Skip to content

[OPE-169] Fix Slack manifest: remove invalid user scopes, add app_mentions:read and reaction_added#98

Closed
singret wants to merge 1 commit into
mainfrom
ope-169-fix-slack-manifest
Closed

[OPE-169] Fix Slack manifest: remove invalid user scopes, add app_mentions:read and reaction_added#98
singret wants to merge 1 commit into
mainfrom
ope-169-fix-slack-manifest

Conversation

@singret
Copy link
Copy Markdown
Contributor

@singret singret commented May 25, 2026

Summary

Three fixes to slack-app-manifest.yaml that were silently blocking Slack event delivery. The handler code for all events already existed — the manifest was the only missing piece.

  • Remove invalid user OAuth scopes (openid, email, profile) — these are Slack Login / OpenID Connect scopes; having them in a pure bot app's manifest breaks installation in many workspaces
  • Add app_mentions:read + app_mention event — required for the existing handleAppMention handler to receive @regen mentions; Slack silently drops events for undeclared scopes
  • Add reactions:read + reaction_added event — required for the existing handleReactionAdded handler that maps ✅ → Acknowledged and 🔴 → Resolved; same silent-drop behaviour
  • Add users:read.email — used by the JIT Slack→Regen account linker in resolveSlackUserToInternal

After this fix

Reinstalling the app with the updated manifest will enable:

  • @regen summarise this incident → AI response in thread + timeline entry
  • ✅ reaction on incident card → incident moves to Acknowledged in Regen UI
  • 🔴 reaction on incident card → incident moves to Resolved in Regen UI

Test plan

  • Import updated manifest into a Slack workspace (no validation errors)
  • Reinstall the app (OAuth scopes changed — reinstall required)
  • @regen mention in an incident channel → bot replies in thread
  • React ✅ on the incident card → Regen UI shows Acknowledged
  • React 🔴 on the incident card → Regen UI shows Resolved

Closes OPE-169

…sync

Three fixes to make Slack event delivery work correctly:

- Remove invalid user OAuth scopes (openid/email/profile are for Slack
  Login / OpenID Connect, not bot apps; their presence breaks manifest
  import in many workspaces)
- Add app_mentions:read scope and app_mention bot event so @regen
  mentions are delivered to the Socket Mode handler
- Add reactions:read scope and reaction_added bot event so emoji
  reactions on the incident card (✅ ack, 🔴 resolve) trigger the
  existing reaction handler
- Add users:read.email scope used by the JIT Slack→Regen account linker

The handler code for all three event types already exists in
slack_event_handler.go — missing scopes were silently blocking delivery.

Closes OPE-169
@singret
Copy link
Copy Markdown
Contributor Author

singret commented May 26, 2026

Superseded by #101 (OPE-173) which includes all scope fixes in the UI-generated manifest. Closing.

@singret singret closed this May 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant