@spinabot/brigade 1.5.0 → 1.6.0

package/dist/agents/channels/slack/reasoning-lane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning-lane.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/reasoning-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,8BAAoB,CAAC;AAKlD,MAAM,WAAW,mBAAmB;IACnC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoBrD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAKpE"}

package/dist/agents/channels/slack/reasoning-lane.js

@@ -0,0 +1,68 @@
+/**
+ * Slack reasoning-lane split (OPTIONAL, default OFF).
+ *
+ * Brigade strips `<think>…</think>` reasoning from every channel reply via the
+ * shared `sanitizeReplyForChannel` — recipients see only the final answer. For
+ * Slack an operator can OPT IN (config `channels.slack.surfaceReasoning: true`)
+ * to ALSO receive the reasoning trace as a separate, prefixed message.
+ *
+ * This module is the pure splitter: given the raw agent reply, it returns
+ * `{ reasoningText?, answerText }`. When surfacing is OFF the pipeline never
+ * calls this and behavior is byte-identical to today (strip + send answer). When
+ * ON, the pipeline sends `reasoningText` first (a `🧠 Reasoning:` block) then the
+ * normal sanitized answer.
+ *
+ * The answer half is computed with the SAME sanitizer the default path uses, so
+ * enabling reasoning never changes what the answer message contains — it only
+ * ADDS the reasoning message in front.
+ *
+ * Pure / deterministic / dependency-light (re-uses `sanitizeReplyForChannel`).
+ * Slack mirror of `telegram/reasoning-lane.ts`.
+ */
+import { sanitizeReplyForChannel } from "../reply-sanitizer.js";
+/** Prefix on the reasoning message so the recipient knows it's the trace. */
+export const REASONING_PREFIX = "🧠 Reasoning:\n";
+/** Matches a `<think>`/`<thinking>`/`<thought>` open/close tag. */
+const THINK_TAG_RE = /<\s*(\/?)\s*(?:think(?:ing)?|thought)\b[^<>]*>/gi;
+/**
+ * Extract the concatenated text INSIDE `<think>…</think>` blocks. Handles
+ * multiple blocks and an unclosed trailing block (model truncated mid-thought).
+ * Returns "" when there's no reasoning content.
+ */
+export function extractReasoning(text) {
+    if (!text)
+        return "";
+    const parts = [];
+    let inThink = false;
+    let lastIndex = 0;
+    THINK_TAG_RE.lastIndex = 0;
+    for (const match of text.matchAll(THINK_TAG_RE)) {
+        const idx = match.index ?? 0;
+        const isClose = match[1] === "/";
+        if (inThink && isClose) {
+            parts.push(text.slice(lastIndex, idx));
+            inThink = false;
+        }
+        else if (!inThink && !isClose) {
+            inThink = true;
+            lastIndex = idx + match[0].length;
+        }
+    }
+    // Unclosed trailing block — keep what the model emitted.
+    if (inThink)
+        parts.push(text.slice(lastIndex));
+    return parts.join("\n").trim();
+}
+/**
+ * Split a raw agent reply into an optional reasoning message + the sanitized
+ * answer. The answer is identical to `sanitizeReplyForChannel(raw)`; the
+ * reasoning is only populated when a `<think>` block carried content.
+ */
+export function splitSlackReasoning(raw) {
+    const answerText = sanitizeReplyForChannel(raw ?? "");
+    const reasoning = extractReasoning(raw ?? "");
+    if (!reasoning)
+        return { answerText };
+    return { reasoningText: `${REASONING_PREFIX}${reasoning}`, answerText };
+}
+//# sourceMappingURL=reasoning-lane.js.map

package/dist/agents/channels/slack/reasoning-lane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning-lane.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/reasoning-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD,mEAAmE;AACnE,MAAM,YAAY,GAAG,kDAAkD,CAAC;AASxE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QACjC,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,OAAO,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACnC,CAAC;IACF,CAAC;IACD,yDAAyD;IACzD,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACtC,OAAO,EAAE,aAAa,EAAE,GAAG,gBAAgB,GAAG,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC;AACzE,CAAC"}

package/dist/agents/channels/slack/user-directory.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Slack user-name directory — a small cached `id → display-name` resolver.
+ *
+ * Slack message events carry only the sender's user id (`U…` / `W…`); the human
+ * name needs a `users.info` call. Doing that synchronously on the inbound hot
+ * path would add a network round-trip per message, so this directory resolves
+ * names in the BACKGROUND:
+ *
+ *   - `prime(id)` fires a memoized, non-blocking `users.info` and caches the
+ *     resolved name.
+ *   - `resolveNameSync(id)` reads whatever is currently cached (no network).
+ *
+ * So the FIRST message from a never-seen user surfaces the raw id; every message
+ * after the prime settles surfaces the name. In a real workspace the bot sees
+ * the same people repeatedly, so names appear almost immediately. Names are
+ * cached with a TTL; failed / empty lookups are negative-cached briefly so a bad
+ * id never hammers the API, and a concurrent burst for one id fires a single
+ * request (in-flight de-dupe).
+ *
+ * Built over the injected `users.info` slice so it unit-tests with a fake — no
+ * live workspace, no globals.
+ */
+/** The minimal `users.info` slice the directory drives (a `WebClient` satisfies it). */
+export interface SlackUsersInfoApi {
+    users?: {
+        info?(args: {
+            user: string;
+        }): Promise<{
+            ok?: boolean;
+            error?: string;
+            user?: SlackUserInfoUser;
+        }>;
+    };
+}
+/** The subset of a Slack user object the directory reads for a display name. */
+export interface SlackUserInfoUser {
+    id?: string;
+    name?: string;
+    real_name?: string;
+    profile?: {
+        display_name?: string;
+        real_name?: string;
+    };
+}
+export interface SlackUserDirectory {
+    /** Read the cached display name for a user id (no network). Undefined when not cached yet. */
+    resolveNameSync(id: string | undefined): string | undefined;
+    /**
+     * Fire a memoized background `users.info` so the name is cached for next time.
+     * No-op when the id is empty, isn't a user id, is already fresh in the cache,
+     * or has a request in flight. Never throws, never blocks.
+     */
+    prime(id: string | undefined): void;
+}
+/**
+ * A Slack human USER id is `U…` or `W…` (Enterprise Grid). Bot ids (`B…`),
+ * channel ids (`C…`/`D…`/`G…`), and empties have no `users.info`, so we never
+ * call for them.
+ */
+export declare function isSlackUserId(id: string): boolean;
+export declare function createSlackUserDirectory(args: {
+    web: SlackUsersInfoApi | null;
+    ttlMs?: number;
+    negativeTtlMs?: number;
+    /** Injectable clock for deterministic TTL tests (defaults to `Date.now`). */
+    nowImpl?: () => number;
+    log?: (msg: string, meta?: Record<string, unknown>) => void;
+}): SlackUserDirectory;
+//# sourceMappingURL=user-directory.d.ts.map

package/dist/agents/channels/slack/user-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-directory.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/user-directory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IACjC,KAAK,CAAC,EAAE;QACP,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC;YAAE,EAAE,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,iBAAiB,CAAA;SAAE,CAAC,CAAC;KACnG,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IACjC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IAClC,8FAA8F;IAC9F,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D;;;;OAIG;IACH,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;CACpC;AAOD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D,GAAG,kBAAkB,CAyDrB"}

package/dist/agents/channels/slack/user-directory.js

@@ -0,0 +1,94 @@
+/**
+ * Slack user-name directory — a small cached `id → display-name` resolver.
+ *
+ * Slack message events carry only the sender's user id (`U…` / `W…`); the human
+ * name needs a `users.info` call. Doing that synchronously on the inbound hot
+ * path would add a network round-trip per message, so this directory resolves
+ * names in the BACKGROUND:
+ *
+ *   - `prime(id)` fires a memoized, non-blocking `users.info` and caches the
+ *     resolved name.
+ *   - `resolveNameSync(id)` reads whatever is currently cached (no network).
+ *
+ * So the FIRST message from a never-seen user surfaces the raw id; every message
+ * after the prime settles surfaces the name. In a real workspace the bot sees
+ * the same people repeatedly, so names appear almost immediately. Names are
+ * cached with a TTL; failed / empty lookups are negative-cached briefly so a bad
+ * id never hammers the API, and a concurrent burst for one id fires a single
+ * request (in-flight de-dupe).
+ *
+ * Built over the injected `users.info` slice so it unit-tests with a fake — no
+ * live workspace, no globals.
+ */
+/** Positive cache lifetime — a resolved name is reused for an hour. */
+const DEFAULT_TTL_MS = 60 * 60 * 1_000;
+/** Negative cache lifetime — a failed / empty lookup is not retried for a minute. */
+const NEGATIVE_TTL_MS = 60 * 1_000;
+/**
+ * A Slack human USER id is `U…` or `W…` (Enterprise Grid). Bot ids (`B…`),
+ * channel ids (`C…`/`D…`/`G…`), and empties have no `users.info`, so we never
+ * call for them.
+ */
+export function isSlackUserId(id) {
+    return /^[UW][A-Z0-9]+$/.test(id);
+}
+export function createSlackUserDirectory(args) {
+    const ttlMs = args.ttlMs ?? DEFAULT_TTL_MS;
+    const negativeTtlMs = args.negativeTtlMs ?? NEGATIVE_TTL_MS;
+    const now = args.nowImpl ?? (() => Date.now());
+    const cache = new Map();
+    const inflight = new Set();
+    // Capture a `this`-bound `users.info` caller ONCE (null when the injected web
+    // has no such slice — e.g. a test fake), so `prime` stays a safe no-op and the
+    // call preserves the WebClient facet as its receiver.
+    const usersApi = args.web?.users;
+    const fetchUser = usersApi && usersApi.info ? (id) => usersApi.info.call(usersApi, { user: id }) : null;
+    const nameFromUser = (u) => {
+        if (!u)
+            return undefined;
+        const candidate = u.profile?.display_name || u.profile?.real_name || u.real_name || u.name;
+        const trimmed = typeof candidate === "string" ? candidate.trim() : "";
+        return trimmed || undefined;
+    };
+    const isFresh = (id) => {
+        const hit = cache.get(id);
+        return hit !== undefined && hit.expiresAt > now();
+    };
+    const resolveNameSync = (id) => {
+        if (!id)
+            return undefined;
+        const hit = cache.get(id);
+        if (hit && hit.expiresAt > now())
+            return hit.name;
+        return undefined;
+    };
+    const prime = (id) => {
+        if (!id || !fetchUser)
+            return;
+        if (!isSlackUserId(id))
+            return;
+        if (inflight.has(id) || isFresh(id))
+            return;
+        inflight.add(id);
+        void (async () => {
+            try {
+                const res = await fetchUser(id);
+                const name = res && res.ok === false ? undefined : nameFromUser(res?.user);
+                cache.set(id, { ...(name ? { name } : {}), expiresAt: now() + (name ? ttlMs : negativeTtlMs) });
+            }
+            catch (err) {
+                // Negative-cache the failure so a transient/bad id isn't retried in a loop.
+                cache.set(id, { expiresAt: now() + negativeTtlMs });
+                args.log?.("slack users.info failed", {
+                    user: id,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+            finally {
+                inflight.delete(id);
+            }
+        })();
+    };
+    return { resolveNameSync, prime };
+}
+//# sourceMappingURL=user-directory.js.map

package/dist/agents/channels/slack/user-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-directory.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/user-directory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA4BH,uEAAuE;AACvE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACvC,qFAAqF;AACrF,MAAM,eAAe,GAAG,EAAE,GAAG,KAAK,CAAC;AAEnC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU;IACvC,OAAO,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACA,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC;IAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,eAAe,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgD,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,8EAA8E;IAC9E,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;IACjC,MAAM,SAAS,GACd,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhG,MAAM,YAAY,GAAG,CAAC,CAAgC,EAAsB,EAAE;QAC7E,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC;QAC3F,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,OAAO,IAAI,SAAS,CAAC;IAC7B,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAW,EAAE;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,EAAsB,EAAsB,EAAE;QACtE,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC;QAClD,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,EAAsB,EAAQ,EAAE;QAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS;YAAE,OAAO;QAC9B,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,OAAO;QAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO;QAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,KAAK,CAAC,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC3E,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,4EAA4E;gBAC5E,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC,CAAC;gBACpD,IAAI,CAAC,GAAG,EAAE,CAAC,yBAAyB,EAAE;oBACrC,IAAI,EAAE,EAAE;oBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACvD,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACV,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACF,CAAC,CAAC,EAAE,CAAC;IACN,CAAC,CAAC;IAEF,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC"}

package/dist/agents/channels/slack/webhook.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Slack Events-API gateway route.
+ *
+ * In events transport mode (`channels.slack.mode: "events"`) Slack POSTs each
+ * event to a public URL instead of Brigade opening a Socket Mode websocket. This
+ * module builds the Brigade `HttpRoute` that receives those POSTs:
+ *
+ *   1. Verify the `X-Slack-Signature` header. Slack signs every request as
+ *      `v0=` + HMAC-SHA256 of `v0:${timestamp}:${rawBody}` keyed with the app's
+ *      signing secret. A mismatch (or a stale timestamp outside the replay
+ *      window) → 401, BEFORE the body is routed, so a forged event can't reach
+ *      the agent. The signature is computed over the RAW body, so the handler
+ *      reads the raw bytes first and verifies before `JSON.parse`.
+ *   2. Answer the one-time `url_verification` handshake by echoing the
+ *      `challenge` value (Slack's endpoint-ownership check).
+ *   3. For an `event_callback`, hand the inner event to the started Slack
+ *      adapter's `feedWebhookEvent("event", …)`, which runs it through the SAME
+ *      normalize + dedupe + dispatch path Socket Mode uses. Interactive
+ *      (`block_actions`) + slash-command payloads arrive as
+ *      `application/x-www-form-urlencoded` with a `payload=` field and route via
+ *      `feedWebhookEvent("interactive" | "slash", …)`.
+ *   4. Reply `200` so Slack marks the event delivered.
+ *
+ * The route is registered with `auth: "none"` because Slack authenticates via
+ * the signed request, not Brigade's operator-auth (Slack can't present an
+ * operator credential). The signature check IS the auth.
+ *
+ * Socket mode never registers this route — it's added by the module only when
+ * events mode is configured, so the default local-first install exposes no
+ * inbound HTTP surface. Slack mirror of `telegram/webhook.ts`.
+ */
+import type { HttpRoute } from "../sdk.js";
+/** Slack's request-signature header. */
+export declare const SLACK_SIGNATURE_HEADER = "x-slack-signature";
+/** Slack's request-timestamp header (replay-window guard). */
+export declare const SLACK_TIMESTAMP_HEADER = "x-slack-request-timestamp";
+/** Constant-time compare of two hex signatures — avoids leaking via timing. */
+export declare function safeEqualSignature(a: string, b: string): boolean;
+/**
+ * Verify a Slack request signature over the raw body. Returns false when no
+ * secret is configured AND a signature was supplied (a configured Slack app
+ * always signs), when the timestamp is missing / stale, or when the computed
+ * `v0=` HMAC doesn't match. When `expectedSecret` is empty the check is SKIPPED
+ * (returns true) — the operator opted out of verification (not recommended).
+ */
+export declare function verifySlackSignature(args: {
+    signingSecret: string;
+    signature: string | undefined;
+    timestamp: string | undefined;
+    rawBody: string;
+    nowSeconds?: number;
+}): boolean;
+/**
+ * Parse the request payload. Slack delivers EVENTS as JSON
+ * (`application/json`) and INTERACTIONS / SLASH-COMMANDS as
+ * `application/x-www-form-urlencoded` carrying a `payload=` (interactive) or
+ * flat form fields (slash). Returns a discriminated shape the handler routes on.
+ */
+export declare function parseSlackBody(rawBody: string, contentType: string): {
+    kind: "json";
+    data: Record<string, unknown>;
+} | {
+    kind: "interactive";
+    data: Record<string, unknown>;
+} | {
+    kind: "slash";
+    data: Record<string, unknown>;
+} | null;
+/** The minimal adapter surface the webhook route drives. */
+export interface SlackWebhookSink {
+    /** Feed a parsed Slack payload into the inbound path. */
+    feedWebhookEvent(kind: "event" | "interactive" | "slash", payload: unknown): void;
+}
+export interface BuildSlackWebhookRouteArgs {
+    /** The gateway route path (e.g. `/slack/events`). */
+    path: string;
+    /** The configured signing secret (`""` → no signature check). */
+    signingSecret: string;
+    /** Resolve the started adapter to feed events into (null when not started). */
+    resolveSink: () => SlackWebhookSink | null;
+    /** Logger (token-redacted upstream). */
+    log?: (msg: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * Build the Brigade `HttpRoute` for the Slack Events API. Register it via
+ * `b.httpRoute(...)` from the module when events mode is active.
+ */
+export declare function buildSlackWebhookRoute(args: BuildSlackWebhookRouteArgs): HttpRoute;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/agents/channels/slack/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,wCAAwC;AACxC,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAC1D,8DAA8D;AAC9D,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAQlE,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAOhE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAYV;AA0BD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,CA0BpK;AAED,4DAA4D;AAC5D,MAAM,WAAW,gBAAgB;IAChC,yDAAyD;IACzD,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;CAClF;AAED,MAAM,WAAW,0BAA0B;IAC1C,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,WAAW,EAAE,MAAM,gBAAgB,GAAG,IAAI,CAAC;IAC3C,wCAAwC;IACxC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,0BAA0B,GAAG,SAAS,CAoFlF"}

package/dist/agents/channels/slack/webhook.js

@@ -0,0 +1,228 @@
+/**
+ * Slack Events-API gateway route.
+ *
+ * In events transport mode (`channels.slack.mode: "events"`) Slack POSTs each
+ * event to a public URL instead of Brigade opening a Socket Mode websocket. This
+ * module builds the Brigade `HttpRoute` that receives those POSTs:
+ *
+ *   1. Verify the `X-Slack-Signature` header. Slack signs every request as
+ *      `v0=` + HMAC-SHA256 of `v0:${timestamp}:${rawBody}` keyed with the app's
+ *      signing secret. A mismatch (or a stale timestamp outside the replay
+ *      window) → 401, BEFORE the body is routed, so a forged event can't reach
+ *      the agent. The signature is computed over the RAW body, so the handler
+ *      reads the raw bytes first and verifies before `JSON.parse`.
+ *   2. Answer the one-time `url_verification` handshake by echoing the
+ *      `challenge` value (Slack's endpoint-ownership check).
+ *   3. For an `event_callback`, hand the inner event to the started Slack
+ *      adapter's `feedWebhookEvent("event", …)`, which runs it through the SAME
+ *      normalize + dedupe + dispatch path Socket Mode uses. Interactive
+ *      (`block_actions`) + slash-command payloads arrive as
+ *      `application/x-www-form-urlencoded` with a `payload=` field and route via
+ *      `feedWebhookEvent("interactive" | "slash", …)`.
+ *   4. Reply `200` so Slack marks the event delivered.
+ *
+ * The route is registered with `auth: "none"` because Slack authenticates via
+ * the signed request, not Brigade's operator-auth (Slack can't present an
+ * operator credential). The signature check IS the auth.
+ *
+ * Socket mode never registers this route — it's added by the module only when
+ * events mode is configured, so the default local-first install exposes no
+ * inbound HTTP surface. Slack mirror of `telegram/webhook.ts`.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+/** Slack's request-signature header. */
+export const SLACK_SIGNATURE_HEADER = "x-slack-signature";
+/** Slack's request-timestamp header (replay-window guard). */
+export const SLACK_TIMESTAMP_HEADER = "x-slack-request-timestamp";
+/** Signature version prefix Slack uses (`v0`). */
+const SLACK_SIG_VERSION = "v0";
+/** Reject a request whose timestamp is older than this (replay protection). */
+const MAX_TIMESTAMP_SKEW_SECONDS = 60 * 5;
+/** Cap on the webhook body (a Slack event is small; 1 MiB is generous). */
+const WEBHOOK_MAX_BODY_BYTES = 1 * 1024 * 1024;
+/** Constant-time compare of two hex signatures — avoids leaking via timing. */
+export function safeEqualSignature(a, b) {
+    if (a.length !== b.length)
+        return false;
+    try {
+        return timingSafeEqual(Buffer.from(a, "utf8"), Buffer.from(b, "utf8"));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify a Slack request signature over the raw body. Returns false when no
+ * secret is configured AND a signature was supplied (a configured Slack app
+ * always signs), when the timestamp is missing / stale, or when the computed
+ * `v0=` HMAC doesn't match. When `expectedSecret` is empty the check is SKIPPED
+ * (returns true) — the operator opted out of verification (not recommended).
+ */
+export function verifySlackSignature(args) {
+    if (!args.signingSecret)
+        return true; // no secret configured → no check
+    const sig = typeof args.signature === "string" ? args.signature : "";
+    const ts = typeof args.timestamp === "string" ? args.timestamp : "";
+    if (!sig || !ts)
+        return false;
+    const tsNum = Number.parseInt(ts, 10);
+    if (!Number.isFinite(tsNum))
+        return false;
+    const now = args.nowSeconds ?? Math.floor(Date.now() / 1000);
+    if (Math.abs(now - tsNum) > MAX_TIMESTAMP_SKEW_SECONDS)
+        return false; // stale → replay guard
+    const base = `${SLACK_SIG_VERSION}:${ts}:${args.rawBody}`;
+    const computed = `${SLACK_SIG_VERSION}=${createHmac("sha256", args.signingSecret).update(base).digest("hex")}`;
+    return safeEqualSignature(computed, sig);
+}
+/** Read a request body up to `maxBytes`, rejecting (→ null) when it overflows. */
+function readBody(req, maxBytes) {
+    return new Promise((resolve) => {
+        const chunks = [];
+        let size = 0;
+        let overflowed = false;
+        req.on("data", (chunk) => {
+            if (overflowed)
+                return;
+            size += chunk.length;
+            if (size > maxBytes) {
+                overflowed = true;
+                resolve(null);
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => {
+            if (overflowed)
+                return;
+            resolve(Buffer.concat(chunks).toString("utf8"));
+        });
+        req.on("error", () => resolve(null));
+    });
+}
+/**
+ * Parse the request payload. Slack delivers EVENTS as JSON
+ * (`application/json`) and INTERACTIONS / SLASH-COMMANDS as
+ * `application/x-www-form-urlencoded` carrying a `payload=` (interactive) or
+ * flat form fields (slash). Returns a discriminated shape the handler routes on.
+ */
+export function parseSlackBody(rawBody, contentType) {
+    const ct = (contentType ?? "").toLowerCase();
+    if (ct.includes("application/json")) {
+        try {
+            return { kind: "json", data: JSON.parse(rawBody) };
+        }
+        catch {
+            return null;
+        }
+    }
+    // Form-encoded: an interactive payload rides as `payload=<json>`; a slash
+    // command is flat form fields (`command=/x&text=…`).
+    const params = new URLSearchParams(rawBody);
+    const payload = params.get("payload");
+    if (payload) {
+        try {
+            return { kind: "interactive", data: JSON.parse(payload) };
+        }
+        catch {
+            return null;
+        }
+    }
+    if (params.has("command")) {
+        const data = {};
+        for (const [k, v] of params.entries())
+            data[k] = v;
+        return { kind: "slash", data };
+    }
+    return null;
+}
+/**
+ * Build the Brigade `HttpRoute` for the Slack Events API. Register it via
+ * `b.httpRoute(...)` from the module when events mode is active.
+ */
+export function buildSlackWebhookRoute(args) {
+    const handler = async (req, res) => {
+        const reply = (status, body, contentType = "application/json") => {
+            res.statusCode = status;
+            res.setHeader("content-type", contentType);
+            res.end(typeof body === "string" ? body : JSON.stringify(body));
+        };
+        // Only POST carries events.
+        if ((req.method ?? "").toUpperCase() !== "POST") {
+            reply(405, { ok: false, error: "method not allowed" });
+            return;
+        }
+        // The gateway dispatcher has ALREADY drained the request stream and buffered
+        // it onto `req.body` (see core/server.ts). Re-reading the stream here would
+        // hang until the 30s timeout (→ 408) because the `data`/`end` events already
+        // fired. Read the pre-buffered body first; only fall back to streaming when
+        // the route is exercised outside the gateway (e.g. a direct unit test).
+        const pre = req.body;
+        const raw = pre ? pre.toString("utf8") : await readBody(req, WEBHOOK_MAX_BODY_BYTES);
+        if (raw === null) {
+            reply(413, { ok: false, error: "payload too large" });
+            return;
+        }
+        // Signature check FIRST (over the RAW body) — refuse a forged event before
+        // parsing / routing.
+        const sigHeader = req.headers[SLACK_SIGNATURE_HEADER];
+        const tsHeader = req.headers[SLACK_TIMESTAMP_HEADER];
+        const signature = Array.isArray(sigHeader) ? sigHeader[0] : sigHeader;
+        const timestamp = Array.isArray(tsHeader) ? tsHeader[0] : tsHeader;
+        if (!verifySlackSignature({ signingSecret: args.signingSecret, signature, timestamp, rawBody: raw })) {
+            args.log?.("slack webhook rejected — bad signature");
+            reply(401, { ok: false, error: "unauthorized" });
+            return;
+        }
+        const contentType = (() => {
+            const c = req.headers["content-type"];
+            return Array.isArray(c) ? (c[0] ?? "") : (c ?? "");
+        })();
+        const parsed = parseSlackBody(raw, contentType);
+        if (!parsed) {
+            reply(400, { ok: false, error: "invalid body" });
+            return;
+        }
+        // The one-time endpoint-ownership handshake — echo the challenge verbatim.
+        if (parsed.kind === "json" && parsed.data["type"] === "url_verification") {
+            const challenge = typeof parsed.data["challenge"] === "string" ? parsed.data["challenge"] : "";
+            reply(200, { challenge });
+            return;
+        }
+        const sink = args.resolveSink();
+        if (sink) {
+            try {
+                if (parsed.kind === "json" && parsed.data["type"] === "event_callback") {
+                    sink.feedWebhookEvent("event", parsed.data);
+                }
+                else if (parsed.kind === "interactive") {
+                    sink.feedWebhookEvent("interactive", parsed.data);
+                }
+                else if (parsed.kind === "slash") {
+                    sink.feedWebhookEvent("slash", parsed.data);
+                }
+            }
+            catch (err) {
+                args.log?.("slack webhook dispatch threw", { error: err instanceof Error ? err.message : String(err) });
+            }
+        }
+        // Always 200 so Slack doesn't retry-storm — a dispatch error is ours to fix,
+        // not Slack's to redeliver. A slash command replies empty to clear the spinner.
+        if (parsed.kind === "slash") {
+            reply(200, "");
+        }
+        else {
+            reply(200, { ok: true });
+        }
+    };
+    return {
+        method: "POST",
+        path: args.path,
+        auth: "none", // Slack can't present operator-auth; the signed request IS the auth.
+        match: "exact",
+        maxBodyBytes: WEBHOOK_MAX_BODY_BYTES,
+        skipSessionGuard: true,
+        handler,
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/agents/channels/slack/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAK1D,wCAAwC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAClE,kDAAkD;AAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,+EAA+E;AAC/E,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAAC,CAAC;AAC1C,2EAA2E;AAC3E,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,CAAS,EAAE,CAAS;IACtD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC;QACJ,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACA,IAAI,CAAC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACxE,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAC,CAAC,uBAAuB;IAC7F,MAAM,IAAI,GAAG,GAAG,iBAAiB,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAG,iBAAiB,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/G,OAAO,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,kFAAkF;AAClF,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,IAAI,UAAU;gBAAE,OAAO;YACvB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACrB,UAAU,GAAG,IAAI,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,OAAO;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAClB,IAAI,UAAU;gBAAE,OAAO;YACvB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC7B,OAAe,EACf,WAAmB;IAEnB,MAAM,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,EAAE,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAgC;IACtE,MAAM,OAAO,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QAClF,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,WAAW,GAAG,kBAAkB,EAAQ,EAAE;YACvF,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;YACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC3C,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;QAEF,4BAA4B;QAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACjD,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACvD,OAAO;QACR,CAAC;QACD,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,MAAM,GAAG,GAAI,GAA2C,CAAC,IAAI,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACrF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACtD,OAAO;QACR,CAAC;QACD,2EAA2E;QAC3E,qBAAqB;QACrB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,IAAI,CAAC,oBAAoB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACtG,IAAI,CAAC,GAAG,EAAE,CAAC,wCAAwC,CAAC,CAAC;YACrD,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACjD,OAAO;QACR,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACjD,OAAO;QACR,CAAC;QAED,2EAA2E;QAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,kBAAkB,EAAE,CAAC;YAC1E,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1B,OAAO;QACR,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACJ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,gBAAgB,EAAE,CAAC;oBACxE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7C,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC1C,IAAI,CAAC,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnD,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC7C,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,EAAE,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzG,CAAC;QACF,CAAC;QACD,6EAA6E;QAC7E,gFAAgF;QAChF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACP,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,MAAM,EAAE,qEAAqE;QACnF,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,sBAAsB;QACpC,gBAAgB,EAAE,IAAI;QACtB,OAAO;KACP,CAAC;AACH,CAAC"}

package/dist/agents/channels/telegram/format.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AA+HD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+E/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAA+B,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAmBhC"}
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/telegram/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AA8ID;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+E/D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CACnC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAA+B,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAmBhC"}

package/dist/agents/channels/telegram/format.js

@@ -97,7 +97,23 @@ function matchMarkdownLink(text, start) {
         return null;
     if (text[labelEnd + 1] !== "(")
         return null;
-    const urlEnd = text.indexOf(")", labelEnd + 2);
+    // Balanced-paren scan from just after the opening `(` so a URL that itself
+    // contains parentheses (e.g. `…/Mercury_(planet)`) keeps its closing `)`. A
+    // plain `indexOf(")")` truncated at the FIRST `)`, dropping the rest of the url.
+    let depth = 1;
+    let urlEnd = -1;
+    for (let j = labelEnd + 2; j < text.length; j++) {
+        const c = text[j];
+        if (c === "(")
+            depth += 1;
+        else if (c === ")") {
+            depth -= 1;
+            if (depth === 0) {
+                urlEnd = j;
+                break;
+            }
+        }
+    }
     if (urlEnd === -1)
         return null;
     const label = text.slice(start + 1, labelEnd);