@spinabot/brigade 1.5.0 → 1.6.1

package/dist/agents/channels/slack/plugin.js

@@ -0,0 +1,318 @@
+/**
+ * Slack `ChannelPlugin` — the multi-WORKSPACE contract surface.
+ *
+ * Mirrors `telegram/plugin.ts`: wraps `createSlackAdapter()` (the per-connection
+ * implementation) with the lifecycle adapters the `ChannelPluginManager`
+ * consumes, so an operator can run MORE THAN ONE Slack workspace at once via:
+ *
+ *   channels.slack = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "acme", botToken: "xoxb-AAA", appToken: "xapp-AAA" },
+ *       { id: "labs", botToken: "xoxb-BBB", appToken: "xapp-BBB" },
+ *     ],
+ *   }
+ *
+ *   - `config.listAccountIds` / `resolveAccount`  → multi-workspace discovery
+ *   - `gateway.startAccount` / `stopAccount`      → per-workspace app lifecycle
+ *   - `outbound.sendText` / `sendMedia`           → routes by `target.accountId`
+ *   - per-account approval-dispatcher registration → an exec-gate prompt raised
+ *     by a turn on (slack, labs) replies on (slack, labs), not the default
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` held in this
+ * closure — one app connection per account, partitioned token resolution per
+ * `channels.slack.accounts[].botToken`. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-workspace path carries the identical
+ * ACL + debounce + abort + approval-reply + approval-callback surface as the
+ * legacy single-adapter manager.
+ *
+ * The legacy single-account `createSlackAdapter` (started by the legacy
+ * `startChannels` manager) STEPS ASIDE when >1 account is configured — its
+ * `isConfigured` returns false for the default account in that case (mirrors
+ * Telegram), so the two paths never double-start an app.
+ */
+// Channel SDK barrel — the SINGLE import surface for the multi-account
+// `ChannelPlugin` contract + every sub-adapter type + the shared inbound
+// pipeline + the approval router + the gateway boot args. A multi-account
+// channel authors entirely from here.
+import { buildBundledCommands, createInboundPipelineContext, createSubsystemLogger, registerChannelApprovalDispatcher, removeChannelApprovalDispatcher, runChannelInboundPipeline, SLACK_CHANNEL_META, } from "../sdk.js";
+import { listSlackAccountIds, resolveSlackAccount, resolveSlackBotToken, SLACK_CHANNEL_ID, SLACK_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+import { registerSlackAccountSink, removeSlackAccountSink } from "./account-registry.js";
+import { createSlackAdapter, SLACK_CAPABILITIES } from "./adapter.js";
+import { probeSlack } from "./probe.js";
+const log = createSubsystemLogger("channels/slack/plugin");
+// Single source of truth for the channel's user-facing metadata lives in the
+// import-light `bundled-channel-metas` module (re-exported via the SDK barrel),
+// so the registry / markdown gate can read it without loading this adapter.
+// `SLACK_CHANNEL_META.id` is the same canonical `"slack"` string as
+// `SLACK_CHANNEL_ID`.
+const SLACK_META = SLACK_CHANNEL_META;
+/** Build the per-account approval capability — the native Block Kit prompt + approver gate. */
+function buildApprovalCapability(adapter, accountId) {
+    return {
+        async sendApprovalPrompt(params) {
+            // Delegate to the adapter's own native prompt (Block Kit buttons). The
+            // adapter throws when the approval id can't be encoded, so the router
+            // falls back to its text prompt — mirror that here.
+            const cap = adapter.approvalCapability?.sendApprovalPrompt;
+            if (!cap)
+                throw new Error("slack adapter has no approval prompt");
+            await cap({ ...params, accountId });
+        },
+        authorizeApprover(p) {
+            const cap = adapter.approvalCapability?.authorizeApprover;
+            if (!cap)
+                return { authorized: true };
+            return cap(p);
+        },
+    };
+}
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export function createSlackPlugin(deps) {
+    const accountRuntimes = new Map();
+    const startAccount = async (ctx) => {
+        const accountId = ctx.accountId || SLACK_DEFAULT_ACCOUNT_ID;
+        // Re-entrant start (the plugin-manager's restart loop) — stop the prior
+        // adapter, then build fresh.
+        const existing = accountRuntimes.get(accountId);
+        if (existing) {
+            try {
+                await existing.adapter.stop();
+            }
+            catch {
+                /* best-effort */
+            }
+            try {
+                existing.abort.abort("restart");
+            }
+            catch {
+                /* best-effort */
+            }
+            removeChannelApprovalDispatcher(SLACK_CHANNEL_ID, accountId);
+            removeSlackAccountSink(accountId);
+            accountRuntimes.delete(accountId);
+        }
+        const cfg = deps.loadConfig();
+        const factory = deps.adapterFactory ?? defaultSlackAdapterFactory;
+        const adapter = factory({ accountId });
+        // Per-account abort derived from the gateway's parent abort.
+        const accountAbort = new AbortController();
+        const parent = ctx.signal;
+        if (parent) {
+            if (parent.aborted)
+                accountAbort.abort();
+            else
+                parent.addEventListener("abort", () => accountAbort.abort(), { once: true });
+        }
+        const pipelineRunTurn = (turn) => deps.runTurn(turn);
+        // Bundled channel commands so `/help` etc. work on the multi-account path.
+        const commandMap = new Map();
+        for (const c of buildBundledCommands(adapter)) {
+            commandMap.set(c.name.toLowerCase(), c);
+        }
+        const pipeline = createInboundPipelineContext({
+            adapter,
+            config: cfg,
+            agentId: deps.defaultAgentId,
+            runTurn: pipelineRunTurn,
+            commandMap,
+            parentAbort: accountAbort.signal,
+        });
+        const startCtx = {
+            signal: accountAbort.signal,
+            log: (msg, meta) => log.info(`[${accountId}] ${msg}`, meta),
+            onInbound: async (msg) => {
+                // Re-read the active config per inbound so policy edits land without
+                // restarting the app. Stamp the accountId so the shared pipeline keys
+                // ACL + approval-route per account.
+                pipeline.config = deps.loadConfig();
+                const stamped = msg.accountId ? msg : { ...msg, accountId };
+                await runChannelInboundPipeline(pipeline, stamped);
+            },
+        };
+        try {
+            await adapter.start(startCtx);
+            accountRuntimes.set(accountId, { adapter, pipeline, abort: accountAbort });
+            // Bridge this started adapter to its events-mode webhook route. The route
+            // (registered by the module at boot) resolves the sink through this
+            // registry at request time, so an event POSTed for THIS workspace's path
+            // reaches THIS adapter. Only adapters that carry `feedWebhookEvent` (the
+            // real Slack adapter does; a bare test fake may not) are bridged.
+            const sinkCapable = adapter;
+            if (typeof sinkCapable.feedWebhookEvent === "function") {
+                const feed = sinkCapable.feedWebhookEvent.bind(adapter);
+                registerSlackAccountSink(accountId, { feedWebhookEvent: feed });
+            }
+            // Per-account approval dispatcher — native Block Kit prompt + per-account
+            // routing. Without this an exec-gate prompt from a turn on (slack, labs)
+            // would fall through to the channel default.
+            registerChannelApprovalDispatcher(SLACK_CHANNEL_ID, accountId, {
+                sendText: (conversationId, text, opts) => adapter.sendText(conversationId, text, { ...(opts ?? {}), accountId }),
+                prettyName: "Slack",
+                approvalCapability: buildApprovalCapability(adapter, accountId),
+                getApprovalContext: () => ({ runtime: ctx.runtime, cfg: deps.loadConfig() }),
+            });
+            log.info("slack account started", { accountId });
+        }
+        catch (err) {
+            log.warn("slack account failed to start", {
+                accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+            throw err;
+        }
+    };
+    const stopAccount = async (ctx) => {
+        const runtime = accountRuntimes.get(ctx.accountId);
+        if (!runtime)
+            return;
+        accountRuntimes.delete(ctx.accountId);
+        // Drop the per-account dispatcher + webhook sink BEFORE adapter.stop() so a
+        // late in-flight bridge / event POST can't ask a torn-down app to act.
+        removeChannelApprovalDispatcher(SLACK_CHANNEL_ID, ctx.accountId);
+        removeSlackAccountSink(ctx.accountId);
+        try {
+            runtime.abort.abort("stop-requested");
+        }
+        catch {
+            /* best-effort */
+        }
+        // Clear pending debounce slots so a flush can't fire after stop.
+        for (const slot of runtime.pipeline.pendingDispatches.values())
+            clearTimeout(slot.timer);
+        runtime.pipeline.pendingDispatches.clear();
+        try {
+            await runtime.adapter.stop();
+        }
+        catch (err) {
+            log.warn("slack account stop threw", {
+                accountId: ctx.accountId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    };
+    const logoutAccount = async (ctx) => {
+        try {
+            await stopAccount(ctx);
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    };
+    return {
+        id: SLACK_CHANNEL_ID,
+        meta: SLACK_META,
+        capabilities: SLACK_CAPABILITIES,
+        startedAccountIds: () => [...accountRuntimes.keys()],
+        getAdapter: (accountId) => accountRuntimes.get(accountId)?.adapter,
+        probeAccount: async (accountId, cfg) => {
+            const token = resolveSlackBotToken(cfg, accountId);
+            const result = await probeSlack({ token });
+            // Surface the started adapter's liveness signal alongside the auth.test
+            // reachability check (observability only — never changes `ok`).
+            const live = accountRuntimes.get(accountId)?.adapter;
+            if (live && typeof live.lastEventAt === "function") {
+                return { ...result, lastEventAt: live.lastEventAt() };
+            }
+            return result;
+        },
+        config: {
+            listAccountIds: (cfg) => listSlackAccountIds(cfg),
+            resolveAccount: (cfg, accountId) => resolveSlackAccount(cfg, accountId ?? undefined),
+            defaultAccountId: () => SLACK_DEFAULT_ACCOUNT_ID,
+            isEnabled: (account) => account.enabled,
+        },
+        gateway: {
+            startAccount,
+            stopAccount,
+            logoutAccount,
+        },
+        outbound: {
+            sendText: async (params) => {
+                const accountId = params.target.accountId || SLACK_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime) {
+                    return { ok: false, error: `slack account "${accountId}" is not running` };
+                }
+                try {
+                    const sent = await runtime.adapter.sendText(params.target.to, params.text, {
+                        accountId,
+                        ...(params.target.threadId !== undefined ? { threadId: params.target.threadId } : {}),
+                    });
+                    return {
+                        ok: true,
+                        ...(sent && typeof sent === "object" && sent.messageId !== undefined
+                            ? { messageId: sent.messageId }
+                            : {}),
+                    };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+            sendMedia: async (params) => {
+                const accountId = params.target.accountId || SLACK_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.sendMedia) {
+                    return { ok: false, error: `slack account "${accountId}" cannot send media right now` };
+                }
+                try {
+                    await runtime.adapter.sendMedia(params.target.to, {
+                        kind: params.mediaType ?? "document",
+                        path: params.mediaUrl,
+                        ...(params.caption !== undefined ? { caption: params.caption } : {}),
+                    });
+                    return { ok: true };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+            sendReaction: async (params) => {
+                const accountId = params.target.accountId || SLACK_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.react) {
+                    return { ok: false, error: `slack account "${accountId}" cannot react right now` };
+                }
+                try {
+                    await runtime.adapter.react(params.target.to, params.messageId, params.emoji);
+                    return { ok: true };
+                }
+                catch (err) {
+                    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+                }
+            },
+        },
+        actions: {
+            handleAction: async (params) => {
+                const accountId = params.accountId || params.target.accountId || SLACK_DEFAULT_ACCOUNT_ID;
+                const runtime = accountRuntimes.get(accountId);
+                if (!runtime || !runtime.adapter.handleAction) {
+                    return { ok: false, error: `slack account "${accountId}" cannot perform message actions` };
+                }
+                return runtime.adapter.handleAction({
+                    conversationId: params.target.to,
+                    action: params.action,
+                    accountId,
+                    ...(params.signal ? { signal: params.signal } : {}),
+                });
+            },
+        },
+        secrets: {
+            secretTargetRegistryEntries: [
+                { path: "channels.slack.botToken", description: "Slack bot token (single-workspace)" },
+                { path: "channels.slack.appToken", description: "Slack app-level token (Socket Mode, single-workspace)" },
+                { path: "channels.slack.signingSecret", description: "Slack signing secret (Events API mode)" },
+                { path: "channels.slack.accounts.*.botToken", description: "Slack bot token (per workspace)" },
+                { path: "channels.slack.accounts.*.appToken", description: "Slack app-level token (per workspace)" },
+                { path: "channels.slack.accounts.*.signingSecret", description: "Slack signing secret (per workspace)" },
+            ],
+        },
+    };
+}
+/** Default adapter factory — threads the per-account scope. */
+function defaultSlackAdapterFactory(args) {
+    return createSlackAdapter({ accountId: args.accountId });
+}
+//# sourceMappingURL=plugin.js.map

package/dist/agents/channels/slack/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,sCAAsC;AACtC,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,qBAAqB,EACrB,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EAezB,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,GAExB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAqB,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,UAAU,EAAyB,MAAM,YAAY,CAAC;AAE/D,MAAM,GAAG,GAAG,qBAAqB,CAAC,uBAAuB,CAAC,CAAC;AAE3D,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,oEAAoE;AACpE,sBAAsB;AACtB,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAqCtC,+FAA+F;AAC/F,SAAS,uBAAuB,CAAC,OAAuB,EAAE,SAAiB;IAC1E,OAAO;QACN,KAAK,CAAC,kBAAkB,CAAC,MAAmC;YAC3D,uEAAuE;YACvE,sEAAsE;YACtE,oDAAoD;YACpD,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC3D,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAClE,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,iBAAiB,CAAC,CAAC;YAClB,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;YAC1D,IAAI,CAAC,GAAG;gBAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YACtC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACtD,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE1D,MAAM,YAAY,GAAG,KAAK,EAAE,GAAgD,EAAiB,EAAE;QAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,wBAAwB,CAAC;QAC5D,wEAAwE;QACxE,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACJ,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,IAAI,CAAC;gBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACR,iBAAiB;YAClB,CAAC;YACD,+BAA+B,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;YAC7D,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAClC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,0BAA0B,CAAC;QAClE,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAEvC,6DAA6D;QAC7D,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,YAAY,CAAC,KAAK,EAAE,CAAC;;gBACpC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,eAAe,GAAqB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvE,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,4BAA4B,CAAC;YAC7C,OAAO;YACP,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,IAAI,CAAC,cAAc;YAC5B,OAAO,EAAE,eAAe;YACxB,UAAU;YACV,WAAW,EAAE,YAAY,CAAC,MAAM;SAChC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAwB;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,EAAE,EAAE,IAAI,CAAC;YAC3D,SAAS,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBACxC,qEAAqE;gBACrE,sEAAsE;gBACtE,oCAAoC;gBACpC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAmB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,CAAC;gBAC5E,MAAM,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,CAAC;SACD,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3E,0EAA0E;YAC1E,oEAAoE;YACpE,yEAAyE;YACzE,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,WAAW,GAAG,OAAgC,CAAC;YACrD,IAAI,OAAO,WAAW,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxD,wBAAwB,CAAC,SAAS,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,0EAA0E;YAC1E,yEAAyE;YACzE,6CAA6C;YAC7C,iCAAiC,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC9D,QAAQ,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;gBACvE,UAAU,EAAE,OAAO;gBACnB,kBAAkB,EAAE,uBAAuB,CAAC,OAAO,EAAE,SAAS,CAAC;gBAC/D,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;aAC5E,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBACzC,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAgD,EAAiB,EAAE;QAC7F,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,4EAA4E;QAC5E,uEAAuE;QACvE,+BAA+B,CAAC,gBAAgB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACjE,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;QACD,iEAAiE;QACjE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBACpC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,GAA+C,EAAgC,EAAE;QAC7G,IAAI,CAAC;YACJ,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,CAAC;IACF,CAAC,CAAC;IAEF,OAAO;QACN,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,UAAU;QAChB,YAAY,EAAE,kBAAkB;QAChC,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC;QACpD,UAAU,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO;QAC1E,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,wEAAwE;YACxE,gEAAgE;YAChE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAA4C,CAAC;YAC1F,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC;QACD,MAAM,EAAE;YACP,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC;YACjD,cAAc,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS,IAAI,SAAS,CAAC;YACpF,gBAAgB,EAAE,GAAG,EAAE,CAAC,wBAAwB;YAChD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO;SACvC;QACD,OAAO,EAAE;YACR,YAAY;YACZ,WAAW;YACX,aAAa;SACb;QACD,QAAQ,EAAE;YACT,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC;gBACtE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,SAAS,kBAAkB,EAAE,CAAC;gBAC5E,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;wBAC1E,SAAS;wBACT,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrF,CAAC,CAAC;oBACH,OAAO;wBACN,EAAE,EAAE,IAAI;wBACR,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;4BACnE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;4BAC/B,CAAC,CAAC,EAAE,CAAC;qBACN,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC;gBACtE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,SAAS,+BAA+B,EAAE,CAAC;gBACzF,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;wBACjD,IAAI,EAAG,MAAM,CAAC,SAAmB,IAAI,UAAU;wBAC/C,IAAI,EAAE,MAAM,CAAC,QAAQ;wBACrB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;oBACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC;gBACtE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,SAAS,0BAA0B,EAAE,CAAC;gBACpF,CAAC;gBACD,IAAI,CAAC;oBACJ,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBACrB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/E,CAAC;YACF,CAAC;SACD;QACD,OAAO,EAAE;YACR,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC;gBAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,SAAS,kCAAkC,EAAE,CAAC;gBAC5F,CAAC;gBACD,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;oBACnC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;oBAChC,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS;oBACT,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnD,CAAC,CAAC;YACJ,CAAC;SACD;QACD,OAAO,EAAE;YACR,2BAA2B,EAAE;gBAC5B,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,oCAAoC,EAAE;gBACtF,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,uDAAuD,EAAE;gBACzG,EAAE,IAAI,EAAE,8BAA8B,EAAE,WAAW,EAAE,wCAAwC,EAAE;gBAC/F,EAAE,IAAI,EAAE,oCAAoC,EAAE,WAAW,EAAE,iCAAiC,EAAE;gBAC9F,EAAE,IAAI,EAAE,oCAAoC,EAAE,WAAW,EAAE,uCAAuC,EAAE;gBACpG,EAAE,IAAI,EAAE,yCAAyC,EAAE,WAAW,EAAE,sCAAsC,EAAE;aACxG;SACD;KACD,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,0BAA0B,CAAC,IAA2B;IAC9D,OAAO,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agents/channels/slack/probe.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Slack status / doctor probe — a lightweight `auth.test` reachability check.
+ *
+ * Slack is token-based and stateless on disk (Socket Mode keeps no local creds
+ * the status command can stat), so "is this channel actually working?" can only
+ * be answered by asking Slack. This probe does the cheapest possible call — a
+ * single `auth.test` over plain HTTPS (no `@slack/web-api`, no socket) — and
+ * reports the bot's identity + the workspace it's installed in so
+ * `brigade channels status` and `brigade doctor` can show real Slack health.
+ *
+ * It deliberately does NOT import `@slack/web-api`: a status check must stay
+ * fast + dependency-light, and `auth.test` is a trivial POST. The bot token is
+ * never logged; it rides in the `Authorization` header which is built locally
+ * and discarded.
+ *
+ * Returns a structured result the caller renders; never throws — a network
+ * failure / invalid token surfaces as `{ ok: false, error }` so the status
+ * command degrades gracefully instead of crashing. Slack mirror of
+ * `telegram/probe.ts`.
+ */
+/** Bot identity surfaced by the probe (from `auth.test`). */
+export interface SlackProbeBot {
+    /** Bot user id (`U…` / `W…`). */
+    id?: string;
+    /** Bot/user handle Slack returns. */
+    name?: string;
+}
+/** Workspace identity surfaced by the probe (from `auth.test`). */
+export interface SlackProbeTeam {
+    /** Workspace (team) id (`T…`). */
+    id?: string;
+    /** Workspace display name. */
+    name?: string;
+}
+/** Structured probe result. `ok` true ⇒ token valid + Slack reachable. */
+export interface SlackProbeResult {
+    ok: boolean;
+    /** HTTP status of the `auth.test` call, when one came back. */
+    status?: number;
+    /** Operator-facing error line when `ok` is false. */
+    error?: string;
+    /** Round-trip time in ms. */
+    elapsedMs: number;
+    /** Bot identity (populated on success). */
+    bot?: SlackProbeBot;
+    /** Workspace identity (populated on success). */
+    team?: SlackProbeTeam;
+    /**
+     * Epoch ms of the most recent inbound event seen by the STARTED adapter for
+     * this account, when one is running (liveness signal — `auth.test` proves the
+     * token but not that the events stream is flowing). `null` when no inbound has
+     * arrived yet; `undefined` when the probe couldn't consult a live adapter
+     * (e.g. a cold status check before the channel started). Observability only —
+     * a stale value never means "unhealthy" (a quiet channel is idle, not down).
+     */
+    lastEventAt?: number | null;
+}
+export interface SlackProbeArgs {
+    /** The resolved bot token (`xoxb-…`). NEVER logged. */
+    token: string;
+    /** Injectable fetch (defaults to global fetch) — lets tests stub the call. */
+    fetchImpl?: typeof fetch;
+    /** Probe timeout in ms (default 8s). */
+    timeoutMs?: number;
+}
+/**
+ * Run an `auth.test` probe. Resolves to a structured result describing whether
+ * the token is valid + Slack is reachable, plus the bot + workspace identity.
+ * Never rejects.
+ */
+export declare function probeSlack(args: SlackProbeArgs): Promise<SlackProbeResult>;
+//# sourceMappingURL=probe.d.ts.map

package/dist/agents/channels/slack/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC7B,iCAAiC;IACjC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC9B,kCAAkC;IAClC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,8BAA8B;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,iDAAiD;IACjD,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC9B,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiFhF"}

package/dist/agents/channels/slack/probe.js

@@ -0,0 +1,103 @@
+/**
+ * Slack status / doctor probe — a lightweight `auth.test` reachability check.
+ *
+ * Slack is token-based and stateless on disk (Socket Mode keeps no local creds
+ * the status command can stat), so "is this channel actually working?" can only
+ * be answered by asking Slack. This probe does the cheapest possible call — a
+ * single `auth.test` over plain HTTPS (no `@slack/web-api`, no socket) — and
+ * reports the bot's identity + the workspace it's installed in so
+ * `brigade channels status` and `brigade doctor` can show real Slack health.
+ *
+ * It deliberately does NOT import `@slack/web-api`: a status check must stay
+ * fast + dependency-light, and `auth.test` is a trivial POST. The bot token is
+ * never logged; it rides in the `Authorization` header which is built locally
+ * and discarded.
+ *
+ * Returns a structured result the caller renders; never throws — a network
+ * failure / invalid token surfaces as `{ ok: false, error }` so the status
+ * command degrades gracefully instead of crashing. Slack mirror of
+ * `telegram/probe.ts`.
+ */
+const SLACK_AUTH_TEST_URL = "https://slack.com/api/auth.test";
+const DEFAULT_PROBE_TIMEOUT_MS = 8_000;
+/**
+ * Run an `auth.test` probe. Resolves to a structured result describing whether
+ * the token is valid + Slack is reachable, plus the bot + workspace identity.
+ * Never rejects.
+ */
+export async function probeSlack(args) {
+    const started = Date.now();
+    const token = (args.token ?? "").trim();
+    if (!token) {
+        return { ok: false, error: "no Slack bot token configured", elapsedMs: 0 };
+    }
+    const doFetch = args.fetchImpl ?? fetch;
+    const timeoutMs = args.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    if (typeof timer.unref === "function")
+        timer.unref();
+    try {
+        const res = await doFetch(SLACK_AUTH_TEST_URL, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${token}`,
+                "content-type": "application/x-www-form-urlencoded",
+            },
+            signal: controller.signal,
+        });
+        const elapsedMs = Date.now() - started;
+        let body = null;
+        try {
+            body = (await res.json());
+        }
+        catch {
+            body = null;
+        }
+        // Slack always returns HTTP 200 for API calls; success/failure rides on the
+        // JSON `ok` flag + an `error` code string (e.g. `invalid_auth`).
+        if (!res.ok || !body?.ok) {
+            const code = body?.error ?? "";
+            return {
+                ok: false,
+                status: res.status,
+                error: code === "invalid_auth" || code === "not_authed" || code === "account_inactive"
+                    ? "Slack rejected the bot token — reinstall the app and paste a fresh `xoxb-` token."
+                    : code
+                        ? `Slack auth.test failed (${code}).`
+                        : `Slack auth.test failed (HTTP ${res.status}).`,
+                elapsedMs,
+            };
+        }
+        return {
+            ok: true,
+            status: res.status,
+            elapsedMs,
+            bot: {
+                ...(typeof body.user_id === "string" ? { id: body.user_id } : {}),
+                ...(typeof body.user === "string" ? { name: body.user } : {}),
+            },
+            team: {
+                ...(typeof body.team_id === "string" ? { id: body.team_id } : {}),
+                ...(typeof body.team === "string" ? { name: body.team } : {}),
+            },
+        };
+    }
+    catch (err) {
+        const elapsedMs = Date.now() - started;
+        const aborted = controller.signal.aborted;
+        return {
+            ok: false,
+            error: aborted
+                ? `Slack auth.test timed out after ${timeoutMs}ms`
+                : err instanceof Error
+                    ? err.message
+                    : String(err),
+            elapsedMs,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=probe.js.map

package/dist/agents/channels/slack/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAmDvC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAoB;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,wBAAwB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,OAAQ,KAAgC,CAAC,KAAK,KAAK,UAAU;QAAG,KAA+B,CAAC,KAAK,EAAE,CAAC;IAC5G,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,mBAAmB,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,cAAc,EAAE,mCAAmC;aACnD;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QAWvC,IAAI,IAAI,GAAwB,IAAI,CAAC;QACrC,IAAI,CAAC;YACJ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,IAAI,CAAC;QACb,CAAC;QACD,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EACJ,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,kBAAkB;oBAC9E,CAAC,CAAC,mFAAmF;oBACrF,CAAC,CAAC,IAAI;wBACL,CAAC,CAAC,2BAA2B,IAAI,IAAI;wBACrC,CAAC,CAAC,gCAAgC,GAAG,CAAC,MAAM,IAAI;gBACnD,SAAS;aACT,CAAC;QACH,CAAC;QACD,OAAO;YACN,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,GAAG,EAAE;gBACJ,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;YACD,IAAI,EAAE;gBACL,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1C,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,OAAO;gBACb,CAAC,CAAC,mCAAmC,SAAS,IAAI;gBAClD,CAAC,CAAC,GAAG,YAAY,KAAK;oBACrB,CAAC,CAAC,GAAG,CAAC,OAAO;oBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACf,SAAS;SACT,CAAC;IACH,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACF,CAAC"}

package/dist/agents/channels/slack/proxy-agent.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Proxy agent builder for the Slack SDKs.
+ *
+ * Both `@slack/web-api` (`WebClient`) and `@slack/socket-mode`
+ * (`SocketModeClient`) accept an `agent` option that is a standard Node
+ * `http(s).Agent` (they drive HTTP via `node-fetch` + open the Socket Mode
+ * websocket via `ws`, both of which honour an injected agent). To route Slack
+ * through a proxy we build the matching agent from the proxy URL scheme:
+ *
+ *   - `http://` / `https://`  → an HTTP CONNECT proxy via `https-proxy-agent`.
+ *   - `socks` / `socks4(a)` / `socks5(h)` → a SOCKS proxy via `socks-proxy-agent`.
+ *
+ * Both packages are lazy-imported (only paid for when a proxy is configured) and
+ * produce an `http.Agent` the Slack SDKs use as-is — the analogue of Telegram's
+ * undici dispatcher, reshaped to the agent seam the Slack SDKs expose. A
+ * malformed URL / missing module throws; the caller logs + connects directly.
+ */
+/** True when a proxy URL scheme names a SOCKS proxy (needs the SOCKS agent). */
+export declare function isSocksProxyScheme(scheme: string | undefined): boolean;
+/**
+ * Build a Node `http.Agent` that tunnels through `proxyUrl`. SOCKS schemes use
+ * `socks-proxy-agent`; everything else (http/https) uses `https-proxy-agent`.
+ * The returned agent is handed to `new WebClient(token, { agent })` and to the
+ * `SocketModeClient({ appToken, clientOptions: { agent } })` construction.
+ *
+ * @throws if the proxy URL is malformed or a module can't be loaded — the caller
+ *         logs + falls back to a direct connection.
+ */
+export declare function buildSlackProxyAgent(proxyUrl: string): Promise<unknown>;
+//# sourceMappingURL=proxy-agent.d.ts.map

package/dist/agents/channels/slack/proxy-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-agent.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/slack/proxy-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,gFAAgF;AAChF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAItE;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS7E"}

package/dist/agents/channels/slack/proxy-agent.js

@@ -0,0 +1,44 @@
+/**
+ * Proxy agent builder for the Slack SDKs.
+ *
+ * Both `@slack/web-api` (`WebClient`) and `@slack/socket-mode`
+ * (`SocketModeClient`) accept an `agent` option that is a standard Node
+ * `http(s).Agent` (they drive HTTP via `node-fetch` + open the Socket Mode
+ * websocket via `ws`, both of which honour an injected agent). To route Slack
+ * through a proxy we build the matching agent from the proxy URL scheme:
+ *
+ *   - `http://` / `https://`  → an HTTP CONNECT proxy via `https-proxy-agent`.
+ *   - `socks` / `socks4(a)` / `socks5(h)` → a SOCKS proxy via `socks-proxy-agent`.
+ *
+ * Both packages are lazy-imported (only paid for when a proxy is configured) and
+ * produce an `http.Agent` the Slack SDKs use as-is — the analogue of Telegram's
+ * undici dispatcher, reshaped to the agent seam the Slack SDKs expose. A
+ * malformed URL / missing module throws; the caller logs + connects directly.
+ */
+/** True when a proxy URL scheme names a SOCKS proxy (needs the SOCKS agent). */
+export function isSocksProxyScheme(scheme) {
+    if (!scheme)
+        return false;
+    const s = scheme.toLowerCase();
+    return s === "socks" || s === "socks4" || s === "socks4a" || s === "socks5" || s === "socks5h";
+}
+/**
+ * Build a Node `http.Agent` that tunnels through `proxyUrl`. SOCKS schemes use
+ * `socks-proxy-agent`; everything else (http/https) uses `https-proxy-agent`.
+ * The returned agent is handed to `new WebClient(token, { agent })` and to the
+ * `SocketModeClient({ appToken, clientOptions: { agent } })` construction.
+ *
+ * @throws if the proxy URL is malformed or a module can't be loaded — the caller
+ *         logs + falls back to a direct connection.
+ */
+export async function buildSlackProxyAgent(proxyUrl) {
+    const url = new URL(proxyUrl); // throws on a malformed URL → caller catches
+    const scheme = url.protocol.replace(/:$/, "").toLowerCase();
+    if (isSocksProxyScheme(scheme)) {
+        const { SocksProxyAgent } = await import("socks-proxy-agent");
+        return new SocksProxyAgent(proxyUrl);
+    }
+    const { HttpsProxyAgent } = await import("https-proxy-agent");
+    return new HttpsProxyAgent(proxyUrl);
+}
+//# sourceMappingURL=proxy-agent.js.map

package/dist/agents/channels/slack/proxy-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-agent.js","sourceRoot":"","sources":["../../../../src/agents/channels/slack/proxy-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,CAAC;AAChG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,6CAA6C;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5D,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC9D,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9D,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC"}

package/dist/agents/channels/slack/reasoning-lane.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Slack reasoning-lane split (OPTIONAL, default OFF).
+ *
+ * Brigade strips `<think>…</think>` reasoning from every channel reply via the
+ * shared `sanitizeReplyForChannel` — recipients see only the final answer. For
+ * Slack an operator can OPT IN (config `channels.slack.surfaceReasoning: true`)
+ * to ALSO receive the reasoning trace as a separate, prefixed message.
+ *
+ * This module is the pure splitter: given the raw agent reply, it returns
+ * `{ reasoningText?, answerText }`. When surfacing is OFF the pipeline never
+ * calls this and behavior is byte-identical to today (strip + send answer). When
+ * ON, the pipeline sends `reasoningText` first (a `🧠 Reasoning:` block) then the
+ * normal sanitized answer.
+ *
+ * The answer half is computed with the SAME sanitizer the default path uses, so
+ * enabling reasoning never changes what the answer message contains — it only
+ * ADDS the reasoning message in front.
+ *
+ * Pure / deterministic / dependency-light (re-uses `sanitizeReplyForChannel`).
+ * Slack mirror of `telegram/reasoning-lane.ts`.
+ */
+/** Prefix on the reasoning message so the recipient knows it's the trace. */
+export declare const REASONING_PREFIX = "\uD83E\uDDE0 Reasoning:\n";
+export interface SlackReasoningSplit {
+    /** The extracted reasoning trace (already prefixed), or undefined when none. */
+    reasoningText?: string;
+    /** The user-facing answer (sanitized exactly as the default path produces). */
+    answerText: string;
+}
+/**
+ * Extract the concatenated text INSIDE `<think>…</think>` blocks. Handles
+ * multiple blocks and an unclosed trailing block (model truncated mid-thought).
+ * Returns "" when there's no reasoning content.
+ */
+export declare function extractReasoning(text: string): string;
+/**
+ * Split a raw agent reply into an optional reasoning message + the sanitized
+ * answer. The answer is identical to `sanitizeReplyForChannel(raw)`; the
+ * reasoning is only populated when a `<think>` block carried content.
+ */
+export declare function splitSlackReasoning(raw: string): SlackReasoningSplit;
+//# sourceMappingURL=reasoning-lane.d.ts.map