fix(slack): default custom bot setup to full permissions

Author: TheodoreSpeaks

apps/docs/content/docs/integrations/slack.mdx

@@ -2184,15 +2184,15 @@ Set the purpose (description) for a Slack channel (max 250 characters).
 
 ### Lists
 
-Lists actions require a custom Slack bot and a paid Slack plan. Enable **Manage Lists** during bot setup. For an existing app, add `lists:read` and `lists:write` in Slack, reinstall it, then reconnect in Sim.
+Lists actions require a custom Slack bot and a paid Slack plan. **Manage Lists** is selected by default during bot setup. For an existing app, add `lists:read` and `lists:write` in Slack, reinstall it, then reconnect in Sim.
 
 - Run **Read List Items** with **Include List Schema** enabled to get the column IDs used in `column_id`. Updates also need the row's `id` as `row_id`.
 - **Initial Fields** and **Cells** accept JSON arrays of typed values. Text uses `rich_text`; checkboxes use booleans. See Slack's [field formats](https://docs.slack.dev/reference/methods/slackLists.items.create/) for examples.
 - To read every row, pass `nextCursor` into **Cursor** until it is empty. **Archived Rows** reads archived rows instead of active rows.
 
 ### Canvases
 
-For custom bots, enable **Manage canvases** during setup. Existing apps need `canvases:write` for changes, `canvases:read` for section lookup, and `files:read` for metadata. Reinstall the app after changing scopes, then reconnect in Sim.
+For custom bots, **Manage canvases** is selected by default during setup. Existing apps need `canvases:write` for changes, `canvases:read` for section lookup, and `files:read` for metadata. Reinstall the app after changing scopes, then reconnect in Sim.
 
 **Edit Canvas** can replace the whole document when **Section ID** is empty. **Get Canvas Info** and **List Canvases** return metadata, not document contents. See Slack's [Canvas guide](https://docs.slack.dev/surfaces/canvases/) for details.
 {/* MANUAL-CONTENT-END */}

apps/sim/app/workspace/[workspaceId]/integrations/components/connect-slack-bot-modal/connect-slack-bot-modal.test.tsx

@@ -7,7 +7,12 @@ vi.mock('@sim/emcn', () => ({
   Wizard: Object.assign(({ children }: { children: ReactNode }) => <div>{children}</div>, {
     Step: ({ children }: { children: ReactNode }) => <section>{children}</section>,
   }),
-  ChipModalField: ({ children }: { children?: ReactNode }) => <div>{children}</div>,
+  ChipModalField: ({ title, children }: { title: string; children?: ReactNode }) => (
+    <div>
+      <span>{title}</span>
+      {children}
+    </div>
+  ),
   ChipDropdown: ({
     value,
     onChange,
@@ -50,6 +55,7 @@ vi.mock('@/triggers/webhook-url', () => ({
   buildSlackCustomBotRequestUrl: () => 'https://sim.test/api/webhooks/slack/custom/test-bot',
 }))
 
+import { SLACK_MANAGED_USER_SCOPES } from '@/lib/credential-groups/slack-managed-user-scopes'
 import { ConnectSlackBotModal } from '@/app/workspace/[workspaceId]/integrations/components/connect-slack-bot-modal/connect-slack-bot-modal'
 
 describe('custom Slack bot permission selection', () => {
@@ -74,17 +80,20 @@ describe('custom Slack bot permission selection', () => {
   }
 
   it.each([{ workspaceId: 'workspace-test' }, { organizationId: 'organization-test' }])(
-    'omits Lists and Canvas scopes by default for %j',
+    'includes Lists, Canvas, and full member scopes by default for %j',
     (owner) => {
       act(() => root.render(<ConnectSlackBotModal {...owner} open onOpenChange={vi.fn()} />))
       expect(botScopes()).toContain('chat:write')
       for (const scope of ['lists:read', 'lists:write', 'canvases:read', 'canvases:write']) {
-        expect(botScopes()).not.toContain(scope)
+        expect(botScopes()).toContain(scope)
       }
+      const manifest = JSON.parse(container.querySelector('pre')!.textContent!)
+      expect(manifest.oauth_config.scopes.user).toEqual([...SLACK_MANAGED_USER_SCOPES].sort())
+      expect(container.textContent).not.toContain('Member access')
     }
   )
 
-  it('adds scopes only after selection and resets opt-in permissions when reopened', () => {
+  it('selects all permissions by default, allows deselection, and restores defaults when reopened', () => {
     const onOpenChange = vi.fn()
     const render = (open: boolean) => {
       act(() =>
@@ -99,25 +108,23 @@ describe('custom Slack bot permission selection', () => {
     }
     render(true)
     const permissions = container.querySelector<HTMLSelectElement>('select')!
-    for (const capability of ['action_lists', 'action_canvases']) {
-      expect(
-        permissions.querySelector<HTMLOptionElement>(`option[value="${capability}"]`)!.selected
-      ).toBe(false)
+    for (const option of permissions.options) {
+      expect(option.selected, option.value).toBe(true)
     }
     act(() => {
       for (const capability of ['action_lists', 'action_canvases']) {
         permissions.querySelector<HTMLOptionElement>(`option[value="${capability}"]`)!.selected =
-          true
+          false
       }
       permissions.dispatchEvent(new Event('change', { bubbles: true }))
     })
-    expect(botScopes()).toEqual(
-      expect.arrayContaining(['lists:read', 'lists:write', 'canvases:read', 'canvases:write'])
-    )
+    for (const scope of ['lists:read', 'lists:write', 'canvases:read', 'canvases:write']) {
+      expect(botScopes()).not.toContain(scope)
+    }
     render(false)
     render(true)
     for (const scope of ['lists:read', 'lists:write', 'canvases:read', 'canvases:write']) {
-      expect(botScopes()).not.toContain(scope)
+      expect(botScopes()).toContain(scope)
     }
   })
   it.each([{ workspaceId: 'workspace-test' }, { organizationId: 'organization-test' }])(

apps/sim/app/workspace/[workspaceId]/integrations/components/connect-slack-bot-modal/connect-slack-bot-modal.tsx

@@ -19,10 +19,6 @@ import { SlackIcon } from '@/components/icons'
 import { SlackAppManifest } from '@/components/integrations/slack-app-manifest'
 import { resourceScopeFields, resourceScopeFromOwner } from '@/lib/core/resource-scope'
 import { getBaseUrl } from '@/lib/core/utils/urls'
-import {
-  SLACK_MANAGED_USER_SCOPES,
-  SLACK_SEARCH_USER_SCOPES,
-} from '@/lib/credential-groups/slack-managed-user-scopes'
 import { SLACK_CUSTOM_BOT_PROVIDER_ID } from '@/lib/oauth/types'
 import {
   useCreateScopedCredential,
@@ -136,9 +132,6 @@ export function ConnectSlackBotModal({
   const [appName, setAppName] = useState(initialDisplayName ?? '')
   const [appDescription, setAppDescription] = useState(initialDescription ?? '')
   const [selected, setSelected] = useState<Set<string>>(() => new Set(DEFAULT_CAPABILITIES))
-  const [memberAccess, setMemberAccess] = useState<'search' | 'workflow'>(
-    isReconnect ? 'workflow' : 'search'
-  )
   const [slashCommands, setSlashCommands] = useState<SlackSlashCommandDraft[]>([])
   const [signingSecret, setSigningSecret] = useState('')
   const [botToken, setBotToken] = useState('')
@@ -154,7 +147,6 @@ export function ConnectSlackBotModal({
     setAppName(initialDisplayName ?? '')
     setAppDescription(initialDescription ?? '')
     setSelected(new Set(DEFAULT_CAPABILITIES))
-    setMemberAccess(isReconnect ? 'workflow' : 'search')
     setSlashCommands([])
     setSigningSecret('')
     setBotToken('')
@@ -185,12 +177,7 @@ export function ConnectSlackBotModal({
     const managedUserAuthorization = capabilities.has(
       SLACK_MANAGED_USER_AUTHORIZATION_CAPABILITY.id
     )
-      ? getSlackManagedUserAuthorizationManifestConfig(
-          getBaseUrl(),
-          searchOnly || memberAccess === 'search'
-            ? SLACK_SEARCH_USER_SCOPES
-            : SLACK_MANAGED_USER_SCOPES
-        )
+      ? getSlackManagedUserAuthorizationManifestConfig(getBaseUrl())
       : undefined
     const manifest = buildSlackManifest(capabilities, {
       appName: appName.trim() || DEFAULT_APP_NAME,
@@ -214,7 +201,6 @@ export function ConnectSlackBotModal({
     appDescription,
     slashCommands,
     requestUrl,
-    memberAccess,
     searchOnly,
   ])
 
@@ -299,8 +285,6 @@ export function ConnectSlackBotModal({
           slashCommandsError={slashCommandsError}
           capabilityIds={capabilityIds}
           onCapabilityIdsChange={setCapabilityIds}
-          memberAccess={memberAccess}
-          onMemberAccessChange={setMemberAccess}
         />
       </Wizard.Step>
       <Wizard.Step title={isReconnect ? 'Open your app in Slack' : 'Create the app in Slack'}>
@@ -362,8 +346,6 @@ interface StepConfigureProps {
   slashCommandsError: string | null
   capabilityIds: string[]
   onCapabilityIdsChange: (next: string[]) => void
-  memberAccess: 'search' | 'workflow'
-  onMemberAccessChange: (access: 'search' | 'workflow') => void
 }
 function StepConfigure({
   searchOnly,
@@ -378,8 +360,6 @@ function StepConfigure({
   slashCommandsError,
   capabilityIds,
   onCapabilityIdsChange,
-  memberAccess,
-  onMemberAccessChange,
 }: StepConfigureProps) {
   const canConfigureApp = !searchOnly && !reconnect
   const allSelected = capabilityIds.length === CUSTOM_BOT_CAPABILITIES.length
@@ -425,22 +405,6 @@ function StepConfigure({
           />
         </ChipModalField>
       )}
-      {canConfigureApp &&
-        capabilityIds.includes(SLACK_MANAGED_USER_AUTHORIZATION_CAPABILITY.id) && (
-          <ChipModalField
-            type='dropdown'
-            title='Member access'
-            value={memberAccess}
-            onChange={(value) => {
-              if (value === 'search' || value === 'workflow') onMemberAccessChange(value)
-            }}
-            options={[
-              { value: 'search', label: 'Search documents' },
-              { value: 'workflow', label: 'Workflow tools' },
-            ]}
-            hint='Choose the same access when configuring this app for member accounts.'
-          />
-        )}
       {canConfigureApp && (
         <SlashCommandsEditor
           commands={slashCommands}

apps/sim/blocks/blocks/slack-resources.test.ts

@@ -213,7 +213,7 @@ describe('Slack List and Canvas operations', () => {
     })
   })
 
-  it('keeps Lists scopes out of native connections and includes them in opt-in custom bot setup', () => {
+  it('keeps Lists scopes out of native connections and includes them in custom bot setup', () => {
     for (const scope of ['lists:read', 'lists:write']) {
       expect(getScopesForService('slack')).not.toContain(scope)
       expect(SLACK_MANAGED_USER_SCOPES).not.toContain(scope)

apps/sim/triggers/slack/capabilities.ts

@@ -86,7 +86,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'trigger_file_shared',
     label: 'File shared',
     description: 'Trigger when a file is shared in a channel your bot can see.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'trigger',
     scopes: ['files:read'],
     events: ['file_shared'],
@@ -95,7 +95,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'trigger_member_channel',
     label: 'Member joined / left channel',
     description: 'Trigger when a member joins or leaves a channel your bot is in.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'trigger',
     scopes: ['channels:read', 'groups:read'],
     events: ['member_joined_channel', 'member_left_channel'],
@@ -104,7 +104,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'trigger_channel_lifecycle',
     label: 'Channel created / archived / renamed',
     description: 'Trigger when a channel is created, archived, or renamed.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'trigger',
     scopes: ['channels:read', 'groups:read'],
     events: ['channel_created', 'channel_archive', 'channel_rename'],
@@ -113,7 +113,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'trigger_pin',
     label: 'Pin added / removed',
     description: 'Trigger when a message is pinned or unpinned in a channel.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'trigger',
     scopes: ['pins:read'],
     events: ['pin_added', 'pin_removed'],
@@ -122,7 +122,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'trigger_team_join',
     label: 'Member joined workspace',
     description: 'Trigger when a new member joins the workspace.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'trigger',
     scopes: ['users:read'],
     events: ['team_join'],
@@ -132,7 +132,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     label: 'Manage Lists',
     description:
       'Read Lists and column schemas; create, update, and delete rows. Requires a paid Slack plan.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'action',
     scopes: ['lists:read', 'lists:write'],
     events: [],
@@ -141,7 +141,7 @@ export const SLACK_CAPABILITIES: readonly SlackCapability[] = [
     id: 'action_canvases',
     label: 'Manage canvases',
     description: 'Create and edit canvases, read metadata, find sections, and delete canvases.',
-    defaultChecked: false,
+    defaultChecked: true,
     group: 'action',
     scopes: ['canvases:read', 'canvases:write', 'files:read'],
     events: [],