agent-messenger 2.10.2 → 2.11.0

package/src/platforms/slackbot/credential-manager.test.ts

@@ -1,6 +1,6 @@
-import { afterEach, beforeEach, describe, expect, it } from 'bun:test'
+import { afterEach, beforeEach, describe, expect, it, mock } from 'bun:test'
 import { existsSync, rmSync } from 'node:fs'
-import { mkdir, stat } from 'node:fs/promises'
+import { mkdir, stat, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 
@@ -262,4 +262,64 @@ describe('SlackBotCredentialManager', () => {
       expect(stats.mode & 0o777).toBe(0o600)
     })
   })
+
+  describe('schema validation', () => {
+    let stderrSpy: ReturnType<typeof mock>
+    let originalWrite: typeof process.stderr.write
+
+    beforeEach(() => {
+      originalWrite = process.stderr.write
+      stderrSpy = mock(() => true)
+      process.stderr.write = stderrSpy as unknown as typeof process.stderr.write
+    })
+
+    afterEach(() => {
+      process.stderr.write = originalWrite
+    })
+
+    it('returns empty config on invalid JSON', async () => {
+      const credPath = join(tempDir, 'slackbot-credentials.json')
+      await writeFile(credPath, '{not valid json')
+
+      const config = await manager.load()
+
+      expect(config.current).toBeNull()
+      expect(config.workspaces).toEqual({})
+    })
+
+    it('preserves entries when stored token does not match xoxb- prefix and warns to stderr', async () => {
+      const credPath = join(tempDir, 'slackbot-credentials.json')
+      await writeFile(
+        credPath,
+        JSON.stringify({
+          current: { workspace_id: 'T123', bot_id: 'deploy' },
+          workspaces: {
+            T123: {
+              workspace_id: 'T123',
+              workspace_name: 'Acme',
+              bots: {
+                deploy: { bot_id: 'deploy', bot_name: 'Deploy Bot', token: 'legacy-token-without-prefix' },
+              },
+            },
+          },
+        }),
+      )
+
+      const config = await manager.load()
+
+      expect(config.current).toEqual({ workspace_id: 'T123', bot_id: 'deploy' })
+      expect(config.workspaces['T123']?.bots['deploy']?.token).toBe('legacy-token-without-prefix')
+      expect(stderrSpy).toHaveBeenCalled()
+    })
+
+    it('returns empty config when JSON is valid but not an object', async () => {
+      const credPath = join(tempDir, 'slackbot-credentials.json')
+      await writeFile(credPath, JSON.stringify(['not', 'an', 'object']))
+
+      const config = await manager.load()
+
+      expect(config.current).toBeNull()
+      expect(config.workspaces).toEqual({})
+    })
+  })
 })

package/src/platforms/slackbot/credential-manager.ts

@@ -4,6 +4,7 @@ import { homedir } from 'node:os'
 import { join } from 'node:path'
 
 import type { SlackBotConfig, SlackBotCredentials, SlackBotWorkspace } from './types'
+import { SlackBotConfigSchema } from './types'
 
 export class SlackBotCredentialManager {
   private configDir: string
@@ -20,12 +21,41 @@ export class SlackBotCredentialManager {
     }
 
     const content = await readFile(this.credentialsPath, 'utf-8')
-    return JSON.parse(content) as SlackBotConfig
+    let json: unknown
+    try {
+      json = JSON.parse(content)
+    } catch {
+      return { current: null, workspaces: {} }
+    }
+    const parsed = SlackBotConfigSchema.safeParse(json)
+    if (parsed.success) {
+      return parsed.data
+    }
+    // Schema validation failed (e.g., a stored token from a third-party tool does not
+    // start with xoxb-, or a future schema added new required fields). Fall back to the
+    // raw object to preserve existing entries; the runtime will surface real auth errors
+    // when the token is actually used. This matches pre-validation behavior so upgrades
+    // never silently empty a user's credentials file.
+    process.stderr.write(
+      `[agent-slackbot] Warning: credentials file at ${this.credentialsPath} did not match the expected schema. Using raw values; run "auth set" to fix.\n`,
+    )
+    return this.coerceLooseConfig(json)
+  }
+
+  private coerceLooseConfig(raw: unknown): SlackBotConfig {
+    if (!raw || typeof raw !== 'object') {
+      return { current: null, workspaces: {} }
+    }
+    const obj = raw as Partial<SlackBotConfig>
+    return {
+      current: obj.current ?? null,
+      workspaces: obj.workspaces ?? {},
+    }
   }
 
   async save(config: SlackBotConfig): Promise<void> {
     await mkdir(this.configDir, { recursive: true })
-    await writeFile(this.credentialsPath, JSON.stringify(config, null, 2))
+    await writeFile(this.credentialsPath, JSON.stringify(config, null, 2), { mode: 0o600 })
     await chmod(this.credentialsPath, 0o600)
   }
 

package/src/platforms/slackbot/index.test.ts

@@ -0,0 +1,59 @@
+import { expect, it } from 'bun:test'
+
+import {
+  SlackBotClient,
+  SlackBotConfigSchema,
+  SlackBotCredentialManager,
+  SlackBotCredentialsSchema,
+  SlackBotError,
+  SlackBotListener,
+  SlackChannelSchema,
+  SlackFileSchema,
+  SlackMessageSchema,
+  SlackReactionSchema,
+  SlackUserSchema,
+} from '@/platforms/slackbot/index'
+
+it('SlackBotClient is exported from barrel', () => {
+  expect(typeof SlackBotClient).toBe('function')
+})
+
+it('SlackBotError is exported from barrel', () => {
+  expect(typeof SlackBotError).toBe('function')
+})
+
+it('SlackBotCredentialManager is exported from barrel', () => {
+  expect(typeof SlackBotCredentialManager).toBe('function')
+})
+
+it('SlackBotListener is exported from barrel', () => {
+  expect(typeof SlackBotListener).toBe('function')
+})
+
+it('SlackBotConfigSchema is exported from barrel', () => {
+  expect(typeof SlackBotConfigSchema.parse).toBe('function')
+})
+
+it('SlackBotCredentialsSchema is exported from barrel', () => {
+  expect(typeof SlackBotCredentialsSchema.parse).toBe('function')
+})
+
+it('SlackChannelSchema is exported from barrel', () => {
+  expect(typeof SlackChannelSchema.parse).toBe('function')
+})
+
+it('SlackMessageSchema is exported from barrel', () => {
+  expect(typeof SlackMessageSchema.parse).toBe('function')
+})
+
+it('SlackUserSchema is exported from barrel', () => {
+  expect(typeof SlackUserSchema.parse).toBe('function')
+})
+
+it('SlackReactionSchema is exported from barrel', () => {
+  expect(typeof SlackReactionSchema.parse).toBe('function')
+})
+
+it('SlackFileSchema is exported from barrel', () => {
+  expect(typeof SlackFileSchema.parse).toBe('function')
+})

package/src/platforms/slackbot/index.ts

@@ -1,19 +1,43 @@
 export { SlackBotClient } from './client'
 export { SlackBotCredentialManager } from './credential-manager'
-export {
+export { SlackBotListener } from './listener'
+export type { SlackBotListenerOptions } from './listener'
+export type {
   SlackBotConfig,
-  SlackBotConfigSchema,
   SlackBotCredentials,
+  SlackBotListenerEventMap,
+  SlackChannel,
+  SlackFile,
+  SlackMessage,
+  SlackReaction,
+  SlackSocketModeAck,
+  SlackSocketModeAppMentionEvent,
+  SlackSocketModeChannelEvent,
+  SlackSocketModeDisconnectEnvelope,
+  SlackSocketModeDisconnectReason,
+  SlackSocketModeEnvelope,
+  SlackSocketModeEvent,
+  SlackSocketModeEventsApiArgs,
+  SlackSocketModeEventsApiEnvelope,
+  SlackSocketModeGenericEnvelope,
+  SlackSocketModeGenericEvent,
+  SlackSocketModeHelloEnvelope,
+  SlackSocketModeInteractiveArgs,
+  SlackSocketModeInteractiveEnvelope,
+  SlackSocketModeMemberChannelEvent,
+  SlackSocketModeMessageEvent,
+  SlackSocketModeReactionEvent,
+  SlackSocketModeSlashCommandArgs,
+  SlackSocketModeSlashCommandEnvelope,
+  SlackUser,
+} from './types'
+export {
+  SlackBotConfigSchema,
   SlackBotCredentialsSchema,
   SlackBotError,
-  SlackChannel,
   SlackChannelSchema,
-  SlackFile,
   SlackFileSchema,
-  SlackMessage,
   SlackMessageSchema,
-  SlackReaction,
   SlackReactionSchema,
-  SlackUser,
   SlackUserSchema,
 } from './types'