managed-deepagents 0.4.0-dev.68 → 0.4.0-dev.70

package/dist/identity/links.js

@@ -0,0 +1,176 @@
+/**
+ * Durable Slack ↔ actor account links (Open SWE–style mapping).
+ *
+ * Stored in the LangGraph Store under `["mda_identity_links"]`, with an
+ * in-memory backend for unit tests. Slack Events look up `slack:T:U` before
+ * invoke; the web Connect-with-Slack flow upserts after OIDC.
+ */
+import { Client } from "@langchain/langgraph-sdk";
+import { ACTOR_HEADER, IDENTITY_LINKS_SERVICE_ACTOR, IDENTITY_LINKS_STORE_PREFIX, INGRESS_SECRET_ENV, INGRESS_SECRET_HEADER, } from "../runtime/auth.js";
+export const IDENTITY_LINKS_NAMESPACE = [IDENTITY_LINKS_STORE_PREFIX];
+/** In-memory store for tests (and as a process-local cache layer). */
+export class InMemoryIdentityLinkStore {
+    bySlack = new Map();
+    byActor = new Map();
+    async getBySlackActorId(slackActorId) {
+        return this.bySlack.get(slackActorId) ?? null;
+    }
+    async getByActorId(actorId) {
+        return this.byActor.get(actorId) ?? null;
+    }
+    async upsert(record) {
+        const previous = this.byActor.get(record.actorId);
+        if (previous && previous.slackActorId !== record.slackActorId) {
+            this.bySlack.delete(previous.slackActorId);
+        }
+        const existingSlack = this.bySlack.get(record.slackActorId);
+        if (existingSlack && existingSlack.actorId !== record.actorId) {
+            this.byActor.delete(existingSlack.actorId);
+        }
+        this.bySlack.set(record.slackActorId, record);
+        this.byActor.set(record.actorId, record);
+    }
+    async removeByActorId(actorId) {
+        const existing = this.byActor.get(actorId);
+        if (!existing) {
+            return;
+        }
+        this.byActor.delete(actorId);
+        this.bySlack.delete(existing.slackActorId);
+    }
+}
+/** LangGraph Store–backed identity links. */
+export class LangGraphIdentityLinkStore {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async getBySlackActorId(slackActorId) {
+        return this.getItem(slackKey(slackActorId));
+    }
+    async getByActorId(actorId) {
+        return this.getItem(actorKey(actorId));
+    }
+    async upsert(record) {
+        const previous = await this.getByActorId(record.actorId);
+        if (previous && previous.slackActorId !== record.slackActorId) {
+            await this.client.store.deleteItem([...IDENTITY_LINKS_NAMESPACE], slackKey(previous.slackActorId));
+        }
+        const existingSlack = await this.getBySlackActorId(record.slackActorId);
+        if (existingSlack && existingSlack.actorId !== record.actorId) {
+            await this.client.store.deleteItem([...IDENTITY_LINKS_NAMESPACE], actorKey(existingSlack.actorId));
+        }
+        const value = recordToValue(record);
+        await this.client.store.putItem([...IDENTITY_LINKS_NAMESPACE], slackKey(record.slackActorId), value);
+        await this.client.store.putItem([...IDENTITY_LINKS_NAMESPACE], actorKey(record.actorId), value);
+    }
+    async removeByActorId(actorId) {
+        const existing = await this.getByActorId(actorId);
+        if (!existing) {
+            return;
+        }
+        await this.client.store.deleteItem([...IDENTITY_LINKS_NAMESPACE], actorKey(actorId));
+        await this.client.store.deleteItem([...IDENTITY_LINKS_NAMESPACE], slackKey(existing.slackActorId));
+    }
+    async getItem(key) {
+        const item = await this.client.store.getItem([...IDENTITY_LINKS_NAMESPACE], key);
+        if (!item?.value || typeof item.value !== "object") {
+            return null;
+        }
+        return valueToRecord(item.value);
+    }
+}
+let defaultStore = null;
+/** Override the process-default link store (tests). */
+export function setIdentityLinkStore(store) {
+    defaultStore = store;
+}
+/** Resolve the process-default link store (in-memory until a Client is wired). */
+export function getIdentityLinkStore() {
+    if (defaultStore) {
+        return defaultStore;
+    }
+    defaultStore =
+        createLangGraphIdentityLinkStore() ?? new InMemoryIdentityLinkStore();
+    return defaultStore;
+}
+/** Build a Store-backed client when loopback + ingress secret are available. */
+export function createLangGraphIdentityLinkStore(options = {}) {
+    const ingressSecret = options.ingressSecret ?? process.env[INGRESS_SECRET_ENV];
+    if (!ingressSecret) {
+        return null;
+    }
+    const apiUrl = resolveLoopbackApiUrl(options.apiUrl);
+    const apiKey = options.apiKey ??
+        process.env.LANGSMITH_API_KEY ??
+        process.env.LANGGRAPH_API_KEY ??
+        "local";
+    const client = new Client({
+        apiUrl,
+        apiKey,
+        defaultHeaders: {
+            [INGRESS_SECRET_HEADER]: ingressSecret,
+            [ACTOR_HEADER]: IDENTITY_LINKS_SERVICE_ACTOR,
+        },
+    });
+    return new LangGraphIdentityLinkStore(client);
+}
+export function slackActorIdFromParts(teamId, userId) {
+    return `slack:${teamId}:${userId}`;
+}
+export function buildIdentityLinkRecord(input) {
+    const team = input.slackTeamId?.trim() || "unknown";
+    return {
+        actorId: input.actorId,
+        slackUserId: input.slackUserId,
+        ...(input.slackTeamId ? { slackTeamId: input.slackTeamId } : {}),
+        slackActorId: slackActorIdFromParts(team, input.slackUserId),
+        ...(input.email ? { email: input.email } : {}),
+        linkedAt: new Date().toISOString(),
+        source: "slack_oauth",
+    };
+}
+function slackKey(slackActorId) {
+    return `slack:${slackActorId.replace(/^slack:/, "")}`;
+}
+function actorKey(actorId) {
+    return `actor:${actorId}`;
+}
+function recordToValue(record) {
+    return { ...record };
+}
+function valueToRecord(value) {
+    const actorId = value.actorId;
+    const slackUserId = value.slackUserId;
+    const slackActorId = value.slackActorId;
+    if (typeof actorId !== "string" ||
+        typeof slackUserId !== "string" ||
+        typeof slackActorId !== "string") {
+        return null;
+    }
+    return {
+        actorId,
+        slackUserId,
+        slackActorId,
+        ...(typeof value.slackTeamId === "string"
+            ? { slackTeamId: value.slackTeamId }
+            : {}),
+        ...(typeof value.email === "string" ? { email: value.email } : {}),
+        linkedAt: typeof value.linkedAt === "string"
+            ? value.linkedAt
+            : new Date().toISOString(),
+        source: "slack_oauth",
+    };
+}
+function resolveLoopbackApiUrl(explicit) {
+    const fromEnv = explicit ??
+        process.env.MDA_CHANNEL_API_URL ??
+        process.env.LANGGRAPH_API_URL ??
+        process.env.LANGSMITH_ENDPOINT;
+    if (fromEnv && fromEnv.trim().length > 0) {
+        return fromEnv.replace(/\/$/, "");
+    }
+    const port = process.env.PORT ?? "8000";
+    return `http://127.0.0.1:${port}`;
+}
+//# sourceMappingURL=links.js.map

package/dist/identity/links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"links.js","sourceRoot":"","sources":["../../src/identity/links.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAElD,OAAO,EACL,YAAY,EACZ,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,2BAA2B,CAAU,CAAC;AAoB/E,sEAAsE;AACtE,MAAM,OAAO,yBAAyB;IACnB,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAChD,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEjE,KAAK,CAAC,iBAAiB,CACrB,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,aAAa,IAAI,aAAa,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,6CAA6C;AAC7C,MAAM,OAAO,0BAA0B;IACR;IAA7B,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAE/C,KAAK,CAAC,iBAAiB,CACrB,YAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAChC,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,IAAI,aAAa,IAAI,aAAa,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAChC,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAC7B,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,EAC7B,KAAK,CACN,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAC7B,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EACxB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAChC,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,OAAO,CAAC,CAClB,CAAC;QACF,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAChC,CAAC,GAAG,wBAAwB,CAAC,EAC7B,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAChC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAW;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAC1C,CAAC,GAAG,wBAAwB,CAAC,EAC7B,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,IAAI,YAAY,GAA6B,IAAI,CAAC;AAElD,uDAAuD;AACvD,MAAM,UAAU,oBAAoB,CAAC,KAA+B;IAClE,YAAY,GAAG,KAAK,CAAC;AACvB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB;IAClC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,YAAY;QACV,gCAAgC,EAAE,IAAI,IAAI,yBAAyB,EAAE,CAAC;IACxE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gCAAgC,CAC9C,UAAwE,EAAE;IAE1E,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GACV,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC;IACV,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,MAAM;QACN,MAAM;QACN,cAAc,EAAE;YACd,CAAC,qBAAqB,CAAC,EAAE,aAAa;YACtC,CAAC,YAAY,CAAC,EAAE,4BAA4B;SAC7C;KACF,CAAC,CAAC;IACH,OAAO,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,MAAc;IAClE,OAAO,SAAS,MAAM,IAAI,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAKvC;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,YAAY,EAAE,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,aAAa;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,YAAoB;IACpC,OAAO,SAAS,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,SAAS,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CACpB,KAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,WAAW,KAAK,QAAQ;QAC/B,OAAO,YAAY,KAAK,QAAQ,EAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,OAAO;QACP,WAAW;QACX,YAAY;QACZ,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACvC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,QAAQ,EACN,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAChC,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9B,MAAM,EAAE,aAAa;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,MAAM,OAAO,GACX,QAAQ;QACR,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACjC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;IACxC,OAAO,oBAAoB,IAAI,EAAE,CAAC;AACpC,CAAC"}

package/dist/identity/slack-connect-http.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Connect-with-Slack HTTP handlers mounted under `/identity/slack/*`.
+ *
+ * Only registered when the project declares at least one Slack channel.
+ */
+import type { Hono } from "hono";
+import type { IdentityConfig } from "./index.js";
+import { type IdentityLinkStore } from "./links.js";
+export declare const SLACK_CONNECT_STATUS_PATH = "/identity/slack/status";
+export declare const SLACK_CONNECT_START_PATH = "/identity/slack/connect";
+export declare const SLACK_CONNECT_CALLBACK_PATH = "/identity/slack/callback";
+export declare const SLACK_CONNECT_LINK_PATH = "/identity/slack/link";
+export declare function projectHasSlackChannel(channels: Record<string, {
+    provider?: string;
+}> | undefined): boolean;
+export declare function mountSlackConnectRoutes(app: Hono, cfg: IdentityConfig, options?: {
+    linkStore?: IdentityLinkStore;
+    /** Absolute base URL of this deployment (for OAuth redirect_uri). */
+    deploymentBaseUrl?: string;
+}): void;
+//# sourceMappingURL=slack-connect-http.d.ts.map

package/dist/identity/slack-connect-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-connect-http.d.ts","sourceRoot":"","sources":["../../src/identity/slack-connect-http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAcpB,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,eAAO,MAAM,2BAA2B,6BAA6B,CAAC;AACtE,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAE9D,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,SAAS,GAC1D,OAAO,CAOT;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,IAAI,EACT,GAAG,EAAE,cAAc,EACnB,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACvB,GACL,IAAI,CAwGN"}

package/dist/identity/slack-connect-http.js

@@ -0,0 +1,129 @@
+/**
+ * Connect-with-Slack HTTP handlers mounted under `/identity/slack/*`.
+ *
+ * Only registered when the project declares at least one Slack channel.
+ */
+import { buildIdentityLinkRecord, getIdentityLinkStore, } from "./links.js";
+import { buildSlackAuthorizeUrl, createSlackOauthState, exchangeSlackOidcCode, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, readSlackOidcConfig, resolveSlackOauthRedirectBase, verifySlackOauthState, } from "./slack-oauth.js";
+import { resolveRequestIdentity } from "../runtime/auth.js";
+export const SLACK_CONNECT_STATUS_PATH = "/identity/slack/status";
+export const SLACK_CONNECT_START_PATH = "/identity/slack/connect";
+export const SLACK_CONNECT_CALLBACK_PATH = "/identity/slack/callback";
+export const SLACK_CONNECT_LINK_PATH = "/identity/slack/link";
+export function projectHasSlackChannel(channels) {
+    if (!channels) {
+        return false;
+    }
+    return Object.values(channels).some((manifest) => manifest.provider === "slack");
+}
+export function mountSlackConnectRoutes(app, cfg, options = {}) {
+    const store = options.linkStore ?? getIdentityLinkStore();
+    app.get(SLACK_CONNECT_STATUS_PATH, async (c) => {
+        const identity = await resolveOrUnauthorized(cfg, c.req.raw);
+        if (identity instanceof Response) {
+            return identity;
+        }
+        const link = await store.getByActorId(identity.actor.id);
+        return c.json({
+            linked: Boolean(link),
+            ...(link
+                ? {
+                    slackUserId: link.slackUserId,
+                    slackActorId: link.slackActorId,
+                    linkedAt: link.linkedAt,
+                }
+                : {}),
+        });
+    });
+    app.get(SLACK_CONNECT_START_PATH, async (c) => {
+        const identity = await resolveOrUnauthorized(cfg, c.req.raw);
+        if (identity instanceof Response) {
+            return identity;
+        }
+        const oauth = readSlackOidcConfig();
+        const stateKey = readOauthStateSigningKey();
+        if (!oauth || !stateKey) {
+            return c.json({
+                error: `Slack connect is not configured (set SLACK_CLIENT_ID, SLACK_CLIENT_SECRET, MDA_PUBLIC_APP_URL, ${OAUTH_STATE_SIGNING_KEY_ENV})`,
+            }, 503);
+        }
+        const redirectUri = slackCallbackRedirectUri(c.req.raw, options.deploymentBaseUrl);
+        const state = await createSlackOauthState(identity.actor.id, stateKey);
+        const authorizeUrl = buildSlackAuthorizeUrl(oauth, state, redirectUri);
+        // JSON for browser clients that send Bearer via fetch; redirect for plain GET.
+        const wantsJson = c.req.query("format") === "json" ||
+            (c.req.header("accept") ?? "").includes("application/json");
+        if (wantsJson) {
+            return c.json({ authorizeUrl });
+        }
+        return c.redirect(authorizeUrl, 302);
+    });
+    app.get(SLACK_CONNECT_CALLBACK_PATH, async (c) => {
+        const oauth = readSlackOidcConfig();
+        const publicApp = oauth?.publicAppUrl ??
+            process.env[MDA_PUBLIC_APP_URL_ENV]?.replace(/\/$/, "");
+        const failRedirect = publicApp ? `${publicApp}/settings?slack=error` : "/";
+        try {
+            if (!oauth) {
+                throw new Error("Slack OAuth is not configured");
+            }
+            const code = c.req.query("code");
+            const state = c.req.query("state");
+            if (!code || !state) {
+                throw new Error("missing code or state");
+            }
+            const stateKey = readOauthStateSigningKey();
+            if (!stateKey) {
+                throw new Error(`${OAUTH_STATE_SIGNING_KEY_ENV} is not configured`);
+            }
+            const { actorId } = await verifySlackOauthState(state, stateKey);
+            const redirectUri = slackCallbackRedirectUri(c.req.raw, options.deploymentBaseUrl);
+            const slackIdentity = await exchangeSlackOidcCode(oauth, code, redirectUri);
+            const teamId = slackIdentity.teamId ?? oauth.teamId;
+            const record = buildIdentityLinkRecord({
+                actorId,
+                slackUserId: slackIdentity.userId,
+                ...(teamId ? { slackTeamId: teamId } : {}),
+                ...(slackIdentity.email ? { email: slackIdentity.email } : {}),
+            });
+            await store.upsert(record);
+            return c.redirect(`${oauth.publicAppUrl}/settings?slack=connected`, 302);
+        }
+        catch (error) {
+            console.error("[mda] Slack OAuth callback failed:", error);
+            return c.redirect(failRedirect, 302);
+        }
+    });
+    app.delete(SLACK_CONNECT_LINK_PATH, async (c) => {
+        const identity = await resolveOrUnauthorized(cfg, c.req.raw);
+        if (identity instanceof Response) {
+            return identity;
+        }
+        await store.removeByActorId(identity.actor.id);
+        return c.json({ linked: false });
+    });
+}
+async function resolveOrUnauthorized(cfg, request) {
+    try {
+        return await resolveRequestIdentity(cfg, request);
+    }
+    catch (error) {
+        const status = typeof error.status === "number"
+            ? error.status
+            : 401;
+        const message = error instanceof Error && error.message ? error.message : "unauthorized";
+        return new Response(JSON.stringify({ error: message }), {
+            status,
+            headers: { "content-type": "application/json" },
+        });
+    }
+}
+function slackCallbackRedirectUri(request, deploymentBaseUrl) {
+    const base = resolveSlackOauthRedirectBase({
+        requestUrl: request.url,
+        headers: request.headers,
+        deploymentBaseUrl,
+    });
+    return `${base}${SLACK_CONNECT_CALLBACK_PATH}`;
+}
+//# sourceMappingURL=slack-connect-http.js.map

package/dist/identity/slack-connect-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-connect-http.js","sourceRoot":"","sources":["../../src/identity/slack-connect-http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EACL,uBAAuB,EACvB,oBAAoB,GAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACnB,6BAA6B,EAC7B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAE9D,MAAM,UAAU,sBAAsB,CACpC,QAA2D;IAE3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CACjC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAAS,EACT,GAAmB,EACnB,UAII,EAAE;IAEN,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,oBAAoB,EAAE,CAAC;IAE1D,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,YAAY,QAAQ,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;YACrB,GAAG,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,YAAY,QAAQ,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,kGAAkG,2BAA2B,GAAG;aACxI,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,wBAAwB,CAC1C,CAAC,CAAC,GAAG,CAAC,GAAG,EACT,OAAO,CAAC,iBAAiB,CAC1B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvE,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACvE,+EAA+E;QAC/E,MAAM,SAAS,GACb,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,MAAM;YAChC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC9D,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;QACpC,MAAM,SAAS,GACb,KAAK,EAAE,YAAY;YACnB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,uBAAuB,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3E,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,GAAG,2BAA2B,oBAAoB,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjE,MAAM,WAAW,GAAG,wBAAwB,CAC1C,CAAC,CAAC,GAAG,CAAC,GAAG,EACT,OAAO,CAAC,iBAAiB,CAC1B,CAAC;YACF,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAC/C,KAAK,EACL,IAAI,EACJ,WAAW,CACZ,CAAC;YACF,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YACpD,MAAM,MAAM,GAAG,uBAAuB,CAAC;gBACrC,OAAO;gBACP,WAAW,EAAE,aAAa,CAAC,MAAM;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,YAAY,2BAA2B,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,QAAQ,YAAY,QAAQ,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,GAAmB,EACnB,OAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,OAAQ,KAA8B,CAAC,MAAM,KAAK,QAAQ;YACxD,CAAC,CAAE,KAA4B,CAAC,MAAM;YACtC,CAAC,CAAC,GAAG,CAAC;QACV,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;YACtD,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAgB,EAChB,iBAA0B;IAE1B,MAAM,IAAI,GAAG,6BAA6B,CAAC;QACzC,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,GAAG,IAAI,GAAG,2BAA2B,EAAE,CAAC;AACjD,CAAC"}

package/dist/identity/slack-oauth.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Slack OpenID Connect helpers for Connect-with-Slack account linking.
+ */
+export declare const SLACK_CLIENT_ID_ENV = "SLACK_CLIENT_ID";
+export declare const SLACK_CLIENT_SECRET_ENV = "SLACK_CLIENT_SECRET";
+export declare const SLACK_TEAM_ID_ENV = "SLACK_TEAM_ID";
+export declare const MDA_PUBLIC_APP_URL_ENV = "MDA_PUBLIC_APP_URL";
+/**
+ * Public Agent Server base URL used for Slack OAuth `redirect_uri`.
+ * Required on LangGraph Host where the ASGI request origin is an internal
+ * loopback (e.g. `http://localhost:5557`) rather than `*.langgraph.app`.
+ */
+export declare const MDA_PUBLIC_API_URL_ENV = "MDA_PUBLIC_API_URL";
+/**
+ * Signing key for OAuth `state` JWTs (Connect-with-Slack). Reuses the guest
+ * token key so deployments do not need a third secret; never the Slack
+ * client secret (that value is an OAuth credential, not a signing key).
+ */
+export declare const OAUTH_STATE_SIGNING_KEY_ENV = "MDA_GUEST_SIGNING_KEY";
+/** Override Slack OIDC base (tests). */
+export declare const SLACK_OIDC_BASE_ENV = "SLACK_OIDC_BASE";
+export interface SlackOidcConfig {
+    clientId: string;
+    clientSecret: string;
+    teamId?: string;
+    publicAppUrl: string;
+    oidcBase: string;
+}
+export interface SlackOidcIdentity {
+    userId: string;
+    teamId?: string;
+    email?: string;
+}
+export declare function readSlackOidcConfig(env?: NodeJS.ProcessEnv): SlackOidcConfig | null;
+export declare function slackConnectUrl(publicAppUrl: string): string;
+/**
+ * Public base URL for Slack OAuth `redirect_uri` (`…/identity/slack/callback`).
+ *
+ * Prefer an explicit public Agent Server URL over the ASGI request origin:
+ * LangGraph Host rewrites requests to an internal loopback that Slack cannot
+ * use as a redirect.
+ */
+export declare function resolveSlackOauthRedirectBase(options: {
+    requestUrl: string;
+    headers?: Headers | {
+        get(name: string): string | null | undefined;
+    };
+    deploymentBaseUrl?: string;
+    env?: NodeJS.ProcessEnv;
+}): string;
+/** Server-side key for OAuth state JWTs; null when Connect cannot bind actors. */
+export declare function readOauthStateSigningKey(env?: NodeJS.ProcessEnv): string | null;
+export declare function buildSlackAuthorizeUrl(config: SlackOidcConfig, state: string, redirectUri: string): string;
+/** Signed state binding the authenticated actor to the OAuth round-trip. */
+export declare function createSlackOauthState(actorId: string, signingKey: string, nowMs?: number): Promise<string>;
+export declare function verifySlackOauthState(state: string, signingKey: string, nowMs?: number): Promise<{
+    actorId: string;
+}>;
+export declare function exchangeSlackOidcCode(config: SlackOidcConfig, code: string, redirectUri: string): Promise<SlackOidcIdentity>;
+//# sourceMappingURL=slack-oauth.d.ts.map

package/dist/identity/slack-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-oauth.d.ts","sourceRoot":"","sources":["../../src/identity/slack-oauth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AACrD,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,eAAO,MAAM,iBAAiB,kBAAkB,CAAC;AACjD,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAC3D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,0BAA0B,CAAC;AAEnE,wCAAwC;AACxC,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAMrD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,eAAe,GAAG,IAAI,CAmBxB;AAED,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,GAAG;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;KAAE,CAAC;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,CAcT;AAqCD,kFAAkF;AAClF,wBAAgB,wBAAwB,CACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,GAAG,IAAI,CAGf;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,MAAM,CAWR;AAED,4EAA4E;AAC5E,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAmB,GACzB,OAAO,CAAC,MAAM,CAAC,CAWjB;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,KAAK,GAAE,MAAmB,GACzB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAqB9B;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,iBAAiB,CAAC,CAsD5B"}

package/dist/identity/slack-oauth.js

@@ -0,0 +1,193 @@
+/**
+ * Slack OpenID Connect helpers for Connect-with-Slack account linking.
+ */
+import { randomBytes } from "node:crypto";
+import { jwtVerify, SignJWT } from "jose";
+export const SLACK_CLIENT_ID_ENV = "SLACK_CLIENT_ID";
+export const SLACK_CLIENT_SECRET_ENV = "SLACK_CLIENT_SECRET";
+export const SLACK_TEAM_ID_ENV = "SLACK_TEAM_ID";
+export const MDA_PUBLIC_APP_URL_ENV = "MDA_PUBLIC_APP_URL";
+/**
+ * Public Agent Server base URL used for Slack OAuth `redirect_uri`.
+ * Required on LangGraph Host where the ASGI request origin is an internal
+ * loopback (e.g. `http://localhost:5557`) rather than `*.langgraph.app`.
+ */
+export const MDA_PUBLIC_API_URL_ENV = "MDA_PUBLIC_API_URL";
+/**
+ * Signing key for OAuth `state` JWTs (Connect-with-Slack). Reuses the guest
+ * token key so deployments do not need a third secret; never the Slack
+ * client secret (that value is an OAuth credential, not a signing key).
+ */
+export const OAUTH_STATE_SIGNING_KEY_ENV = "MDA_GUEST_SIGNING_KEY";
+/** Override Slack OIDC base (tests). */
+export const SLACK_OIDC_BASE_ENV = "SLACK_OIDC_BASE";
+const DEFAULT_OIDC_BASE = "https://slack.com";
+const STATE_TTL_MS = 10 * 60 * 1000;
+const STATE_JWT_TYP = "mda-slack-oauth-state";
+export function readSlackOidcConfig(env = process.env) {
+    const clientId = env[SLACK_CLIENT_ID_ENV]?.trim();
+    const clientSecret = env[SLACK_CLIENT_SECRET_ENV]?.trim();
+    const publicAppUrl = env[MDA_PUBLIC_APP_URL_ENV]?.trim();
+    if (!clientId || !clientSecret || !publicAppUrl) {
+        return null;
+    }
+    return {
+        clientId,
+        clientSecret,
+        ...(env[SLACK_TEAM_ID_ENV]?.trim()
+            ? { teamId: env[SLACK_TEAM_ID_ENV].trim() }
+            : {}),
+        publicAppUrl: publicAppUrl.replace(/\/$/, ""),
+        oidcBase: (env[SLACK_OIDC_BASE_ENV]?.trim() || DEFAULT_OIDC_BASE).replace(/\/$/, ""),
+    };
+}
+export function slackConnectUrl(publicAppUrl) {
+    return `${publicAppUrl.replace(/\/$/, "")}/settings`;
+}
+/**
+ * Public base URL for Slack OAuth `redirect_uri` (`…/identity/slack/callback`).
+ *
+ * Prefer an explicit public Agent Server URL over the ASGI request origin:
+ * LangGraph Host rewrites requests to an internal loopback that Slack cannot
+ * use as a redirect.
+ */
+export function resolveSlackOauthRedirectBase(options) {
+    const env = options.env ?? process.env;
+    if (options.deploymentBaseUrl?.trim()) {
+        return options.deploymentBaseUrl.trim().replace(/\/$/, "");
+    }
+    const fromEnv = env[MDA_PUBLIC_API_URL_ENV]?.trim().replace(/\/$/, "");
+    if (fromEnv && !isLoopbackUrl(fromEnv)) {
+        return fromEnv;
+    }
+    const forwarded = publicOriginFromForwardedHeaders(options.headers);
+    if (forwarded) {
+        return forwarded;
+    }
+    return new URL(options.requestUrl).origin;
+}
+function publicOriginFromForwardedHeaders(headers) {
+    if (!headers) {
+        return undefined;
+    }
+    const host = headers.get("x-forwarded-host")?.split(",")[0]?.trim();
+    if (!host || isLoopbackHost(host)) {
+        return undefined;
+    }
+    const proto = headers.get("x-forwarded-proto")?.split(",")[0]?.trim() ||
+        (host.includes("localhost") || host.startsWith("127.") ? "http" : "https");
+    return `${proto}://${host}`;
+}
+function isLoopbackUrl(value) {
+    try {
+        return isLoopbackHost(new URL(value).hostname);
+    }
+    catch {
+        return false;
+    }
+}
+function isLoopbackHost(host) {
+    const hostname = host
+        .replace(/^\[|\]$/g, "")
+        .split(":")[0]
+        ?.toLowerCase() ?? "";
+    return (hostname === "localhost" || hostname === "127.0.0.1" || hostname === "::1");
+}
+/** Server-side key for OAuth state JWTs; null when Connect cannot bind actors. */
+export function readOauthStateSigningKey(env = process.env) {
+    const key = env[OAUTH_STATE_SIGNING_KEY_ENV]?.trim();
+    return key || null;
+}
+export function buildSlackAuthorizeUrl(config, state, redirectUri) {
+    const url = new URL(`${config.oidcBase}/openid/connect/authorize`);
+    url.searchParams.set("response_type", "code");
+    url.searchParams.set("client_id", config.clientId);
+    url.searchParams.set("scope", "openid email profile");
+    url.searchParams.set("redirect_uri", redirectUri);
+    url.searchParams.set("state", state);
+    if (config.teamId) {
+        url.searchParams.set("team", config.teamId);
+    }
+    return url.toString();
+}
+/** Signed state binding the authenticated actor to the OAuth round-trip. */
+export async function createSlackOauthState(actorId, signingKey, nowMs = Date.now()) {
+    const iat = Math.floor(nowMs / 1000);
+    const exp = Math.floor((nowMs + STATE_TTL_MS) / 1000);
+    return new SignJWT({
+        actorId,
+        nonce: randomBytes(16).toString("hex"),
+    })
+        .setProtectedHeader({ alg: "HS256", typ: STATE_JWT_TYP })
+        .setIssuedAt(iat)
+        .setExpirationTime(exp)
+        .sign(stateSigningKey(signingKey));
+}
+export async function verifySlackOauthState(state, signingKey, nowMs = Date.now()) {
+    try {
+        const { payload } = await jwtVerify(state, stateSigningKey(signingKey), {
+            algorithms: ["HS256"],
+            typ: STATE_JWT_TYP,
+            currentDate: new Date(nowMs),
+        });
+        if (typeof payload.actorId !== "string" || !payload.actorId) {
+            throw new Error("invalid OAuth state actor");
+        }
+        return { actorId: payload.actorId };
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.startsWith("invalid OAuth state")) {
+            throw err;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        if (/exp|expir/i.test(message)) {
+            throw new Error("OAuth state expired");
+        }
+        throw new Error("invalid OAuth state signature");
+    }
+}
+export async function exchangeSlackOidcCode(config, code, redirectUri) {
+    const tokenUrl = `${config.oidcBase}/api/openid.connect.token`;
+    const body = new URLSearchParams({
+        client_id: config.clientId,
+        client_secret: config.clientSecret,
+        code,
+        redirect_uri: redirectUri,
+        grant_type: "authorization_code",
+    });
+    const tokenResponse = await fetch(tokenUrl, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body,
+    });
+    const tokenJson = (await tokenResponse.json());
+    if (!tokenResponse.ok || tokenJson.ok === false || !tokenJson.access_token) {
+        throw new Error(tokenJson.error ?? "Slack OIDC token exchange failed");
+    }
+    const userInfoUrl = `${config.oidcBase}/api/openid.connect.userInfo`;
+    const userResponse = await fetch(userInfoUrl, {
+        headers: { Authorization: `Bearer ${tokenJson.access_token}` },
+    });
+    const userJson = (await userResponse.json());
+    if (!userResponse.ok || userJson.ok === false) {
+        throw new Error(userJson.error ?? "Slack OIDC userInfo failed");
+    }
+    const userId = userJson["https://slack.com/user_id"] ??
+        (typeof userJson.sub === "string"
+            ? userJson.sub.split("|").pop()
+            : undefined);
+    if (!userId) {
+        throw new Error("Slack OIDC userInfo missing user id");
+    }
+    return {
+        userId,
+        ...(userJson["https://slack.com/team_id"]
+            ? { teamId: userJson["https://slack.com/team_id"] }
+            : {}),
+        ...(typeof userJson.email === "string" ? { email: userJson.email } : {}),
+    };
+}
+function stateSigningKey(signingKey) {
+    return new TextEncoder().encode(signingKey);
+}
+//# sourceMappingURL=slack-oauth.js.map

package/dist/identity/slack-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-oauth.js","sourceRoot":"","sources":["../../src/identity/slack-oauth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAC3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAEnE,wCAAwC;AACxC,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAgB9C,MAAM,UAAU,mBAAmB,CACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE;YAChC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAE,CAAC,IAAI,EAAE,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7C,QAAQ,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,iBAAiB,CAAC,CAAC,OAAO,CACvE,KAAK,EACL,EAAE,CACH;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAK7C;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,OAAO,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,gCAAgC,CACvC,OAAoE;IAEpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;QACvD,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,QAAQ,GACZ,IAAI;SACD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1B,OAAO,CACL,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,CAC3E,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CACtC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC;IACrD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAuB,EACvB,KAAa,EACb,WAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,2BAA2B,CAAC,CAAC;IACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,UAAkB,EAClB,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACtD,OAAO,IAAI,OAAO,CAAC;QACjB,OAAO;QACP,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KACvC,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;SACxD,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,UAAkB,EAClB,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE;YACtE,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,EAAE,aAAa;YAClB,WAAW,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC1E,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAuB,EACvB,IAAY,EACZ,WAAmB;IAEnB,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,2BAA2B,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,IAAI;QACJ,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,oBAAoB;KACjC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI;KACL,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAK5C,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,kCAAkC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,MAAM,CAAC,QAAQ,8BAA8B,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,YAAY,EAAE,EAAE;KAC/D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAO1C,CAAC;IACF,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,4BAA4B,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GACV,QAAQ,CAAC,2BAA2B,CAAC;QACrC,CAAC,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAC/B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;YAC/B,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO;QACL,MAAM;QACN,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACvC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,2BAA2B,CAAC,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts

@@ -5,10 +5,15 @@ export type { LangSmithCapability, LangSmithCallerSurface, LangSmithCapabilitySc
 export { defineSchedule } from "./schedules.js";
 export { defineSandbox } from "./sandbox.js";
 export { defineIdentity, providers, validateIdentity, } from "./identity/index.js";
+export { defineSlackChannel } from "./channels/slack/index.js";
+export { CHANNEL_ERROR_CODES, ChannelError, createRuntimeChannel, normalizeChannelDestination, wasFinalPosted, } from "./channels/index.js";
+export { decodeSlackSourceThreadKey, encodeSlackSourceThreadKey, normalizeSlackEvent, requiredSlackScopes, toChannelManifest, verifySlackRequest, } from "./channels/slack/index.js";
 export type { CredentialResolver, CredentialResolverConfig, CredentialScope, CredentialTarget, DefineIdentity, HttpIngress, IdentityConfig, IdentityDefinition, IdentityPresetName, MemoryScope, ResolvedCredential, RuntimeIdentity, Tenancy, ThreadScope, ValidatedTokenIngress, ValidatedTokenProvider, } from "./identity/index.js";
 export type { HttpMcpServerConfig, McpServersConfig, McpServersDefinition, McpToolSelectionConfig, RemoteMcpServerBaseConfig, RemoteMcpServerConfig, SseMcpServerConfig, } from "./connectors.js";
 export type { ScheduleConfig, ScheduleDefinition, ScheduleDeliveryTarget, ScheduleThreadConfig, } from "./schedules.js";
-export type { ChannelDestination, DeepAgentDefinition, DefineDeepAgentConfig, InferConfigMiddlewareState, InferConfigStateSchema, ManagedDeepAgentKey, } from "./types.js";
+export type { ChannelAddress, ChannelCapabilities, ChannelDestination, ChannelErrorCode, ChannelEvent, ChannelMessage, ChannelMessageUpdate, ChannelProvider, PostedChannelMessage, RuntimeChannel, } from "./channels/index.js";
+export type { ChannelManifest, SlackChannelConfig, SlackChannelDefinition, SlackChannelTrigger, } from "./channels/slack/index.js";
+export type { DeepAgentDefinition, DefineDeepAgentConfig, InferConfigMiddlewareState, InferConfigStateSchema, ManagedDeepAgentKey, } from "./types.js";
 export type { ManagedDeepAgentRuntime, ManagedRuntimeExtras, } from "./runtime/managed-tools.js";
 export type { DefineSandboxOptions, ManagedSandboxOptionKey, SandboxDefinition, SandboxProviderClass, SandboxProviderOptions, SandboxScope, } from "./sandbox.js";
 //# sourceMappingURL=index.d.ts.map