fix(dockerfile): emit appToken for slack in baked openclaw.json

[laitingsheng]

The Python block that bakes channels config from
NEMOCLAW_MESSAGING_CHANNELS_B64 only writes botToken for slack. Without appToken the Slack provider cannot initialise Socket Mode and the gateway crash-loops with invalid_auth from @slack/web-api before the dashboard comes up.

Add a conditional appToken spread mirroring the existing per-channel pattern (telegram proxy/groupPolicy, discord dmPolicy). Token value is the same openshell:resolve:env: placeholder convention used for botToken, so the placeholder resolution path is unchanged.

Partially addresses #2031, #2085. The baked config now contains appToken, but resolving the openshell:resolve:env:SLACK_APP_TOKEN placeholder requires NVIDIA/OpenShell#894 to be fixed: Slack's SDK validates the xapp- token prefix in-process before any network call, so the L7 proxy never gets a chance to substitute the placeholder.

Summary

Related Issue

Changes

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Verification

• npx prek run --all-files passes
• npm test passes
• Tests added or updated for new or changed behavior
• No secrets, API keys, or credentials committed
• Docs updated for user-facing behavior changes
• make docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

AI Disclosure

• AI-assisted — tool: Claude Code

---

Signed-off-by: Tinson Lai tinsonl@nvidia.com

Summary by CodeRabbit

• Bug Fixes
  • Updated Slack channel authentication configuration to properly handle account credentials.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 2d194e7a-4344-4d57-a490-8891089172ef

📥 Commits

Reviewing files that changed from the base of the PR and between 8bfd4e9 and 8ae6ab2.

📒 Files selected for processing (1)

• Dockerfile

---

📝 Walkthrough

Walkthrough

The Dockerfile's build-time configuration generation for messaging channels is updated to include an additional appToken field for Slack channel account credentials. The token now resolves to SLACK_APP_TOKEN environment variable. Telegram and Discord configurations remain unchanged.

Changes

Cohort / File(s)	Summary
Dockerfile - Slack Channel Config Dockerfile	Updated Slack channel authentication configuration to add appToken field with openshell:resolve:env:SLACK_APP_TOKEN mapping during build-time Python config generation for messaging credentials.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 A token for Slack, shiny and new,
The app whispers secrets through channels so true,
One line changed, one line erased,
Config builds faster, with grace and with taste! 🎉

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: adding appToken field for Slack in the baked openclaw.json configuration file generated by the Dockerfile.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/2031-slack-app-token

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[ericksoa]

Approve. Correct fix — mirrors the existing per-channel spread pattern. Partial until OpenShell#894 resolves the xapp- prefix validation.