feat: unfurl dashboard links shared in Slack

[simplesagar]

Summary

Gram dashboard links pasted in Slack currently render bare — the dashboard is an auth-gated SPA, so Slack's crawler can never show a meaningful icon or title. This PR gives them Linear-style link previews: the Gram logo plus a humanized page title, supplied by the Gram Slack app itself.

Manifest (dashboard):

• The generated Slack app manifest registers the dashboard hostname as an unfurl_domains entry (gated on a webhook being configured, skipped for dot-less hosts like localhost), which is what makes Slack deliver link_shared events for our links.
• The link_shared event binding now also grants links:write, required by chat.unfurl.

Server (trigger webhook):

• decodeSlackEvent gains a link_shared branch (message_ts → Ts, thread_ts, channel) so correlation works for these events.
• New unfurlSlackGramLinks on the triggers App, called at webhook ingress before ProcessEvent — link previews render even when no assistant subscribes to link_shared. It mirrors the best-effort ackSlackThreadStatus pattern: bot token from the trigger environment, failures only cost the preview.
• Titles are derived purely from the URL path (/acme/projects/default/toolsets/my-tools → "My Tools · Toolsets"; opaque UUID/numeric segments are skipped). No database lookups, so an unfurl reveals nothing beyond what the pasted URL already shows.
• New SlackClient.Unfurl wrapper for chat.unfurl, preferring unfurl_id+source (composer support) over channel+ts.
• The worker passes a nil site URL — webhook ingress (ProcessWebhook) only runs in the HTTP server.

Notes

• Unfurls only appear in workspaces where a Gram Slack app (created from the updated manifest) is installed — same constraint as Linear. Existing installs need the app manifest updated + reinstalled to pick up links:write/unfurl_domains.

Testing

• mise build:server, mise lint:server, pnpm -F dashboard lint, dashboard tsc -p tsconfig.app.json --noEmit all pass.
• New unit tests: link_shared decode, title derivation, slug humanization, mrkdwn escaping.
• go test ./internal/background/triggers ./internal/triggers pass.

🤖 Generated with Claude Code

https://claude.ai/code/session_01VszAzsDK7sBjGW1GeNPNZX

---

Summary by cubic

Unfurl Gram dashboard links shared in Slack with the Speakeasy logo (dashboard favicon) and a humanized page title. Link previews are sent via chat.unfurl at webhook ingress and only when the Slack trigger is active.

• New Features

  • Dashboard manifest: add links:write and set unfurl_domains to the dashboard hostname when a webhook is configured (skips dotless hosts like localhost).
  • Trigger webhook: decode link_shared and unfurl dashboard links before event processing; runs only for active triggers; titles come from URL paths (drops opaque IDs and separator-only segments); Speakeasy branding with a safe fallback title ("Speakeasy dashboard"); supports both unfurl_id/source and channel/ts.
  • Slack client: add Unfurl helper and NewSlackClientWithBaseURL for end-to-end tests against a fake Slack API; tests cover chat.unfurl, composer addressing, and foreign-domain filtering.

• Migration

  • Update and reinstall the Slack app from the new manifest to grant links:write and register the dashboard host.
  • Ensure SLACK_BOT_TOKEN is set for the trigger environment.

^{Written for commit 4966893. Summary will update on new commits.}

[changeset-bot]

🦋 Changeset detected

Latest commit: 1dc3427

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
server	Patch
dashboard	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[speakeasybot]

🚀 Preview Environment (PR #4244)

Preview URL: https://pr-4244.dev.getgram.ai

Component	Status	Details	Updated (UTC)
✅ Database	Ready	Existing database reused	2026-07-16 15:11:27.
✅ Images	Available	Container images ready	2026-07-16 15:11:11.

_{Gram Preview Bot}

[cubic-dev-ai]

1 issue found across 13 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="server/internal/background/triggers/app.go">

<violation number="1" location="server/internal/background/triggers/app.go:754">
P2: Paused Slack triggers still create link previews because this call runs before `ProcessEvent` applies the active-status check. Gate the best-effort unfurl on `StatusActive` so pausing a trigger disables all webhook effects.</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>