@openclaw/slack 2026.9.1-beta.1 → 2026.9.1

package/dist/{provider-D4nDgxCh.js → provider-Do50wMWn.js}

@@ -1,15 +1,15 @@
 import { n as registerSlackHttpHandler, r as normalizeSlackWebhookPath } from "./registry-bbjH7IHX.js";
 import { a as resolveSlackAccount, d as resolveSlackAppToken, f as resolveSlackBotToken, i as resolveDefaultSlackAccountId, o as resolveSlackAccountAllowFrom, s as resolveSlackAccountDmPolicy, u as formatSlackBotTokenIdentityWarning } from "./accounts-Dm_H77gH.js";
-import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-BnMD2ZqZ.js";
-import { $ as isSlackCallbackActionId, B as SLACK_TEXT_LIMIT, G as truncateSlackText, Nt as isSlackExecApprovalAuthorizedSender, Q as isSlackApprovalActionId, _t as isSlackAnyNativeApprovalClientEnabled, a as qualifySlackConversationId, c as allowListMatches, ct as escapeSlackMrkdwn, d as normalizeSlackAllowOwnerEntry, et as isSlackQuestionActionId, f as normalizeSlackSlug, jt as isSlackApprovalAuthorizedSender, kt as registerSlackInstallationState, l as normalizeAllowList, m as resolveSlackUserAllowListForTeam, nt as decodeSlackQuestionAction, o as qualifySlackRoutePeerId, p as resolveSlackAllowListMatch, rt as resolveSlackQuestionAction, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, u as normalizeAllowListLower, ut as decodeSlackApprovalAction } from "./group-policy-CU1tEGpS.js";
-import { c as createSlackWebClient, g as resolveSlackWebClientOptions, h as resolveSlackProxyDispatcher, m as resolveSlackLookupClientOptions, o as createSlackStartupAuthClient, r as formatSlackError, u as getSlackListenerUploadCompletionClient } from "./probe-4_aHtVT3.js";
+import { a as parseSlackTarget, n as formatSlackTarget } from "./target-parsing-PbxGDbr9.js";
+import { Ct as isSlackApprovalAuthorizedSender, G as isSlackCallbackActionId, J as decodeSlackQuestionAction, K as isSlackQuestionActionId, L as truncateSlackText, M as SLACK_TEXT_LIMIT, Tt as isSlackExecApprovalAuthorizedSender, W as isSlackApprovalActionId, Y as resolveSlackQuestionAction, a as qualifySlackConversationId, et as escapeSlackMrkdwn, lt as isSlackAnyNativeApprovalClientEnabled, nt as decodeSlackApprovalAction, o as qualifySlackRoutePeerId, s as resolveSlackEnterpriseMainDmSessionKey, t as buildSlackChannelIdCandidates, xt as registerSlackInstallationState } from "./group-policy-BKjMqT-8.js";
+import { C as normalizeAllowListLower, D as resolveSlackUserAllowListForTeam, E as resolveSlackAllowListMatch, S as normalizeAllowList, T as normalizeSlackSlug, _ as resolveSlackLookupClientOptions, a as slackIngressIdentity, d as createSlackWebClient, i as createSlackIngressSubject, l as createSlackStartupAuthClient, o as formatSlackError, p as getSlackListenerUploadCompletionClient, v as resolveSlackProxyDispatcher, w as normalizeSlackAllowOwnerEntry, x as allowListMatches, y as resolveSlackWebClientOptions } from "./probe-gj5yQgN2.js";
 import { n as getSlackRuntime, t as getOptionalSlackRuntime } from "./runtime-JSVZSWAj.js";
-import { i as hasSlackMessageTableBlock, r as saveRemoteMedia, t as isGovSlackClient } from "./slack-client-kind-hSfjXyUM.js";
-import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-DtjEnlLh.js";
-import { t as collectSlackCursorPages } from "./cursor-pages-eX7p8Wwt.js";
-import { t as resolveSlackChannelAllowlist } from "./resolve-channels-DSamDgVs.js";
-import { t as resolveSlackUserAllowlist } from "./resolve-users-CIzwbaJR.js";
-import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-BoP6t88v.js";
+import { C as hasSlackMessageTableBlock, b as saveRemoteMedia, f as readSlackMessages, y as isGovSlackClient } from "./actions-fh66A6lc.js";
+import { i as setSlackDefaultSendIdentity, p as requireSlackPostMessageTimestamp } from "./send-Djswy6lf.js";
+import { t as collectSlackCursorPages } from "./cursor-pages-ByFwo-Py.js";
+import { t as resolveSlackChannelAllowlist } from "./resolve-channels-CU7Bg5Ka.js";
+import { t as resolveSlackUserAllowlist } from "./resolve-users-DrhttvRQ.js";
+import { n as resolveSlackChannelConfig, r as resolveSlackChannelLabel, t as isSlackChannelAllowedByPolicy } from "./policy-D7PKkiet.js";
 import { normalizeAccountId } from "openclaw/plugin-sdk/account-resolution";
 import { normalizeResolvedSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { asNonArrayRecord, asOptionalRecord, isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries, normalizeUniqueTrimmedStringList } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -20,12 +20,13 @@ import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { computeBackoff, createNonExitingRuntime, createSubsystemLogger, danger, getChildLogger, logVerbose, shouldLogVerbose, sleepWithAbort, warn } from "openclaw/plugin-sdk/runtime-env";
 import { chunkItems } from "openclaw/plugin-sdk/text-chunking";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
+import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { parseExecApprovalCommandText } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { withTimeout } from "openclaw/plugin-sdk/text-utility-runtime";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { WebAPIHTTPError, WebAPIPlatformError, WebAPIRateLimitedError, WebAPIRequestError, WebClient } from "@slack/web-api";
-import { addAllowlistUserEntriesFromConfigEntry, buildAllowlistResolutionSummary, formatAllowlistMatchMeta, mergeAllowlist, patchAllowlistUsersInConfigEntries, summarizeMapping } from "openclaw/plugin-sdk/allow-from";
 import { buildPluginBindingResolvedText, parsePluginBindingApprovalCustomId, resolveConversationLabel as resolveConversationLabel$1, resolvePluginConversationBindingApproval, resolveRuntimeConversationBindingRoute, upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
+import { createChannelIngressResolver, readChannelIngressStoreAllowFromForDmPolicy } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, isApprovalNotFoundError, readErrorName, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-chunking";
 import { buildChannelMetadata } from "openclaw/plugin-sdk/security-runtime";
@@ -44,12 +45,12 @@ import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy as res
 import { resolveChannelConfigWrites } from "openclaw/plugin-sdk/channel-config-writes";
 import { mutateConfigFile, readConfigFileSnapshotForWrite } from "openclaw/plugin-sdk/config-mutation";
 import { enqueueRoutedSystemEvent } from "openclaw/plugin-sdk/system-event-runtime";
-import { createChannelIngressResolver, defineStableChannelIngressIdentity, readChannelIngressStoreAllowFromForDmPolicy } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { asDateTimestampMs, parseFiniteNumber, parseStrictFiniteNumber, resolveExpiresAtMsFromDurationMs, timestampMsToIsoString } from "openclaw/plugin-sdk/number-runtime";
 import { resolveApprovalOverGateway } from "openclaw/plugin-sdk/approval-gateway-runtime";
 import { formatCommandArgMenuTitle, resolveCommandAuthorization, resolveEffectiveAgentRuntime, resolveNativeCommandSessionTargets, resolveStoredModelOverride } from "openclaw/plugin-sdk/command-auth-native";
 import { requestHeartbeat } from "openclaw/plugin-sdk/heartbeat-runtime";
 import { createChannelInteractiveDispatcher } from "openclaw/plugin-sdk/plugin-runtime";
+import { reportChannelRoomJoin } from "openclaw/plugin-sdk/channel-join-intro-runtime";
 import { createChannelInboundDebouncer, shouldDebounceTextInbound } from "openclaw/plugin-sdk/channel-inbound";
 import { createChannelReplayGuard, runClaimableDedupeClaimLoop } from "openclaw/plugin-sdk/persistent-dedupe";
 import { channelBlockedPatch, channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
@@ -160,10 +161,7 @@ function createSlackAgentViewState(params) {
 		if (enabled) return true;
 		if (loaded) return false;
 		const stateKey = workspaceStateKey();
-		if (!stateKey) {
-			loaded = true;
-			return false;
-		}
+		if (!stateKey) return false;
 		const openedStore = openWorkspaceStore();
 		if (!openedStore) return false;
 		try {
@@ -236,8 +234,8 @@ function createSlackAgentViewState(params) {
 //#endregion
 //#region extensions/slack/src/monitor/assistant-thread-context.ts
 const SLACK_ASSISTANT_THREAD_CONTEXT_METADATA_EVENT = "assistant_thread_context";
-const SLACK_ASSISTANT_CONTEXT_TTL_MS = 1440 * 60 * 1e3;
-const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 600 * 1e3;
+const SLACK_ASSISTANT_CONTEXT_TTL_MS = 864e5;
+const SLACK_ASSISTANT_CONTEXT_CLEANUP_INTERVAL_MS = 6e5;
 function buildSlackAssistantThreadMetadata(context) {
 	const eventPayload = {};
 	if (context.channelId) eventPayload.channel_id = context.channelId;
@@ -356,11 +354,14 @@ const DEFAULT_SLACK_SUGGESTED_PROMPTS = [
 	}
 ];
 async function updateSlackSuggestedPrompts(params) {
-	const prompts = params.prompts.map((prompt) => ({
-		title: prompt.title.trim(),
-		message: prompt.message.trim()
+	const prompts = params.prompts.map(({ title, message }) => ({
+		title: title.trim(),
+		message: message.trim()
 	})).filter((prompt) => prompt.title && prompt.message).slice(0, 4);
-	if (prompts.length === 0) return false;
+	if (prompts.length === 0) {
+		logVerbose(`slack suggested prompts update failed for channel ${params.channelId}: failed (no prompts)`);
+		return "failed";
+	}
 	try {
 		await params.client.assistant.threads.setSuggestedPrompts({
 			token: params.botToken,
@@ -369,10 +370,12 @@ async function updateSlackSuggestedPrompts(params) {
 			...params.title?.trim() ? { title: params.title.trim() } : {},
 			prompts
 		});
-		return true;
+		return "accepted";
 	} catch (error) {
-		logVerbose(`slack suggested prompts update failed for channel ${params.channelId}: ${formatSlackError(error)}`);
-		return false;
+		const code = error instanceof WebAPIPlatformError ? error.data.error : void 0;
+		const outcome = code === "not_agent_app" || code === "missing_scope" ? "rejected" : code === "internal_error" ? "internal_error" : "failed";
+		logVerbose(`slack suggested prompts update failed for channel ${params.channelId}: ${outcome}: ${formatSlackError(error)}`);
+		return outcome;
 	}
 }
 //#endregion
@@ -476,12 +479,12 @@ function resolveSlackSystemEventRoute(params) {
 const SLACK_CHANNEL_CACHE_MAX_ENTRIES = 1024;
 const SLACK_USER_CACHE_MAX_ENTRIES = 2048;
 const SLACK_AVATAR_CACHE_MAX_ENTRIES = 128;
-const SLACK_AVATAR_MAX_BYTES = 256 * 1024;
+const SLACK_AVATAR_MAX_BYTES = 262144;
 const SLACK_AVATAR_SSRF_POLICY = {
 	allowedHostnames: ["avatars.slack-edge.com", "*.slack-edge.com"],
 	hostnameAllowlist: ["avatars.slack-edge.com", "*.slack-edge.com"]
 };
-const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 5 * 6e4;
+const SLACK_CHANNEL_DENIAL_WARNING_TTL_MS = 3e5;
 const SLACK_CHANNEL_DENIAL_WARNING_MAX_ENTRIES = 1024;
 function createSlackMonitorContext(params) {
 	const channelHistories = /* @__PURE__ */ new Map();
@@ -586,7 +589,8 @@ function createSlackMonitorContext(params) {
 		}
 	};
 	const resolveUserAvatar = (userId, eventScope) => {
-		if (isGovSlackClient(eventScope?.client ?? params.app.client)) return;
+		const client = eventScope?.client ?? params.app.client;
+		if (isGovSlackClient(client)) return;
 		const imageUrl = readLruMapEntry(userCache, scopedKey(userId, eventScope))?.imageUrl;
 		if (!imageUrl) return;
 		const cacheKey = scopedKey(`${userId}\0${imageUrl}`, eventScope);
@@ -888,9 +892,9 @@ function resolveSlackInstallationIdentity(params) {
 	const isEnterpriseInstall = auth.is_enterprise_install === true;
 	const apiAppId = normalizeOptionalString(auth.app_id);
 	const enterpriseId = normalizeOptionalString(auth.enterprise_id);
+	const transportApiAppId = normalizeOptionalString(params.transportApiAppId);
 	if (isEnterpriseInstall) {
 		if (!enterpriseId) throw new Error("Slack org-wide auth.test returned no enterprise_id");
-		const transportApiAppId = normalizeOptionalString(params.transportApiAppId);
 		if (apiAppId && transportApiAppId && apiAppId !== transportApiAppId) throw new Error(`Slack token mismatch: bot token app_id=${apiAppId} but transport app_id=${transportApiAppId}`);
 		const effectiveApiAppId = apiAppId ?? transportApiAppId;
 		return {
@@ -902,11 +906,12 @@ function resolveSlackInstallationIdentity(params) {
 	const teamId = normalizeOptionalString(auth.team_id);
 	if (!teamId) throw new Error("Slack workspace auth.test returned no team_id");
 	const teamName = normalizeOptionalString(auth.team);
+	const workspaceApiAppId = apiAppId ?? transportApiAppId;
 	return {
 		kind: "workspace",
 		teamId,
 		...teamName ? { teamName } : {},
-		...apiAppId ? { apiAppId } : {},
+		...workspaceApiAppId ? { apiAppId: workspaceApiAppId } : {},
 		...enterpriseId ? { enterpriseId } : {}
 	};
 }
@@ -1388,7 +1393,8 @@ function createSlackDurableIngress(options) {
 				}
 			};
 			try {
-				if (asOptionalRecord(raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0)?.type === "channel_id_changed") {
+				const event = raw.kind === "events-api" ? asOptionalRecord(raw.body)?.event : void 0;
+				if (asOptionalRecord(event)?.type === "channel_id_changed") {
 					const channelTurns = activeChannelTurns.get(laneKey);
 					if (channelTurns && channelTurns.size > 0) {
 						adoptOnCompletion = true;
@@ -1500,7 +1506,8 @@ async function resolveThreadTsFromHistory(params) {
 		inclusive: true,
 		limit: 1
 	});
-	return normalizeOptionalString((response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0])?.thread_ts);
+	const message = response.messages?.find((entry) => entry.ts === params.messageTs) ?? response.messages?.[0];
+	return normalizeOptionalString(message?.thread_ts);
 }
 function createSlackThreadTsResolver(params) {
 	const ttlMs = Math.max(0, parseFiniteNumber(params.cacheTtlMs) ?? DEFAULT_THREAD_TS_CACHE_TTL_MS);
@@ -1586,88 +1593,7 @@ const slackChannelMembersCache = /* @__PURE__ */ new WeakMap();
 const DEFAULT_CHANNEL_MEMBERS_CACHE_TTL_MS = 6e4;
 const CHANNEL_MEMBERS_CACHE_MAX = 512;
 const SLACK_CHANNEL_ID = "slack";
-const SLACK_USER_NAME_KIND = "plugin:slack-user-name";
-const SLACK_WORKSPACE_USER_ID_KIND = "plugin:slack-workspace-user-id";
 var SlackSystemEventAuthRetryError = class extends Error {};
-function normalizeSlackUserId(raw) {
-	const value = (raw ?? "").trim().toLowerCase();
-	if (!value) return "";
-	const mention = value.match(/^<@([a-z0-9_]+)>$/i);
-	if (mention?.[1]) return mention[1];
-	return value.replace(/^(slack:|user:)/, "");
-}
-function isSlackStableUserId(value) {
-	return /^[ubw][a-z0-9_]+$/i.test(value);
-}
-function normalizeSlackWorkspaceUserEntry(entry) {
-	const normalized = entry.trim().toLowerCase();
-	if (!normalized) return null;
-	try {
-		const target = parseSlackTarget(normalized);
-		if (target?.kind === "user" && target.teamId) return target.normalized;
-	} catch {
-		return null;
-	}
-	return null;
-}
-function normalizeSlackBareUserEntry(entry) {
-	const normalized = entry.trim().toLowerCase();
-	if (!normalized || normalizeSlackWorkspaceUserEntry(normalized)) return null;
-	const userId = normalizeSlackUserId(normalized);
-	return isSlackStableUserId(userId) ? userId : null;
-}
-function normalizeSlackStableEntry(entry) {
-	return normalizeSlackBareUserEntry(entry) ?? normalizeSlackWorkspaceUserEntry(entry);
-}
-function normalizeSlackNameEntry(entry) {
-	const normalized = entry.trim().toLowerCase();
-	if (!normalized || normalizeSlackStableEntry(normalized)) return null;
-	return normalized.replace(/^slack:/, "") || null;
-}
-function normalizeSlackNameSubject(value) {
-	return value.trim().toLowerCase() || null;
-}
-function normalizeSlackNameSlugEntry(entry) {
-	const name = normalizeSlackNameEntry(entry);
-	if (!name) return null;
-	const slug = normalizeSlackSlug(name);
-	return slug && slug !== name ? slug : null;
-}
-const slackIngressIdentity = defineStableChannelIngressIdentity({
-	key: "senderId",
-	kind: "stable-id",
-	normalizeEntry: normalizeSlackBareUserEntry,
-	normalizeSubject: normalizeSlackUserId,
-	sensitivity: "pii",
-	aliases: [{
-		key: "workspaceSenderId",
-		kind: SLACK_WORKSPACE_USER_ID_KIND,
-		normalizeEntry: normalizeSlackWorkspaceUserEntry,
-		normalizeSubject: normalizeSlackWorkspaceUserEntry,
-		sensitivity: "pii"
-	}, ...[["senderName", normalizeSlackNameEntry], ["senderNameSlug", normalizeSlackNameSlugEntry]].map(([key, normalizeEntry]) => ({
-		key,
-		kind: SLACK_USER_NAME_KIND,
-		normalizeEntry,
-		normalizeSubject: normalizeSlackNameSubject,
-		dangerous: true,
-		sensitivity: "pii"
-	}))]
-});
-function createSlackIngressSubject(params) {
-	const senderId = normalizeSlackUserId(params.senderId);
-	const teamId = normalizeOptionalLowercaseString(params.teamId);
-	const senderName = params.senderName?.trim().toLowerCase();
-	const senderNameSlug = senderName ? normalizeSlackSlug(senderName) : void 0;
-	return {
-		stableId: senderId,
-		aliases: {
-			workspaceSenderId: teamId && senderId ? `team:${teamId}:user:${senderId}` : void 0,
-			senderName,
-			senderNameSlug
-		}
-	};
-}
 function createSlackIngressResolver(ctx) {
 	return createChannelIngressResolver({
 		channelId: SLACK_CHANNEL_ID,
@@ -1909,7 +1835,7 @@ async function decideSlackSystemIngress(params) {
 		} : void 0
 	};
 	const result = await resolver.message(input);
-	if (result.ingress.decision !== "allow" && params.retryNameLookup && result.state.allowlists[isDirectMessage ? "dm" : "group"].normalizedEntries.some((entry) => entry.kind === SLACK_USER_NAME_KIND)) {
+	if (result.ingress.decision !== "allow" && params.retryNameLookup && result.state.allowlists[isDirectMessage ? "dm" : "group"].normalizedEntries.some((entry) => entry.kind === "plugin:slack-user-name")) {
 		const lookup = await params.ctx.resolveUserName(params.senderId, params.eventScope);
 		if (lookup.error && isTransientSlackThreadLookupError(lookup.error)) throw new SlackSystemEventAuthRetryError(formatErrorMessage(lookup.error));
 		if (lookup.name) return (await resolver.message({
@@ -2037,7 +1963,8 @@ function resolveSlackEventScope(params) {
 		ok: false,
 		reason: "enterprise_event_for_workspace_account"
 	} : { ok: true };
-	const apiAppId = normalizeOptionalString((params.body && typeof params.body === "object" ? params.body : {}).api_app_id);
+	const body = params.body && typeof params.body === "object" ? params.body : {};
+	const apiAppId = normalizeOptionalString(body.api_app_id);
 	if (apiAppId && params.identity.apiAppId && apiAppId !== params.identity.apiAppId) return {
 		ok: false,
 		reason: "wrong_app"
@@ -2200,9 +2127,10 @@ function registerSlackChannelIdChangedEvent(params) {
 			const oldChannelId = payload.old_channel_id;
 			const newChannelId = payload.new_channel_id;
 			if (!oldChannelId || !newChannelId) return;
+			const channelInfo = await ctx.resolveChannelName(newChannelId);
 			const label = resolveSlackChannelLabel({
 				channelId: newChannelId,
-				channelName: (await ctx.resolveChannelName(newChannelId))?.name
+				channelName: channelInfo?.name
 			});
 			ctx.runtime.log?.(warn(`[slack] Channel ID changed: ${oldChannelId} → ${newChannelId} (${label})`));
 			if (!resolveChannelConfigWrites({
@@ -2287,11 +2215,12 @@ function registerSlackHomeEvents(params) {
 		if (!payload.user) return;
 		if (payload.tab === "messages") {
 			if (!payload.channel) return;
-			if (await ctx.setSlackSuggestedPrompts({
+			const outcome = await ctx.setSlackSuggestedPrompts({
 				channelId: payload.channel,
 				title: "Try asking",
 				prompts: DEFAULT_SLACK_SUGGESTED_PROMPTS
-			})) await ctx.recordSlackAgentView();
+			});
+			if (outcome === "accepted" || outcome === "internal_error") await ctx.recordSlackAgentView();
 			return;
 		}
 		await ctx.app.client.views.publish({
@@ -2455,7 +2384,8 @@ function isSlackReplyActionId(actionId) {
 	return actionId === "openclaw:reply_button" || actionId === "openclaw:reply_select" || actionId.startsWith(`openclaw:reply_button:`) || actionId.startsWith(`openclaw:reply_select:`);
 }
 function readSlackApprovalAction(parsed) {
-	return decodeSlackApprovalAction(normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry)));
+	const value = normalizeOptionalString(parsed.actionSummary.value) ?? parsed.actionSummary.selectedValues?.map((entry) => normalizeOptionalString(entry)).find((entry) => Boolean(entry));
+	return decodeSlackApprovalAction(value);
 }
 function isSlackReplyLinkAction(parsed) {
 	if (parsed.actionId === "openclaw:session_link") return true;
@@ -2580,11 +2510,19 @@ async function handleSlackPluginBindingApproval(params) {
 	await respondEphemeral(params.respond, buildPluginBindingResolvedText(resolved));
 	return true;
 }
+function formatSlackPluginApprovalSenderId(userId, eventScope) {
+	return formatSlackTarget({
+		kind: "user",
+		id: userId,
+		teamId: eventScope?.teamId
+	});
+}
 async function handleSlackApprovalInteraction(params) {
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginApprovalAuthorizedSender = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execApprovalAuthorizedSender = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2604,7 +2542,7 @@ async function handleSlackApprovalInteraction(params) {
 			decision: params.approval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId
+			senderId: params.approval.approvalKind === "plugin" ? pluginSenderId : params.parsed.userId
 		});
 		const terminalLabel = resolveSlackApprovalTerminalLabel(result.approval);
 		const prefix = result.applied ? "Resolved" : "Already resolved";
@@ -2640,10 +2578,11 @@ async function handleSlackApprovalInteraction(params) {
 async function handleSlackLegacyApprovalInteraction(params) {
 	const parsedApproval = parseExecApprovalCommandText(params.pluginInteractionData);
 	if (!parsedApproval) return false;
+	const pluginSenderId = formatSlackPluginApprovalSenderId(params.parsed.userId, params.eventScope);
 	const pluginAuthorized = isSlackApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
 		accountId: params.ctx.accountId,
-		senderId: params.parsed.userId
+		senderId: pluginSenderId
 	});
 	const execAuthorized = isSlackExecApprovalAuthorizedSender({
 		cfg: params.ctx.cfg,
@@ -2665,7 +2604,7 @@ async function handleSlackLegacyApprovalInteraction(params) {
 			decision: parsedApproval.decision,
 			channel: "slack",
 			accountId: params.ctx.accountId,
-			senderId: params.parsed.userId,
+			senderId: resolveMethod === "plugin" ? pluginSenderId : params.parsed.userId,
 			resolveMethod
 		});
 		try {
@@ -3651,6 +3590,55 @@ function registerSlackMemberEvents(params) {
 			const channelId = payload.channel;
 			const channelInfo = channelId ? await ctx.resolveChannelName(channelId, eventScope) : {};
 			const channelType = payload.channel_type ?? channelInfo?.type;
+			if (paramsLocal.verb === "joined" && payload.user === ctx.botUserId && channelId) {
+				const roomType = normalizeSlackChannelType(channelType, channelId);
+				if (roomType === "channel" || roomType === "group") {
+					const roomAllowed = ctx.isChannelAllowed({
+						teamId: eventScope?.teamId ?? ctx.teamId,
+						channelId,
+						channelName: channelInfo.name,
+						channelType: roomType
+					});
+					const inviterLabel = roomAllowed && payload.inviter ? (await ctx.resolveUserName(payload.inviter, eventScope)).name ?? payload.inviter : void 0;
+					await reportChannelRoomJoin({
+						cfg: ctx.cfg,
+						channel: "slack",
+						accountId: ctx.accountId,
+						conversationId: channelId,
+						deliverTo: `channel:${channelId}`,
+						route: ctx.resolveSlackSystemEventRoute({
+							channelId,
+							channelType: roomType,
+							eventScope
+						}),
+						inviterLabel,
+						roomAllowed,
+						resolveRoomContext: async ({ messageLimit }) => {
+							const purpose = [channelInfo.purpose, channelInfo.topic].filter((value) => Boolean(value?.trim())).join("\n");
+							const roomContext = {
+								title: channelInfo.name ? `#${channelInfo.name}` : void 0,
+								purpose: purpose || void 0
+							};
+							try {
+								const { messages } = await readSlackMessages(channelId, {
+									limit: messageLimit,
+									client: eventScope?.client ?? ctx.app.client
+								});
+								return {
+									...roomContext,
+									recentMessages: messages.toReversed().flatMap(({ user, text }) => text?.trim() ? [{
+										sender: user,
+										text
+									}] : [])
+								};
+							} catch {
+								return roomContext;
+							}
+						}
+					});
+					return;
+				}
+			}
 			const ingressContext = await authorizeAndResolveSlackSystemEventContext({
 				ctx,
 				senderId: payload.user,
@@ -3660,7 +3648,8 @@ function registerSlackMemberEvents(params) {
 				eventScope
 			});
 			if (!ingressContext) return;
-			enqueueRoutedSystemEvent(`Slack: ${(payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone"} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
+			const userLabel = (payload.user ? await ctx.resolveUserName(payload.user, eventScope) : {})?.name ?? payload.user ?? "someone";
+			enqueueRoutedSystemEvent(`Slack: ${userLabel} ${paramsLocal.verb} ${ingressContext.channelLabel}.`, ingressContext.route, { contextKey: `slack:member:${eventScope ? `${eventScope.teamId}:` : ""}${paramsLocal.verb}:${channelId ?? "unknown"}:${payload.user ?? "unknown"}:${paramsLocal.eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack ${paramsLocal.verb} handler failed: ${formatErrorMessage(err)}`));
 			if (err instanceof SlackSystemEventAuthRetryError) throw err;
@@ -3850,7 +3839,8 @@ function addUserCandidate(candidates, value, botUserId) {
 	candidates.add(id);
 }
 function collectMetadataUserCandidates(candidates, value, botUserId) {
-	const payload = asOptionalRecord(asOptionalRecord(value)?.event_payload);
+	const metadata = asOptionalRecord(value);
+	const payload = asOptionalRecord(metadata?.event_payload);
 	if (!payload) return;
 	for (const key of [
 		"user",
@@ -4150,7 +4140,8 @@ function registerSlackReactionEvents(params) {
 			const emojiLabel = event.reaction ?? "emoji";
 			const authorLabel = authorInfo?.name ?? event.item_user;
 			const baseText = `Slack reaction ${action}: :${emojiLabel}: by ${actorLabel} in ${ingressContext.channelLabel} msg ${item.ts}`;
-			enqueueRoutedSystemEvent(authorLabel ? `${baseText} from ${authorLabel}` : baseText, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
+			const text = authorLabel ? `${baseText} from ${authorLabel}` : baseText;
+			enqueueRoutedSystemEvent(text, ingressContext.route, { contextKey: `slack:reaction:${eventScope ? `${eventScope.teamId}:` : ""}${action}:${item.channel}:${item.ts}:${event.user}:${emojiLabel}:${eventId}` });
 		} catch (err) {
 			ctx.runtime.error?.(danger(`slack reaction handler failed: ${formatErrorMessage(err)}`));
 		}
@@ -4229,7 +4220,7 @@ function registerSlackWorkspaceEvents(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-dispatch-dedupe.ts
-const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_MESSAGE_DISPATCH_DEDUPE_TTL_MS = 864e5;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_MEMORY_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_STATE_MAX_ENTRIES = 2e4;
 const SLACK_MESSAGE_DISPATCH_DEDUPE_NAMESPACE = "global";
@@ -4296,7 +4287,7 @@ function buildSlackDebounceKey(message, accountId, teamId) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/message-handler.ts
-const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-CRRng_Nw.js"));
+const loadSlackMessagePipeline = createLazyRuntimeModule(() => import("./pipeline.runtime-BklS_NEj.js"));
 const RETRYABLE_FLUSH_MAX_ATTEMPTS = 3;
 const RETRYABLE_FLUSH_RETRY_DELAY_MS = 1e3;
 const REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE = /reply session initialization conflicted for \S+/u;
@@ -4304,8 +4295,9 @@ function isRetryableSlackInboundError(error) {
 	return collectErrorGraphCandidates(error, (current) => [current.cause, current.error]).some((candidate) => REPLY_SESSION_INIT_CONFLICT_MESSAGE_RE.test(formatErrorMessage(candidate)));
 }
 function shouldDebounceSlackMessage(message, cfg) {
+	const textForCommandDetection = stripSlackMentionsForCommandDetection(message.text ?? "");
 	return shouldDebounceTextInbound({
-		text: stripSlackMentionsForCommandDetection(message.text ?? ""),
+		text: textForCommandDetection,
 		cfg,
 		hasMedia: Boolean(message.files && message.files.length > 0) || hasSlackMessageTableBlock(message)
 	});
@@ -4477,6 +4469,10 @@ function createSlackMessageHandler(params) {
 								if (admissionLifecycle.onDeferred() === false) return false;
 								settlementHandedOff = true;
 							},
+							onDeferredHeartbeat: () => {
+								turnAdoptionLifecycle?.onDeferredHeartbeat?.();
+								admissionLifecycle.onDeferredHeartbeat?.();
+							},
 							onAbandoned: () => {
 								settlementHandedOff = true;
 								releaseClaims();
@@ -4512,14 +4508,20 @@ function createSlackMessageHandler(params) {
 			ctx.runtime.error?.(`slack inbound debounce flush failed: ${formatErrorMessage(err)}`);
 		}
 	});
-	const threadTsResolver = createSlackThreadTsResolver({ client: ctx.app.client });
+	const threadTsResolvers = /* @__PURE__ */ new WeakMap();
 	const pendingTopLevelDebounceKeys = /* @__PURE__ */ new Map();
 	async function enqueueSlackMessage(message, opts) {
 		if (opts.source === "message" && message.type !== "message") return;
 		if (opts.source === "message" && message.subtype && message.subtype !== "file_share" && message.subtype !== "bot_message" && message.subtype !== "thread_broadcast") return;
 		ctx.rememberSlackChannelType(message.channel, message.channel_type, opts.eventScope);
 		trackEvent?.();
-		const resolvedMessage = await (opts.eventScope ? createSlackThreadTsResolver({ client: opts.eventScope.client }) : threadTsResolver).resolve({
+		const client = opts.eventScope?.client ?? ctx.app.client;
+		let threadTsResolver = threadTsResolvers.get(client);
+		if (!threadTsResolver) {
+			threadTsResolver = createSlackThreadTsResolver({ client });
+			threadTsResolvers.set(client, threadTsResolver);
+		}
+		const resolvedMessage = await threadTsResolver.resolve({
 			message,
 			source: opts.source,
 			...opts.turnAdoptionLifecycle ? { turnAdoptionLifecycle: opts.turnAdoptionLifecycle } : {}
@@ -4559,11 +4561,11 @@ function createSlackMessageHandler(params) {
 }
 //#endregion
 //#region extensions/slack/src/monitor/presence-monitor.ts
-const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 480 * 60 * 1e3;
+const SLACK_PRESENCE_GREETING_COOLDOWN_MS = 288e5;
 const SLACK_PRESENCE_REQUEST_TIMEOUT_MS = 3e4;
 const SLACK_PRESENCE_POLL_INTERVAL_MS = 6e4;
 const SLACK_PRESENCE_AUTO_MAX_PARTICIPANTS = 8;
-const SLACK_PRESENCE_TARGET_TTL_MS = 1440 * 60 * 1e3;
+const SLACK_PRESENCE_TARGET_TTL_MS = 864e5;
 const SLACK_PRESENCE_MAX_POLLS_PER_INTERVAL = 45;
 const SLACK_PRESENCE_MAX_TARGETS = 2e3;
 const DEFAULT_SLACK_PRESENCE_EVENT_PROMPT = ["Before greeting, retrieve relevant memory and wiki context for this immutable user_id, including a known timezone when available. Use their local time; if their timezone is unknown, do not guess.", "Send at most one short, natural greeting in this Slack conversation. Do not reveal private memory. If no greeting is appropriate, stay silent."];
@@ -5015,7 +5017,10 @@ function createSlackBoltApp(params) {
 		...appReceiver ? { receiver: appReceiver } : {}
 	});
 	app.use(async (args) => {
-		await params.onContextIdentity?.(args.context ?? {});
+		await params.onContextIdentity?.({
+			...args.context,
+			apiAppId: normalizeOptionalString(asOptionalRecord(args.body)?.api_app_id)
+		});
 		if (shouldSkipOpenClawSlackSelfEvent(args)) return;
 		await args.next();
 	});
@@ -5171,8 +5176,8 @@ async function authorizeSlackDirectMessage(params) {
 //#endregion
 //#region extensions/slack/src/monitor/external-arg-menu-store.ts
 const SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES = 18;
-const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(SLACK_EXTERNAL_ARG_MENU_TOKEN_BYTES * 8 / 6)}}$`);
-const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 600 * 1e3;
+const SLACK_EXTERNAL_ARG_MENU_TOKEN_PATTERN = new RegExp(`^[A-Za-z0-9_-]{${Math.ceil(24)}}$`);
+const SLACK_EXTERNAL_ARG_MENU_TTL_MS = 6e5;
 const SLACK_EXTERNAL_ARG_MENU_PREFIX = "openclaw_cmdarg_ext:";
 function pruneSlackExternalArgMenuStore(store, rawNow) {
 	const now = asDateTimestampMs(rawNow);
@@ -5264,7 +5269,7 @@ const SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX = 300;
 const SLACK_HEADER_TEXT_MAX = 150;
 const SLACK_COMMAND_ARG_ACTION_BLOCKS_MAX = 47;
 const loadSlashCommandsRuntime = createLazyRuntimeModule(() => import("./slash-commands.runtime-BTTMlmwy.js"));
-const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-Chr3YHnT.js"));
+const loadSlashDispatchRuntime = createLazyRuntimeModule(() => import("./slash-dispatch.runtime-C3B4h5ZM.js"));
 const loadSlashSkillCommandsRuntime = createLazyRuntimeModule(() => import("./slash-skill-commands.runtime-CD1J2ODY.js"));
 const loadPluginCommandRuntime = createLazyRuntimeModule(() => import("openclaw/plugin-sdk/plugin-command-runtime"));
 function resolveSlackCommandMenuModelContext(params) {
@@ -5315,6 +5320,8 @@ function resolveSlackCommandMenuModelContext(params) {
 }
 const slackExternalArgMenuStore = createSlackExternalArgMenuStore();
 function buildSlackArgMenuConfirm(params) {
+	const command = escapeSlackMrkdwn(params.command);
+	const arg = escapeSlackMrkdwn(params.arg);
 	return {
 		title: {
 			type: "plain_text",
@@ -5322,7 +5329,7 @@ function buildSlackArgMenuConfirm(params) {
 		},
 		text: {
 			type: "mrkdwn",
-			text: truncateSlackText(`Run */${escapeSlackMrkdwn(params.command)}* with *${escapeSlackMrkdwn(params.arg)}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
+			text: truncateSlackText(`Run */${command}* with *${arg}* set to this value?`, SLACK_COMMAND_ARG_CONFIRM_TEXT_MAX)
 		},
 		confirm: {
 			type: "plain_text",
@@ -6123,12 +6130,13 @@ async function deliverSlackSlashResponseWithWebApi(params) {
 	const mrkdwn = "mrkdwn" in payload && typeof payload.mrkdwn === "boolean" ? payload.mrkdwn : void 0;
 	if (payload.response_type === "in_channel") {
 		const postSlackMessage = params.client.chat.postMessage;
-		requireSlackPostMessageTimestamp(await postSlackMessage({
+		const response = await postSlackMessage({
 			channel: params.command.channel_id,
 			text,
 			...blocks ? { blocks } : {},
 			...mrkdwn !== void 0 ? { mrkdwn } : {}
-		}));
+		});
+		requireSlackPostMessageTimestamp(response);
 	} else await params.client.chat.postEphemeral({
 		channel: params.command.channel_id,
 		user: params.command.user_id,
@@ -6160,8 +6168,8 @@ async function getSlackBoltInterop() {
 	}
 	return slackBoltInterop;
 }
-const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-CEmze11m.js"));
-const SLACK_WEBHOOK_MAX_BODY_BYTES = 1024 * 1024;
+const loadSlackRelaySource = createLazyRuntimeModule(() => import("./relay-source-DWuduiJ2.js"));
+const SLACK_WEBHOOK_MAX_BODY_BYTES = 1048576;
 const SLACK_WEBHOOK_BODY_TIMEOUT_MS = 3e4;
 function resolveSlackRuntimeIdentity(params) {
 	const botUserId = normalizeOptionalString(params.botUserId);
@@ -6262,10 +6270,10 @@ async function monitorSlackProvider(opts = {}) {
 	const mainKey = normalizeMainKey(sessionCfg?.mainKey);
 	const slackMode = opts.mode ?? account.config.mode ?? "socket";
 	const slackWebhookPath = normalizeSlackWebhookPath(account.config.webhookPath);
-	const signingSecret = normalizeResolvedSecretInputString({
+	const signingSecret = slackMode === "http" ? normalizeResolvedSecretInputString({
 		value: account.config.signingSecret,
 		path: `channels.slack.accounts.${account.accountId}.signingSecret`
-	});
+	}) : void 0;
 	const botToken = resolveSlackBotToken(opts.botToken ?? account.botToken);
 	const userToken = account.userToken;
 	const appToken = resolveSlackAppToken(opts.appToken ?? account.appToken);
@@ -6302,8 +6310,9 @@ async function monitorSlackProvider(opts = {}) {
 	const groupDmChannels = dmConfig?.groupChannels;
 	let channelsConfig = slackCfg.channels;
 	const defaultGroupPolicy = resolveDefaultGroupPolicy(cfg);
+	const providerConfigPresent = cfg.channels?.slack !== void 0;
 	const { groupPolicy, providerMissingFallbackApplied } = resolveOpenProviderRuntimeGroupPolicy$1({
-		providerConfigPresent: cfg.channels?.slack !== void 0,
+		providerConfigPresent,
 		groupPolicy: slackCfg.groupPolicy,
 		defaultGroupPolicy
 	});
@@ -6339,7 +6348,7 @@ async function monitorSlackProvider(opts = {}) {
 		slackMode,
 		token,
 		appToken: slackMode === "socket" ? appToken ?? void 0 : void 0,
-		signingSecret: slackMode === "http" ? signingSecret ?? void 0 : void 0,
+		signingSecret: signingSecret ?? void 0,
 		slackWebhookPath,
 		clientOptions,
 		dispatcher: slackDispatcher,
@@ -6366,6 +6375,13 @@ async function monitorSlackProvider(opts = {}) {
 				installationState.update(contextInstallationIdentity.kind);
 				await installSlackRuntimeForIdentity(contextInstallationIdentity);
 			}
+			if (!current.apiAppId && identity.apiAppId && current.installationIdentity.kind !== "degraded") {
+				applySlackInstallationIdentity(current, {
+					...current.installationIdentity,
+					apiAppId: identity.apiAppId
+				});
+				runtime.log?.(`[${account.accountId}] slack app id ${identity.apiAppId} learned from signed event`);
+			}
 			if (recovered || adopted) publishSlackConnectedStatus(opts.setStatus, current.identityHealth);
 		}
 	});
@@ -6604,10 +6620,11 @@ async function monitorSlackProvider(opts = {}) {
 				summarizeMapping("slack users", mapping, [], runtime);
 			}
 			if (allowNameMatching) try {
-				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+				const resolvedUsers = await resolveSlackUserAllowlist({
 					token: resolveToken,
 					entries: allowEntries
-				}), { formatResolved: formatSlackUserResolved });
+				});
+				const { mapping, unresolved, additions } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 				allowFrom = mergeAllowlist({
 					existing: allowFrom,
 					additions
@@ -6634,10 +6651,11 @@ async function monitorSlackProvider(opts = {}) {
 					summarizeMapping("slack channel users", mapping, [], runtime);
 				}
 				if (allowNameMatching) try {
-					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(await resolveSlackUserAllowlist({
+					const resolvedUsers = await resolveSlackUserAllowlist({
 						token: resolveToken,
 						entries: Array.from(userEntries)
-					}), { formatResolved: formatSlackUserResolved });
+					});
+					const { resolvedMap, mapping, unresolved } = buildAllowlistResolutionSummary(resolvedUsers, { formatResolved: formatSlackUserResolved });
 					const nextChannels = patchAllowlistUsersInConfigEntries({
 						entries: channelsConfig,
 						resolvedMap
@@ -6686,10 +6704,7 @@ async function monitorSlackProvider(opts = {}) {
 				app,
 				config: slackCfg.execApprovals ?? {},
 				resolveClient,
-				...identity.kind === "enterprise" ? { enterprise: {
-					apiAppId: identity.apiAppId,
-					enterpriseId: identity.enterpriseId
-				} } : {}
+				...identity.kind === "enterprise" ? { enterprise: { enterpriseId: identity.enterpriseId } } : {}
 			},
 			abortSignal: opts.abortSignal
 		});