Summary

• Replaces the ten-request Slack selector drain with one provider page per selector request and mode-bound continuation cursors.
• Pages scoped OAuth public channels and installing-user private memberships independently, while preserving fail-closed private-channel behavior.
• Adds direct users.info and conversations.info hydration for saved values, with bounded conversations.members verification for scoped private channels.
• Keeps bot-only public fallback distinct from OAuth behavior and rejects cursors when the selector or recomputed authentication mode does not match.

Security

• Selector cursors contain only a version, authentication mode, and opaque Slack continuation values.
• Scoped OAuth never emits private channels from conversations.list; private channels come only from users.conversations for the installing user.
• Membership lookup failure retains public results but removes private results and continuation.
• Scoped private detail hydration fails closed on lookup failure, exhaustion, repeated cursors, or the 10,000-member bound.
• Abort errors continue to propagate and provider errors remain generic.

Tests

• Focused Slack provider, selector manifest, and generic selector-query suites: 26 tests passed.
• apps/sim type check passed.
• Targeted Biome check passed.
• Strict API validation, fork-dependent coverage, client-boundary validation, and git diff check passed.

Live validation

Not run: no suitably large authenticated Slack workspace was available. The follow-up manual checklist is continuation beyond ten cursors, authorized versus bot-only private visibility, separate OAuth and bot fallback behavior, saved label hydration in editor and connector surfaces, and cancellation or credential changes during loading.