systemprompt-models 0.21.0

Foundation data models for systemprompt.io AI governance infrastructure. Shared DTOs, config, and domain types consumed by every layer of the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

//! Declarative configuration for Slack apps.
//!
//! Each app describes one Slack workspace: the secret references for its
//! signing secret and bot token, the agent it routes to, and the roles
//! permitted to drive it. Secrets are never inlined — only references resolved
//! through the profile's secret source at boot. This type lives in `models`
//! (not the `slack` domain crate) so it can be embedded in
//! [`super::ServicesConfig`] without a dependency cycle, mirroring
//! `AgentConfig` and `McpServerSummary`.

use std::collections::BTreeMap;

use schemars::JsonSchema;
use serde::{Deserialize, Serialize};
use systemprompt_identifiers::{AgentName, SecretName, SlackWorkspaceId};

use crate::errors::ConfigValidationError;

/// A single configured Slack app, keyed by a human name in the manifest.
#[derive(Debug, Clone, Serialize, Deserialize, JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct SlackAppConfig {
    /// The Slack workspace (team) id this app serves.
    pub workspace_id: SlackWorkspaceId,
    /// Reference into the profile secret store for the signing secret.
    pub signing_secret_ref: SecretName,
    /// Reference into the profile secret store for the bot OAuth token.
    pub bot_token_ref: SecretName,
    #[serde(default = "default_enabled")]
    pub enabled: bool,
    /// Agent used when no `routing` entry matches.
    #[serde(default, skip_serializing_if = "Option::is_none")]
    pub default_agent: Option<AgentName>,
    /// Per-channel or per-command agent overrides (key: channel id or `/cmd`).
    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
    pub routing: BTreeMap<String, AgentName>,
    #[serde(default)]
    pub authz: SlackAuthzConfig,
}

/// Authorization seed for an app — the roles granted access to its surfaces.
#[derive(Debug, Clone, Default, Serialize, Deserialize, JsonSchema)]
#[serde(deny_unknown_fields)]
pub struct SlackAuthzConfig {
    #[serde(default)]
    pub allowed_roles: Vec<String>,
}

const fn default_enabled() -> bool {
    true
}

impl SlackAppConfig {
    /// Resolve the agent for a routing key (channel id or `/command`), falling
    /// back to `default_agent`.
    #[must_use]
    pub fn agent_for(&self, key: &str) -> Option<&AgentName> {
        self.routing.get(key).or(self.default_agent.as_ref())
    }

    pub fn validate(&self, name: &str) -> Result<(), ConfigValidationError> {
        if self.workspace_id.as_str().is_empty() {
            return Err(ConfigValidationError::invalid_field(format!(
                "slack app '{name}' has an empty workspace_id"
            )));
        }
        if self.default_agent.is_none() && self.routing.is_empty() {
            return Err(ConfigValidationError::required(format!(
                "slack app '{name}' must set default_agent or at least one routing entry"
            )));
        }
        Ok(())
    }
}