paperclip-plugin-slack-socket 0.1.0 → 0.1.1

package/README.md

@@ -20,7 +20,15 @@ Paperclip installs plugins instance-wide from an npm package name or a local pat
 - **CLI** — `paperclipai plugin install <npm-package-or-absolute-path>`.
 - **REST API** — `POST /api/plugins/install` with a JSON body of `{"packageName": "...", "isLocalPath": true|false}`.
 
-This package is not yet published to npm, so today you install it from a local clone instead of by package name:
+The package is published on npm as [`paperclip-plugin-slack-socket`](https://www.npmjs.com/package/paperclip-plugin-slack-socket), so the normal install is by name through any of the three routes:
+
+```sh
+paperclipai plugin install paperclip-plugin-slack-socket
+```
+
+or enter `paperclip-plugin-slack-socket` in **Settings → Plugins → Install**, or `POST /api/plugins/install` with `{"packageName": "paperclip-plugin-slack-socket"}`.
+
+For development, you can install from a local clone instead:
 
 ```sh
 git clone https://github.com/0xCVH/paperclip-plugin-slack-socket
@@ -29,7 +37,7 @@ npm install
 npm run build
 ```
 
-Then install the **absolute path** to that clone via whichever route you prefer — UI (paste the absolute path where it asks for a package name), CLI (`paperclipai plugin install /absolute/path/to/paperclip-plugin-slack-socket`), or REST (`{"packageName": "/absolute/path/to/paperclip-plugin-slack-socket", "isLocalPath": true}`). Once this package is published to npm, `paperclip-plugin-slack-socket` will install by name through any of the three routes instead.
+then install the **absolute path** to that clone — UI (paste the absolute path where it asks for a package name), CLI (`paperclipai plugin install /absolute/path/to/paperclip-plugin-slack-socket`), or REST (`{"packageName": "/absolute/path/to/paperclip-plugin-slack-socket", "isLocalPath": true}`).
 
 Per Paperclip's plugin spec, the host running Paperclip needs a writable filesystem, `npm` available on its `PATH`, and (for npm-name installs) network access to the npm registry.
 
@@ -47,8 +55,8 @@ That's it on the Slack side — the manifest already enables Socket Mode, declar
 1. In Paperclip, go to **Settings → Secrets** and create two secrets: one holding the Bot User OAuth Token (`xoxb-…`) and one holding the App-Level Token (`xapp-…`). Note the secret reference Paperclip shows for each (the settings form's secret-ref fields store whatever the Secrets page provides — the plugin passes it through opaquely and never sees the raw value).
 2. Install the plugin into your Paperclip instance (plugin id `cvh.slack-socket`) — see [Install the plugin](#install-the-plugin) above.
 3. Open the plugin's instance settings and fill in:
-   - **Slack Bot Token (secret reference)** — the secret reference for the bot token secret from step 1.
-   - **Slack App-Level Token (secret reference)** — the secret reference for the app token secret from step 1.
+   - **Slack Bot Token (secret reference)** — use the field's secret picker to select the bot token secret from step 1. The picker stores a secret reference, which is what the plugin resolves at runtime; typing a raw UUID into the field instead will fail to resolve.
+   - **Slack App-Level Token (secret reference)** — likewise, pick the app token secret from step 1.
    - **Company ID** — the Paperclip company UUID used for sessions, issues, and approvals.
    - **Default Agent ID** — the agent that handles DM and @mention conversations.
    - **Default Slack Channel ID** — the fallback channel for notifications (e.g. `C01ABC2DEF3`).

package/dist/constants.d.ts

@@ -1,7 +1,7 @@
 import type { PluginToolDeclaration, ScopeKey } from "@paperclipai/plugin-sdk";
 import type { SlackSocketConfig } from "./types.js";
 export declare const PLUGIN_ID = "cvh.slack-socket";
-export declare const PLUGIN_VERSION = "0.1.0";
+export declare const PLUGIN_VERSION = "0.1.1";
 export declare const ACTION_IDS: {
     readonly approvalApprove: "approval_approve";
     readonly approvalReject: "approval_reject";

package/dist/constants.js

@@ -1,5 +1,5 @@
 export const PLUGIN_ID = "cvh.slack-socket";
-export const PLUGIN_VERSION = "0.1.0";
+export const PLUGIN_VERSION = "0.1.1";
 export const ACTION_IDS = {
     approvalApprove: "approval_approve",
     approvalReject: "approval_reject",

package/dist/manifest.js

@@ -32,17 +32,23 @@ const manifest = {
         type: "object",
         properties: {
             slackBotTokenRef: {
-                type: "string",
+                // The host's secret picker stores a `{ type: "secret_ref", secretId,
+                // version }` object, and ctx.secrets.resolve() fails closed on plain
+                // UUID strings — so the object is the shape that actually works at
+                // runtime. The string branch keeps the form's raw-input path valid.
+                // The host validates the binding itself; constraining it further here
+                // would reject valid shapes (e.g. a numeric `version` selector).
+                type: ["string", "object"],
                 format: "secret-ref",
                 title: "Slack Bot Token (secret reference)",
-                description: "Secret UUID holding your Slack Bot OAuth token (xoxb-…). Create the secret in Settings → Secrets, then paste its UUID here.",
+                description: "Secret holding your Slack Bot OAuth token (xoxb-…). Create the secret in Settings → Secrets, then select it with the secret picker here.",
                 default: DEFAULT_CONFIG.slackBotTokenRef,
             },
             slackAppTokenRef: {
-                type: "string",
+                type: ["string", "object"],
                 format: "secret-ref",
                 title: "Slack App-Level Token (secret reference)",
-                description: "Secret UUID holding your Slack App-Level token (xapp-…) with the connections:write scope.",
+                description: "Secret holding your Slack App-Level token (xapp-…) with the connections:write scope. Select it with the secret picker.",
                 default: DEFAULT_CONFIG.slackAppTokenRef,
             },
             companyId: {
@@ -108,7 +114,7 @@ const manifest = {
                 default: DEFAULT_CONFIG.paperclipBaseUrl,
             },
             paperclipApiKeyRef: {
-                type: "string",
+                type: ["string", "object"],
                 format: "secret-ref",
                 title: "Paperclip Board API Key (secret reference)",
                 description: "Secret reference holding a Paperclip API key for a board-role user, sent as an Authorization: Bearer header on approval decision requests. Leave empty for local_trusted deployments, where every request is implicitly authenticated as board and no header is needed. Required for authenticated deployments so approval decisions (Approve/Reject button clicks) authenticate as a board user.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "paperclip-plugin-slack-socket",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "module",
   "description": "Slack Socket Mode plugin for Paperclip: agent chat, notifications, approvals, ask-human tool. No public URL required.",
   "main": "./dist/index.js",
@@ -20,10 +20,15 @@
   "devDependencies": {
     "@paperclipai/plugin-sdk": "2026.722.0",
     "@types/node": "^25.5.2",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
     "typescript": "^5.7.0",
     "vitest": "^3.2.6"
   },
-  "files": ["dist/", "slack-app-manifest.json"],
+  "files": [
+    "dist/",
+    "slack-app-manifest.json"
+  ],
   "paperclipPlugin": {
     "manifest": "./dist/manifest.js",
     "worker": "./dist/worker.js"