@spinabot/brigade 1.5.0 → 1.6.0

package/dist/agents/channels/slack/approval-authorize.js

@@ -0,0 +1,71 @@
+/**
+ * Slack inline-approval authorization.
+ *
+ * When an approval prompt is rendered as Block Kit buttons, ANY member who can
+ * see the message could press a button. Brigade's central inbound pipeline
+ * already runs the access-control gate before a `block_actions` press reaches
+ * the approval-callback path, so only an admitted (allow-listed / owner) peer
+ * gets here at all — but a SHARED Slack channel is the edge case: in a channel
+ * the bot is in, an admitted member's button press should still be allowed only
+ * when that presser is an approved approver, not merely present in the room.
+ * Slack's multi-member workspaces make this gate more load-bearing than
+ * Telegram's.
+ *
+ * This predicate is the channel's `approvalCapability.authorizeApprover`. It is
+ * invoked CENTRALLY by `tryConsumeChannelApprovalCallback` with the presser's
+ * `senderId` (the Slack user id `U…`); returning `{ authorized: false, reason }`
+ * refuses the press without consuming the operator's pending approval (so the
+ * real operator can still answer). Policy:
+ *
+ *   - When the channel has an explicit allow-from list configured (the approved
+ *     senders), only those ids may approve.
+ *   - When NO allow-from list is configured, defer to the access gate that
+ *     already admitted the inbound and authorize the press (matches the text-
+ *     reply path, which has no extra approver gate).
+ *
+ * Pure + deterministic over its `cfg` + `senderId` inputs — no I/O.
+ */
+/** Read the channel's configured allow-from sender ids (string-normalized). */
+function configuredAllowFrom(cfg, accountId) {
+    const channels = cfg.channels;
+    const slot = channels?.slack;
+    if (!slot)
+        return [];
+    const ids = [];
+    const push = (list) => {
+        for (const v of list ?? []) {
+            const s = String(v).trim();
+            if (s)
+                ids.push(s);
+        }
+    };
+    push(slot.allowFrom);
+    // Per-account allow-from (multi-workspace shape) when an accountId is supplied.
+    if (accountId && Array.isArray(slot.accounts)) {
+        for (const entry of slot.accounts) {
+            if (entry && typeof entry.id === "string" && entry.id.trim() === accountId.trim())
+                push(entry.allowFrom);
+        }
+    }
+    return ids;
+}
+/**
+ * Resolve whether `senderId` is allowed to answer a Slack inline approval.
+ * Returns `{ authorized: true }` when no explicit allow-from gate applies (the
+ * central access gate already admitted the inbound), or when the presser is on
+ * the configured allow-from list. Otherwise refuses with a reason.
+ */
+export function resolveSlackApprover(args) {
+    const allow = configuredAllowFrom(args.cfg, args.accountId);
+    // No explicit allow list → defer to the access gate that already ran.
+    if (allow.length === 0)
+        return { authorized: true };
+    const sender = (args.senderId ?? "").trim();
+    if (sender && allow.includes(sender))
+        return { authorized: true };
+    return {
+        authorized: false,
+        reason: "Only an approved sender can answer that approval.",
+    };
+}
+//# sourceMappingURL=approval-authorize.js.map

package/dist/agents/channels/slack/approval-authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-authorize.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/approval-authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAIH,+EAA+E;AAC/E,SAAS,mBAAmB,CAAC,GAAkB,EAAE,SAAkB;IAClE,MAAM,QAAQ,GAAI,GAA8C,CAAC,QAAQ,CAAC;IAC1E,MAAM,IAAI,GAAG,QAAQ,EAAE,KAEX,CAAC;IACb,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,IAA6B,EAAE,EAAE;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACF,CAAC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrB,gFAAgF;IAChF,IAAI,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1G,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACA,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,sEAAsE;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO;QACN,UAAU,EAAE,KAAK;QACjB,MAAM,EAAE,mDAAmD;KAC3D,CAAC;AACH,CAAC"}

package/dist/agents/channels/slack/approval-native.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Slack Block Kit rendering for native approval prompts.
+ *
+ * When a channel-routed turn raises an exec/plugin approval AND the Slack
+ * adapter has opted into `approvalCapability.sendApprovalPrompt`, the central
+ * approval-router asks this channel to render the question as native Block Kit
+ * BUTTONS instead of the default "reply yes/no" text card. The button payloads
+ * are produced by the CENTRAL codec (`buildApprovalCallbackButtons`) so the
+ * press comes back as an `InboundMessage.callbackQuery` the central
+ * `tryConsumeChannelApprovalCallback` decodes + resolves — this file only maps
+ * the codec's `{ label, data }` specs onto Slack's `actions`-block shape (via
+ * `blocks.ts`) and assembles the prompt text + fallback.
+ *
+ * SAFETY: every button `value` here is the codec's output — versioned,
+ * base64url + printable-ASCII, already proven `<= 64` UTF-8 bytes by
+ * `encodeApprovalCallback` (and well under Slack's 255-char `value` cap). This
+ * module never mints its own payloads.
+ *
+ * Slack mirror of `telegram/approval-native.ts`.
+ */
+import { type SlackBlock, type SlackBlockAction } from "./blocks.js";
+/** The Slack message payload an approval prompt sends: a fallback `text` + `blocks`. */
+export interface SlackApprovalMessage {
+    /** Plain fallback text (notifications + clients that can't render blocks). */
+    text: string;
+    /** The Block Kit blocks: a section (prompt) + the actions block(s). */
+    blocks: SlackBlock[];
+}
+/**
+ * Build the Block Kit approval message for an approval prompt from the central
+ * codec. Returns `null` when fewer than two byte-safe buttons could be minted (a
+ * pathologically long approval id) — the caller then falls back to the text
+ * prompt rather than ship a half-rendered prompt.
+ *
+ * `allowAlways: false` drops the "Allow always" button (approvals where
+ * persisting an allowlist entry doesn't apply).
+ */
+export declare function buildSlackApprovalMessage(args: {
+    approvalId: string;
+    command: string;
+    approvalKind: "exec" | "plugin";
+    toolName?: string;
+    allowAlways?: boolean;
+}): SlackApprovalMessage | null;
+/**
+ * Compose the operator-facing approval question text rendered ABOVE the buttons.
+ * Kept short + control-char-scrubbed; the buttons carry the action, so the text
+ * only needs the command preview + a one-line ask. The 🦁 mark is the Brigade
+ * brand-stamp so the operator recognises this as a Brigade prompt. The command
+ * preview is wrapped in a Slack code span (single backticks) so it renders
+ * verbatim.
+ */
+export declare function buildSlackApprovalText(args: {
+    command: string;
+    approvalKind: "exec" | "plugin";
+    toolName?: string;
+    agentId?: string;
+}): string;
+/**
+ * Parse a `block_actions` interaction's button press into the pending-approval
+ * id + decision. Pulls the codec payload out of the first Brigade-owned approval
+ * action (via {@link extractBlockActionPayload}) and decodes it with the CENTRAL
+ * codec. Returns `null` when the press wasn't an approval button (a general
+ * button, or someone else's action) so the caller can fall through.
+ */
+export declare function parseSlackApprovalAction(actions: ReadonlyArray<SlackBlockAction> | undefined): {
+    approvalId: string;
+    decision: "allow-once" | "allow-always" | "deny";
+} | null;
+//# sourceMappingURL=approval-native.d.ts.map

package/dist/agents/channels/slack/approval-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-native.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/approval-native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAIN,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,MAAM,aAAa,CAAC;AAKrB,wFAAwF;AACxF,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,UAAU,EAAE,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,oBAAoB,GAAG,IAAI,CAe9B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,QAAQ,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAWT;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAAG,SAAS,GAClD;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,GAAG,cAAc,GAAG,MAAM,CAAA;CAAE,GAAG,IAAI,CAIjF"}

package/dist/agents/channels/slack/approval-native.js

@@ -0,0 +1,85 @@
+/**
+ * Slack Block Kit rendering for native approval prompts.
+ *
+ * When a channel-routed turn raises an exec/plugin approval AND the Slack
+ * adapter has opted into `approvalCapability.sendApprovalPrompt`, the central
+ * approval-router asks this channel to render the question as native Block Kit
+ * BUTTONS instead of the default "reply yes/no" text card. The button payloads
+ * are produced by the CENTRAL codec (`buildApprovalCallbackButtons`) so the
+ * press comes back as an `InboundMessage.callbackQuery` the central
+ * `tryConsumeChannelApprovalCallback` decodes + resolves — this file only maps
+ * the codec's `{ label, data }` specs onto Slack's `actions`-block shape (via
+ * `blocks.ts`) and assembles the prompt text + fallback.
+ *
+ * SAFETY: every button `value` here is the codec's output — versioned,
+ * base64url + printable-ASCII, already proven `<= 64` UTF-8 bytes by
+ * `encodeApprovalCallback` (and well under Slack's 255-char `value` cap). This
+ * module never mints its own payloads.
+ *
+ * Slack mirror of `telegram/approval-native.ts`.
+ */
+import { buildApprovalCallbackButtons, decodeApprovalCallback } from "../sdk.js";
+import { buildSlackApprovalBlocks, extractBlockActionPayload, } from "./blocks.js";
+/** C0/C1 control-character class (incl. NUL) — never a raw control byte in source. */
+const CONTROL_CHARS_RE = /[\x00-\x1f\x7f-\x9f]/g;
+/**
+ * Build the Block Kit approval message for an approval prompt from the central
+ * codec. Returns `null` when fewer than two byte-safe buttons could be minted (a
+ * pathologically long approval id) — the caller then falls back to the text
+ * prompt rather than ship a half-rendered prompt.
+ *
+ * `allowAlways: false` drops the "Allow always" button (approvals where
+ * persisting an allowlist entry doesn't apply).
+ */
+export function buildSlackApprovalMessage(args) {
+    const specs = buildApprovalCallbackButtons({
+        approvalId: args.approvalId,
+        ...(args.allowAlways === false ? { allowAlways: false } : {}),
+    });
+    if (specs.length < 2)
+        return null; // not enough buttons → caller uses text prompt
+    const actionBlocks = buildSlackApprovalBlocks(specs);
+    if (actionBlocks.length === 0)
+        return null;
+    const promptText = buildSlackApprovalText({
+        command: args.command,
+        approvalKind: args.approvalKind,
+        ...(args.toolName !== undefined ? { toolName: args.toolName } : {}),
+    });
+    const blocks = [{ type: "section", text: { type: "mrkdwn", text: promptText } }, ...actionBlocks];
+    return { text: promptText, blocks };
+}
+/**
+ * Compose the operator-facing approval question text rendered ABOVE the buttons.
+ * Kept short + control-char-scrubbed; the buttons carry the action, so the text
+ * only needs the command preview + a one-line ask. The 🦁 mark is the Brigade
+ * brand-stamp so the operator recognises this as a Brigade prompt. The command
+ * preview is wrapped in a Slack code span (single backticks) so it renders
+ * verbatim.
+ */
+export function buildSlackApprovalText(args) {
+    const flat = args.command
+        .replace(/[\r\n]+/g, " ")
+        // oxlint-disable-next-line no-control-regex
+        .replace(CONTROL_CHARS_RE, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+    const preview = flat.length <= 180 ? flat : `${flat.slice(0, 177)}…`;
+    const what = args.approvalKind === "plugin" ? "run a plugin action" : "run a shell command";
+    const lines = [`🦁 Brigade wants to ${what}:`, `\`${preview}\``, "", "Choose below — times out in 5 minutes."];
+    return lines.join("\n");
+}
+/**
+ * Parse a `block_actions` interaction's button press into the pending-approval
+ * id + decision. Pulls the codec payload out of the first Brigade-owned approval
+ * action (via {@link extractBlockActionPayload}) and decodes it with the CENTRAL
+ * codec. Returns `null` when the press wasn't an approval button (a general
+ * button, or someone else's action) so the caller can fall through.
+ */
+export function parseSlackApprovalAction(actions) {
+    const payload = extractBlockActionPayload(actions);
+    if (!payload)
+        return null;
+    return decodeApprovalCallback(payload);
+}
+//# sourceMappingURL=approval-native.js.map

package/dist/agents/channels/slack/approval-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-native.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/approval-native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EACN,wBAAwB,EACxB,yBAAyB,GAIzB,MAAM,aAAa,CAAC;AAErB,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAUjD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAMzC;IACA,MAAM,KAAK,GAAG,4BAA4B,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IAClF,MAAM,YAAY,GAAwB,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC1E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,sBAAsB,CAAC;QACzC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,MAAM,GAAiB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC;IAChH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACA,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO;SACvB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;QACzB,4CAA4C;SAC3C,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC5F,MAAM,KAAK,GAAG,CAAC,uBAAuB,IAAI,GAAG,EAAE,KAAK,OAAO,IAAI,EAAE,EAAE,EAAE,wCAAwC,CAAC,CAAC;IAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,OAAoD;IAEpD,MAAM,OAAO,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC"}

package/dist/agents/channels/slack/blocks.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Slack Block Kit button rendering + the action_id / value callback codec.
+ *
+ * Slack's analogue of `telegram/inline-keyboard.ts`. Two button lanes share one
+ * builder, exactly as Telegram's do:
+ *
+ *   - APPROVAL buttons — payloads come from the CENTRAL approval codec
+ *     (`buildApprovalCallbackButtons`), so a press resolves through the central
+ *     `tryConsumeChannelApprovalCallback`. Built in `approval-native.ts`; this
+ *     module only supplies the low-level `actions`-block + button shapes.
+ *   - GENERAL buttons — the agent attaches arbitrary buttons via the
+ *     `message_action` `buttons` kind; a press routes back through the inbound
+ *     pipeline as a normal turn. Every general payload is namespaced with
+ *     {@link GENERAL_CALLBACK_PREFIX} so the pipeline can tell it apart from an
+ *     approval press (which it consumes FIRST).
+ *
+ * WHERE THE PAYLOAD RIDES. A Slack button carries BOTH an `action_id` and a
+ * `value`. The opaque codec payload rides in `value` (Slack caps it at 255
+ * chars — far more generous than Telegram's 64-byte `callback_data`, and the
+ * central codec already guarantees ≤64 bytes). The `action_id` is a stable,
+ * non-colliding constant ({@link SLACK_APPROVAL_ACTION_ID} /
+ * {@link SLACK_GENERAL_ACTION_ID}) so the interactive handler can route the
+ * payload without parsing it. A button whose `value` exceeds the cap OR whose
+ * label is empty is DROPPED (rather than ship a truncated payload that decodes
+ * to the wrong action).
+ *
+ * Pure / deterministic — no I/O, no globals.
+ */
+/** Slack caps a button's `value` at 2000 chars; we hold to a tight 255 budget. */
+export declare const SLACK_ACTION_VALUE_MAX_CHARS = 255;
+/** Slack allows at most 5 elements per `actions` block; group buttons in fives. */
+export declare const SLACK_ACTIONS_BLOCK_MAX = 5;
+/** Stable `action_id` an APPROVAL button carries (routes to the approval path). */
+export declare const SLACK_APPROVAL_ACTION_ID = "brigade_approval";
+/** Stable `action_id` a GENERAL (agent-attached) button carries. */
+export declare const SLACK_GENERAL_ACTION_ID = "brigade_general";
+/** A Slack Block Kit button element (the subset Brigade emits). */
+export interface SlackButtonElement {
+    type: "button";
+    text: {
+        type: "plain_text";
+        text: string;
+        emoji: boolean;
+    };
+    /** Routing id — one of the stable `SLACK_*_ACTION_ID` constants. */
+    action_id: string;
+    /** Opaque codec payload (≤ 255 chars), read back on press. */
+    value: string;
+    /** Optional visual style (Slack: `primary` green / `danger` red). */
+    style?: "primary" | "danger";
+}
+/** A Slack `actions` block — a row of up to 5 interactive elements. */
+export interface SlackActionsBlock {
+    type: "actions";
+    /** Optional stable id so the block is addressable in the interaction payload. */
+    block_id?: string;
+    elements: SlackButtonElement[];
+}
+/** A Slack `section` block carrying mrkdwn text (the prompt body above buttons). */
+export interface SlackSectionBlock {
+    type: "section";
+    text: {
+        type: "mrkdwn";
+        text: string;
+    };
+}
+/** Any block this module emits (section + actions). */
+export type SlackBlock = SlackSectionBlock | SlackActionsBlock;
+/** One button spec before it's shaped into a Block Kit element. */
+export interface SlackButtonSpec {
+    /** Button label shown to the user. */
+    text: string;
+    /** Opaque codec payload delivered to the handler on press. */
+    value: string;
+    /** Optional Slack button style. */
+    style?: "primary" | "danger";
+}
+/**
+ * Clamp a button value to Slack's budget + strip control bytes. The central
+ * codec already guarantees a printable, short payload, so this is purely
+ * defensive for a value that didn't come from the codec — and unlike Telegram we
+ * never truncate a codec payload (the budget is far larger than the codec's
+ * output), we only DROP an over-budget value at the call site.
+ */
+export declare function sanitizeSlackActionValue(value: string): string;
+/**
+ * Build the `actions` blocks for an APPROVAL prompt from the central codec's
+ * `{ label, data }` specs (the payload rides in `value`). Returns `[]` when
+ * fewer than two byte-safe buttons could be shaped — the caller then falls back
+ * to a text prompt rather than ship a half-rendered prompt. `Deny` is styled
+ * `danger`; the first button `primary`.
+ */
+export declare function buildSlackApprovalBlocks(specs: ReadonlyArray<{
+    label: string;
+    data: string;
+    decision?: string;
+}>): SlackActionsBlock[];
+/**
+ * Build the `actions` blocks for a GENERAL inline keyboard from a grid of button
+ * specs. Each spec's `data` is prefixed with {@link GENERAL_CALLBACK_PREFIX} +
+ * sanitized; a button whose prefixed value exceeds the budget OR whose label is
+ * empty is DROPPED. Returns `null` when no usable button remains (the caller
+ * then sends a plain message instead). The grid is flattened + re-chunked into
+ * Slack's 5-per-block rows.
+ */
+export declare function buildSlackInlineKeyboard(grid: Array<Array<{
+    text: string;
+    data: string;
+}>>): SlackActionsBlock[] | null;
+/** A parsed `block_actions` button press (the subset Brigade reads). */
+export interface SlackBlockAction {
+    action_id?: string;
+    value?: string;
+    block_id?: string;
+}
+/**
+ * Pull the opaque codec payload out of a `block_actions` interaction's first
+ * Brigade-owned button action. Returns the `value` string the button declared
+ * (an approval-codec payload OR a general-prefixed token) so the adapter can
+ * stamp it onto `InboundMessage.callbackQuery.data` for the central pipeline to
+ * decode — exactly as Telegram surfaces `callback_query.data`. Returns null when
+ * no action carried one of our `action_id`s.
+ */
+export declare function extractBlockActionPayload(actions: ReadonlyArray<SlackBlockAction> | undefined): string | null;
+//# sourceMappingURL=blocks.d.ts.map

package/dist/agents/channels/slack/blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/blocks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,kFAAkF;AAClF,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD,mFAAmF;AACnF,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,qBAAqB,CAAC;AAE3D,oEAAoE;AACpE,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AAEzD,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3D,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;CAC7B;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACvC;AAED,uDAAuD;AACvD,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AAE/D,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC/B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;IACd,mCAAmC;IACnC,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI9D;AAgCD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,aAAa,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACtE,iBAAiB,EAAE,CAUrB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAcvH;AAED,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQ7G"}

package/dist/agents/channels/slack/blocks.js

@@ -0,0 +1,145 @@
+/**
+ * Slack Block Kit button rendering + the action_id / value callback codec.
+ *
+ * Slack's analogue of `telegram/inline-keyboard.ts`. Two button lanes share one
+ * builder, exactly as Telegram's do:
+ *
+ *   - APPROVAL buttons — payloads come from the CENTRAL approval codec
+ *     (`buildApprovalCallbackButtons`), so a press resolves through the central
+ *     `tryConsumeChannelApprovalCallback`. Built in `approval-native.ts`; this
+ *     module only supplies the low-level `actions`-block + button shapes.
+ *   - GENERAL buttons — the agent attaches arbitrary buttons via the
+ *     `message_action` `buttons` kind; a press routes back through the inbound
+ *     pipeline as a normal turn. Every general payload is namespaced with
+ *     {@link GENERAL_CALLBACK_PREFIX} so the pipeline can tell it apart from an
+ *     approval press (which it consumes FIRST).
+ *
+ * WHERE THE PAYLOAD RIDES. A Slack button carries BOTH an `action_id` and a
+ * `value`. The opaque codec payload rides in `value` (Slack caps it at 255
+ * chars — far more generous than Telegram's 64-byte `callback_data`, and the
+ * central codec already guarantees ≤64 bytes). The `action_id` is a stable,
+ * non-colliding constant ({@link SLACK_APPROVAL_ACTION_ID} /
+ * {@link SLACK_GENERAL_ACTION_ID}) so the interactive handler can route the
+ * payload without parsing it. A button whose `value` exceeds the cap OR whose
+ * label is empty is DROPPED (rather than ship a truncated payload that decodes
+ * to the wrong action).
+ *
+ * Pure / deterministic — no I/O, no globals.
+ */
+import { GENERAL_CALLBACK_PREFIX } from "../general-callback.js";
+/** Slack caps a button's `value` at 2000 chars; we hold to a tight 255 budget. */
+export const SLACK_ACTION_VALUE_MAX_CHARS = 255;
+/** Slack allows at most 5 elements per `actions` block; group buttons in fives. */
+export const SLACK_ACTIONS_BLOCK_MAX = 5;
+/** Stable `action_id` an APPROVAL button carries (routes to the approval path). */
+export const SLACK_APPROVAL_ACTION_ID = "brigade_approval";
+/** Stable `action_id` a GENERAL (agent-attached) button carries. */
+export const SLACK_GENERAL_ACTION_ID = "brigade_general";
+/**
+ * Clamp a button value to Slack's budget + strip control bytes. The central
+ * codec already guarantees a printable, short payload, so this is purely
+ * defensive for a value that didn't come from the codec — and unlike Telegram we
+ * never truncate a codec payload (the budget is far larger than the codec's
+ * output), we only DROP an over-budget value at the call site.
+ */
+export function sanitizeSlackActionValue(value) {
+    // Drop C0/C1 control chars (incl. NUL) — a button value must be printable.
+    // oxlint-disable-next-line no-control-regex
+    return value.replace(/[\x00-\x1f\x7f-\x9f]/g, "");
+}
+/** Shape one button spec into a Block Kit element, or null when it can't fit. */
+function toButtonElement(spec, actionId) {
+    const label = (spec?.text ?? "").trim();
+    const value = sanitizeSlackActionValue(spec?.value ?? "");
+    if (!label || !value)
+        return null;
+    // Reject (don't truncate) a value that won't fit — a truncated payload would
+    // decode to the wrong action on press.
+    if (value.length > SLACK_ACTION_VALUE_MAX_CHARS)
+        return null;
+    return {
+        type: "button",
+        text: { type: "plain_text", text: label.slice(0, 75), emoji: true },
+        action_id: actionId,
+        value,
+        ...(spec.style ? { style: spec.style } : {}),
+    };
+}
+/** Group a flat element list into `actions` blocks of at most 5 (Slack's cap). */
+function chunkIntoActionBlocks(elements, blockIdPrefix) {
+    const blocks = [];
+    for (let i = 0; i < elements.length; i += SLACK_ACTIONS_BLOCK_MAX) {
+        blocks.push({
+            type: "actions",
+            block_id: `${blockIdPrefix}_${i / SLACK_ACTIONS_BLOCK_MAX}`,
+            elements: elements.slice(i, i + SLACK_ACTIONS_BLOCK_MAX),
+        });
+    }
+    return blocks;
+}
+/**
+ * Build the `actions` blocks for an APPROVAL prompt from the central codec's
+ * `{ label, data }` specs (the payload rides in `value`). Returns `[]` when
+ * fewer than two byte-safe buttons could be shaped — the caller then falls back
+ * to a text prompt rather than ship a half-rendered prompt. `Deny` is styled
+ * `danger`; the first button `primary`.
+ */
+export function buildSlackApprovalBlocks(specs) {
+    const elements = [];
+    for (const s of specs) {
+        const style = s.decision === "deny" ? "danger" : s.decision === "allow-once" ? "primary" : undefined;
+        const el = toButtonElement({ text: s.label, value: s.data, ...(style ? { style } : {}) }, SLACK_APPROVAL_ACTION_ID);
+        if (el)
+            elements.push(el);
+    }
+    if (elements.length < 2)
+        return []; // not enough buttons → caller uses text prompt
+    return chunkIntoActionBlocks(elements, "brigade_approval");
+}
+/**
+ * Build the `actions` blocks for a GENERAL inline keyboard from a grid of button
+ * specs. Each spec's `data` is prefixed with {@link GENERAL_CALLBACK_PREFIX} +
+ * sanitized; a button whose prefixed value exceeds the budget OR whose label is
+ * empty is DROPPED. Returns `null` when no usable button remains (the caller
+ * then sends a plain message instead). The grid is flattened + re-chunked into
+ * Slack's 5-per-block rows.
+ */
+export function buildSlackInlineKeyboard(grid) {
+    const elements = [];
+    for (const row of grid) {
+        for (const spec of row) {
+            const label = (spec?.text ?? "").trim();
+            const token = spec?.data ?? "";
+            if (!label || !token)
+                continue;
+            const prefixed = `${GENERAL_CALLBACK_PREFIX}${token}`;
+            const el = toButtonElement({ text: label, value: prefixed }, SLACK_GENERAL_ACTION_ID);
+            if (el)
+                elements.push(el);
+        }
+    }
+    if (elements.length === 0)
+        return null;
+    return chunkIntoActionBlocks(elements, "brigade_general");
+}
+/**
+ * Pull the opaque codec payload out of a `block_actions` interaction's first
+ * Brigade-owned button action. Returns the `value` string the button declared
+ * (an approval-codec payload OR a general-prefixed token) so the adapter can
+ * stamp it onto `InboundMessage.callbackQuery.data` for the central pipeline to
+ * decode — exactly as Telegram surfaces `callback_query.data`. Returns null when
+ * no action carried one of our `action_id`s.
+ */
+export function extractBlockActionPayload(actions) {
+    if (!Array.isArray(actions))
+        return null;
+    for (const a of actions) {
+        if (a?.action_id !== SLACK_APPROVAL_ACTION_ID && a?.action_id !== SLACK_GENERAL_ACTION_ID)
+            continue;
+        const value = typeof a.value === "string" ? a.value : "";
+        if (value)
+            return value;
+    }
+    return null;
+}
+//# sourceMappingURL=blocks.js.map

package/dist/agents/channels/slack/blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/blocks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,kFAAkF;AAClF,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,mFAAmF;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAE3D,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAyCzD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACrD,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,IAAqB,EAAE,QAAgB;IAC/D,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAClC,6EAA6E;IAC7E,uCAAuC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,4BAA4B;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;QACnE,SAAS,EAAE,QAAQ;QACnB,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,qBAAqB,CAAC,QAA8B,EAAE,aAAqB;IACnF,MAAM,MAAM,GAAwB,EAAE,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,uBAAuB,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,GAAG,aAAa,IAAI,CAAC,GAAG,uBAAuB,EAAE;YAC3D,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,uBAAuB,CAAC;SACxD,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACvC,KAAwE;IAExE,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,KAAK,GACV,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;QACpH,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,+CAA+C;IACnF,OAAO,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAkD;IAC1F,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,SAAS;YAC/B,MAAM,QAAQ,GAAG,GAAG,uBAAuB,GAAG,KAAK,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACtF,IAAI,EAAE;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,qBAAqB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;AAC3D,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAoD;IAC7F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,SAAS,KAAK,wBAAwB,IAAI,CAAC,EAAE,SAAS,KAAK,uBAAuB;YAAE,SAAS;QACpG,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/agents/channels/slack/command-menu.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Slack slash-command helpers — normalize an inbound `/command` name + map
+ * Brigade's central channel commands to a documentable list.
+ *
+ * Brigade owns the command set centrally (`buildBundledCommands` → `/help`,
+ * `/status`, `/allowlist`, `/agent`, `/agents`, `/whoami`, `/org`, plus any
+ * module-registered channel commands). Telegram mirrors that set into the bot's
+ * `setMyCommands` menu on connect. SLACK IS DIFFERENT: slash commands are
+ * registered MANUALLY in the Slack app config UI (each `/command` points at the
+ * app's request URL / Socket Mode), so there is NO programmatic "set my
+ * commands" call. This module is therefore lighter than Telegram's — it provides:
+ *
+ *   1. {@link normalizeSlackCommandName} — canonicalise an inbound
+ *      `slash_commands` event's `command` (e.g. `/Help` → `help`) so the
+ *      adapter can match it against the central command map.
+ *   2. {@link buildSlackCommandManifest} — map the central commands to a plain
+ *      `{ command, description }[]` the operator copies into the Slack app's
+ *      slash-command config (surfaced in docs / `brigade channels status`).
+ *
+ * Pure / deterministic — no I/O. Output command names are printable ASCII
+ * (`[a-z0-9_-]`), so no NUL / control byte can appear.
+ */
+import type { ChannelCommand } from "../sdk.js";
+/** A Slack slash-command manifest entry (for the app-config UI / docs). */
+export interface SlackSlashCommand {
+    /** Command WITHOUT the leading slash, e.g. `status`. */
+    command: string;
+    /** Short description shown in the Slack command hint. */
+    description: string;
+}
+/**
+ * Normalize a command word to Slack's `[a-z0-9_-]{1,32}` shape, or null if
+ * unusable. Strips a leading `/`, lowercases, and drops disallowed chars.
+ */
+export declare function normalizeSlackCommandName(raw: string): string | null;
+/**
+ * Build the Slack slash-command manifest from Brigade's central channel
+ * commands. De-dupes by normalized name (first wins), drops unusable names, and
+ * caps at 100. Returns `[]` when nothing maps. Unlike Telegram this is NOT
+ * pushed to Slack on connect — it's the list the operator registers by hand in
+ * the Slack app config (and what docs / status surface).
+ */
+export declare function buildSlackCommandManifest(commands: ReadonlyArray<ChannelCommand>): SlackSlashCommand[];
+//# sourceMappingURL=command-menu.d.ts.map

package/dist/agents/channels/slack/command-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-menu.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/command-menu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IACjC,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;CACpB;AASD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKpE;AAQD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,cAAc,CAAC,GAAG,iBAAiB,EAAE,CAWtG"}

package/dist/agents/channels/slack/command-menu.js

@@ -0,0 +1,66 @@
+/**
+ * Slack slash-command helpers — normalize an inbound `/command` name + map
+ * Brigade's central channel commands to a documentable list.
+ *
+ * Brigade owns the command set centrally (`buildBundledCommands` → `/help`,
+ * `/status`, `/allowlist`, `/agent`, `/agents`, `/whoami`, `/org`, plus any
+ * module-registered channel commands). Telegram mirrors that set into the bot's
+ * `setMyCommands` menu on connect. SLACK IS DIFFERENT: slash commands are
+ * registered MANUALLY in the Slack app config UI (each `/command` points at the
+ * app's request URL / Socket Mode), so there is NO programmatic "set my
+ * commands" call. This module is therefore lighter than Telegram's — it provides:
+ *
+ *   1. {@link normalizeSlackCommandName} — canonicalise an inbound
+ *      `slash_commands` event's `command` (e.g. `/Help` → `help`) so the
+ *      adapter can match it against the central command map.
+ *   2. {@link buildSlackCommandManifest} — map the central commands to a plain
+ *      `{ command, description }[]` the operator copies into the Slack app's
+ *      slash-command config (surfaced in docs / `brigade channels status`).
+ *
+ * Pure / deterministic — no I/O. Output command names are printable ASCII
+ * (`[a-z0-9_-]`), so no NUL / control byte can appear.
+ */
+/** Slack slash-command limits (the app-config UI enforces these). */
+const MAX_COMMANDS = 100;
+const MAX_NAME_LEN = 32;
+const MAX_DESC_LEN = 2000;
+/** Slack allows `[a-z0-9_-]` in a slash command name (lowercased). */
+const COMMAND_NAME_RE = /^[a-z0-9_-]{1,32}$/;
+/**
+ * Normalize a command word to Slack's `[a-z0-9_-]{1,32}` shape, or null if
+ * unusable. Strips a leading `/`, lowercases, and drops disallowed chars.
+ */
+export function normalizeSlackCommandName(raw) {
+    const stripped = raw.trim().replace(/^\/+/, "").toLowerCase();
+    const cleaned = stripped.replace(/[^a-z0-9_-]/g, "").slice(0, MAX_NAME_LEN);
+    if (!cleaned || !COMMAND_NAME_RE.test(cleaned))
+        return null;
+    return cleaned;
+}
+/** Clamp + flatten a description to a single printable line within Slack's cap. */
+function normalizeDescription(desc, fallback) {
+    const raw = (desc ?? "").replace(/\s+/g, " ").trim() || fallback;
+    return raw.length > MAX_DESC_LEN ? `${raw.slice(0, MAX_DESC_LEN - 1)}…` : raw;
+}
+/**
+ * Build the Slack slash-command manifest from Brigade's central channel
+ * commands. De-dupes by normalized name (first wins), drops unusable names, and
+ * caps at 100. Returns `[]` when nothing maps. Unlike Telegram this is NOT
+ * pushed to Slack on connect — it's the list the operator registers by hand in
+ * the Slack app config (and what docs / status surface).
+ */
+export function buildSlackCommandManifest(commands) {
+    const out = [];
+    const seen = new Set();
+    for (const cmd of commands) {
+        if (out.length >= MAX_COMMANDS)
+            break;
+        const name = normalizeSlackCommandName(cmd.name);
+        if (!name || seen.has(name))
+            continue;
+        seen.add(name);
+        out.push({ command: name, description: normalizeDescription(cmd.description, name) });
+    }
+    return out;
+}
+//# sourceMappingURL=command-menu.js.map

package/dist/agents/channels/slack/command-menu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-menu.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/command-menu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAYH,qEAAqE;AACrE,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,sEAAsE;AACtE,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW;IACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,IAAwB,EAAE,QAAgB;IACvE,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;IACjE,OAAO,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAuC;IAChF,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM;QACtC,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}