@spinabot/brigade 1.4.0 → 1.6.0

package/dist/agents/channels/slack/inbound-extras.d.ts

@@ -0,0 +1,179 @@
+/**
+ * Pure extractors that turn a Slack Events-API event payload into the
+ * normalized fields Brigade's `InboundMessage` carries. No network, no side
+ * effects — every function here is deterministic over its event argument so
+ * they're trivial to unit-test without a live workspace.
+ *
+ * Slack's wire shape differs from Telegram's in load-bearing ways, so the logic
+ * is a Brigade-native re-implementation that models the SHAPE of
+ * `telegram/inbound-extras.ts` (raw event → normalized signals) while speaking
+ * Slack semantics:
+ *
+ *   - Text arrives as `event.text` peppered with Slack mention/link TOKENS:
+ *     `<@U123>` (user), `<#C123|name>` (channel), `<https://x|label>` (link),
+ *     `<!here>` / `<!subteam^S1|@team>` (special). {@link extractSlackText}
+ *     expands those into readable plain text the agent can parse.
+ *   - The bot is "addressed" when its own `user_id` appears as a `<@Uxxx>`
+ *     mention (or the event is an `app_mention`). {@link extractSlackMentions}
+ *     surfaces the bot's id when addressed so the central group ACL admits the
+ *     message — exactly as Telegram surfaces the bot's numeric id.
+ *   - Channel kind is read from `event.channel_type` (`im` → direct;
+ *     `mpim`/`channel`/`group` → group), see {@link slackChannelType}.
+ *   - Threads ride on `thread_ts`; a reply quotes its parent.
+ *   - Files arrive as `event.files[]` (each a `url_private` + metadata); the
+ *     connection layer DEFERS the byte download until the access gate admits
+ *     the sender (mirrors Telegram's deferred-media discipline).
+ *
+ * Brigade's CENTRAL inbound pipeline owns the actual ACL / mention / routing
+ * decision — these helpers only surface the raw signals it reads (`mentions`,
+ * `threadId`, `replyTo`, chat type).
+ */
+import type { InboundReplyContext } from "../sdk.js";
+/** One file object Slack attaches to a message event (the subset we read). */
+export interface SlackFileObject {
+    id?: string;
+    name?: string;
+    title?: string;
+    mimetype?: string;
+    filetype?: string;
+    /** Authenticated download URL — requires `Authorization: Bearer <botToken>`. */
+    url_private?: string;
+    url_private_download?: string;
+    size?: number;
+    /** Slack marks a file `mode: "tombstone"` when it was deleted / is unavailable. */
+    mode?: string;
+}
+/**
+ * A Slack message event (the `message` / `app_mention` family). Only the fields
+ * Brigade consumes are typed; the raw event carries far more. `subtype`
+ * discriminates edits (`message_changed`), deletes (`message_deleted`), and the
+ * many bot/system message variants we filter out.
+ */
+export interface SlackMessageEvent {
+    type?: string;
+    subtype?: string;
+    /** Sender user id (`U…` / `W…`). Absent on some system subtypes. */
+    user?: string;
+    /** Bot id when the message was posted by a bot integration (not a user). */
+    bot_id?: string;
+    text?: string;
+    /** Channel id (`C…` public, `G…` private, `D…` DM). */
+    channel?: string;
+    /** `im` (DM) | `mpim` (group DM) | `channel` (public) | `group` (private). */
+    channel_type?: string;
+    /** Message timestamp — Slack's per-message id within a channel. */
+    ts?: string;
+    /** Parent thread ts when this message belongs to a thread. */
+    thread_ts?: string;
+    /** Client-generated id — a stable dedupe key across redeliveries. */
+    client_msg_id?: string;
+    /**
+     * Edit stamp Slack sets on an edited message (`{ user, ts }` where `ts` is
+     * WHEN the edit happened, distinct from the message's own `ts`). Folded into
+     * the dedupe key so a SECOND edit of the same message isn't dropped.
+     */
+    edited?: {
+        ts?: string;
+        user?: string;
+    };
+    /** Files attached to the message. */
+    files?: SlackFileObject[];
+    /** The edited / changed message envelope (subtype `message_changed`). */
+    message?: SlackMessageEvent;
+    /** The prior message before an edit (subtype `message_changed`). */
+    previous_message?: SlackMessageEvent;
+    /** The deleted message's ts (subtype `message_deleted`). */
+    deleted_ts?: string;
+    [key: string]: unknown;
+}
+/** A Slack `reaction_added` / `reaction_removed` event (the subset we read). */
+export interface SlackReactionEvent {
+    type?: string;
+    /** The user who added / removed the reaction. */
+    user?: string;
+    /** The emoji name (no colons), e.g. `thumbsup`. */
+    reaction?: string;
+    /** The message the reaction landed on. */
+    item?: {
+        type?: string;
+        channel?: string;
+        ts?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * Reverse Slack's text-node entity escaping (`&amp;` `&lt;` `&gt;`). Slack
+ * escapes only those three in message text; everything else is literal. Applied
+ * AFTER token expansion so the angle-bracket tokens (`<…>`) parse first.
+ */
+export declare function unescapeSlackEntities(text: string): string;
+/**
+ * Expand the Slack message TOKENS in a run of text into readable plain text:
+ *   - `<@U123>` / `<@U123|alex>`        → `@alex` (or `@U123` when no label)
+ *   - `<#C123|general>` / `<#C123>`     → `#general` (or `#C123`)
+ *   - `<!here>` / `<!channel>` / `<!everyone>` → `@here` / `@channel` / `@everyone`
+ *   - `<!subteam^S1|@team>`             → `@team`
+ *   - `<!date^…^fallback|link>`         → the fallback text
+ *   - `<https://x|label>` / `<https://x>` → `label` (or the bare url)
+ *
+ * Unknown `<…>` tokens collapse to their inner display text (after `|`) or are
+ * stripped of the angle brackets. Pure + deterministic.
+ */
+export declare function expandSlackTokens(text: string, resolveName?: (id: string) => string | undefined): string;
+/**
+ * The agent-facing plain text of a Slack message. Token-expanded (mentions /
+ * channels / links → readable text) then entity-unescaped. A `message_changed`
+ * envelope surfaces the EDITED text (`event.message.text`). Binary blobs are
+ * dropped to "".
+ */
+export declare function extractSlackText(event: SlackMessageEvent, resolveName?: (id: string) => string | undefined): string;
+/** Slack `channel_type` → Brigade chat type. `im` → direct; everything else → group. */
+export declare function slackChannelType(event: Pick<SlackMessageEvent, "channel_type" | "channel">): "direct" | "group";
+/** Thread parent ts as a string, when the message belongs to a thread. */
+export declare function slackThreadId(event: Pick<SlackMessageEvent, "thread_ts">): string | undefined;
+/**
+ * Channel-native ids of accounts addressed in this message. Brigade's central
+ * group ACL treats a group message as "addressed to the bot" when the bot's own
+ * id appears in `mentions`; without this a group message never reaches the
+ * agent. So when the bot's own `<@Uxxx>` mention appears in the text — OR the
+ * event is an `app_mention` (Slack's dedicated "the bot was @-mentioned" event)
+ * — we surface the bot's user id (passed in from `auth.test`). Every OTHER
+ * `<@Uxxx>` user mention is surfaced too so the pipeline sees who else was
+ * tagged.
+ *
+ * @param botUserId the bot's own user id (from `auth.test`), surfaced when the
+ *                  bot is @-mentioned so the ACL admits the group message.
+ */
+export declare function extractSlackMentions(event: SlackMessageEvent, botUserId?: string): string[];
+/**
+ * A short display name for the sender. A legacy bot-posted `username` wins; else
+ * a resolved display name (when a `resolveName` reader from the user directory is
+ * supplied AND it has already cached the sender's name); else the raw user id
+ * (`U…`) — display-name resolution needs a `users.info` call that the directory
+ * primes in the background, so the first message from a never-seen user surfaces
+ * the id and later messages surface the name.
+ */
+export declare function buildSlackSenderName(event: SlackMessageEvent, resolveName?: (id: string) => string | undefined): string | undefined;
+/**
+ * Reply-context (what message this inbound quotes), when it's a threaded reply.
+ * Slack threads are flat — a reply carries `thread_ts` (the parent's ts) but the
+ * event does NOT inline the parent's text — so the context surfaces the parent
+ * message id (`thread_ts`) and leaves `body` undefined (the pipeline can fetch
+ * the parent if it needs the excerpt). Returns undefined for a top-level
+ * message (no `thread_ts`, or `thread_ts === ts` which is the thread ROOT, not a
+ * reply).
+ */
+export declare function extractSlackReplyContext(event: SlackMessageEvent): InboundReplyContext | undefined;
+/**
+ * Cheap presence probe — does this message carry a downloadable file? Walks
+ * `event.files[]` (an edit reads the nested message's files) but never touches
+ * the network, so the connection layer can DEFER the actual download until AFTER
+ * the central access gate admits the sender (mirrors Telegram's deferred-media
+ * discipline). Mirrors `hasInboundMedia`.
+ */
+export declare function hasInboundMedia(event: SlackMessageEvent): boolean;
+/** The list of downloadable files on a message (an edit reads the nested message). */
+export declare function resolveInboundFiles(event: SlackMessageEvent): SlackFileObject[];
+/** The Brigade media-kind of a Slack file, from its mimetype / filetype. */
+export declare function resolveSlackFileKind(f: SlackFileObject): "image" | "video" | "audio" | "voice" | "document";
+//# sourceMappingURL=inbound-extras.d.ts.map

package/dist/agents/channels/slack/inbound-extras.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-extras.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/inbound-extras.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAIrD,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC/B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,qCAAqC;IACrC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,yEAAyE;IACzE,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAkBD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,MAAM,CAgCxG;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,MAAM,CAMnH;AAED,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,GAAG,SAAS,CAAC,GAAG,QAAQ,GAAG,OAAO,CAQ/G;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG,MAAM,GAAG,SAAS,CAG7F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CA2B3F;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,iBAAiB,EACxB,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAC9C,MAAM,GAAG,SAAS,CAUpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,mBAAmB,GAAG,SAAS,CASlG;AAUD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAIjE;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,GAAG,eAAe,EAAE,CAI/E;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CACnC,CAAC,EAAE,eAAe,GAChB,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAWpD"}

package/dist/agents/channels/slack/inbound-extras.js

@@ -0,0 +1,257 @@
+/**
+ * Pure extractors that turn a Slack Events-API event payload into the
+ * normalized fields Brigade's `InboundMessage` carries. No network, no side
+ * effects — every function here is deterministic over its event argument so
+ * they're trivial to unit-test without a live workspace.
+ *
+ * Slack's wire shape differs from Telegram's in load-bearing ways, so the logic
+ * is a Brigade-native re-implementation that models the SHAPE of
+ * `telegram/inbound-extras.ts` (raw event → normalized signals) while speaking
+ * Slack semantics:
+ *
+ *   - Text arrives as `event.text` peppered with Slack mention/link TOKENS:
+ *     `<@U123>` (user), `<#C123|name>` (channel), `<https://x|label>` (link),
+ *     `<!here>` / `<!subteam^S1|@team>` (special). {@link extractSlackText}
+ *     expands those into readable plain text the agent can parse.
+ *   - The bot is "addressed" when its own `user_id` appears as a `<@Uxxx>`
+ *     mention (or the event is an `app_mention`). {@link extractSlackMentions}
+ *     surfaces the bot's id when addressed so the central group ACL admits the
+ *     message — exactly as Telegram surfaces the bot's numeric id.
+ *   - Channel kind is read from `event.channel_type` (`im` → direct;
+ *     `mpim`/`channel`/`group` → group), see {@link slackChannelType}.
+ *   - Threads ride on `thread_ts`; a reply quotes its parent.
+ *   - Files arrive as `event.files[]` (each a `url_private` + metadata); the
+ *     connection layer DEFERS the byte download until the access gate admits
+ *     the sender (mirrors Telegram's deferred-media discipline).
+ *
+ * Brigade's CENTRAL inbound pipeline owns the actual ACL / mention / routing
+ * decision — these helpers only surface the raw signals it reads (`mentions`,
+ * `threadId`, `replyTo`, chat type).
+ */
+/**
+ * Reject control-byte payloads (a binary blob masquerading as text). Tab / LF /
+ * CR are allowed; any other C0 control char marks the run as non-text and it's
+ * dropped so the agent never ingests raw binary. Mirrors Telegram's
+ * `isBinaryContent`.
+ */
+function isBinaryContent(text) {
+    for (let i = 0; i < text.length; i++) {
+        const code = text.charCodeAt(i);
+        if (code <= 0x1f && code !== 0x09 && code !== 0x0a && code !== 0x0d) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Reverse Slack's text-node entity escaping (`&amp;` `&lt;` `&gt;`). Slack
+ * escapes only those three in message text; everything else is literal. Applied
+ * AFTER token expansion so the angle-bracket tokens (`<…>`) parse first.
+ */
+export function unescapeSlackEntities(text) {
+    return text.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+/**
+ * Expand the Slack message TOKENS in a run of text into readable plain text:
+ *   - `<@U123>` / `<@U123|alex>`        → `@alex` (or `@U123` when no label)
+ *   - `<#C123|general>` / `<#C123>`     → `#general` (or `#C123`)
+ *   - `<!here>` / `<!channel>` / `<!everyone>` → `@here` / `@channel` / `@everyone`
+ *   - `<!subteam^S1|@team>`             → `@team`
+ *   - `<!date^…^fallback|link>`         → the fallback text
+ *   - `<https://x|label>` / `<https://x>` → `label` (or the bare url)
+ *
+ * Unknown `<…>` tokens collapse to their inner display text (after `|`) or are
+ * stripped of the angle brackets. Pure + deterministic.
+ */
+export function expandSlackTokens(text, resolveName) {
+    return text.replace(/<([^>]*)>/g, (_whole, inner) => {
+        if (!inner)
+            return "";
+        const bar = inner.indexOf("|");
+        const head = bar === -1 ? inner : inner.slice(0, bar);
+        const label = bar === -1 ? "" : inner.slice(bar + 1);
+        const first = head[0];
+        // User mention: <@U123> / <@U123|alex>
+        if (first === "@") {
+            const id = head.slice(1);
+            // Inline label wins; else a resolved display name (from the user
+            // directory, when one is supplied); else the bare id.
+            if (label)
+                return `@${label}`;
+            const resolved = resolveName?.(id);
+            return resolved ? `@${resolved}` : `@${id}`;
+        }
+        // Channel mention: <#C123|general> / <#C123>
+        if (first === "#") {
+            const id = head.slice(1);
+            return label ? `#${label}` : `#${id}`;
+        }
+        // Special mention / subteam / date: <!here> / <!subteam^S1|@team> / <!date^…|link>
+        if (first === "!") {
+            const body = head.slice(1);
+            if (label)
+                return label.startsWith("@") ? label : `@${label}`;
+            // <!here> / <!channel> / <!everyone> → @here etc.; <!subteam^S1> → @team-ish
+            const name = body.split("^")[0] ?? body;
+            return `@${name}`;
+        }
+        // Link: <https://x|label> / <mailto:a@b|a@b> / <https://x>
+        return label || head;
+    });
+}
+/**
+ * The agent-facing plain text of a Slack message. Token-expanded (mentions /
+ * channels / links → readable text) then entity-unescaped. A `message_changed`
+ * envelope surfaces the EDITED text (`event.message.text`). Binary blobs are
+ * dropped to "".
+ */
+export function extractSlackText(event, resolveName) {
+    // An edit (message_changed) carries the new text on the nested `message`.
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const raw = typeof source.text === "string" ? source.text : "";
+    if (!raw || isBinaryContent(raw))
+        return "";
+    return unescapeSlackEntities(expandSlackTokens(raw, resolveName)).trim();
+}
+/** Slack `channel_type` → Brigade chat type. `im` → direct; everything else → group. */
+export function slackChannelType(event) {
+    const t = typeof event.channel_type === "string" ? event.channel_type : "";
+    if (t === "im")
+        return "direct";
+    if (t === "mpim" || t === "channel" || t === "group")
+        return "group";
+    // Fall back to the channel-id prefix when `channel_type` was omitted: a `D…`
+    // id is a DM, anything else is a multi-party room.
+    const ch = typeof event.channel === "string" ? event.channel : "";
+    return ch.startsWith("D") ? "direct" : "group";
+}
+/** Thread parent ts as a string, when the message belongs to a thread. */
+export function slackThreadId(event) {
+    const ts = event.thread_ts;
+    return typeof ts === "string" && ts ? ts : undefined;
+}
+/**
+ * Channel-native ids of accounts addressed in this message. Brigade's central
+ * group ACL treats a group message as "addressed to the bot" when the bot's own
+ * id appears in `mentions`; without this a group message never reaches the
+ * agent. So when the bot's own `<@Uxxx>` mention appears in the text — OR the
+ * event is an `app_mention` (Slack's dedicated "the bot was @-mentioned" event)
+ * — we surface the bot's user id (passed in from `auth.test`). Every OTHER
+ * `<@Uxxx>` user mention is surfaced too so the pipeline sees who else was
+ * tagged.
+ *
+ * @param botUserId the bot's own user id (from `auth.test`), surfaced when the
+ *                  bot is @-mentioned so the ACL admits the group message.
+ */
+export function extractSlackMentions(event, botUserId) {
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const text = typeof source.text === "string" ? source.text : "";
+    const out = [];
+    const seen = new Set();
+    const push = (id) => {
+        if (!id || seen.has(id))
+            return;
+        seen.add(id);
+        out.push(id);
+    };
+    let botMentioned = event.type === "app_mention";
+    // Scan every <@U…> / <@U…|label> user-mention token in the text.
+    const re = /<@([A-Z0-9]+)(?:\|[^>]*)?>/g;
+    let m;
+    while ((m = re.exec(text)) !== null) {
+        const id = m[1];
+        if (!id)
+            continue;
+        if (botUserId && id === botUserId) {
+            botMentioned = true;
+            continue; // the bot's own id is pushed last (after the addressed check)
+        }
+        push(id);
+    }
+    if (botMentioned && botUserId)
+        push(botUserId);
+    return out;
+}
+/**
+ * A short display name for the sender. A legacy bot-posted `username` wins; else
+ * a resolved display name (when a `resolveName` reader from the user directory is
+ * supplied AND it has already cached the sender's name); else the raw user id
+ * (`U…`) — display-name resolution needs a `users.info` call that the directory
+ * primes in the background, so the first message from a never-seen user surfaces
+ * the id and later messages surface the name.
+ */
+export function buildSlackSenderName(event, resolveName) {
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const username = typeof source["username"] === "string" ? source["username"] : "";
+    if (username)
+        return username;
+    const user = typeof source.user === "string" ? source.user : "";
+    if (user) {
+        const resolved = resolveName?.(user);
+        if (resolved)
+            return resolved;
+    }
+    return user || undefined;
+}
+/**
+ * Reply-context (what message this inbound quotes), when it's a threaded reply.
+ * Slack threads are flat — a reply carries `thread_ts` (the parent's ts) but the
+ * event does NOT inline the parent's text — so the context surfaces the parent
+ * message id (`thread_ts`) and leaves `body` undefined (the pipeline can fetch
+ * the parent if it needs the excerpt). Returns undefined for a top-level
+ * message (no `thread_ts`, or `thread_ts === ts` which is the thread ROOT, not a
+ * reply).
+ */
+export function extractSlackReplyContext(event) {
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const threadTs = source.thread_ts;
+    const ts = source.ts;
+    if (typeof threadTs !== "string" || !threadTs)
+        return undefined;
+    // The thread ROOT carries thread_ts === ts; only a genuine reply quotes a
+    // DIFFERENT parent.
+    if (typeof ts === "string" && ts === threadTs)
+        return undefined;
+    return { messageId: threadTs };
+}
+/* ───────────────────────── media detection ───────────────────────── */
+/** A downloadable file is one with a private url that isn't a tombstone (deleted). */
+function isDownloadableFile(f) {
+    if (!f || f.mode === "tombstone")
+        return false;
+    return Boolean(f.url_private || f.url_private_download);
+}
+/**
+ * Cheap presence probe — does this message carry a downloadable file? Walks
+ * `event.files[]` (an edit reads the nested message's files) but never touches
+ * the network, so the connection layer can DEFER the actual download until AFTER
+ * the central access gate admits the sender (mirrors Telegram's deferred-media
+ * discipline). Mirrors `hasInboundMedia`.
+ */
+export function hasInboundMedia(event) {
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const files = Array.isArray(source.files) ? source.files : [];
+    return files.some(isDownloadableFile);
+}
+/** The list of downloadable files on a message (an edit reads the nested message). */
+export function resolveInboundFiles(event) {
+    const source = event.subtype === "message_changed" && event.message ? event.message : event;
+    const files = Array.isArray(source.files) ? source.files : [];
+    return files.filter(isDownloadableFile);
+}
+/** The Brigade media-kind of a Slack file, from its mimetype / filetype. */
+export function resolveSlackFileKind(f) {
+    const mime = (f.mimetype ?? "").toLowerCase();
+    const type = (f.filetype ?? "").toLowerCase();
+    if (mime.startsWith("image/") || /^(png|jpg|jpeg|gif|webp|bmp|heic)$/.test(type))
+        return "image";
+    if (mime.startsWith("video/") || /^(mp4|mov|webm|mkv|avi)$/.test(type))
+        return "video";
+    // Slack voice memos arrive as audio with a dedicated subtype; treat m4a/ogg
+    // voice-ish containers as "voice", other audio as "audio".
+    if (mime.startsWith("audio/") || /^(mp3|m4a|ogg|wav|flac|aac)$/.test(type)) {
+        return type === "m4a" || type === "ogg" ? "voice" : "audio";
+    }
+    return "document";
+}
+//# sourceMappingURL=inbound-extras.js.map

package/dist/agents/channels/slack/inbound-extras.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-extras.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/inbound-extras.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AA0EH;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,WAAgD;IAC/F,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE;QAC3D,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,uCAAuC;QACvC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,iEAAiE;YACjE,sDAAsD;YACtD,IAAI,KAAK;gBAAE,OAAO,IAAI,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;YACnC,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,CAAC;QACD,6CAA6C;QAC7C,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvC,CAAC;QACD,mFAAmF;QACnF,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC9D,6EAA6E;YAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACxC,OAAO,IAAI,IAAI,EAAE,CAAC;QACnB,CAAC;QACD,2DAA2D;QAC3D,OAAO,KAAK,IAAI,IAAI,CAAC;IACtB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAwB,EAAE,WAAgD;IAC1G,0EAA0E;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,IAAI,CAAC,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,OAAO,qBAAqB,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gBAAgB,CAAC,KAA0D;IAC1F,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrE,6EAA6E;IAC7E,mDAAmD;IACnD,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,KAA2C;IACxE,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAC3B,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB,EAAE,SAAkB;IAChF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,EAAsB,EAAE,EAAE;QACvC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC,CAAC;IAEF,IAAI,YAAY,GAAG,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC;IAChD,iEAAiE;IACjE,MAAM,EAAE,GAAG,6BAA6B,CAAC;IACzC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,IAAI,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACnC,YAAY,GAAG,IAAI,CAAC;YACpB,SAAS,CAAC,8DAA8D;QACzE,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACV,CAAC;IAED,IAAI,YAAY,IAAI,SAAS;QAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CACnC,KAAwB,EACxB,WAAgD;IAEhD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAM,CAAC,UAAU,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,IAAI,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,IAAI,SAAS,CAAC;AAC1B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC;IAClC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChE,0EAA0E;IAC1E,oBAAoB;IACpB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,yEAAyE;AAEzE,sFAAsF;AACtF,SAAS,kBAAkB,CAAC,CAAkB;IAC7C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,KAAwB;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACvC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAAwB;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CACnC,CAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACjG,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACvF,4EAA4E;IAC5E,2DAA2D;IAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC"}

package/dist/agents/channels/slack/index.d.ts

@@ -0,0 +1,15 @@
+/** Slack channel — public surface. */
+export { createSlackAdapter, buildReactionNote, SLACK_CAPABILITIES, type CreateSlackAdapterOptions, type SlackAdapter, } from "./adapter.js";
+export { listSlackAccountIds, resolveSlackAccount, resolveSlackBotToken, resolveSlackAppToken, resolveSlackSigningSecret, resolveSlackUserToken, slackChannelEnabled, slackEventsConfig, slackLiveStreamEnabled, slackStreamThrottleMs, slackSurfaceReasoning, slackThreadIdleTtlMs, SLACK_BOT_TOKEN_ENV_VAR, SLACK_APP_TOKEN_ENV_VAR, SLACK_SIGNING_SECRET_ENV_VAR, SLACK_CHANNEL_ID, SLACK_DEFAULT_ACCOUNT_ID, type ResolvedSlackAccount, type SlackEventsConfig, } from "./account-config.js";
+export { buildSlackApprovalMessage, buildSlackApprovalText, parseSlackApprovalAction, type SlackApprovalMessage, } from "./approval-native.js";
+export { resolveSlackApprover } from "./approval-authorize.js";
+export { buildSlackApprovalBlocks, buildSlackInlineKeyboard, extractBlockActionPayload, SLACK_APPROVAL_ACTION_ID, SLACK_GENERAL_ACTION_ID, type SlackActionsBlock, type SlackBlock, } from "./blocks.js";
+export { buildSlackCommandManifest, normalizeSlackCommandName, type SlackSlashCommand, } from "./command-menu.js";
+export { connectSlack, isSlackUnauthorized, redactSlackToken, slackBackoffDelay, type ConnectSlackArgs, type SlackConnection, type SlackInboundMessage, } from "./connection.js";
+export { listSlackDirectoryPeers, listSlackDirectoryGroups, type SlackDirectoryEntry, type SlackDirectoryQuery, type SlackDirectoryWebClientLike, } from "./directory-live.js";
+export { markdownToSlackMrkdwn, slackMrkdwnIsEmpty, escapeSlackMrkdwn } from "./format.js";
+export { createSlackPlugin, type SlackPluginDeps, type SlackPluginHandle } from "./plugin.js";
+export { probeSlack, type SlackProbeResult, type SlackProbeBot, type SlackProbeTeam } from "./probe.js";
+export { buildSlackWebhookRoute, verifySlackSignature, parseSlackBody, SLACK_SIGNATURE_HEADER, SLACK_TIMESTAMP_HEADER, } from "./webhook.js";
+export { slackModule } from "./module.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/channels/slack/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,KAAK,YAAY,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,EACxB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,oBAAoB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACN,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,KAAK,iBAAiB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACxG,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/agents/channels/slack/index.js

@@ -0,0 +1,15 @@
+/** Slack channel — public surface. */
+export { createSlackAdapter, buildReactionNote, SLACK_CAPABILITIES, } from "./adapter.js";
+export { listSlackAccountIds, resolveSlackAccount, resolveSlackBotToken, resolveSlackAppToken, resolveSlackSigningSecret, resolveSlackUserToken, slackChannelEnabled, slackEventsConfig, slackLiveStreamEnabled, slackStreamThrottleMs, slackSurfaceReasoning, slackThreadIdleTtlMs, SLACK_BOT_TOKEN_ENV_VAR, SLACK_APP_TOKEN_ENV_VAR, SLACK_SIGNING_SECRET_ENV_VAR, SLACK_CHANNEL_ID, SLACK_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+export { buildSlackApprovalMessage, buildSlackApprovalText, parseSlackApprovalAction, } from "./approval-native.js";
+export { resolveSlackApprover } from "./approval-authorize.js";
+export { buildSlackApprovalBlocks, buildSlackInlineKeyboard, extractBlockActionPayload, SLACK_APPROVAL_ACTION_ID, SLACK_GENERAL_ACTION_ID, } from "./blocks.js";
+export { buildSlackCommandManifest, normalizeSlackCommandName, } from "./command-menu.js";
+export { connectSlack, isSlackUnauthorized, redactSlackToken, slackBackoffDelay, } from "./connection.js";
+export { listSlackDirectoryPeers, listSlackDirectoryGroups, } from "./directory-live.js";
+export { markdownToSlackMrkdwn, slackMrkdwnIsEmpty, escapeSlackMrkdwn } from "./format.js";
+export { createSlackPlugin } from "./plugin.js";
+export { probeSlack } from "./probe.js";
+export { buildSlackWebhookRoute, verifySlackSignature, parseSlackBody, SLACK_SIGNATURE_HEADER, SLACK_TIMESTAMP_HEADER, } from "./webhook.js";
+export { slackModule } from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/agents/channels/slack/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,GAGxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,GAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACN,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,GAGvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACN,yBAAyB,EACzB,yBAAyB,GAEzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAIjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,uBAAuB,EACvB,wBAAwB,GAIxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAgD,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAkE,MAAM,YAAY,CAAC;AACxG,OAAO,EACN,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/agents/channels/slack/media.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Slack media helpers — inbound download + outbound upload construction.
+ *
+ * INBOUND: Slack doesn't push file bytes; a message event carries file objects
+ * with an authenticated `url_private`. To get the bytes we GET that URL with an
+ * `Authorization: Bearer <botToken>` header (a plain fetch returns the login
+ * HTML otherwise). Bytes are saved under
+ * `~/.brigade/channels/slack/media/<YYYY-MM-DD>/<fileId>.<ext>` so the agent can
+ * `read` the attachment by path. In convex mode the cache relocates to the OS
+ * cache dir (never under ~/.brigade, to respect the strict-zero guard).
+ *
+ * OUTBOUND: `uploadSlackFile` posts a local path's bytes via the Web API's
+ * `files.uploadV2`, after running the path through Brigade's outbound media-path
+ * guard so a prompt-injected "send ~/.ssh/id_rsa" can't exfiltrate a secret. The
+ * `@slack/web-api` `WebClient` is injected (not imported here) so this module
+ * stays dependency-light + unit-testable.
+ */
+import { type InboundMediaAttachment, type OutboundMedia } from "../sdk.js";
+import { type SlackFileObject } from "./inbound-extras.js";
+/**
+ * Defensive ceiling on an inbound file download. Slack's own per-file limit is
+ * generous; we cap at 50 MB so a huge upload can't blow out memory. Anything
+ * larger is skipped (the message still reaches the agent without the
+ * attachment).
+ */
+declare const MAX_BYTES: number;
+/**
+ * True when `rawUrl` is an https URL whose host is a Slack file-CDN host (or a
+ * subdomain of one). Anything else (non-https, a non-Slack host, or an
+ * unparseable URL) returns false so the caller refuses to fetch with the token.
+ */
+export declare function isAllowedSlackFileUrl(rawUrl: string): boolean;
+/**
+ * Bounded retry for the transient file fetch. Slack's file CDN occasionally
+ * blips on a 5xx or a network reset; one or two quick retries turn a dropped
+ * attachment into a delivered one. The caller still wraps the whole thing in a
+ * try/catch that degrades to `null`, so an exhausted retry never breaks message
+ * delivery. Mirrors Telegram's `withMediaRetry`.
+ */
+export declare function withSlackRetry<T>(fn: () => Promise<T>, attempts?: number): Promise<T>;
+export interface DownloadSlackFileArgs {
+    /** The Slack file object (from the message event's `files[]`). */
+    file: SlackFileObject;
+    /** Bot (or user) token — sent as `Authorization: Bearer …`. NEVER logged. */
+    token: string;
+    /** Injectable fetch (defaults to global fetch) — lets tests stub the download. */
+    fetchImpl?: typeof fetch;
+    /** Logger so a failed download logs without crashing the inbound flow. */
+    log?: (msg: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * Download one inbound Slack file to disk and return its normalized descriptor,
+ * or `null` when the file couldn't be fetched (no url / too big / network error
+ * / tombstoned). Never throws — a download glitch must not break message
+ * delivery. The `Authorization: Bearer` header is REQUIRED; a plain GET of
+ * `url_private` returns Slack's HTML login page, not the bytes.
+ */
+export declare function downloadSlackFile(args: DownloadSlackFileArgs): Promise<InboundMediaAttachment | null>;
+/** The minimal `files.uploadV2` surface the outbound path drives — injectable for tests. */
+export interface SlackUploadApi {
+    files: {
+        uploadV2(args: {
+            channel_id: string;
+            file: unknown;
+            filename: string;
+            initial_comment?: string;
+            thread_ts?: string;
+        }): Promise<unknown>;
+    };
+}
+export interface UploadSlackFileArgs {
+    /** The Web API client (`WebClient`) the upload runs through. */
+    client: SlackUploadApi;
+    /** Destination channel id. */
+    channelId: string;
+    /** The local media to upload. */
+    media: OutboundMedia;
+    /** Optional thread to upload into. */
+    threadId?: string;
+}
+/**
+ * Upload a local file (image / video / audio / doc) to a Slack channel via
+ * `files.uploadV2`, after running the path through Brigade's outbound
+ * media-path guard. Throws a clear operator-facing error when the guard refuses
+ * the path (the `send_media` tool surfaces it). The file is streamed from disk;
+ * the caption rides as `initial_comment`.
+ */
+export declare function uploadSlackFile(args: UploadSlackFileArgs): Promise<void>;
+export { MAX_BYTES as SLACK_MEDIA_MAX_BYTES };
+//# sourceMappingURL=media.d.ts.map

package/dist/agents/channels/slack/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAUH,OAAO,EAEN,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAIjF;;;;;GAKG;AACH,QAAA,MAAM,SAAS,QAAmB,CAAC;AAYnC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAU7D;AAqCD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAWtF;AAED,MAAM,WAAW,qBAAqB;IACrC,kEAAkE;IAClE,IAAI,EAAE,eAAe,CAAC;IACtB,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAgE3G;AAED,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE;QACN,QAAQ,CAAC,IAAI,EAAE;YACd,UAAU,EAAE,MAAM,CAAC;YACnB,IAAI,EAAE,OAAO,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,eAAe,CAAC,EAAE,MAAM,CAAC;YACzB,SAAS,CAAC,EAAE,MAAM,CAAC;SACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACrB,CAAC;CACF;AAED,MAAM,WAAW,mBAAmB;IACnC,gEAAgE;IAChE,MAAM,EAAE,cAAc,CAAC;IACvB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,KAAK,EAAE,aAAa,CAAC;IACrB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAc9E;AAED,OAAO,EAAE,SAAS,IAAI,qBAAqB,EAAE,CAAC"}