Get Slack Install

Whether this company has a live Slack install, and which workspace.

The bot token has no representation here, in any form — not encrypted, not truncated, not as a boolean "has token". This model is what the settings page renders, so it is the one place a token could leak into a browser, and the guard is that the field does not exist. A test asserts the field set is exactly these four names, so adding a fifth is a deliberate act rather than an accident.

team_name and installed_at are populated only when connected is True. A revoked install reads as connected=False with both fields empty: the row survives revocation (so the identity cache stays warm for a reconnect), but the UI must show "not connected", not a workspace name with an invisible asterisk.

needs_reinstall is derived from slack_workspace.scopes — a bool, never the scopes themselves, which is why it is safe to widen the field set for: it carries no token material. True only for a company that IS connected but whose install predates INBOUND_SCOPES (see that constant's docstring in application/operations/install.py); a company with no install at all reads needs_reinstall=False, because "connect" is already the call to action there and a reinstall prompt on top of it would be a second one for the same button.