crewly 1.13.0 → 1.14.0

package/dist/cli/backend/src/services/slack/slack-image.service.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Slack Image Service
+ *
+ * Handles downloading, validating, and managing Slack image files.
+ * Downloads images sent by users in Slack to a local temp directory
+ * so that agents can read them via their file-reading tools.
+ *
+ * @module services/slack/slack-image
+ */
+import type { SlackFile, SlackImageInfo } from '../../types/slack.types.js';
+/**
+ * SlackImageService manages downloading and lifecycle of images
+ * sent by Slack users. Downloaded files are stored under
+ * `~/.crewly/tmp/slack-images/` and cleaned up periodically.
+ *
+ * @example
+ * ```typescript
+ * const service = new SlackImageService();
+ * await service.cleanupOnStartup();
+ * service.startCleanup();
+ * const imageInfo = await service.downloadImage(slackFile, botToken);
+ * ```
+ */
+export declare class SlackImageService {
+    private logger;
+    private tempDir;
+    private cleanupTimer;
+    /**
+     * Create a new SlackImageService.
+     *
+     * @param crewlyHome - Base crewly home directory (defaults to ~/.crewly)
+     */
+    constructor(crewlyHome?: string);
+    /**
+     * Get the temp directory path for downloaded images.
+     *
+     * @returns Absolute path to the temp directory
+     */
+    getTempDir(): string;
+    /**
+     * Download a Slack image file to the local temp directory.
+     *
+     * Validates the file MIME type and size before downloading.
+     * Uses the Slack bot token to authenticate the download request.
+     *
+     * @param file - Slack file object from the event payload
+     * @param botToken - Bot OAuth token for authenticating the download
+     * @returns Downloaded image info with local path
+     * @throws Error if file validation fails or download errors occur
+     */
+    downloadImage(file: SlackFile, botToken: string): Promise<SlackImageInfo>;
+    /**
+     * Start the periodic cleanup timer for expired temp files.
+     * Runs every hour by default (configured by CLEANUP_INTERVAL).
+     */
+    startCleanup(): void;
+    /**
+     * Stop the periodic cleanup timer.
+     */
+    stopCleanup(): void;
+    /**
+     * Delete temp files older than the configured TTL.
+     *
+     * @returns Number of files deleted
+     */
+    cleanupExpired(): Promise<number>;
+    /**
+     * Clean up all stale temp files on startup.
+     * Called once during server initialization.
+     */
+    cleanupOnStartup(): Promise<void>;
+    /**
+     * Verify that a file on disk starts with valid image magic bytes.
+     * Reads the first 8 bytes and checks against known signatures
+     * for PNG, JPEG, GIF, and WebP formats.
+     *
+     * @param filePath - Path to the downloaded file
+     * @returns True if the file matches a known image signature
+     */
+    verifyImageMagicBytes(filePath: string): Promise<boolean>;
+    /**
+     * Fetch a URL with manual redirect handling to preserve the Authorization header.
+     * Node.js fetch strips the Authorization header on cross-origin redirects
+     * (per the Fetch specification), but Slack file URLs redirect from
+     * files.slack.com to CDN domains that may require the token.
+     *
+     * @param url - URL to fetch
+     * @param botToken - Bot OAuth token for the Authorization header
+     * @returns Final response after following any redirects
+     * @throws Error if too many redirects or a redirect has no Location header
+     */
+    private authenticatedFetch;
+    /**
+     * Check temp directory total size and log a warning if it exceeds the threshold.
+     */
+    private checkTempDirSize;
+}
+/**
+ * Get the SlackImageService singleton.
+ *
+ * @returns The service instance
+ */
+export declare function getSlackImageService(): SlackImageService;
+/**
+ * Set the SlackImageService singleton.
+ *
+ * @param service - The service instance to set
+ */
+export declare function setSlackImageService(service: SlackImageService): void;
+/**
+ * Reset the SlackImageService singleton (for testing).
+ */
+export declare function resetSlackImageService(): void;
+//# sourceMappingURL=slack-image.service.d.ts.map

package/dist/cli/backend/src/services/slack/slack-image.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-image.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-image.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG5E;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAA0E;IACxF,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,YAAY,CAA+C;IAEnE;;;;OAIG;gBACS,UAAU,CAAC,EAAE,MAAM;IAK/B;;;;OAIG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;;;;;;;OAUG;IACG,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IA8E/E;;;OAGG;IACH,YAAY,IAAI,IAAI;IAoBpB;;OAEG;IACH,WAAW,IAAI,IAAI;IAOnB;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IA6BvC;;;OAGG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOvC;;;;;;;OAOG;IACG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiC/D;;;;;;;;;;OAUG;YACW,kBAAkB;IA0BhC;;OAEG;YACW,gBAAgB;CAyB/B;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,iBAAiB,CAKxD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAErE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAK7C"}

package/dist/cli/backend/src/services/slack/slack-image.service.js

@@ -0,0 +1,331 @@
+/**
+ * Slack Image Service
+ *
+ * Handles downloading, validating, and managing Slack image files.
+ * Downloads images sent by users in Slack to a local temp directory
+ * so that agents can read them via their file-reading tools.
+ *
+ * @module services/slack/slack-image
+ */
+import { promises as fs } from 'fs';
+import { createWriteStream } from 'fs';
+import { open } from 'fs/promises';
+import path from 'path';
+import os from 'os';
+import { pipeline } from 'stream/promises';
+import { SLACK_IMAGE_CONSTANTS } from '../../constants.js';
+import { LoggerService } from '../core/logger.service.js';
+/**
+ * SlackImageService manages downloading and lifecycle of images
+ * sent by Slack users. Downloaded files are stored under
+ * `~/.crewly/tmp/slack-images/` and cleaned up periodically.
+ *
+ * @example
+ * ```typescript
+ * const service = new SlackImageService();
+ * await service.cleanupOnStartup();
+ * service.startCleanup();
+ * const imageInfo = await service.downloadImage(slackFile, botToken);
+ * ```
+ */
+export class SlackImageService {
+    logger = LoggerService.getInstance().createComponentLogger('SlackImageService');
+    tempDir;
+    cleanupTimer = null;
+    /**
+     * Create a new SlackImageService.
+     *
+     * @param crewlyHome - Base crewly home directory (defaults to ~/.crewly)
+     */
+    constructor(crewlyHome) {
+        const home = crewlyHome || path.join(os.homedir(), '.crewly');
+        this.tempDir = path.join(home, SLACK_IMAGE_CONSTANTS.TEMP_DIR);
+    }
+    /**
+     * Get the temp directory path for downloaded images.
+     *
+     * @returns Absolute path to the temp directory
+     */
+    getTempDir() {
+        return this.tempDir;
+    }
+    /**
+     * Download a Slack image file to the local temp directory.
+     *
+     * Validates the file MIME type and size before downloading.
+     * Uses the Slack bot token to authenticate the download request.
+     *
+     * @param file - Slack file object from the event payload
+     * @param botToken - Bot OAuth token for authenticating the download
+     * @returns Downloaded image info with local path
+     * @throws Error if file validation fails or download errors occur
+     */
+    async downloadImage(file, botToken) {
+        // Validate MIME type
+        if (!SLACK_IMAGE_CONSTANTS.SUPPORTED_MIMES.includes(file.mimetype)) {
+            throw new Error(`Unsupported image type: ${file.mimetype}`);
+        }
+        // Validate file size
+        if (file.size > SLACK_IMAGE_CONSTANTS.MAX_FILE_SIZE) {
+            const maxMB = Math.round(SLACK_IMAGE_CONSTANTS.MAX_FILE_SIZE / (1024 * 1024));
+            throw new Error(`File too large: ${file.size} bytes (max ${maxMB} MB)`);
+        }
+        // Ensure temp directory exists
+        await fs.mkdir(this.tempDir, { recursive: true });
+        // Sanitize filename to prevent path traversal
+        const safeName = file.name.replace(/[^a-zA-Z0-9._-]/g, '_');
+        const localPath = path.join(this.tempDir, `${file.id}-${safeName}`);
+        // Download using native fetch with bearer token.
+        // Uses manual redirect handling because Node.js fetch strips the
+        // Authorization header on cross-origin redirects (per Fetch spec),
+        // but Slack file URLs redirect to CDN domains that may need it.
+        const downloadUrl = file.url_private_download || file.url_private;
+        const response = await this.authenticatedFetch(downloadUrl, botToken);
+        if (!response.ok) {
+            throw new Error(`Download failed with status ${response.status}`);
+        }
+        if (!response.body) {
+            throw new Error('Empty response body from Slack');
+        }
+        // Validate Content-Type header to catch Slack returning HTML error pages with 200 OK
+        const contentType = response.headers.get('content-type') || '';
+        const isImageContentType = SLACK_IMAGE_CONSTANTS.VALID_RESPONSE_CONTENT_TYPES.some(prefix => contentType.startsWith(prefix));
+        if (!isImageContentType) {
+            throw new Error(`Unexpected Content-Type from Slack: "${contentType}" (expected image/*). ` +
+                'This usually means the bot token lacks files:read scope or has expired.');
+        }
+        // Stream response to file
+        const fileStream = createWriteStream(localPath);
+        // Convert Web ReadableStream to Node stream for pipeline
+        const { Readable } = await import('stream');
+        const nodeStream = Readable.fromWeb(response.body);
+        await pipeline(nodeStream, fileStream);
+        // Verify the file is actually an image by checking magic bytes
+        const isValid = await this.verifyImageMagicBytes(localPath);
+        if (!isValid) {
+            // Clean up the invalid file
+            try {
+                await fs.unlink(localPath);
+            }
+            catch { /* ignore */ }
+            throw new Error('Downloaded file is not a valid image (magic bytes mismatch). ' +
+                'Slack may have returned an HTML error page instead of the image.');
+        }
+        // Warn if temp dir is getting large
+        await this.checkTempDirSize();
+        return {
+            id: file.id,
+            name: file.name,
+            mimetype: file.mimetype,
+            localPath,
+            width: file.original_w,
+            height: file.original_h,
+            permalink: file.permalink,
+        };
+    }
+    /**
+     * Start the periodic cleanup timer for expired temp files.
+     * Runs every hour by default (configured by CLEANUP_INTERVAL).
+     */
+    startCleanup() {
+        if (this.cleanupTimer)
+            return;
+        this.cleanupTimer = setInterval(async () => {
+            try {
+                const count = await this.cleanupExpired();
+                if (count > 0) {
+                    this.logger.info('Cleaned up expired images', { count });
+                }
+            }
+            catch (err) {
+                this.logger.warn('Cleanup error', { error: err instanceof Error ? err.message : String(err) });
+            }
+        }, SLACK_IMAGE_CONSTANTS.CLEANUP_INTERVAL);
+        // Don't keep the process alive just for cleanup
+        if (this.cleanupTimer.unref) {
+            this.cleanupTimer.unref();
+        }
+    }
+    /**
+     * Stop the periodic cleanup timer.
+     */
+    stopCleanup() {
+        if (this.cleanupTimer) {
+            clearInterval(this.cleanupTimer);
+            this.cleanupTimer = null;
+        }
+    }
+    /**
+     * Delete temp files older than the configured TTL.
+     *
+     * @returns Number of files deleted
+     */
+    async cleanupExpired() {
+        try {
+            await fs.access(this.tempDir);
+        }
+        catch {
+            return 0; // Directory doesn't exist yet
+        }
+        const entries = await fs.readdir(this.tempDir);
+        const now = Date.now();
+        let deleted = 0;
+        for (const entry of entries) {
+            const filePath = path.join(this.tempDir, entry);
+            try {
+                const stat = await fs.stat(filePath);
+                if (!stat.isFile())
+                    continue;
+                if (now - stat.mtimeMs > SLACK_IMAGE_CONSTANTS.FILE_TTL) {
+                    await fs.unlink(filePath);
+                    deleted++;
+                }
+            }
+            catch {
+                // File may have been deleted concurrently — ignore
+            }
+        }
+        return deleted;
+    }
+    /**
+     * Clean up all stale temp files on startup.
+     * Called once during server initialization.
+     */
+    async cleanupOnStartup() {
+        const count = await this.cleanupExpired();
+        if (count > 0) {
+            this.logger.info('Startup cleanup: removed expired images', { count });
+        }
+    }
+    /**
+     * Verify that a file on disk starts with valid image magic bytes.
+     * Reads the first 8 bytes and checks against known signatures
+     * for PNG, JPEG, GIF, and WebP formats.
+     *
+     * @param filePath - Path to the downloaded file
+     * @returns True if the file matches a known image signature
+     */
+    async verifyImageMagicBytes(filePath) {
+        let fh = null;
+        try {
+            fh = await open(filePath, 'r');
+            const buf = Buffer.alloc(8);
+            const { bytesRead } = await fh.read(buf, 0, 8, 0);
+            if (bytesRead < 3)
+                return false;
+            const magicBytes = SLACK_IMAGE_CONSTANTS.IMAGE_MAGIC_BYTES;
+            // Check each known signature
+            const signatures = [
+                magicBytes.PNG,
+                magicBytes.JPEG,
+                magicBytes.GIF87,
+                magicBytes.GIF89,
+                magicBytes.WEBP_RIFF,
+            ];
+            for (const sig of signatures) {
+                if (bytesRead >= sig.length && sig.every((byte, i) => buf[i] === byte)) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        catch {
+            return false;
+        }
+        finally {
+            if (fh)
+                await fh.close();
+        }
+    }
+    /**
+     * Fetch a URL with manual redirect handling to preserve the Authorization header.
+     * Node.js fetch strips the Authorization header on cross-origin redirects
+     * (per the Fetch specification), but Slack file URLs redirect from
+     * files.slack.com to CDN domains that may require the token.
+     *
+     * @param url - URL to fetch
+     * @param botToken - Bot OAuth token for the Authorization header
+     * @returns Final response after following any redirects
+     * @throws Error if too many redirects or a redirect has no Location header
+     */
+    async authenticatedFetch(url, botToken) {
+        const maxRedirects = SLACK_IMAGE_CONSTANTS.MAX_DOWNLOAD_REDIRECTS;
+        let currentUrl = url;
+        for (let i = 0; i <= maxRedirects; i++) {
+            const response = await fetch(currentUrl, {
+                headers: { 'Authorization': `Bearer ${botToken}` },
+                redirect: 'manual',
+            });
+            // Follow redirects manually, preserving the auth header on each hop
+            if (response.status >= 300 && response.status < 400) {
+                const location = response.headers.get('location');
+                if (!location) {
+                    throw new Error(`Slack returned redirect (${response.status}) without Location header`);
+                }
+                currentUrl = location;
+                continue;
+            }
+            return response;
+        }
+        throw new Error(`Too many redirects (${maxRedirects}) while downloading file from Slack`);
+    }
+    /**
+     * Check temp directory total size and log a warning if it exceeds the threshold.
+     */
+    async checkTempDirSize() {
+        try {
+            const entries = await fs.readdir(this.tempDir);
+            let totalSize = 0;
+            for (const entry of entries) {
+                try {
+                    const stat = await fs.stat(path.join(this.tempDir, entry));
+                    if (stat.isFile()) {
+                        totalSize += stat.size;
+                    }
+                }
+                catch {
+                    // Ignore stat errors
+                }
+            }
+            if (totalSize > SLACK_IMAGE_CONSTANTS.MAX_TEMP_DIR_SIZE) {
+                const sizeMB = Math.round(totalSize / (1024 * 1024));
+                const thresholdMB = Math.round(SLACK_IMAGE_CONSTANTS.MAX_TEMP_DIR_SIZE / (1024 * 1024));
+                this.logger.warn('Temp directory size exceeds threshold', { sizeMB, thresholdMB });
+            }
+        }
+        catch {
+            // Non-critical — skip size check
+        }
+    }
+}
+/** Singleton instance */
+let instance = null;
+/**
+ * Get the SlackImageService singleton.
+ *
+ * @returns The service instance
+ */
+export function getSlackImageService() {
+    if (!instance) {
+        instance = new SlackImageService();
+    }
+    return instance;
+}
+/**
+ * Set the SlackImageService singleton.
+ *
+ * @param service - The service instance to set
+ */
+export function setSlackImageService(service) {
+    instance = service;
+}
+/**
+ * Reset the SlackImageService singleton (for testing).
+ */
+export function resetSlackImageService() {
+    if (instance) {
+        instance.stopCleanup();
+    }
+    instance = null;
+}
+//# sourceMappingURL=slack-image.service.js.map

package/dist/cli/backend/src/services/slack/slack-image.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-image.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-image.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAChF,OAAO,CAAS;IAChB,YAAY,GAA0C,IAAI,CAAC;IAEnE;;;;OAIG;IACH,YAAY,UAAmB;QAC7B,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,aAAa,CAAC,IAAe,EAAE,QAAgB;QACnD,qBAAqB;QACrB,IAAI,CAAC,qBAAqB,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAgE,CAAC,EAAE,CAAC;YAC3H,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,aAAa,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,IAAI,eAAe,KAAK,MAAM,CAAC,CAAC;QAC1E,CAAC;QAED,+BAA+B;QAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAElD,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC;QAEpE,iDAAiD;QACjD,iEAAiE;QACjE,mEAAmE;QACnE,gEAAgE;QAChE,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,WAAW,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAEtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,qFAAqF;QACrF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,4BAA4B,CAAC,IAAI,CAChF,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CACzC,CAAC;QACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,wCAAwC,WAAW,wBAAwB;gBAC3E,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAChD,yDAAyD;QACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAA2C,CAAC,CAAC;QAC1F,MAAM,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEvC,+DAA+D;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,4BAA4B;YAC5B,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,+DAA+D;gBAC/D,kEAAkE,CACnE,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS;YACT,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAE9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QAE3C,gDAAgD;QAChD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,CAAC,8BAA8B;QAC1C,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAAE,SAAS;gBAE7B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC;oBACxD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,qBAAqB,CAAC,QAAgB;QAC1C,IAAI,EAAE,GAA4C,IAAI,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClD,IAAI,SAAS,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAEhC,MAAM,UAAU,GAAG,qBAAqB,CAAC,iBAAiB,CAAC;YAE3D,6BAA6B;YAC7B,MAAM,UAAU,GAAqC;gBACnD,UAAU,CAAC,GAAG;gBACd,UAAU,CAAC,IAAI;gBACf,UAAU,CAAC,KAAK;gBAChB,UAAU,CAAC,KAAK;gBAChB,UAAU,CAAC,SAAS;aACrB,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;oBACvE,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE;gBAAE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,kBAAkB,CAAC,GAAW,EAAE,QAAgB;QAC5D,MAAM,YAAY,GAAG,qBAAqB,CAAC,sBAAsB,CAAC;QAClE,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBACvC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,QAAQ,EAAE,EAAE;gBAClD,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,oEAAoE;YACpE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,2BAA2B,CAAC,CAAC;gBAC1F,CAAC;gBACD,UAAU,GAAG,QAAQ,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,qCAAqC,CAAC,CAAC;IAC5F,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,SAAS,GAAG,CAAC,CAAC;YAElB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC3D,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;wBAClB,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC;oBACzB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;YAED,IAAI,SAAS,GAAG,qBAAqB,CAAC,iBAAiB,EAAE,CAAC;gBACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;gBACxF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;CACF;AAED,yBAAyB;AACzB,IAAI,QAAQ,GAA6B,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA0B;IAC7D,QAAQ,GAAG,OAAO,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzB,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/cli/backend/src/services/slack/slack-mention-resolver.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Slack mention resolver for team channels.
+ *
+ * Agents are not Slack users, so a message like `@sam 看一下这个` arrives as
+ * plain text. This module finds every `@name` token in a Slack message and
+ * maps it to a Crewly agent session, and for names that match nothing it
+ * offers "did you mean" suggestions (bounded Levenshtein distance) so the
+ * bridge can answer a typo instead of silently ignoring it.
+ *
+ * Pure functions, no I/O — the bridge supplies the candidate list from the
+ * team's members.
+ *
+ * @module services/slack/slack-mention-resolver
+ */
+/** One agent the resolver may match against. */
+export interface MentionCandidate {
+    /** Display name as configured on the team member (e.g. `Sam`). */
+    name: string;
+    /** Agent session name (e.g. `crewly-alpha-sam`). */
+    sessionName: string;
+    /**
+     * The agent's own Slack bot user id when it has a real identity. A native
+     * Slack mention arrives as `<@U…>` and is matched here first.
+     */
+    botUserId?: string;
+}
+/** An `@name` that matched no candidate, with close alternatives. */
+export interface UnknownMention {
+    /** The token as typed, without the `@`. */
+    token: string;
+    /** Candidate display names within the edit-distance cutoff, best first. */
+    suggestions: string[];
+}
+/** Result of {@link resolveSlackMentions}. */
+export interface ResolvedSlackMentions {
+    /** Session names of matched agents, in first-mention order, deduped. */
+    mentions: string[];
+    /** Tokens that matched nobody. */
+    unknown: UnknownMention[];
+}
+/** Options for {@link resolveSlackMentions}. */
+export interface ResolveSlackMentionsOptions {
+    /** Max edit distance for a suggestion (default from constants). */
+    maxDistance?: number;
+    /** Max suggestions per unknown token (default from constants). */
+    maxSuggestions?: number;
+}
+/**
+ * Extract the user ids of native `<@U…>` mentions, in order, deduped.
+ *
+ * @param text - Slack message text
+ * @returns Slack user ids
+ */
+export declare function extractNativeMentionIds(text: string): string[];
+/**
+ * Levenshtein edit distance between two strings, compared case-insensitively.
+ *
+ * @param a - First string
+ * @param b - Second string
+ * @returns The minimum number of single-character edits to turn `a` into `b`
+ */
+export declare function levenshtein(a: string, b: string): number;
+/**
+ * The aliases a candidate answers to: its display name, the name with
+ * whitespace removed, its full session name, and the short session
+ * segment (`crewly-alpha-sam` → `sam`, matching the orchestrator bridge's
+ * existing `@name` rule). All lower-cased.
+ *
+ * @param candidate - The agent
+ * @returns Distinct lower-case aliases
+ */
+export declare function candidateAliases(candidate: MentionCandidate): string[];
+/**
+ * Extract the raw `@name` tokens from a message, in order, deduped
+ * case-insensitively, with Slack's reserved words removed.
+ *
+ * @param text - Slack message text
+ * @returns Tokens without the leading `@`
+ */
+export declare function extractMentionTokens(text: string): string[];
+/**
+ * Map every `@name` in `text` to an agent session.
+ *
+ * Exact (case-insensitive) alias matches win. A token that matches no
+ * alias is reported under `unknown` with up to `maxSuggestions` candidate
+ * display names within `maxDistance` edits, closest first.
+ *
+ * @param text - Slack message text
+ * @param candidates - The agents that can be mentioned (team members)
+ * @param options - Distance and suggestion caps
+ * @returns Matched sessions and unknown tokens
+ *
+ * @example
+ * ```ts
+ * resolveSlackMentions('@sam @lee 看一下', [
+ *   { name: 'Sam', sessionName: 'crewly-alpha-sam' },
+ *   { name: 'Leo', sessionName: 'crewly-alpha-leo' },
+ * ]);
+ * // → { mentions: ['crewly-alpha-sam'], unknown: [{ token: 'lee', suggestions: ['Leo'] }] }
+ * ```
+ */
+export declare function resolveSlackMentions(text: string, candidates: MentionCandidate[], options?: ResolveSlackMentionsOptions): ResolvedSlackMentions;
+//# sourceMappingURL=slack-mention-resolver.d.ts.map

package/dist/cli/backend/src/services/slack/slack-mention-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-mention-resolver.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/slack/slack-mention-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,8CAA8C;AAC9C,MAAM,WAAW,qBAAqB;IACpC,wEAAwE;IACxE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,kCAAkC;IAClC,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B;AAED,gDAAgD;AAChD,MAAM,WAAW,2BAA2B;IAC1C,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAS9D;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBxD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAgBtE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAY3D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,gBAAgB,EAAE,EAC9B,OAAO,GAAE,2BAAgC,GACxC,qBAAqB,CAqDvB"}