 	const mrkdwn = "mrkdwn" in payload && typeof payload.mrkdwn === "boolean" ? payload.mrkdwn : void 0;
 	if (payload.response_type === "in_channel") {
 		const postSlackMessage = params.client.chat.postMessage;
-		requireSlackPostMessageTimestamp(await postSlackMessage({
+		const response = await postSlackMessage({
 			channel: params.command.channel_id,
 			text,
 			...blocks ? { blocks } : {},
 			...mrkdwn !== void 0 ? { mrkdwn } : {}
-		}));
+		});
+		requireSlackPostMessageTimestamp(response);
 	} else await params.client.chat.postEphemeral({
 		channel: params.command.channel_id,
 		user: params.command.user_id,
@@ -6133,8 +6155,8 @@ async function getSlackBoltInterop() {
 	}
 	return slackBoltInterop;
 }
-const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-BNGpsdwV.js"));
-const SLACK_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
+const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-DiUZ6ltP.mjs"));
+const SLACK_WEBHOOK_MAX_BODY_BYTES = 1048576;
 const SLACK_WEBHOOK_BODY_TIMEOUT_MS = 3e4;
 function resolveSlackRuntimeIdentity(params) {
 	const botUserId = normalizeOptionalString(params.botUserId);
@@ -6275,8 +6297,9 @@ async function monitorSlackProvider(opts = {}) {
 	const groupDmChannels = dmConfig?.groupChannels;
 	let channelsConfig = slackCfg.channels;
 	const defaultGroupPolicy = resolveDefaultGroupPolicy(cfg);
+	const providerConfigPresent = cfg.channels?.slack !== void 0;
 	const { groupPolicy, providerMissingFallbackApplied } = resolveOpenProviderRuntimeGroupPolicy$1({
-		providerConfigPresent: cfg.channels?.slack !== void 0,
+		providerConfigPresent,
 		groupPolicy: slackCfg.groupPolicy,
 		defaultGroupPolicy
 	});
@@ -6577,10 +6600,11 @@ async function monitorSlackProvider(opts = {}) {
 				summarizeMapping("slack users", mapping, [], runtime);
 			}
 			if (allowNameMatching) try {
-				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+				const resolvedUsers = await resolveSlackUserAllowlist({
 					token: resolveToken,
 					entries: allowEntries
-				}), { formatResolved: formatSlackUserResolved });
+				});
+				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 				allowFrom = mergeAllowlist({
 					existing: allowFrom,
 					additions
@@ -6607,10 +6631,11 @@ async function monitorSlackProvider(opts = {}) {
 					summarizeMapping("slack channel users", mapping, [], runtime);
 				}
 				if (allowNameMatching) try {
-					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+					const resolvedUsers = await resolveSlackUserAllowlist({
 						token: resolveToken,
 						entries: Array.from(userEntries)
-					}), { formatResolved: formatSlackUserResolved });
+					});
+					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 					const nextChannels = patchAllowlistUsersInConfigEntries({
 						entries: channelsConfig,
 						resolvedMap

package/dist/{relay-source-BNGpsdwV.js → .setup/relay-source-DiUZ6ltP.mjs}

@@ -1,4 +1,4 @@
-import { h as formatUnknownError, m as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-CN_8hFv2.js";
+import { h as formatUnknownError, m as SLACK_SOCKET_RECONNECT_POLICY } from "./provider-1mRMBuV5.mjs";
 import { asOptionalRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { computeBackoff, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { isIP } from "node:net";
@@ -10,7 +10,7 @@ const SLACK_RELAY_ROUTE_KINDS = /* @__PURE__ */ new Set([
 	"thread_affinity",
 	"channel_default"
 ]);
-const SLACK_RELAY_MAX_PAYLOAD_BYTES = 1024 * 1024;
+const SLACK_RELAY_MAX_PAYLOAD_BYTES = 1048576;
 async function monitorSlackRelaySource(params) {
 	let reconnectAttempts = 0;
 	while (!params.abortSignal?.aborted) {
@@ -56,7 +56,8 @@ async function monitorSlackRelaySource(params) {
 function openRelayWebSocket(config, abortSignal) {
 	if (abortSignal?.aborted) return Promise.reject(/* @__PURE__ */ new Error("Slack relay websocket aborted before connect"));
 	return new Promise((resolve, reject) => {
-		const ws = new WebSocket(buildRelayWebSocketUrl(config), buildRelayWebSocketOptions(config.authToken));
+		const url = buildRelayWebSocketUrl(config);
+		const ws = new WebSocket(url, buildRelayWebSocketOptions(config.authToken));
 		const cleanup = () => {
 			ws.off("open", onOpen);
 			ws.off("error", onError);
@@ -210,7 +211,8 @@ function extractRelaySlackMessageEvent(frame) {
 	const routeRecord = asOptionalRecord(record.route);
 	const routeKind = stringValue(routeRecord?.kind);
 	const routeKey = stringValue(routeRecord?.key);
-	const event = asOptionalRecord(asOptionalRecord(record.payload)?.event);
+	const payload = asOptionalRecord(record.payload);
+	const event = asOptionalRecord(payload?.event);
 	if (event?.type !== "message" || typeof event.channel !== "string") return;
 	if (!deliveryId || !routeKind || !SLACK_RELAY_ROUTE_KINDS.has(routeKind) || !routeKey) return;
 	return {

package/dist/{replies-BSiRQOJ1.js → .setup/replies-Cpng2F6w.mjs}

@@ -1,6 +1,6 @@
-import { C as isSlackNativeResponseUrlRejection, M as SLACK_TEXT_LIMIT, S as isSlackInvalidBlocksResponse, T as buildSlackBlocksFallbackText, Z as markdownToSlackMrkdwnChunks, b as hasSlackNativeDataBlock, d as resolveSlackReplyBlockResolution, f as resolveSlackReplyBlocks, l as hasSlackReplyStructuredContent, v as buildSlackNativeDataAccessibilityText } from "./group-policy-BdwszjYn.js";
-import { h as chunkSlackTextAtHardLimit, m as buildSlackNativeDataDeliveryPlan, r as sendMessageSlack } from "./send-DS9ICrBI.js";
-import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-CN_8hFv2.js";
+import { C as isSlackNativeResponseUrlRejection, M as SLACK_TEXT_LIMIT, S as isSlackInvalidBlocksResponse, T as buildSlackBlocksFallbackText, Z as markdownToSlackMrkdwnChunks, b as hasSlackNativeDataBlock, d as resolveSlackReplyBlockResolution, f as resolveSlackReplyBlocks, l as hasSlackReplyStructuredContent, v as buildSlackNativeDataAccessibilityText } from "./group-policy-9pMyFFRP.mjs";
+import { h as chunkSlackTextAtHardLimit, m as buildSlackNativeDataDeliveryPlan, r as sendMessageSlack } from "./send-CBfhmYDj.mjs";
+import { a as createSlackResponseUrlBudget, i as SlackResponseAlreadyReportedError } from "./provider-1mRMBuV5.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
 import { createReplyReferencePlanner } from "openclaw/plugin-sdk/reply-reference";
@@ -141,7 +141,8 @@ async function deliverReplies(params) {
 		});
 		const reply = resolveSendableOutboundReplyParts(payload);
 		const textRaw = reply.hasText && !isSilentReplyText(reply.trimmedText, SILENT_REPLY_TOKEN) ? reply.trimmedText : void 0;
-		const { authoredTextPlacement, segments } = resolveSlackReplyBlockResolution(payload, { materializeAuthoredText: !reply.hasMedia && hasSlackReplyStructuredContent(payload) });
+		const materializeAuthoredText = !reply.hasMedia && hasSlackReplyStructuredContent(payload);
+		const { authoredTextPlacement, segments } = resolveSlackReplyBlockResolution(payload, { materializeAuthoredText });
 		if (!textRaw && !reply.hasMedia && segments.length === 0) continue;
 		const acceptedResults = [];
 		const sendReply = async (input) => {
@@ -297,8 +298,9 @@ function resolveSlackThreadTs(params) {
 	}).use();
 }
 function createSlackReplyReferencePlanner(params) {
+	const effectiveMode = params.isThreadReply ?? Boolean(params.incomingThreadTs && params.incomingThreadTs !== params.messageTs) ? "all" : params.replyToMode;
 	return createReplyReferencePlanner({
-		replyToMode: params.isThreadReply ?? Boolean(params.incomingThreadTs && params.incomingThreadTs !== params.messageTs) ? "all" : params.replyToMode,
+		replyToMode: effectiveMode,
 		existingId: params.incomingThreadTs,
 		startId: params.messageTs,
 		hasReplied: params.hasReplied
@@ -345,7 +347,8 @@ async function deliverSlackSlashReplies(params) {
 		if (payload.isReasoning === true) continue;
 		const reply = resolveSendableOutboundReplyParts(payload);
 		const textRaw = reply.hasText && !isSilentReplyText(reply.trimmedText, SILENT_REPLY_TOKEN) ? reply.trimmedText : void 0;
-		const { authoredTextPlacement, segments } = resolveSlackReplyBlockResolution(payload, { materializeAuthoredText: hasSlackReplyStructuredContent(payload) });
+		const materializeAuthoredText = hasSlackReplyStructuredContent(payload);
+		const { authoredTextPlacement, segments } = resolveSlackReplyBlockResolution(payload, { materializeAuthoredText });
 		let outsideText = authoredTextPlacement === "outside-blocks" ? textRaw ?? "" : "";
 		const messages = [];
 		const hookParts = [];
@@ -457,7 +460,8 @@ async function deliverSlackSlashReplies(params) {
 	if (initialRemaining !== void 0 && initialMinimumCalls > initialRemaining) await failOversizedDelivery();
 	const deliverNativeFallback = async (messages, onVisible) => {
 		for (const message of messages) {
-			if (await isSlackInvalidBlocksResponse(await respond(message))) throw new Error("Slack rejected the native-data fallback blocks with invalid_blocks.");
+			const response = await respond(message);
+			if (await isSlackInvalidBlocksResponse(response)) throw new Error("Slack rejected the native-data fallback blocks with invalid_blocks.");
 			onVisible();
 		}
 	};
@@ -484,7 +488,8 @@ async function deliverSlackSlashReplies(params) {
 				}
 				let rejectedNativeBlocks = false;
 				try {
-					rejectedNativeBlocks = await isSlackInvalidBlocksResponse(await respond(planned.message));
+					const response = await respond(planned.message);
+					rejectedNativeBlocks = await isSlackInvalidBlocksResponse(response);
 					if (!rejectedNativeBlocks) markVisible();
 				} catch (error) {
 					if (!isSlackNativeResponseUrlRejection(error)) throw error;

package/dist/{resolve-channels-Czheznc8.js → .setup/resolve-channels-Dpv7OyKO.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
-import { h as createSlackLookupClient } from "./probe-0usmAb0i.js";
-import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-PbxGDbr9.mjs";
+import { s as createSlackLookupClient } from "./probe-DnWN6oBa.mjs";
+import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.mjs";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";
 //#region extensions/slack/src/resolve-channels.ts
@@ -83,9 +83,10 @@ async function resolveSlackChannelAllowlist(params) {
 		let resolvedIndex = 0;
 		return workspaceResolved.map((entry) => entry ?? resolved[resolvedIndex++]);
 	}
+	const channels = await listSlackChannels(params.client ?? createSlackLookupClient(params.token));
 	const resolved = resolveDirectoryAllowlistEntries({
 		entries: lookupEntries,
-		lookup: await listSlackChannels(params.client ?? createSlackLookupClient(params.token)),
+		lookup: channels,
 		parseInput: parseSlackChannelMention,
 		findById: (lookup, id) => lookup.find((channel) => channel.id === id),
 		buildIdResolved: ({ input, parsed, match }) => ({

package/dist/{resolve-users-BAOlNimr.js → .setup/resolve-users-DmyA3D_2.mjs}

@@ -1,7 +1,7 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
-import { h as createSlackLookupClient } from "./probe-0usmAb0i.js";
-import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-PbxGDbr9.mjs";
+import { s as createSlackLookupClient } from "./probe-DnWN6oBa.mjs";
+import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.mjs";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { resolveDirectoryAllowlistEntries } from "openclaw/plugin-sdk/directory-runtime";
 //#region extensions/slack/src/resolve-users.ts
@@ -98,9 +98,10 @@ async function resolveSlackUserAllowlist(params) {
 	const workspaceResolved = params.entries.map(resolveWorkspaceQualifiedUser);
 	const lookupEntries = params.entries.filter((_, index) => !workspaceResolved[index]);
 	if (lookupEntries.length === 0) return workspaceResolved.filter((entry) => entry !== void 0);
+	const users = await listSlackUsers(params.client ?? createSlackLookupClient(params.token));
 	const resolved = resolveDirectoryAllowlistEntries({
 		entries: lookupEntries,
-		lookup: await listSlackUsers(params.client ?? createSlackLookupClient(params.token)),
+		lookup: users,
 		parseInput: parseSlackUserInput,
 		findById: (lookup, id) => lookup.find((user) => user.id === id),
 		buildIdResolved: ({ input, parsed, match }) => ({

package/dist/.setup/runtime-setter-api-CMFvhrAr.mjs

@@ -0,0 +1,3 @@
+import { r as setSlackRuntime } from "./runtime-JSVZSWAj.mjs";
+import "../runtime-setter-api.js";
+export { setSlackRuntime };

package/dist/{scopes-COSlmhnH.js → .setup/scopes-Dcgl9Nme.mjs}

@@ -1,4 +1,4 @@
-import { g as createSlackReadClient, o as formatSlackError } from "./probe-0usmAb0i.js";
+import { c as createSlackReadClient, o as formatSlackError } from "./probe-DnWN6oBa.mjs";
 import { isRecord, normalizeOptionalString, normalizeStringEntries, sortUniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/slack/src/scopes.ts
 function collectScopes(value, into) {

package/dist/.setup/secret-contract-api-D9UfYujm.mjs

@@ -0,0 +1,3 @@
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DxmvbxBF.mjs";
+import "../secret-contract-api.js";
+export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/{security-audit-B_yKr7MW.js → .setup/security-audit-tCbGyCfU.mjs}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
 import { readChannelAllowFromStore } from "openclaw/plugin-sdk/conversation-runtime";
 import { coerceNativeSetting, normalizeAllowFromList } from "openclaw/plugin-sdk/channel-policy";
 import { resolveNativeCommandsEnabled, resolveNativeSkillsEnabled } from "openclaw/plugin-sdk/native-command-config-runtime";