fix: route slack settings through gateway

Author: osolmaz

docs/2026-04-25-react-management-ui-migration-plan.md

@@ -1,6 +1,6 @@
 ---
 date: 2026-04-25
-author: Onur Solmaz <onur@textcortex.com>
+author: Onur Solmaz
 title: React Management UI Migration Plan
 tags: [spritz, ui, react, slack-gateway, settings, migration]
 ---
@@ -43,7 +43,12 @@ The existing chat view should change as little as possible.
 
 The migration should add only one settings entry point to the existing chat UI,
 such as a settings button or link in the current header or navigation area.
-That entry point should navigate to the new `/settings/*` route group.
+That entry point should go through the gateway management URL
+(`/slack-gateway/slack/workspaces`, or the configured absolute gateway URL).
+Same-origin/proxied deployments will redirect into the new `/settings/*` route
+group. Cross-origin deployments without a same-origin gateway proxy will remain
+on the gateway fallback pages instead of opening a React page that cannot reach
+the gateway APIs.
 
 The settings experience should be its own React view. It should not redesign
 the chat page, add a settings sidebar inside the chat surface, or make Slack

integrations/slack-gateway/backend_client_test.go

@@ -225,7 +225,7 @@ func TestUpdateManagedInstallationConfigPostsExpectedPayload(t *testing.T) {
 func TestManagedChannelRoutesDefaultMissingBooleansSafely(t *testing.T) {
 	var connection backendManagedConnection
 	if err := json.Unmarshal(
-		[]byte(`{"id":"cc_1","routes":[{"externalChannelId":"D_default","externalChannelType":"im"}]}`),
+		[]byte(`{"id":"chconn_default","routes":[{"externalChannelId":"D_default","externalChannelType":"im"}]}`),
 		&connection,
 	); err != nil {
 		t.Fatalf("decode connection: %v", err)

integrations/slack-gateway/gateway_test.go

@@ -724,7 +724,7 @@ func TestChannelSettingsRendersManagedConnections(t *testing.T) {
 			"status": "resolved",
 			"installations": []map[string]any{
 				{
-					"id": "ci_1",
+					"id": "chinst_workspace_1",
 					"route": map[string]any{
 						"principalId":       "shared-slack-gateway",
 						"provider":          "slack",
@@ -740,24 +740,24 @@ func TestChannelSettingsRendersManagedConnections(t *testing.T) {
 					},
 					"connections": []map[string]any{
 						{
-							"id":        "cc_1",
+							"id":        "chconn_default",
 							"isDefault": true,
 							"state":     "ready",
 							"routes": []map[string]any{
 								{
-									"id":                "cr_1",
+									"id":                "chroute_channel_1",
 									"externalChannelId": "C_channel_1",
 									"requireMention":    false,
 									"enabled":           true,
 								},
 							},
 						},
 						{
-							"id":    "cc_2",
+							"id":    "chconn_secondary",
 							"state": "ready",
 							"routes": []map[string]any{
 								{
-									"id":                "cr_2",
+									"id":                "chroute_channel_2",
 									"externalChannelId": "C_channel_2",
 									"requireMention":    true,
 									"enabled":           true,
@@ -781,27 +781,27 @@ func TestChannelSettingsRendersManagedConnections(t *testing.T) {
 		HTTPTimeout:           5 * time.Second,
 	}, slog.New(slog.NewTextHandler(io.Discard, nil)))
 
-	installationReq := httptest.NewRequest(http.MethodGet, "/settings/channels/installations/ci_1", nil)
+	installationReq := httptest.NewRequest(http.MethodGet, "/settings/channels/installations/chinst_workspace_1", nil)
 	installationReq.Header.Set("X-Spritz-User-Id", "user-1")
 	installationRec := httptest.NewRecorder()
 	gateway.routes().ServeHTTP(installationRec, installationReq)
 
 	if installationRec.Code != http.StatusSeeOther {
 		t.Fatalf("expected installation redirect, got %d: %s", installationRec.Code, installationRec.Body.String())
 	}
-	if location := installationRec.Header().Get("Location"); location != "https://gateway.example.test/settings/slack/channels/installations/ci_1" {
+	if location := installationRec.Header().Get("Location"); location != "https://gateway.example.test/settings/slack/channels/installations/chinst_workspace_1" {
 		t.Fatalf("expected installation React route, got %q", location)
 	}
 
-	req := httptest.NewRequest(http.MethodGet, "/settings/channels/installations/ci_1/connections/cc_2", nil)
+	req := httptest.NewRequest(http.MethodGet, "/settings/channels/installations/chinst_workspace_1/connections/chconn_secondary", nil)
 	req.Header.Set("X-Spritz-User-Id", "user-1")
 	rec := httptest.NewRecorder()
 	gateway.routes().ServeHTTP(rec, req)
 
 	if rec.Code != http.StatusSeeOther {
 		t.Fatalf("expected connection redirect, got %d: %s", rec.Code, rec.Body.String())
 	}
-	if location := rec.Header().Get("Location"); location != "https://gateway.example.test/settings/slack/channels/installations/ci_1/connections/cc_2" {
+	if location := rec.Header().Get("Location"); location != "https://gateway.example.test/settings/slack/channels/installations/chinst_workspace_1/connections/chconn_secondary" {
 		t.Fatalf("expected connection React route, got %q", location)
 	}
 }
@@ -891,7 +891,7 @@ func TestChannelSettingsListDoesNotInventLegacyConnectionIDs(t *testing.T) {
 			"status": "resolved",
 			"installations": []map[string]any{
 				{
-					"id": "ci_1",
+					"id": "chinst_workspace_1",
 					"route": map[string]any{
 						"principalId":       "shared-slack-gateway",
 						"provider":          "slack",
@@ -942,7 +942,7 @@ func TestChannelSettingsUpdatePostsRoutePolicies(t *testing.T) {
 				"status": "resolved",
 				"installations": []map[string]any{
 					{
-						"id": "ci_1",
+						"id": "chinst_workspace_1",
 						"route": map[string]any{
 							"principalId":       "shared-slack-gateway",
 							"provider":          "slack",
@@ -952,24 +952,24 @@ func TestChannelSettingsUpdatePostsRoutePolicies(t *testing.T) {
 						"state": "ready",
 						"connections": []map[string]any{
 							{
-								"id":        "cc_1",
+								"id":        "chconn_default",
 								"isDefault": true,
 								"state":     "ready",
 								"routes": []map[string]any{
 									{
-										"id":                "cr_1",
+										"id":                "chroute_existing",
 										"externalChannelId": "C_existing",
 										"requireMention":    true,
 										"enabled":           true,
 									},
 								},
 							},
 							{
-								"id":    "cc_2",
+								"id":    "chconn_secondary",
 								"state": "ready",
 								"routes": []map[string]any{
 									{
-										"id":                "cr_2",
+										"id":                "chroute_channel_2",
 										"externalChannelId": "C_channel_2",
 										"requireMention":    true,
 										"enabled":           true,
@@ -1010,7 +1010,7 @@ func TestChannelSettingsUpdatePostsRoutePolicies(t *testing.T) {
 
 	req := httptest.NewRequest(
 		http.MethodPost,
-		"/settings/channels/installations/ci_1/connections/cc_1",
+		"/settings/channels/installations/chinst_workspace_1/connections/chconn_default",
 		strings.NewReader("action=upsert&externalChannelId=C_new"),
 	)
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
@@ -1024,7 +1024,7 @@ func TestChannelSettingsUpdatePostsRoutePolicies(t *testing.T) {
 	if updatePayload["callerAuthId"] != "user-1" {
 		t.Fatalf("expected caller auth id, got %#v", updatePayload["callerAuthId"])
 	}
-	if updatePayload["installationId"] != "ci_1" || updatePayload["connectionId"] != "cc_1" {
+	if updatePayload["installationId"] != "chinst_workspace_1" || updatePayload["connectionId"] != "chconn_default" {
 		t.Fatalf("expected installation and connection ids, got %#v", updatePayload)
 	}
 	policies, ok := updatePayload["channelPolicies"].([]any)

ui/src/lib/slack-management.test.ts

@@ -28,4 +28,15 @@ describe('slack gateway path helpers', () => {
     expect(slackGatewayPath('/api/settings/channels')).toBe('/api/settings/channels');
     expect(slackGatewayPath('/slack/install')).toBe('/slack/install');
   });
+
+  it('preserves an absolute Slack gateway base URL', async () => {
+    const { slackGatewayBasePath, slackGatewayPath } = await loadSlackManagement({
+      slackGatewayBasePath: 'https://gateway.example.test/slack-gateway/',
+    });
+
+    expect(slackGatewayBasePath()).toBe('https://gateway.example.test/slack-gateway');
+    expect(slackGatewayPath('/slack/workspaces')).toBe(
+      'https://gateway.example.test/slack-gateway/slack/workspaces',
+    );
+  });
 });

ui/src/lib/slack-management.ts

@@ -85,6 +85,7 @@ export interface SlackWorkspaceTestResult {
 export function slackGatewayBasePath(): string {
   const configured = String(config.slackGatewayBasePath || '').trim();
   if (/^\/+$/.test(configured)) return '';
+  if (/^https?:\/\//i.test(configured)) return configured.replace(/\/+$/g, '');
   const normalized = (configured || '/slack-gateway').replace(/\/+$/g, '');
   if (!normalized) return '/slack-gateway';
   return normalized.startsWith('/') ? normalized : `/${normalized}`;

ui/src/pages/chat.test.tsx

@@ -509,6 +509,13 @@ describe('ChatPage draft persistence', () => {
     });
   });
 
+  it('routes the settings entrypoint through the Slack gateway', async () => {
+    await renderChat('/c/covo/conv-1');
+
+    const settingsLink = screen.getByLabelText('Open settings') as HTMLAnchorElement;
+    expect(settingsLink.getAttribute('href')).toBe('/slack-gateway/slack/workspaces');
+  });
+
   it('retries ACP connect-ticket failures automatically', async () => {
     setAuthToken('external-ui-token');
     let ticketAttempts = 0;

ui/src/pages/chat.tsx

@@ -1,5 +1,5 @@
 import { useState, useEffect, useCallback, useRef } from 'react';
-import { Link, useParams, useNavigate } from 'react-router-dom';
+import { useParams, useNavigate } from 'react-router-dom';
 import { toast } from 'sonner';
 import { MenuIcon, RotateCwIcon, ExternalLinkIcon, SettingsIcon } from 'lucide-react';
 import { request } from '@/lib/api';
@@ -18,6 +18,7 @@ import {
   getConversationAgentName,
 } from '@/lib/spritz-profile';
 import { chatConversationPath } from '@/lib/urls';
+import { slackGatewayPath } from '@/lib/slack-management';
 import { AgentAvatar } from '@/components/agent-avatar';
 import { useNotice } from '@/components/notice-banner';
 import { Sidebar } from '@/components/acp/sidebar';
@@ -573,8 +574,8 @@ export function ChatPage() {
               <Tooltip>
                 <TooltipTrigger
                   render={
-                    <Link
-                      to="/settings/slack/workspaces"
+                    <a
+                      href={slackGatewayPath('/slack/workspaces')}
                       aria-label="Open settings"
                       className="inline-flex size-9 items-center justify-center rounded-[var(--radius-md)] border border-border bg-background text-foreground transition-colors hover:bg-muted"
                     />