fix(slack-search): reuse manifest installation in setup

[TheodoreSpeaks]

Summary

• Connect the bot token from Slack's manifest installation instead of asking admins to install the custom app again.
• Reuse the existing permission, ownership, and reconnect checks; refresh setup state before closing and update the Slack setup docs.

Type of Change

• Bug fix

Testing

• 164 focused tests passed across setup, authorization, callbacks, query refresh, and UI regressions.
• App/auth type-checks, repository lint, all repository audits, API boundary validation, and docs checks passed. No migrations changed.
• Live Slack installation was not completed.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 19, 2026 6:07pm UTC

[cubic-dev-ai]

All reported issues were addressed across 16 files

<sub>Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic</sub>

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; no actionable correctness, security, or repository-rule failures remain.

Summary

This PR changes custom Slack Search setup to reuse the bot token produced by Slack’s manifest installation rather than initiating a second OAuth installation.

• Adds a session-authenticated endpoint and authorized application operation for connecting an existing custom Slack bot.
• Refactors installation persistence so manifest-token and OAuth completion paths share ownership, revision, concurrency, and workspace checks.
• Refreshes installation, manifest, and organization-account queries before completing setup.
• Updates the setup wizard, documentation, and focused regression coverage for the new flow.

Diagram

sequenceDiagram
  participant Admin
  participant Wizard
  participant API as Setup Connect API
  participant Slack
  participant DB
  participant Cache as Query Cache

  Admin->>Wizard: Paste installed xoxb bot token
  Wizard->>API: POST setup/connect
  API->>API: Authenticate session and authorize admin
  API->>Slack: Verify bot identity and required scopes
  Slack-->>API: App, workspace, bot, and scopes
  API->>DB: Lock app/workspace and validate ownership/revisions
  API->>DB: Encrypt and persist token and installation
  DB-->>API: Commit
  API-->>Wizard: Connected organization
  Wizard->>Cache: Refresh installation and setup queries
  Cache-->>Wizard: Updated installation state
  Wizard-->>Admin: Close completed setup

Loading

_{Reviews (2) · Last reviewed commit: "fix(slack-search): register token connec..."}

[TheodoreSpeaks]

@greptile

[TheodoreSpeaks]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@TheodoreSpeaks I have started the AI code review. It will take a few minutes to complete.

[cubic-dev-ai]

No issues found across 17 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}