@spinabot/brigade 1.4.0 → 1.6.0

package/dist/agents/channels/slack/media.js

@@ -0,0 +1,215 @@
+/**
+ * Slack media helpers — inbound download + outbound upload construction.
+ *
+ * INBOUND: Slack doesn't push file bytes; a message event carries file objects
+ * with an authenticated `url_private`. To get the bytes we GET that URL with an
+ * `Authorization: Bearer <botToken>` header (a plain fetch returns the login
+ * HTML otherwise). Bytes are saved under
+ * `~/.brigade/channels/slack/media/<YYYY-MM-DD>/<fileId>.<ext>` so the agent can
+ * `read` the attachment by path. In convex mode the cache relocates to the OS
+ * cache dir (never under ~/.brigade, to respect the strict-zero guard).
+ *
+ * OUTBOUND: `uploadSlackFile` posts a local path's bytes via the Web API's
+ * `files.uploadV2`, after running the path through Brigade's outbound media-path
+ * guard so a prompt-injected "send ~/.ssh/id_rsa" can't exfiltrate a secret. The
+ * `@slack/web-api` `WebClient` is injected (not imported here) so this module
+ * stays dependency-light + unit-testable.
+ */
+import { createReadStream, mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { resolveChannelStateDir, resolveOsCacheDir } from "../../../config/paths.js";
+import { tryGetRuntimeContext } from "../../../storage/runtime-context.js";
+// Channel SDK barrel — the outbound-media exfil guard + the contract types.
+// All contract types come from the channel SDK barrel so the channel is built
+// entirely on `../sdk.js`.
+import { validateOutboundMediaPath, } from "../sdk.js";
+import { resolveSlackFileKind } from "./inbound-extras.js";
+const CHANNEL_ID = "slack";
+/**
+ * Defensive ceiling on an inbound file download. Slack's own per-file limit is
+ * generous; we cap at 50 MB so a huge upload can't blow out memory. Anything
+ * larger is skipped (the message still reaches the agent without the
+ * attachment).
+ */
+const MAX_BYTES = 50 * 1024 * 1024;
+/**
+ * Slack's file-CDN hosts. An inbound `url_private` only ever points at one of
+ * these — we attach the bot token as `Authorization: Bearer …`, so before
+ * fetching we REQUIRE https + a Slack host. Without this guard a
+ * prompt-injected / spoofed event could carry `http://169.254.169.254/…` (cloud
+ * metadata) or any attacker host and Brigade would happily send the bot token to
+ * it (SSRF + token exfiltration). Subdomains of these hosts are allowed.
+ */
+const SLACK_FILE_HOSTS = ["slack.com", "slack-edge.com", "slack-files.com"];
+/**
+ * True when `rawUrl` is an https URL whose host is a Slack file-CDN host (or a
+ * subdomain of one). Anything else (non-https, a non-Slack host, or an
+ * unparseable URL) returns false so the caller refuses to fetch with the token.
+ */
+export function isAllowedSlackFileUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== "https:")
+        return false;
+    const host = parsed.hostname.toLowerCase();
+    return SLACK_FILE_HOSTS.some((h) => host === h || host.endsWith(`.${h}`));
+}
+/** YYYY-MM-DD (UTC) bucket — stable filename grouping for grep / review. */
+function dayBucket() {
+    const d = new Date();
+    const pad = (x) => String(x).padStart(2, "0");
+    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}`;
+}
+/** Derive a file extension from a Slack file object (filetype / name / kind). */
+function extFromFile(file, kind) {
+    const type = (file.filetype ?? "").toLowerCase();
+    if (type && /^[a-z0-9]+$/.test(type))
+        return type;
+    const fromName = path.extname(file.name ?? "").replace(/^\./, "").toLowerCase();
+    if (fromName && /^[a-z0-9]+$/.test(fromName))
+        return fromName;
+    // Sensible default by kind when nothing carried an extension.
+    switch (kind) {
+        case "image":
+            return "png";
+        case "video":
+            return "mp4";
+        case "voice":
+            return "m4a";
+        case "audio":
+            return "mp3";
+        default:
+            return "bin";
+    }
+}
+/** Where downloaded media lands — OS cache in convex mode, channel-state dir otherwise. */
+function mediaBaseDir() {
+    return tryGetRuntimeContext()?.mode === "convex"
+        ? path.join(resolveOsCacheDir(), "channels", CHANNEL_ID)
+        : resolveChannelStateDir(CHANNEL_ID);
+}
+/**
+ * Bounded retry for the transient file fetch. Slack's file CDN occasionally
+ * blips on a 5xx or a network reset; one or two quick retries turn a dropped
+ * attachment into a delivered one. The caller still wraps the whole thing in a
+ * try/catch that degrades to `null`, so an exhausted retry never breaks message
+ * delivery. Mirrors Telegram's `withMediaRetry`.
+ */
+export async function withSlackRetry(fn, attempts = 3) {
+    let lastErr;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (i < attempts - 1)
+                await new Promise((r) => setTimeout(r, 200 * 2 ** i));
+        }
+    }
+    throw lastErr;
+}
+/**
+ * Download one inbound Slack file to disk and return its normalized descriptor,
+ * or `null` when the file couldn't be fetched (no url / too big / network error
+ * / tombstoned). Never throws — a download glitch must not break message
+ * delivery. The `Authorization: Bearer` header is REQUIRED; a plain GET of
+ * `url_private` returns Slack's HTML login page, not the bytes.
+ */
+export async function downloadSlackFile(args) {
+    const { file, token, log } = args;
+    const doFetch = args.fetchImpl ?? fetch;
+    const url = file.url_private_download || file.url_private;
+    if (!url) {
+        log?.("slack file skipped — no private url", { fileId: file.id });
+        return null;
+    }
+    // SSRF / token-exfil guard: the bot token is attached below, so REFUSE any
+    // url that isn't https on a Slack file-CDN host. A spoofed event pointing at
+    // `http://169.254.169.254/…` (or any attacker host) must never receive the
+    // token. Checked BEFORE the fetch so the token never leaves the process.
+    if (!isAllowedSlackFileUrl(url)) {
+        log?.("slack file skipped — url is not an allowed Slack host (SSRF guard)", { fileId: file.id });
+        return null;
+    }
+    if (typeof file.size === "number" && file.size > MAX_BYTES) {
+        log?.("slack file skipped — exceeds size cap", { fileId: file.id, bytes: file.size, cap: MAX_BYTES });
+        return null;
+    }
+    const kind = resolveSlackFileKind(file);
+    try {
+        const res = await withSlackRetry(async () => {
+            // `redirect: "manual"` so a cross-origin 30x can't carry the
+            // Authorization header off to a non-Slack host (Slack file urls don't
+            // legitimately redirect cross-origin). A redirect surfaces as an opaque
+            // / non-ok response and falls through to the `!r.ok` handler below.
+            const r = await doFetch(url, { headers: { Authorization: `Bearer ${token}` }, redirect: "manual" });
+            // Retry 5xx (transient server/CDN blip); a 4xx falls through to the !ok
+            // handler below (no point retrying a permanent client error).
+            if (!r.ok && r.status >= 500)
+                throw new Error(`slack file fetch failed (${r.status})`);
+            return r;
+        });
+        if (!res.ok) {
+            log?.("slack file download failed", { fileId: file.id, status: res.status });
+            return null;
+        }
+        const buf = Buffer.from(await res.arrayBuffer());
+        if (buf.length === 0)
+            return null;
+        if (buf.length > MAX_BYTES) {
+            log?.("slack file skipped — exceeds size cap", { fileId: file.id, bytes: buf.length, cap: MAX_BYTES });
+            return null;
+        }
+        const dir = path.join(mediaBaseDir(), "media", dayBucket());
+        mkdirSync(dir, { recursive: true });
+        // file.id is stable across re-deliveries; use it as the filename so the same
+        // media resolves idempotently. Fall back to a timestamp.
+        const baseName = (file.id || `slack_${Date.now()}`).replace(/[^A-Za-z0-9_-]/g, "_");
+        const dest = path.join(dir, `${baseName}.${extFromFile(file, kind)}`);
+        writeFileSync(dest, buf, { mode: 0o600 });
+        return {
+            kind,
+            path: dest,
+            ...(file.mimetype ? { mimeType: file.mimetype } : {}),
+            ...(file.name ? { fileName: file.name } : {}),
+            ...(file.title ? { caption: file.title } : {}),
+        };
+    }
+    catch (err) {
+        log?.("slack file download failed", {
+            fileId: file.id,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return null;
+    }
+}
+/**
+ * Upload a local file (image / video / audio / doc) to a Slack channel via
+ * `files.uploadV2`, after running the path through Brigade's outbound
+ * media-path guard. Throws a clear operator-facing error when the guard refuses
+ * the path (the `send_media` tool surfaces it). The file is streamed from disk;
+ * the caption rides as `initial_comment`.
+ */
+export async function uploadSlackFile(args) {
+    const { media } = args;
+    const verdict = validateOutboundMediaPath(media.path);
+    if (!verdict.ok) {
+        throw new Error(`Slack: ${verdict.reason ?? "refusing to attach this file"}`);
+    }
+    const filename = media.fileName || path.basename(media.path) || "file";
+    await args.client.files.uploadV2({
+        channel_id: args.channelId,
+        file: createReadStream(media.path),
+        filename,
+        ...(media.caption ? { initial_comment: media.caption } : {}),
+        ...(args.threadId ? { thread_ts: args.threadId } : {}),
+    });
+}
+export { MAX_BYTES as SLACK_MEDIA_MAX_BYTES };
+//# sourceMappingURL=media.js.map

package/dist/agents/channels/slack/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,2BAA2B;AAC3B,OAAO,EACN,yBAAyB,GAGzB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,oBAAoB,EAAwB,MAAM,qBAAqB,CAAC;AAEjF,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IACnD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS;IACjB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,iFAAiF;AACjF,SAAS,WAAW,CAAC,IAAqB,EAAE,IAAoC;IAC/E,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,IAAI,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,8DAA8D;IAC9D,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY;IACpB,OAAO,oBAAoB,EAAE,EAAE,IAAI,KAAK,QAAQ;QAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC;QACxD,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,EAAoB,EAAE,QAAQ,GAAG,CAAC;IACzE,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC;AACf,CAAC;AAaD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IAClE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,WAAW,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,GAAG,EAAE,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,GAAG,EAAE,CAAC,oEAAoE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC;QAC5D,GAAG,EAAE,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,IAAI,EAAE;YAC3C,6DAA6D;YAC7D,sEAAsE;YACtE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpG,wEAAwE;YACxE,8DAA8D;YAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,EAAE,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5B,GAAG,EAAE,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,6EAA6E;QAC7E,yDAAyD;QACzD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,SAAS,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO;YACN,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,EAAE,CAAC,4BAA4B,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AA0BD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB;IAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,UAAU,OAAO,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IACvE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QAClC,QAAQ;QACR,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,SAAS,IAAI,qBAAqB,EAAE,CAAC"}

package/dist/agents/channels/slack/module.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Slack extension module.
+ *
+ * Registers the Slack channel adapter through the seam. The loader gates it by
+ * the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.slack.enabled` is true AND a bot
+ * token resolves — so bundling this module is inert until the operator opts in.
+ *
+ * In EVENTS transport mode (`channels.slack.mode: "events"`) the module ALSO
+ * registers a gateway HTTP route PER configured workspace that receives Slack's
+ * event POSTs and feeds them into the started adapter for THAT workspace (after
+ * verifying the request signature with that workspace's signing secret). Socket
+ * mode (the default) registers no HTTP surface. Slack mirror of
+ * `telegram/module.ts`, extended for multi-workspace inbound:
+ *
+ *   - The default account keeps the SAME inline adapter + base path
+ *     (`/slack/events`) as the single-workspace path — byte-identical.
+ *   - Each NAMED account (only present when >1 account is configured) gets its
+ *     own route on a distinct path (`resolveSlackEventsPath`), whose `resolveSink`
+ *     looks up THAT account's STARTED adapter at request time via the per-account
+ *     adapter registry (`account-registry.ts`) the plugin populates on
+ *     `startAccount`. `b.httpRoute(...)` is only available at `register()` time
+ *     (before the plugin starts accounts), so the late binding is essential.
+ */
+export declare const slackModule: import("../sdk.js").BrigadeModule;
+//# sourceMappingURL=module.d.ts.map

package/dist/agents/channels/slack/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAcH,eAAO,MAAM,WAAW,mCAuCtB,CAAC"}

package/dist/agents/channels/slack/module.js

@@ -0,0 +1,67 @@
+/**
+ * Slack extension module.
+ *
+ * Registers the Slack channel adapter through the seam. The loader gates it by
+ * the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.slack.enabled` is true AND a bot
+ * token resolves — so bundling this module is inert until the operator opts in.
+ *
+ * In EVENTS transport mode (`channels.slack.mode: "events"`) the module ALSO
+ * registers a gateway HTTP route PER configured workspace that receives Slack's
+ * event POSTs and feeds them into the started adapter for THAT workspace (after
+ * verifying the request signature with that workspace's signing secret). Socket
+ * mode (the default) registers no HTTP surface. Slack mirror of
+ * `telegram/module.ts`, extended for multi-workspace inbound:
+ *
+ *   - The default account keeps the SAME inline adapter + base path
+ *     (`/slack/events`) as the single-workspace path — byte-identical.
+ *   - Each NAMED account (only present when >1 account is configured) gets its
+ *     own route on a distinct path (`resolveSlackEventsPath`), whose `resolveSink`
+ *     looks up THAT account's STARTED adapter at request time via the per-account
+ *     adapter registry (`account-registry.ts`) the plugin populates on
+ *     `startAccount`. `b.httpRoute(...)` is only available at `register()` time
+ *     (before the plugin starts accounts), so the late binding is essential.
+ */
+import { defineModule } from "../sdk.js";
+import { listSlackAccountIds, resolveSlackEventsPath, resolveSlackSigningSecret, slackEventsConfig, SLACK_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+import { getSlackAccountSink } from "./account-registry.js";
+import { createSlackAdapter } from "./adapter.js";
+import { buildSlackWebhookRoute } from "./webhook.js";
+export const slackModule = defineModule({
+    id: "slack",
+    register(b) {
+        const adapter = createSlackAdapter();
+        b.channel(adapter);
+        // Events transport: register the inbound gateway route(s). Gated on config so
+        // a Socket Mode (default) install exposes no inbound HTTP surface.
+        const transport = slackEventsConfig(b.config);
+        if (transport.mode !== "events")
+            return;
+        const accountIds = listSlackAccountIds(b.config);
+        // `listSlackAccountIds` returns `["default"]` for a single-workspace install
+        // and the named ids for a multi-workspace one. Single → byte-identical to the
+        // legacy single-route registration: the default route resolves the inline
+        // adapter directly. Multi → one route per workspace, each resolving its
+        // account's started adapter via the registry at request time.
+        const isMultiWorkspace = accountIds.length > 1;
+        for (const accountId of accountIds) {
+            const isDefault = accountId === SLACK_DEFAULT_ACCOUNT_ID;
+            b.httpRoute(buildSlackWebhookRoute({
+                // Default account keeps the base path; named accounts get a distinct,
+                // collision-free path so two workspaces never share one route.
+                path: resolveSlackEventsPath(b.config, accountId),
+                // Each route verifies with ITS OWN account's signing secret.
+                signingSecret: resolveSlackSigningSecret(b.config, accountId),
+                // The default account in a single-workspace install feeds the inline
+                // adapter directly (the legacy adapter owns the default lifecycle).
+                // Every other case resolves the per-account started adapter at request
+                // time — when the plugin owns the lifecycle the inline adapter steps
+                // aside, so we must look up the live one rather than capture it here.
+                resolveSink: isDefault && !isMultiWorkspace
+                    ? () => adapter
+                    : () => getSlackAccountSink(accountId) ?? null,
+            }));
+        }
+    },
+});
+//# sourceMappingURL=module.js.map

package/dist/agents/channels/slack/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACN,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,iBAAiB,EACjB,wBAAwB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;IACvC,EAAE,EAAE,OAAO;IACX,QAAQ,CAAC,CAAC;QACT,MAAM,OAAO,GAAG,kBAAkB,EAAkB,CAAC;QACrD,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,8EAA8E;QAC9E,mEAAmE;QACnE,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC;QACvD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAExC,MAAM,UAAU,GAAG,mBAAmB,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC;QAC1D,6EAA6E;QAC7E,8EAA8E;QAC9E,0EAA0E;QAC1E,wEAAwE;QACxE,8DAA8D;QAC9D,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,SAAS,KAAK,wBAAwB,CAAC;YACzD,CAAC,CAAC,SAAS,CACV,sBAAsB,CAAC;gBACtB,sEAAsE;gBACtE,+DAA+D;gBAC/D,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC,MAAe,EAAE,SAAS,CAAC;gBAC1D,6DAA6D;gBAC7D,aAAa,EAAE,yBAAyB,CAAC,CAAC,CAAC,MAAe,EAAE,SAAS,CAAC;gBACtE,qEAAqE;gBACrE,oEAAoE;gBACpE,uEAAuE;gBACvE,qEAAqE;gBACrE,sEAAsE;gBACtE,WAAW,EACV,SAAS,IAAI,CAAC,gBAAgB;oBAC7B,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO;oBACf,CAAC,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,IAAI;aAChD,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/agents/channels/slack/plugin.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Slack `ChannelPlugin` — the multi-WORKSPACE contract surface.
+ *
+ * Mirrors `telegram/plugin.ts`: wraps `createSlackAdapter()` (the per-connection
+ * implementation) with the lifecycle adapters the `ChannelPluginManager`
+ * consumes, so an operator can run MORE THAN ONE Slack workspace at once via:
+ *
+ *   channels.slack = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "acme", botToken: "xoxb-AAA", appToken: "xapp-AAA" },
+ *       { id: "labs", botToken: "xoxb-BBB", appToken: "xapp-BBB" },
+ *     ],
+ *   }
+ *
+ *   - `config.listAccountIds` / `resolveAccount`  → multi-workspace discovery
+ *   - `gateway.startAccount` / `stopAccount`      → per-workspace app lifecycle
+ *   - `outbound.sendText` / `sendMedia`           → routes by `target.accountId`
+ *   - per-account approval-dispatcher registration → an exec-gate prompt raised
+ *     by a turn on (slack, labs) replies on (slack, labs), not the default
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` held in this
+ * closure — one app connection per account, partitioned token resolution per
+ * `channels.slack.accounts[].botToken`. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-workspace path carries the identical
+ * ACL + debounce + abort + approval-reply + approval-callback surface as the
+ * legacy single-adapter manager.
+ *
+ * The legacy single-account `createSlackAdapter` (started by the legacy
+ * `startChannels` manager) STEPS ASIDE when >1 account is configured — its
+ * `isConfigured` returns false for the default account in that case (mirrors
+ * Telegram), so the two paths never double-start an app.
+ */
+import type { BrigadeConfig } from "../../../config/types.js";
+import { type ChannelAdapter, type ChannelOutboundTarget, type ChannelPlugin, type StartChannelsArgs } from "../sdk.js";
+import { type ResolvedSlackAccount } from "./account-config.js";
+import { type SlackProbeResult } from "./probe.js";
+/** Dependencies the gateway hands the plugin to drive turns + replies. */
+export interface SlackPluginDeps {
+    /** Boot-time default agent for routing fallbacks. */
+    defaultAgentId: string;
+    /** Active gateway config — re-read fresh per inbound for live policy. */
+    loadConfig: () => BrigadeConfig;
+    /** Run one agent turn (the gateway's serialised turn executor). */
+    runTurn: StartChannelsArgs["runTurn"];
+    /**
+     * Optional adapter factory — tests inject a fake; production uses
+     * `createSlackAdapter`. Receives the per-account scope.
+     */
+    adapterFactory?: (args: {
+        accountId: string;
+    }) => ChannelAdapter;
+}
+/** Operator-grade view of a per-account app — exposed via attached helpers. */
+export interface SlackPluginRuntimeView {
+    /** Currently-running account ids. */
+    startedAccountIds(): string[];
+    /** Look up the per-account adapter (or undefined when the account isn't started). */
+    getAdapter(accountId: string): ChannelAdapter | undefined;
+    /** Run an `auth.test` probe for an account (for status / doctor). */
+    probeAccount(accountId: string, cfg: BrigadeConfig): Promise<SlackProbeResult>;
+}
+/** Plugin handle with the extra per-account introspection surface attached. */
+export type SlackPluginHandle = ChannelPlugin<ResolvedSlackAccount> & SlackPluginRuntimeView;
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export declare function createSlackPlugin(deps: SlackPluginDeps): SlackPluginHandle;
+/** Outbound dispatch helper for callers reaching the plugin directly. */
+export type SlackOutboundTarget = ChannelOutboundTarget;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/agents/channels/slack/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAK9D,OAAO,EAON,KAAK,cAAc,EAOnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAKlB,KAAK,iBAAiB,EAEtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAMN,KAAK,oBAAoB,EACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAc,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAkB/D,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC/B,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,MAAM,aAAa,CAAC;IAChC,mEAAmE;IACnE,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,cAAc,CAAC;CACjE;AAED,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACtC,qCAAqC;IACrC,iBAAiB,IAAI,MAAM,EAAE,CAAC;IAC9B,qFAAqF;IACrF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,qEAAqE;IACrE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/E;AAED,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,aAAa,CAAC,oBAAoB,CAAC,GAAG,sBAAsB,CAAC;AAqB7F,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CA+O1E;AAOD,yEAAyE;AACzE,MAAM,MAAM,mBAAmB,GAAG,qBAAqB,CAAC"}