slackhive 0.1.37 → 0.1.38

package/CONTRIBUTING.md

@@ -0,0 +1,204 @@
+# Contributing to SlackHive
+
+Thank you for your interest in contributing to SlackHive! This document covers everything you need to get started. For a general introduction to contributing on GitHub, see the [GitHub contributing guide](https://docs.github.com/en/get-started/exploring-projects-on-github/contributing-to-a-project).
+
+---
+
+## Table of Contents
+
+- [Prerequisites](#prerequisites)
+- [Local Development Setup](#local-development-setup)
+- [Repository Structure](#repository-structure)
+- [Branch Naming](#branch-naming)
+- [Commit Style](#commit-style)
+- [Pull Request Process](#pull-request-process)
+- [Code Standards](#code-standards)
+- [Reporting Bugs and Requesting Features](#reporting-bugs-and-requesting-features)
+
+---
+
+## Prerequisites
+
+Before you begin, ensure the following tools are installed:
+
+| Tool | Minimum Version | Notes |
+|------|----------------|-------|
+| [Docker](https://docs.docker.com/get-docker/) | 24+ | Required for running Postgres, Redis, and the full stack |
+| [Docker Compose](https://docs.docker.com/compose/install/) | v2.20+ | Bundled with Docker Desktop |
+| [Node.js](https://nodejs.org/) | 20+ | Used for running apps locally outside Docker |
+| [git](https://git-scm.com/) | 2.38+ | |
+
+> **Note:** Never run `npm`/`node` directly on your host machine for production-style testing — always use Docker or `docker compose` for infrastructure services (Postgres, Redis).
+
+---
+
+## Local Development Setup
+
+### 1. Fork and clone the repository
+
+```bash
+# Fork via GitHub UI, then clone your fork
+git clone https://github.com/<your-username>/slackhive.git
+cd slackhive
+
+# Add the upstream remote
+git remote add upstream https://github.com/pelago-labs/slackhive.git
+```
+
+### 2. Set up environment variables
+
+Each app has its own `.env` file. Start from the provided examples:
+
+```bash
+cp apps/web/.env.example apps/web/.env
+cp apps/runner/.env.example apps/runner/.env
+```
+
+Edit each `.env` with your Slack app credentials, Anthropic API key, and other required values. Refer to the `README.md` for a description of each variable.
+
+### 3. Start infrastructure services
+
+```bash
+docker compose up postgres redis -d
+```
+
+This starts Postgres and Redis in the background. They will be available on their default ports.
+
+### 4. Install dependencies
+
+```bash
+npm install
+```
+
+This installs dependencies for all workspaces (`apps/web`, `apps/runner`, `packages/shared`, `cli`) via npm workspaces.
+
+### 5. Build the shared package
+
+The shared package must be built before dependent apps can start:
+
+```bash
+npm run build --workspace=packages/shared
+```
+
+### 6. Run database migrations
+
+```bash
+# Inside the web app
+cd apps/web && npx prisma migrate dev
+```
+
+### 7. Start the development servers
+
+Open separate terminals for each app:
+
+```bash
+# Terminal 1 — Next.js web app
+cd apps/web && npm run dev
+
+# Terminal 2 — Node runner
+cd apps/runner && npm run dev
+```
+
+The web app is available at [http://localhost:3000](http://localhost:3000) by default.
+
+---
+
+## Repository Structure
+
+```
+slackhive/
+├── apps/
+│   ├── web/          # Next.js web application (dashboard, API routes)
+│   └── runner/       # Node.js agent runner
+├── packages/
+│   └── shared/       # Shared TypeScript types and utilities
+├── cli/              # SlackHive CLI tool
+├── scripts/          # Development helper scripts
+└── docker-compose.yml
+```
+
+---
+
+## Branch Naming
+
+Use the following prefixes for all branches, branched from `main`:
+
+| Prefix | Use for |
+|--------|---------|
+| `feat/` | New features (e.g., `feat/agent-memory-viewer`) |
+| `fix/` | Bug fixes (e.g., `fix/slack-oauth-redirect`) |
+| `chore/` | Maintenance, deps, tooling (e.g., `chore/update-prisma`) |
+| `docs/` | Documentation only (e.g., `docs/setup-guide`) |
+
+---
+
+## Commit Style
+
+SlackHive uses [Conventional Commits](https://www.conventionalcommits.org/). Each commit message must follow this format:
+
+```
+<type>(<optional scope>): <short description>
+
+[optional body]
+
+[optional footer]
+```
+
+**Types:**
+
+| Type | Description |
+|------|-------------|
+| `feat` | A new feature |
+| `fix` | A bug fix |
+| `chore` | Build process, tooling, or dependency updates |
+| `docs` | Documentation changes only |
+| `refactor` | Code change that is neither a fix nor a feature |
+| `test` | Adding or updating tests |
+| `perf` | Performance improvements |
+| `ci` | CI configuration changes |
+
+**Examples:**
+
+```
+feat(web): add per-agent write access control toggle
+fix(runner): resolve race condition in job scheduler
+chore: upgrade Prisma to 5.14
+docs: add CONTRIBUTING guide
+```
+
+Keep the subject line under 72 characters and use the imperative mood ("add", not "added" or "adds").
+
+---
+
+## Pull Request Process
+
+1. **Fork** the repository and create your branch from `main`.
+2. **Implement** your changes following the code standards below.
+3. **Test** your changes locally with `docker compose up postgres redis -d` and the dev servers running.
+4. **Push** your branch to your fork.
+5. **Open a PR** against the `main` branch of `pelago-labs/slackhive`.
+6. Fill in the **PR template** completely, including screenshots for any UI changes.
+7. Address any review feedback.
+
+PRs should be focused — one logical change per PR. Large refactors should be discussed in a GitHub Discussion or Issue first.
+
+**Merging:** Maintainers merge PRs using squash-and-merge to keep the commit history clean.
+
+---
+
+## Code Standards
+
+- **TypeScript** — all code must be fully typed; avoid `any` unless strictly necessary.
+- **Docstrings** — use [TSDoc](https://tsdoc.org/) / JSDoc-style comments for all exported functions, classes, and types (Google-style param/return descriptions).
+- **Formatting** — the project uses ESLint and Prettier. Run `npm run lint` in the relevant workspace before submitting.
+- **No secrets** — never commit API keys, tokens, or credentials. Use `.env` files (already `.gitignore`d).
+
+---
+
+## Reporting Bugs and Requesting Features
+
+- **Bugs:** Open a [bug report issue](https://github.com/pelago-labs/slackhive/issues/new?template=bug_report.yml).
+- **Features:** Open a [feature request issue](https://github.com/pelago-labs/slackhive/issues/new?template=feature_request.yml).
+- **Questions / discussions:** Use [GitHub Discussions](https://github.com/pelago-labs/slackhive/discussions).
+
+Please do **not** use public issues to report security vulnerabilities. See [SECURITY.md](SECURITY.md) for the responsible disclosure process.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pelago Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -152,6 +152,7 @@ Every agent is a full **Claude Code** agent — with tools, memory, identity, an
 | 🚦 **Channel Restrictions** | Lock agents to specific Slack channels. Bot auto-leaves uninvited channels with a notice. |
 | 📊 **Live Logs** | SSE-streamed log output per agent — with level filters and search. |
 | 🧠 **Memory Viewer** | Browse, inspect, and delete agent memories by type — feedback, user, project, reference. |
+| 🌐 **Multi-Workspace** | Connect multiple Slack workspaces to a single SlackHive instance. Each workspace gets its own agents and configurations. |
 
 ---
 
@@ -199,6 +200,24 @@ ANTHROPIC_API_KEY=sk-ant-api03-...
 Billed per token via the Anthropic API. Best for teams and production.
 
 **Option B — Claude Pro or Max Subscription**
+
+First, install Claude Code on your host machine:
+
+> **Note:** Do not install via `npm` — the npm package is deprecated and incompatible with SlackHive.
+
+MacOS/Linux (Recommended):
+```bash
+curl -fsSL https://claude.ai/install.sh | bash
+```
+
+Homebrew (macOS/Linux):
+```bash
+brew install --cask claude-code
+```
+
+For more installation options, uninstall steps, and troubleshooting, see the [setup documentation](https://docs.anthropic.com/en/docs/claude-code/setup).
+
+Then log in:
 ```bash
 claude login    # run on host machine, saves credentials to ~/.claude/
 ```

package/SECURITY.md

@@ -0,0 +1,47 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest release of SlackHive receives security fixes.
+
+| Version | Supported |
+|---------|-----------|
+| 0.1.x (latest) | ✅ |
+| < 0.1.x | ❌ |
+
+## Reporting a Vulnerability
+
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, use [GitHub's private security advisory feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability) to report vulnerabilities confidentially:
+
+1. Go to the [Security tab](https://github.com/pelago-labs/slackhive/security/advisories/new) of this repository
+2. Click **"Report a vulnerability"**
+3. Fill in the details
+
+Alternatively, email **conduct@slackhive.dev** with the subject line `[SECURITY] <brief description>`.
+
+## Response Timeline
+
+| Stage | Target |
+|-------|--------|
+| Acknowledgement | Within 48 hours |
+| Initial assessment | Within 5 business days |
+| Patch for critical issues | Within 14 days |
+| Patch for moderate issues | Within 30 days |
+
+## Scope
+
+Issues we consider in-scope:
+
+- Authentication bypass or session hijacking
+- SQL injection or data exposure
+- SSRF via MCP server configuration
+- Privilege escalation between user roles
+- Secrets leaked in logs or API responses
+
+Out of scope:
+
+- Vulnerabilities in third-party dependencies (report to upstream)
+- Rate limiting / DoS on self-hosted instances
+- Issues requiring physical access to the host

package/apps/runner/Dockerfile

@@ -0,0 +1,33 @@
+FROM node:20-alpine AS base
+WORKDIR /app
+RUN apk add --no-cache curl
+
+# Install deps
+FROM base AS deps
+COPY package.json package-lock.json ./
+COPY packages/shared/package.json ./packages/shared/
+COPY apps/runner/package.json ./apps/runner/
+RUN npm ci
+
+# Build
+FROM deps AS builder
+COPY packages/shared ./packages/shared
+COPY apps/runner ./apps/runner
+RUN cd packages/shared && npx tsc --skipLibCheck || true
+RUN cd apps/runner && npx tsc --skipLibCheck || true
+
+# Runtime — lean image, no build tools
+FROM node:20-alpine AS runner
+ENV NODE_ENV=production
+WORKDIR /app
+# Install git, Python, pip and graphify for Bash-enabled agents
+RUN apk add --no-cache bash git python3 py3-pip
+COPY --from=builder /app/node_modules ./node_modules
+# Create claude wrapper that uses the SDK's bundled CLI
+RUN printf '#!/bin/sh\ncd /app/node_modules/@anthropic-ai/claude-agent-sdk && exec node cli.js "$@"\n' > /usr/local/bin/claude && \
+    chmod +x /usr/local/bin/claude
+COPY --from=builder /app/packages/shared ./packages/shared
+COPY --from=builder /app/apps/runner ./apps/runner
+COPY --from=builder /app/package.json ./
+
+CMD ["node", "apps/runner/dist/index.js"]

package/apps/runner/dist/__tests__/channel-restrictions.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @fileoverview Unit tests for isChannelRestricted in slack-handler.ts.
+ *
+ * Pure function — no mocks needed.
+ *
+ * @module runner/__tests__/channel-restrictions.test
+ */
+export {};

package/apps/runner/dist/__tests__/channel-restrictions.test.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * @fileoverview Unit tests for isChannelRestricted in slack-handler.ts.
+ *
+ * Pure function — no mocks needed.
+ *
+ * @module runner/__tests__/channel-restrictions.test
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const slack_handler_1 = require("../slack-handler");
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+function makeRestriction(allowedChannels) {
+    return {
+        id: 'r-001',
+        agentId: 'a-001',
+        allowedChannels,
+        updatedAt: new Date(),
+    };
+}
+// ─── isChannelRestricted ──────────────────────────────────────────────────────
+(0, vitest_1.describe)('isChannelRestricted', () => {
+    (0, vitest_1.it)('returns false when restrictions is null', () => {
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_ANY', null)).toBe(false);
+    });
+    (0, vitest_1.it)('returns false when allowedChannels is empty (unrestricted)', () => {
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_ANY', makeRestriction([]))).toBe(false);
+    });
+    (0, vitest_1.it)('returns false when channel is in the allowedChannels list', () => {
+        const r = makeRestriction(['C_ALLOWED', 'C_OTHER']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_ALLOWED', r)).toBe(false);
+    });
+    (0, vitest_1.it)('returns true when channel is NOT in the allowedChannels list', () => {
+        const r = makeRestriction(['C_ALLOWED']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_BLOCKED', r)).toBe(true);
+    });
+    (0, vitest_1.it)('returns true for a DM channel not in the allowedChannels list', () => {
+        const r = makeRestriction(['C_ALLOWED']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('D_DM_CHANNEL', r)).toBe(true);
+    });
+    (0, vitest_1.it)('returns false for a DM channel that is explicitly in the allowedChannels list', () => {
+        const r = makeRestriction(['D_DM_CHANNEL', 'C_ALLOWED']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('D_DM_CHANNEL', r)).toBe(false);
+    });
+    (0, vitest_1.it)('is case-sensitive — does not match wrong case', () => {
+        const r = makeRestriction(['C_abc123']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_ABC123', r)).toBe(true);
+    });
+    (0, vitest_1.it)('handles a single-channel allowlist correctly — allowed', () => {
+        const r = makeRestriction(['C_ONLY']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_ONLY', r)).toBe(false);
+    });
+    (0, vitest_1.it)('handles a single-channel allowlist correctly — blocked', () => {
+        const r = makeRestriction(['C_ONLY']);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_OTHER', r)).toBe(true);
+    });
+    (0, vitest_1.it)('returns false when allowedChannels has many entries and channel matches one', () => {
+        const channels = ['C_1', 'C_2', 'C_3', 'C_4', 'C_5'];
+        const r = makeRestriction(channels);
+        (0, vitest_1.expect)((0, slack_handler_1.isChannelRestricted)('C_3', r)).toBe(false);
+    });
+});
+//# sourceMappingURL=channel-restrictions.test.js.map

package/apps/runner/dist/__tests__/channel-restrictions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-restrictions.test.js","sourceRoot":"","sources":["../../src/__tests__/channel-restrictions.test.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAEH,mCAA8C;AAC9C,oDAAuD;AAGvD,iFAAiF;AAEjF,SAAS,eAAe,CAAC,eAAyB;IAChD,OAAO;QACL,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,OAAO;QAChB,eAAe;QACf,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,IAAA,iBAAQ,EAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QACpD,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACxC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,IAAA,mCAAmB,EAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/apps/runner/dist/__tests__/claude-handler-resolve.test.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @fileoverview Unit tests for ClaudeHandler.resolveServerConfig and resolveEnvRefs.
+ *
+ * Tests cover:
+ * - envRefs resolution: subprocess env var is set from the env vars store value
+ * - envRefs missing key: warning logged, key omitted
+ * - Inline env + envRefs merged: both contribute to the resolved env object
+ * - envRefs stripped from the returned config (SDK doesn't understand it)
+ * - tsSource: source written to disk, config rewritten to use tsx
+ * - Plain stdio config without envRefs returned unchanged
+ *
+ * ClaudeHandler is instantiated with a minimal Agent and no MCP servers so the
+ * constructor side-effects (port hashing, McpProcessManager) are contained.
+ * The private methods are accessed via `(handler as any)` to avoid exposing them.
+ *
+ * No database, no Slack, no filesystem writes for the non-tsSource tests.
+ *
+ * @module runner/__tests__/claude-handler-resolve.test
+ */
+export {};

package/apps/runner/dist/__tests__/claude-handler-resolve.test.js

@@ -0,0 +1,178 @@
+"use strict";
+/**
+ * @fileoverview Unit tests for ClaudeHandler.resolveServerConfig and resolveEnvRefs.
+ *
+ * Tests cover:
+ * - envRefs resolution: subprocess env var is set from the env vars store value
+ * - envRefs missing key: warning logged, key omitted
+ * - Inline env + envRefs merged: both contribute to the resolved env object
+ * - envRefs stripped from the returned config (SDK doesn't understand it)
+ * - tsSource: source written to disk, config rewritten to use tsx
+ * - Plain stdio config without envRefs returned unchanged
+ *
+ * ClaudeHandler is instantiated with a minimal Agent and no MCP servers so the
+ * constructor side-effects (port hashing, McpProcessManager) are contained.
+ * The private methods are accessed via `(handler as any)` to avoid exposing them.
+ *
+ * No database, no Slack, no filesystem writes for the non-tsSource tests.
+ *
+ * @module runner/__tests__/claude-handler-resolve.test
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const vitest_1 = require("vitest");
+const claude_handler_js_1 = require("../claude-handler.js");
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function makeAgent(overrides = {}) {
+    return {
+        id: 'agent-1',
+        name: 'Test Agent',
+        slug: 'test-agent',
+        description: '',
+        slackBotToken: 'xoxb-test',
+        slackAppToken: 'xapp-test',
+        slackSigningSecret: 'secret',
+        model: 'claude-opus-4-6',
+        status: 'stopped',
+        enabled: true,
+        isBoss: false,
+        reportsTo: [],
+        claudeMd: '',
+        createdBy: 'system',
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        ...overrides,
+    };
+}
+function makeHandler(envVarValues = {}, workDir = '/tmp/test-handler') {
+    return new claude_handler_js_1.ClaudeHandler(makeAgent(), [], null, workDir, envVarValues);
+}
+// ─── resolveServerConfig — envRefs ───────────────────────────────────────────
+(0, vitest_1.describe)('resolveServerConfig — envRefs resolution', () => {
+    (0, vitest_1.it)('resolves an envRef to the store value', () => {
+        const handler = makeHandler({ REDSHIFT_DATABASE_URL: 'postgres://host/db' });
+        const config = {
+            command: 'node',
+            args: ['server.js'],
+            envRefs: { DATABASE_URL: 'REDSHIFT_DATABASE_URL' },
+        };
+        const result = handler.resolveServerConfig('my-mcp', config);
+        const env = result.env;
+        (0, vitest_1.expect)(env.DATABASE_URL).toBe('postgres://host/db');
+    });
+    (0, vitest_1.it)('strips envRefs from the resolved config', () => {
+        const handler = makeHandler({ MY_KEY: 'my-value' });
+        const config = { command: 'node', args: [], envRefs: { ENV_KEY: 'MY_KEY' } };
+        const result = handler.resolveServerConfig('srv', config);
+        (0, vitest_1.expect)(result.envRefs).toBeUndefined();
+    });
+    (0, vitest_1.it)('merges inline env with resolved envRefs', () => {
+        const handler = makeHandler({ STORE_KEY: 'store-value' });
+        const config = {
+            command: 'node',
+            args: [],
+            env: { INLINE_VAR: 'inline-value' },
+            envRefs: { REF_VAR: 'STORE_KEY' },
+        };
+        const result = handler.resolveServerConfig('srv', config);
+        const env = result.env;
+        (0, vitest_1.expect)(env.INLINE_VAR).toBe('inline-value');
+        (0, vitest_1.expect)(env.REF_VAR).toBe('store-value');
+    });
+    (0, vitest_1.it)('omits the key when the store entry does not exist', () => {
+        const handler = makeHandler({}); // empty store
+        const config = { command: 'node', args: [], envRefs: { MISSING: 'NOT_IN_STORE' } };
+        const result = handler.resolveServerConfig('srv', config);
+        const env = (result.env ?? {});
+        (0, vitest_1.expect)('MISSING' in env).toBe(false);
+    });
+    (0, vitest_1.it)('returns config unchanged when envRefs is absent', () => {
+        const handler = makeHandler({ KEY: 'val' });
+        const config = { command: 'node', args: ['s.js'], env: { LOCAL: 'x' } };
+        const result = handler.resolveServerConfig('srv', config);
+        (0, vitest_1.expect)(result).toEqual(config);
+    });
+    (0, vitest_1.it)('returns config unchanged when envRefs is an empty object', () => {
+        const handler = makeHandler({ KEY: 'val' });
+        const config = { command: 'node', args: [], envRefs: {} };
+        const result = handler.resolveServerConfig('srv', config);
+        (0, vitest_1.expect)(result).toEqual(config);
+    });
+});
+// ─── resolveServerConfig — tsSource ──────────────────────────────────────────
+(0, vitest_1.describe)('resolveServerConfig — tsSource rewrites to tsx', () => {
+    let tmpDir;
+    (0, vitest_1.afterEach)(() => {
+        if (tmpDir && fs.existsSync(tmpDir)) {
+            fs.rmSync(tmpDir, { recursive: true, force: true });
+        }
+    });
+    (0, vitest_1.it)('writes tsSource to disk and sets command to tsx', () => {
+        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'claude-handler-test-'));
+        const handler = makeHandler({}, tmpDir);
+        const src = 'console.log("hello from ts mcp");';
+        const config = { command: 'ignored', args: [], tsSource: src };
+        const result = handler.resolveServerConfig('my-ts-mcp', config);
+        (0, vitest_1.expect)(result.command).toBe('/app/node_modules/.bin/tsx');
+        (0, vitest_1.expect)(Array.isArray(result.args)).toBe(true);
+        const scriptPath = result.args[0];
+        (0, vitest_1.expect)(scriptPath).toContain('my-ts-mcp.ts');
+        (0, vitest_1.expect)(fs.readFileSync(scriptPath, 'utf8')).toBe(src);
+    });
+    (0, vitest_1.it)('strips tsSource from the resolved config', () => {
+        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'claude-handler-test-'));
+        const handler = makeHandler({}, tmpDir);
+        const config = { command: 'ignored', args: [], tsSource: '// source' };
+        const result = handler.resolveServerConfig('srv', config);
+        (0, vitest_1.expect)(result.tsSource).toBeUndefined();
+    });
+    (0, vitest_1.it)('merges envRefs when tsSource is present', () => {
+        tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'claude-handler-test-'));
+        const handler = makeHandler({ DB_URL: 'postgres://host/db' }, tmpDir);
+        const config = {
+            command: 'ignored',
+            args: [],
+            tsSource: '// source',
+            envRefs: { DATABASE_URL: 'DB_URL' },
+        };
+        const result = handler.resolveServerConfig('srv', config);
+        const env = result.env;
+        (0, vitest_1.expect)(env.DATABASE_URL).toBe('postgres://host/db');
+    });
+});
+//# sourceMappingURL=claude-handler-resolve.test.js.map

package/apps/runner/dist/__tests__/claude-handler-resolve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-handler-resolve.test.js","sourceRoot":"","sources":["../../src/__tests__/claude-handler-resolve.test.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,mCAAyD;AACzD,4DAAqD;AAGrD,gFAAgF;AAEhF,SAAS,SAAS,CAAC,YAA4B,EAAE;IAC/C,OAAO;QACL,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,WAAW;QAC1B,aAAa,EAAE,WAAW;QAC1B,kBAAkB,EAAE,QAAQ;QAC5B,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE;QACrB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,eAAuC,EAAE,EAAE,OAAO,GAAG,mBAAmB;IAC3F,OAAO,IAAI,iCAAa,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,EAAE,YAAY,EAAE,uBAAuB,EAAE;SACnD,CAAC;QACF,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAA4B,CAAC;QACjG,MAAM,GAAG,GAAG,MAAM,CAAC,GAA6B,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC7E,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAA4B,CAAC;QAC9F,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;YACnC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;SAClC,CAAC;QACF,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAA4B,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,GAA6B,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc;QAC/C,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC;QACnF,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAA4B,CAAC;QAC9F,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAA2B,CAAC;QACzD,IAAA,eAAM,EAAC,SAAS,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACxE,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,IAAA,iBAAQ,EAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,IAAI,MAAc,CAAC;IAEnB,IAAA,kBAAS,EAAC,GAAG,EAAE;QACb,IAAI,MAAM,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,mCAAmC,CAAC;QAChD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAA4B,CAAC;QACpG,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1D,IAAA,eAAM,EAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAI,MAAM,CAAC,IAAiB,CAAC,CAAC,CAAC,CAAC;QAChD,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;QACvE,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAA4B,CAAC;QAC9F,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,WAAW;YACrB,OAAO,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;SACpC,CAAC;QACF,MAAM,MAAM,GAAI,OAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAA4B,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,CAAC,GAA6B,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/apps/runner/dist/__tests__/compile-claude-md.test.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @fileoverview Unit tests for compile-claude-md helpers.
+ *
+ * Tests cover:
+ * - CLAUDE.md contains proactive /recall instruction
+ * - CLAUDE.md contains pattern-based memory-save guidance
+ * - CLAUDE.md does NOT contain the old "Only save when user explicitly guides" wording
+ * - materializeMemoryFiles writes MEMORY.md index + individual files
+ * - sanitizeFilename is not exported but indirectly tested via materializeMemoryFiles
+ *
+ * @module runner/__tests__/compile-claude-md.test
+ */
+export {};