fix(build): externalize @slack/web-api in build:cjs + declare as root dep

[khaliqgant]

What

• scripts/build-cjs.mjs: add @slack/web-api to esbuild external (mirrors ssh2/better-sqlite3).
• root package.json: declare @slack/web-api: ^7.16.0 (matches @agent-relay/slack-primitive); lockfile hoists it to root (7.15.2→7.16.0).

Why

build:cjs bundles the @agent-relay/slack-primitive workspace source, which imports @slack/web-api. esbuild had to resolve+bundle it, but it isn't installed in every publish context → Could not resolve "@slack/web-api" broke build:cjs and the agent-relay publish. Externalizing it (loaded at runtime) + declaring it as a root dep fixes the build deterministically and keeps it resolvable at runtime for consumers.

Verified

npm run build:cjs now passes (exit 0, dist/index.cjs produced); @slack/web-api is a runtime require() in the output, not inlined.

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 5761bbf7-cb4c-4991-aa30-9f0c6ab8fd0d

📥 Commits

Reviewing files that changed from the base of the PR and between ec38236 and 0b8aac6.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• package.json
• scripts/build-cjs.mjs

---

📝 Walkthrough

Walkthrough

The PR adds the Slack Web API client library (@slack/web-api@^7.16.0) as a project dependency and configures the CJS build to externalize it so it is resolved at runtime rather than bundled.

Changes

Slack Web API Integration

Layer / File(s)	Summary
Slack Web API dependency and build externalization package.json, scripts/build-cjs.mjs	@slack/web-api is declared in dependencies and marked as external in the esbuild CJS configuration to ensure it is installed separately and not bundled into the distribution.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• AgentWorkforce/relay#956: Both PRs involve updating @slack/web-api to ^7.16.0 in package.json; this PR adds it as a new dependency and externalizes it in the CJS build, while the related PR addresses a security advisory through the same dependency version bump.

Suggested reviewers

• willwashburn

Poem

🐰 A Slack connection now appears,
External, never bundled here!
The runtime calls, the API gleams,
Your messages flow through relay's streams! 📨

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main changes: externalizing @slack/web-api in the CJS build and declaring it as a root dependency.
Description check	✅ Passed	The description covers the What, Why, and Verified sections with good detail, though it lacks the template's Test Plan and Screenshots sections.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/build-cjs-external-slack-web-api

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install failed: one or more packages not found in the registry.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

No issues found across 3 files

_{Re-trigger cubic}