Slack bot integration roadmap #1395

Summary

Track Slack-specific development independently from the TypeScript SDK.

The reference implementation is delivered. It supports Slack DMs and channel
threads, streaming responses, cancellation, remote authentication, caller
restrictions, and rate limiting. The remaining work concerns operating and
expanding the Slack integration rather than completing the SDK.

The delivered foundation is recorded in #881, #882, and #883. Those issues
close as completed.

Current work

Operations and deployment

• Use a hardened runtime image (Switch the Slack bot's release image to a hardened base #1085).
• Expose readiness and health for the Socket Mode connection (Slack bot: expose a readiness/health endpoint for Socket Mode connection state #1191).
• Reconcile the checked-in and deployed Slack app manifests (Slack app manifest: reconcile drift both ways (live app vs. checked-in reference) #1345).

Authorization and safety

• Complete interactive OAuth authorization from Slack (Slack bot: drop the useless DM greeting, add real OAuth authorization completion #1298).
• Add a manual permission approval flow using Slack UI components (Slack bot: manual permission approval flow #1397).
• Enforce a per-run token or spend budget (Slack bot: enforce per-run token and spend budgets #1396).

Session continuity and behavior

• Persist Slack thread-to-Mecatl session bindings across bot restarts
  (Slack bot: persist thread-to-session bindings across restarts #1399).
• Live-verify channel streaming, stop handling, and fallback behavior
  (Slack bot: live-verify channel streaming, stop, and fallback behavior #1398).
• Decide how stale or deleted Mecatl sessions affect retained Slack
  thread bindings.

Identity and expansion

• Explore multiple mentionable identities backed by Mecatl agent
  definitions (Slack bot: multiple @-mentionable identities backed by mecatl agent definitions #1053).

Boundaries

This parent owns Slack events, interaction design, deployment, identity,
authorization presentation, and Slack-specific persistence.

Generic TypeScript SDK release work remains under #1394. Mecatl server,
MCP broker, and Redis storage changes retain their own parents and are linked
here only when the Slack integration depends on them.

Delivered foundation

• feat(sdk): add Slack bot reference example #995: initial Slack bot reference implementation.
• feat(slack-bot): TLS + OIDC client_credentials for remote deployments #1054: TLS, remote deployment, and machine authentication.
• fix(slack-bot): scope error/rejection replies to the requesting user only #1245 and fix(slack-bot): handle stuck external-authorization sessions gracefully #1287: safer user-scoped failures and authorization handling.
• feat(slack-bot): use sdk package #1289: consumption through the published SDK package.

Completion

Close this parent when every linked Slack issue is either completed or moved
to a separately approved integration milestone.

Fully or partially written by an AI agent.