agent-messenger 2.26.0 → 2.27.0

package/.claude-plugin/README.md

@@ -24,6 +24,7 @@ Or within Claude Code:
 Enables AI agents to interact with messaging platforms through CLI interfaces:
 
 ### Slack (`agent-slack`)
+- **QR code sign-in** — recommended, safest auth (no credential extraction)
 - **Send messages** to channels and threads
 - **Read channels** and message history
 - **Manage reactions** (add/remove/list)
@@ -46,6 +47,7 @@ Enables AI agents to interact with messaging platforms through CLI interfaces:
 - Designed for **server-side and CI/CD** use cases
 
 ### Discord (`agent-discord`)
+- **QR code sign-in** — recommended, scan with the mobile app (no credential extraction)
 - **Send messages** to channels
 - **Read channels** and message history
 - **Manage reactions** (add/remove/list)
@@ -141,7 +143,19 @@ Enables AI agents to interact with messaging platforms through CLI interfaces:
 
 ### Zero-Config Authentication
 
-Credentials are automatically extracted from your desktop apps on first command — no manual auth step needed. You can also extract manually:
+Credentials are automatically extracted from your desktop apps on first command — no manual auth step needed. You can also authenticate manually.
+
+For **Slack and Discord, QR code sign-in is the recommended method** — it's the safest and most reliable option because it authenticates through the platform's own login flow instead of reading credentials off disk, and it works without a desktop app or browser:
+
+```bash
+# Slack — paste the QR from "Sign in on mobile" (recommended)
+pbpaste | agent-slack auth qr
+
+# Discord — scan the QR with the Discord mobile app (recommended)
+agent-discord auth qr
+```
+
+Or extract credentials directly from your desktop apps / browsers:
 
 ```bash
 # Slack
@@ -174,7 +188,7 @@ All commands output JSON by default for easy AI consumption. Use `--pretty` for
 
 ## Requirements
 
-- Desktop app installed and logged in for the platform(s) you want to use (Slack, Discord, Teams, KakaoTalk, and/or Channel Talk). Instagram uses username/password auth
+- Desktop app installed and logged in for the platform(s) you want to use (Slack, Discord, Teams, KakaoTalk, and/or Channel Talk). For Slack and Discord, QR code sign-in is the recommended alternative — no desktop app required (Discord needs the mobile app to scan). Instagram uses username/password auth
 - For Telegram: TDLib is bundled; API credentials are auto-provisioned on first login
 - Node.js 18+ or Bun runtime
 

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-messenger",
-  "version": "2.26.0",
+  "version": "2.27.0",
   "description": "Messaging platform interaction skills for AI agents. Interact with Slack, Discord, Microsoft Teams, Webex, Telegram, Telegram Bot, WhatsApp, LINE, Instagram, KakaoTalk, and Channel Talk - send messages, read channels, manage reactions, upload files, and more through simple CLI interfaces.",
   "author": {
     "name": "agent-messenger",

package/README.md

@@ -45,6 +45,10 @@ Every platform gates API access behind OAuth apps that need admin approval — d
 
 Agent Messenger reads session tokens from your Slack, Discord, Teams, KakaoTalk, or Channel Talk desktop app — zero config. If the desktop app isn't installed, it falls back to extracting from Chromium browsers, with `auth extract --browser-profile <path>` for custom Chromium profile locations. Webex and Instagram tokens are extracted directly from browsers. Telegram authenticates with a one-time phone code, and WhatsApp with a QR code or pairing code. Either way, your agent operates **as you** — same name, same permissions, same context. Bot tokens are fully supported too for server-side and CI/CD use cases.
 
+> [!TIP]
+> **For Slack and Discord, QR code sign-in (`auth qr`) is the recommended way to authenticate** — it's the safest and most reliable method. It signs you in through the platform's own login flow instead of reading credentials off disk, and works even without the desktop app. See the [Slack](skills/agent-slack/references/authentication.md) and [Discord](skills/agent-discord/references/authentication.md) auth guides.
+
+- **QR Code Sign-In (Slack & Discord)** — The recommended, safest auth: sign in through the platform's official flow, no credential extraction and no desktop app required (Discord scans with the mobile app)
 - **Auto-Extract Auth** — Reads tokens from Slack, Discord, Teams, KakaoTalk, and Channel Talk desktop apps, with browser fallback and custom Chromium profile paths via `--browser-profile`. Webex and Instagram tokens extracted from Chromium browsers. Telegram and WhatsApp authenticate with a one-time code — still under a minute
 - **Act As Yourself** — Extracts your user session — not a bot token. Your agent sends messages, reacts, and searches as you. Need bot mode? Bot CLIs are included too
 - **One Interface** — Consistent command style across 7 platforms for supported actions (e.g. message send, message search, channel list, snapshot). Learn once
@@ -135,6 +139,13 @@ agent-slack message send general "Hello from the CLI!"
 
 That's it. Credentials are extracted automatically from your Slack desktop app on first run. No OAuth flows. No API tokens. No configuration files.
 
+> **No desktop app?** QR code sign-in is the recommended way to authenticate Slack and Discord. In Slack, open "Sign in on mobile", copy the QR image, and pipe it in; in Discord, scan the printed QR with the mobile app:
+>
+> ```bash
+> pbpaste | agent-slack auth qr   # paste Slack's "Sign in on mobile" QR
+> agent-discord auth qr           # scan the printed QR with the Discord app
+> ```
+
 ### Custom config directory
 
 By default, Agent Messenger stores credentials, sync state, and derived-key caches under `~/.config/agent-messenger`. To relocate everything (e.g. for CI sandboxes, multi-tenant setups, or non-default home directories), set the `AGENT_MESSENGER_CONFIG_DIR` environment variable:
@@ -229,6 +240,22 @@ const session = await loginWithQr(dataUrl)
 const client = await new SlackClient().login({ token: session.token, cookie: session.cookie })
 ```
 
+### QR Code Login (Discord)
+
+Sign in by scanning a QR code with the Discord mobile app — no desktop app or browser token extraction required. `loginWithRemoteAuth` runs Discord's Remote Auth protocol and hands you a QR URL to display; once the user scans and confirms on their phone, you receive the user token.
+
+```typescript
+import { DiscordClient, loginWithRemoteAuth } from 'agent-messenger/discord'
+
+const session = await loginWithRemoteAuth({
+  onQrUrl: (url) => {
+    // Render this URL as a QR code (e.g. with the `qrcode` package)
+    console.log('Scan this with the Discord mobile app:', url)
+  },
+})
+const client = await new DiscordClient().login({ token: session.token })
+```
+
 ### Real-time Events (Slack)
 
 ```typescript

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "agent-messenger",
-    "version": "2.26.0",
+    "version": "2.27.0",
     "description": "Multi-platform messaging CLI for AI agents (Slack, Discord, Teams, Webex, Telegram, Telegram Bot, WhatsApp, LINE, Instagram, KakaoTalk, Channel Talk)",
     "repository": {
         "type": "git",

package/dist/src/platforms/discord/listener.d.ts

@@ -3,7 +3,6 @@ import type { DiscordListenerEventMap } from './types.js';
 type EventKey = keyof DiscordListenerEventMap;
 export declare class DiscordListener {
     private client;
-    private intents;
     private running;
     private ws;
     private emitter;
@@ -19,9 +18,7 @@ export declare class DiscordListener {
     private token;
     private cachedUser;
     private generation;
-    constructor(client: DiscordClient, options?: {
-        intents?: number;
-    });
+    constructor(client: DiscordClient);
     start(): Promise<void>;
     stop(): void;
     on<K extends EventKey>(event: K, listener: (...args: DiscordListenerEventMap[K]) => void): this;

package/dist/src/platforms/discord/listener.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"listener.d.ts","sourceRoot":"","sources":["../../../../src/platforms/discord/listener.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAA8B,MAAM,SAAS,CAAA;AAmBlF,KAAK,QAAQ,GAAG,MAAM,uBAAuB,CAAA;AAE7C,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,oBAAoB,CAAO;IACnC,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,iBAAiB,CAAI;IAC7B,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,gBAAgB,CAAsB;IAC9C,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,UAAU,CAAgD;IAClE,OAAO,CAAC,UAAU,CAAI;gBAEV,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAK3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,IAAI,IAAI,IAAI;IAeZ,EAAE,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAK/F,GAAG,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAKhG,IAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAKjG,OAAO,CAAC,SAAS;YAMH,OAAO;IA+DrB,OAAO,CAAC,aAAa;IAkDrB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,YAAY;IAiBpB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,WAAW;CAWpB"}
+{"version":3,"file":"listener.d.ts","sourceRoot":"","sources":["../../../../src/platforms/discord/listener.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAA8B,MAAM,SAAS,CAAA;AAyBlF,KAAK,QAAQ,GAAG,MAAM,uBAAuB,CAAA;AAE7C,qBAAa,eAAe;IAC1B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,oBAAoB,CAAO;IACnC,OAAO,CAAC,oBAAoB,CAA6C;IACzE,OAAO,CAAC,mBAAmB,CAA6C;IACxE,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,iBAAiB,CAAI;IAC7B,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,SAAS,CAAsB;IACvC,OAAO,CAAC,gBAAgB,CAAsB;IAC9C,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,UAAU,CAAgD;IAClE,OAAO,CAAC,UAAU,CAAI;gBAEV,MAAM,EAAE,aAAa;IAI3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,IAAI,IAAI,IAAI;IAeZ,EAAE,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAK/F,GAAG,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAKhG,IAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,IAAI;IAKjG,OAAO,CAAC,SAAS;YAMH,OAAO;IA+DrB,OAAO,CAAC,aAAa;IAkDrB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,YAAY;IAiCpB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,oBAAoB;IAW5B,OAAO,CAAC,WAAW;CAWpB"}

package/dist/src/platforms/discord/listener.js

@@ -1,22 +1,26 @@
 import { EventEmitter } from 'events';
 import WebSocket from 'ws';
-import { DiscordGatewayOpcode, DiscordIntent } from './types.js';
+import { DiscordGatewayOpcode } from './types.js';
 const GATEWAY_URL = 'wss://gateway.discord.gg/?v=10&encoding=json';
 const GATEWAY_QUERY = '?v=10&encoding=json';
 const RECONNECT_BASE_DELAY = 1_000;
 const RECONNECT_MAX_DELAY = 30_000;
 const NON_RECOVERABLE_CLOSE_CODES = [4004, 4010, 4011, 4012, 4013, 4014];
 const SESSION_RESET_CLOSE_CODES = [4007, 4009];
-const DEFAULT_INTENTS = DiscordIntent.Guilds |
-    DiscordIntent.GuildMessages |
-    DiscordIntent.GuildMessageReactions |
-    DiscordIntent.GuildMessageTyping |
-    DiscordIntent.DirectMessages |
-    DiscordIntent.DirectMessageReactions |
-    DiscordIntent.DirectMessageTyping;
+// User (non-bot) gateway capabilities bitmask, mirroring discord.py-self's default set.
+// Capabilities shape the READY payload; bit 10 (client_state_v2) requires client_state.guild_versions.
+const USER_GATEWAY_CAPABILITIES = 16381;
+// Without MESSAGE_CONTENT (1<<15), Discord blanks `content`/`embeds`/`attachments` on messages
+// from OTHER users (self/DM/mention content still arrives). User sessions get all intents only
+// when `intents` is omitted OR explicitly set, so we send an all-intents value to guarantee content.
+const USER_GATEWAY_INTENTS = 33_554_431;
+// Discord validates client_build_number against recent web-client builds; a stale value can
+// yield a connected-but-degraded session that fires READY yet delivers no message events.
+// Overridable via env so it can be refreshed without a release when it eventually goes stale.
+const DEFAULT_CLIENT_BUILD_NUMBER = 648814;
+const USER_GATEWAY_BUILD_NUMBER = Number(process.env.AGENT_DISCORD_BUILD_NUMBER) || DEFAULT_CLIENT_BUILD_NUMBER;
 export class DiscordListener {
     client;
-    intents;
     running = false;
     ws = null;
     emitter = new EventEmitter();
@@ -32,9 +36,8 @@ export class DiscordListener {
     token = null;
     cachedUser = null;
     generation = 0;
-    constructor(client, options) {
+    constructor(client) {
         this.client = client;
-        this.intents = options?.intents ?? DEFAULT_INTENTS;
     }
     async start() {
         if (this.running)
@@ -213,12 +216,27 @@ export class DiscordListener {
             op: DiscordGatewayOpcode.Identify,
             d: {
                 token: this.token,
-                intents: this.intents,
+                capabilities: USER_GATEWAY_CAPABILITIES,
+                intents: USER_GATEWAY_INTENTS,
                 properties: {
-                    os: 'linux',
-                    browser: 'agent-messenger',
-                    device: 'agent-messenger',
+                    os: 'Linux',
+                    browser: 'Chrome',
+                    device: '',
+                    system_locale: 'en-US',
+                    browser_user_agent: 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36',
+                    browser_version: '131.0.0.0',
+                    os_version: '',
+                    referrer: '',
+                    referring_domain: '',
+                    referrer_current: '',
+                    referring_domain_current: '',
+                    release_channel: 'stable',
+                    client_build_number: USER_GATEWAY_BUILD_NUMBER,
+                    client_event_source: null,
                 },
+                presence: { status: 'online', since: 0, activities: [], afk: false },
+                compress: false,
+                client_state: { guild_versions: {} },
             },
         }));
     }

package/dist/src/platforms/discord/listener.js.map

@@ -1 +1 @@
-{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../../../src/platforms/discord/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AAErC,OAAO,SAAS,MAAM,IAAI,CAAA;AAI1B,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7D,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAClE,MAAM,aAAa,GAAG,qBAAqB,CAAA;AAC3C,MAAM,oBAAoB,GAAG,KAAK,CAAA;AAClC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,2BAA2B,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACxE,MAAM,yBAAyB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAE9C,MAAM,eAAe,GACnB,aAAa,CAAC,MAAM;IACpB,aAAa,CAAC,aAAa;IAC3B,aAAa,CAAC,qBAAqB;IACnC,aAAa,CAAC,kBAAkB;IAChC,aAAa,CAAC,cAAc;IAC5B,aAAa,CAAC,sBAAsB;IACpC,aAAa,CAAC,mBAAmB,CAAA;AAInC,MAAM,OAAO,eAAe;IAClB,MAAM,CAAe;IACrB,OAAO,CAAQ;IACf,OAAO,GAAG,KAAK,CAAA;IACf,EAAE,GAAqB,IAAI,CAAA;IAC3B,OAAO,GAAG,IAAI,YAAY,EAAE,CAAA;IAC5B,cAAc,GAA0C,IAAI,CAAA;IAC5D,oBAAoB,GAAG,IAAI,CAAA;IAC3B,oBAAoB,GAAyC,IAAI,CAAA;IACjE,mBAAmB,GAAyC,IAAI,CAAA;IAChE,cAAc,GAAyC,IAAI,CAAA;IAC3D,iBAAiB,GAAG,CAAC,CAAA;IACrB,QAAQ,GAAkB,IAAI,CAAA;IAC9B,SAAS,GAAkB,IAAI,CAAA;IAC/B,gBAAgB,GAAkB,IAAI,CAAA;IACtC,KAAK,GAAkB,IAAI,CAAA;IAC3B,UAAU,GAA4C,IAAI,CAAA;IAC1D,UAAU,GAAG,CAAC,CAAA;IAEtB,YAAY,MAAqB,EAAE,OAA8B;QAC/D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,eAAe,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;YACf,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;QAChB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;IACxB,CAAC;IAED,EAAE,CAAqB,KAAQ,EAAE,QAAuD;QACtF,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,GAAG,CAAqB,KAAQ,EAAE,QAAuD;QACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAqB,KAAQ,EAAE,QAAuD;QACxF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,SAAS,CAAC,UAAkB,EAAE,EAAc;QAClD,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QACjE,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAA;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAM;QAEvC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;YACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,OAAM;YAEvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;YAElB,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;YAC5F,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;YAEZ,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,KAAK,EAAE,CAAA;oBACV,OAAM;gBACR,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACvC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC,WAAW,EAAE,CAAA;gBAClB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;gBACd,IAAI,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC,CAAA;oBACjG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;oBACpB,OAAM;gBACR,CAAC;gBACD,IAAI,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;oBACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;gBAC9B,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;oBACjC,IAAI,CAAC,iBAAiB,EAAE,CAAA;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACjF,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,OAAM;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACrF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,iBAAiB,EAAE,CAAA;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAoD,EAAE,UAAkB,EAAE,EAAa;QAC3G,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;YAAE,OAAM;QAC3C,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAA;QAE5B,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,oBAAoB,CAAC,KAAK;gBAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,IAAI,CAAC,UAAU,EAAE,CAAA;gBACnB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,YAAY,EAAE,CAAA;gBACrB,CAAC;gBACD,MAAK;YAEP,KAAK,oBAAoB,CAAC,YAAY;gBACpC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;gBAChC,MAAK;YAEP,KAAK,oBAAoB,CAAC,QAAQ;gBAChC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;gBAC5C,IAAI,CAAC;oBAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAChC,MAAK;YAEP,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;gBAC1B,EAAE,CAAC,KAAK,EAAE,CAAA;gBACV,MAAK;YAEP,KAAK,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACf,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAA;oBACzC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAA;wBAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;4BAAE,EAAE,CAAC,KAAK,EAAE,CAAA;oBAChD,CAAC,EAAE,KAAK,CAAC,CAAA;gBACX,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;oBACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;oBAC5B,EAAE,CAAC,KAAK,EAAE,CAAA;gBACZ,CAAC;gBACD,MAAK;YACP,CAAC;YAED,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,aAAa,EAAE,CAAA;gBACpB,MAAK;QACT,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,CAAS,EAAE,CAAM;QACtC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU,CAAA;YAC7B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAA;YAC5C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAA;YACxB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;YACzE,OAAM;QACR,CAAC;QAED,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAAC,CAAA;YACtF,OAAM;QACR,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QACjC,MAAM,KAAK,GAA+B,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,EAAE,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,oBAAoB,CAAC,QAAQ;YACjC,CAAC,EAAE;gBACD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,UAAU,EAAE;oBACV,EAAE,EAAE,OAAO;oBACX,OAAO,EAAE,iBAAiB;oBAC1B,MAAM,EAAE,iBAAiB;iBAC1B;aACF;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,EAAE,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,oBAAoB,CAAC,MAAM;YAC/B,CAAC,EAAE;gBACD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,GAAG,EAAE,IAAI,CAAC,QAAQ;aACnB;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACzF,CAAC;IAEO,cAAc,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAa;QACxE,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAEhC,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YAChC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;gBAAE,OAAM;YAC3C,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;YACjC,IAAI,CAAC,aAAa,EAAE,CAAA;YAEpB,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACpC,IAAI,CAAC,oBAAoB,EAAE,CAAA;oBAC3B,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,EAAE,CAAC,KAAK,EAAE,CAAA;oBACV,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;gBACjC,IAAI,CAAC,aAAa,EAAE,CAAA;YACtB,CAAC,EAAE,QAAQ,CAAC,CAAA;QACd,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAA;QAC/F,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAClC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC1B,CAAC,EAAE,KAAK,CAAC,CAAA;IACX,CAAC;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACvC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3B,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;YACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAA;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"listener.js","sourceRoot":"","sources":["../../../../src/platforms/discord/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AAErC,OAAO,SAAS,MAAM,IAAI,CAAA;AAI1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAE9C,MAAM,WAAW,GAAG,8CAA8C,CAAA;AAClE,MAAM,aAAa,GAAG,qBAAqB,CAAA;AAC3C,MAAM,oBAAoB,GAAG,KAAK,CAAA;AAClC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,2BAA2B,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACxE,MAAM,yBAAyB,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAE9C,wFAAwF;AACxF,uGAAuG;AACvG,MAAM,yBAAyB,GAAG,KAAK,CAAA;AAEvC,+FAA+F;AAC/F,+FAA+F;AAC/F,qGAAqG;AACrG,MAAM,oBAAoB,GAAG,UAAU,CAAA;AAEvC,4FAA4F;AAC5F,0FAA0F;AAC1F,8FAA8F;AAC9F,MAAM,2BAA2B,GAAG,MAAM,CAAA;AAC1C,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,2BAA2B,CAAA;AAI/G,MAAM,OAAO,eAAe;IAClB,MAAM,CAAe;IACrB,OAAO,GAAG,KAAK,CAAA;IACf,EAAE,GAAqB,IAAI,CAAA;IAC3B,OAAO,GAAG,IAAI,YAAY,EAAE,CAAA;IAC5B,cAAc,GAA0C,IAAI,CAAA;IAC5D,oBAAoB,GAAG,IAAI,CAAA;IAC3B,oBAAoB,GAAyC,IAAI,CAAA;IACjE,mBAAmB,GAAyC,IAAI,CAAA;IAChE,cAAc,GAAyC,IAAI,CAAA;IAC3D,iBAAiB,GAAG,CAAC,CAAA;IACrB,QAAQ,GAAkB,IAAI,CAAA;IAC9B,SAAS,GAAkB,IAAI,CAAA;IAC/B,gBAAgB,GAAkB,IAAI,CAAA;IACtC,KAAK,GAAkB,IAAI,CAAA;IAC3B,UAAU,GAA4C,IAAI,CAAA;IAC1D,UAAU,GAAG,CAAC,CAAA;IAEtB,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;QAC1B,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;YACf,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;QAChB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAA;IACxB,CAAC;IAED,EAAE,CAAqB,KAAQ,EAAE,QAAuD;QACtF,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,GAAG,CAAqB,KAAQ,EAAE,QAAuD;QACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC7D,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAqB,KAAQ,EAAE,QAAuD;QACxF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,QAAoC,CAAC,CAAA;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,SAAS,CAAC,UAAkB,EAAE,EAAc;QAClD,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QACjE,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAA;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAM;QAEvC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAA;YACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,OAAM;YAEvC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;YAElB,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;YAC5F,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;YAEZ,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,KAAK,EAAE,CAAA;oBACV,OAAM;gBACR,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACvC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;gBACtE,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC,WAAW,EAAE,CAAA;gBAClB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;gBACd,IAAI,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC,CAAA;oBACjG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAA;oBACpB,OAAM;gBACR,CAAC;gBACD,IAAI,yBAAyB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;oBACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;gBAC9B,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;oBACjC,IAAI,CAAC,iBAAiB,EAAE,CAAA;gBAC1B,CAAC;YACH,CAAC,CAAC,CAAA;YAEF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACrB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;oBAAE,OAAM;gBAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACjF,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;gBAAE,OAAM;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACrF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,iBAAiB,EAAE,CAAA;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,IAAoD,EAAE,UAAkB,EAAE,EAAa;QAC3G,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;YAAE,OAAM;QAC3C,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAA;QAE5B,QAAQ,EAAE,EAAE,CAAC;YACX,KAAK,oBAAoB,CAAC,KAAK;gBAC7B,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;gBACzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,IAAI,CAAC,UAAU,EAAE,CAAA;gBACnB,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,YAAY,EAAE,CAAA;gBACrB,CAAC;gBACD,MAAK;YAEP,KAAK,oBAAoB,CAAC,YAAY;gBACpC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;gBAChC,MAAK;YAEP,KAAK,oBAAoB,CAAC,QAAQ;gBAChC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;gBAC5C,IAAI,CAAC;oBAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBAChC,MAAK;YAEP,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;gBAC1B,EAAE,CAAC,KAAK,EAAE,CAAA;gBACV,MAAK;YAEP,KAAK,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC;gBACzC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACf,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAA;oBACzC,IAAI,CAAC,mBAAmB,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAA;wBAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;4BAAE,EAAE,CAAC,KAAK,EAAE,CAAA;oBAChD,CAAC,EAAE,KAAK,CAAC,CAAA;gBACX,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;oBACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;oBACrB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAA;oBAC5B,EAAE,CAAC,KAAK,EAAE,CAAA;gBACZ,CAAC;gBACD,MAAK;YACP,CAAC;YAED,KAAK,oBAAoB,CAAC,SAAS;gBACjC,IAAI,CAAC,aAAa,EAAE,CAAA;gBACpB,MAAK;QACT,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,CAAS,EAAE,CAAM;QACtC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU,CAAA;YAC7B,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAA;YAC5C,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAA;YACxB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAA;YACzE,OAAM;QACR,CAAC;QAED,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAAC,CAAA;YACtF,OAAM;QACR,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QACjC,MAAM,KAAK,GAA+B,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;QAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,EAAE,EAAE,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,oBAAoB,CAAC,QAAQ;YACjC,CAAC,EAAE;gBACD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,YAAY,EAAE,yBAAyB;gBACvC,OAAO,EAAE,oBAAoB;gBAC7B,UAAU,EAAE;oBACV,EAAE,EAAE,OAAO;oBACX,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,EAAE;oBACV,aAAa,EAAE,OAAO;oBACtB,kBAAkB,EAChB,uGAAuG;oBACzG,eAAe,EAAE,WAAW;oBAC5B,UAAU,EAAE,EAAE;oBACd,QAAQ,EAAE,EAAE;oBACZ,gBAAgB,EAAE,EAAE;oBACpB,gBAAgB,EAAE,EAAE;oBACpB,wBAAwB,EAAE,EAAE;oBAC5B,eAAe,EAAE,QAAQ;oBACzB,mBAAmB,EAAE,yBAAyB;oBAC9C,mBAAmB,EAAE,IAAI;iBAC1B;gBACD,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;gBACpE,QAAQ,EAAE,KAAK;gBACf,YAAY,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;aACrC;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,EAAE,IAAI,CACX,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,oBAAoB,CAAC,MAAM;YAC/B,CAAC,EAAE;gBACD,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,GAAG,EAAE,IAAI,CAAC,QAAQ;aACnB;SACF,CAAC,CACH,CAAA;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;IACzF,CAAC;IAEO,cAAc,CAAC,QAAgB,EAAE,UAAkB,EAAE,EAAa;QACxE,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAEhC,IAAI,CAAC,oBAAoB,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1C,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;YAChC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;gBAAE,OAAM;YAC3C,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;YACjC,IAAI,CAAC,aAAa,EAAE,CAAA;YAEpB,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC;oBACpC,IAAI,CAAC,oBAAoB,EAAE,CAAA;oBAC3B,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,EAAE,CAAC,KAAK,EAAE,CAAA;oBACV,OAAM;gBACR,CAAC;gBACD,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAA;gBACjC,IAAI,CAAC,aAAa,EAAE,CAAA;YACtB,CAAC,EAAE,QAAQ,CAAC,CAAA;QACd,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAA;QAC/F,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;QAClC,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;YAC1B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC1B,CAAC,EAAE,KAAK,CAAC,CAAA;IACX,CAAC;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,CAAC;QACD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;YACvC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAA;QAClC,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,oBAAoB,EAAE,CAAA;QAC3B,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;YACtC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAA;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YACjC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAA;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/src/platforms/slack/qr-http-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qr-http-login.d.ts","sourceRoot":"","sources":["../../../../src/platforms/slack/qr-http-login.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAClC;AAMD,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAwBnG;AAqDD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQnD;AAED,wBAAgB,YAAY,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGnE"}
+{"version":3,"file":"qr-http-login.d.ts","sourceRoot":"","sources":["../../../../src/platforms/slack/qr-http-login.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAClC;AAMD,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,CAwBnG;AA8JD,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAQnD;AAED,wBAAgB,YAAY,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGnE"}

package/dist/src/platforms/slack/qr-http-login.js

@@ -7,9 +7,9 @@ export async function loginWithQr(dataUrl, options = {}) {
     const login = decodeSlackQr(dataUrl.trim());
     const debug = options.debug;
     debug?.(`Decoded QR for workspace ${login.workspace}`);
-    const cookie = await captureDCookie(login.url, options);
+    const { cookie, denialReason, ssoProvider } = await captureDCookie(login.url, options);
     if (!cookie) {
-        throw new SlackError('Could not establish a Slack session from the QR code. The link may have expired — generate a new QR code and try again.', 'qr_session_failed');
+        throw new SlackError(qrSessionFailureMessage(denialReason, { workspace: login.workspace, ssoProvider }), 'qr_session_failed');
     }
     debug?.('Captured session cookie');
     const token = await refreshTokenFromWeb(login.workspace, cookie, options.fetchImpl ?? fetch);
@@ -19,12 +19,60 @@ export async function loginWithQr(dataUrl, options = {}) {
     debug?.('Retrieved client token');
     return { token, cookie, workspace: login.workspace };
 }
+function qrSessionFailureMessage(denialReason, context = {}) {
+    const workspace = context.workspace ? `"${context.workspace}"` : 'this workspace';
+    if (denialReason === 'sso_required') {
+        const via = context.ssoProvider ? ` (via ${context.ssoProvider})` : '';
+        return [
+            `Slack workspace ${workspace} enforces SSO${via}, so QR sign-in cannot complete here.`,
+            '',
+            `Why: scanning the QR redirects the login to your identity provider${via}. agent-slack follows the`,
+            'redirect chain over plain HTTP and never sends your session cookie off Slack-owned hosts, so it',
+            'stops at the IdP and no Slack session (the "d" cookie) is ever issued. Completing SSO requires a',
+            'real browser, which a headless environment does not have.',
+            '',
+            'What to do instead:',
+            '  On a computer where you are already signed in to Slack (desktop app or a Chromium browser),',
+            '  run:  agent-slack auth extract',
+            '  This reads your existing session locally — no SSO re-login, no DevTools.',
+            '',
+            'Background: https://github.com/agent-messenger/agent-messenger/issues/260',
+        ].join('\n');
+    }
+    if (denialReason === 'link_expired') {
+        return [
+            `The Slack QR code for ${workspace} has expired or was already used.`,
+            'The z-app sign-in link is single-use and short-lived: it is consumed the first time it is opened',
+            '(including previewing or scanning it), and re-using it returns "Link Expired".',
+            '',
+            'Generate a fresh QR (your name → "Sign in on mobile") and pipe it in immediately, without',
+            'previewing or scanning it first.',
+        ].join('\n');
+    }
+    if (denialReason === 'awaiting_device_confirmation') {
+        return [
+            `Slack requires this sign-in to ${workspace} to be confirmed on an already-authenticated device.`,
+            'QR sign-in over HTTP cannot complete that approval step.',
+            '',
+            'Use  agent-slack auth extract  on a computer already signed in to Slack instead.',
+        ].join('\n');
+    }
+    return [
+        `Could not establish a Slack session for ${workspace} from the QR code.`,
+        'The link may have expired, or the workspace requires a sign-in step that QR-over-HTTP cannot complete.',
+        '',
+        'Generate a fresh QR and try again, or run  agent-slack auth extract  on a computer already signed in',
+        'to Slack.',
+    ].join('\n');
+}
 async function captureDCookie(startUrl, options) {
     const doFetch = options.fetchImpl ?? fetch;
     const maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS;
     const debug = options.debug;
     let url = startUrl;
     let dCookie = null;
+    let sessionDenialReason = null;
+    let ssoProvider = null;
     const cookieJar = [];
     for (let hop = 0; hop < maxRedirects; hop++) {
         // Only ever send captured cookies (including the d session cookie) to Slack
@@ -43,26 +91,77 @@ async function captureDCookie(startUrl, options) {
                 ...(cookieJar.length ? { Cookie: cookieJar.join('; ') } : {}),
             },
         });
+        const cookieNames = [];
         for (const setCookie of getSetCookies(response)) {
             const value = parseDCookie(setCookie);
             if (value)
                 dCookie = value;
+            const name = setCookie.split('=')[0]?.trim();
+            if (name)
+                cookieNames.push(name);
             const pair = setCookie.split(';')[0]?.trim();
             if (pair)
                 cookieJar.push(pair);
         }
-        debug?.(`hop ${hop}: ${response.status}`);
+        debug?.(`hop ${hop}: ${response.status} set-cookie=[${cookieNames.join(',') || 'none'}]`);
         const location = response.status >= 300 && response.status < 400 ? response.headers.get('location') : null;
-        if (!location)
+        if (!location) {
+            if (!dCookie)
+                sessionDenialReason = await classifySessionDenial(response);
             break;
+        }
         const next = new URL(location, url).toString();
         if (!isSlackHost(next)) {
-            debug?.(`hop ${hop}: redirect target is not a Slack host, stopping`);
+            // A no-cookie login QR that redirects off Slack is an SSO/IdP hand-off the
+            // HTTP flow cannot complete — classify it regardless of whether the IdP
+            // host is a recognized provider (custom/vanity SAML domains included).
+            if (!dCookie) {
+                sessionDenialReason = 'sso_required';
+                ssoProvider = ssoProviderFromUrl(next);
+            }
+            debug?.(`hop ${hop}: redirect target is not a Slack host (${new URL(next).hostname}), stopping`);
             break;
         }
         url = next;
     }
-    return dCookie;
+    return { cookie: dCookie, denialReason: sessionDenialReason, ssoProvider };
+}
+function ssoProviderFromUrl(rawUrl) {
+    let hostname;
+    try {
+        hostname = new URL(rawUrl).hostname;
+    }
+    catch {
+        return null;
+    }
+    if (hostname === 'accounts.google.com')
+        return 'Google';
+    if (hostname.endsWith('.okta.com') || hostname.endsWith('.oktapreview.com'))
+        return 'Okta';
+    if (hostname === 'login.microsoftonline.com')
+        return 'Microsoft';
+    if (hostname.endsWith('.onelogin.com'))
+        return 'OneLogin';
+    if (hostname.endsWith('.pingidentity.com') || hostname.endsWith('.pingone.com'))
+        return 'Ping Identity';
+    if (hostname.endsWith('.auth0.com'))
+        return 'Auth0';
+    return null;
+}
+async function classifySessionDenial(response) {
+    try {
+        const body = await response.text();
+        if (/Link Expired/i.test(body) || /trouble signing you in/i.test(body)) {
+            return 'link_expired';
+        }
+        if (/sign in on your other device/i.test(body) || /open Slack/i.test(body) || /confirm/i.test(body)) {
+            return 'awaiting_device_confirmation';
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
 }
 export function isSlackHost(rawUrl) {
     try {

package/dist/src/platforms/slack/qr-http-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"qr-http-login.js","sourceRoot":"","sources":["../../../../src/platforms/slack/qr-http-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAc1C,MAAM,kBAAkB,GACtB,uHAAuH,CAAA;AACzH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAEhC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,UAA0B,EAAE;IAC7E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,KAAK,EAAE,CAAC,4BAA4B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IAEtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAClB,yHAAyH,EACzH,mBAAmB,CACpB,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,yBAAyB,CAAC,CAAA;IAElC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;IAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAClB,4EAA4E,EAC5E,iBAAiB,CAClB,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,wBAAwB,CAAC,CAAA;IAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;AACtD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAuB;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAA;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAE3B,IAAI,GAAG,GAAG,QAAQ,CAAA;IAClB,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,MAAM,SAAS,GAAa,EAAE,CAAA;IAE9B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC;QAC5C,4EAA4E;QAC5E,uEAAuE;QACvE,sCAAsC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC,OAAO,GAAG,2BAA2B,CAAC,CAAA;YAC9C,MAAK;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,YAAY,EAAE,kBAAkB;gBAChC,MAAM,EAAE,iEAAiE;gBACzE,iBAAiB,EAAE,gBAAgB;gBACnC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;SACF,CAAC,CAAA;QAEF,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YACrC,IAAI,KAAK;gBAAE,OAAO,GAAG,KAAK,CAAA;YAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;YAC5C,IAAI,IAAI;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QAED,KAAK,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QAEzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1G,IAAI,CAAC,QAAQ;YAAE,MAAK;QAEpB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,KAAK,EAAE,CAAC,OAAO,GAAG,iDAAiD,CAAC,CAAA;YACpE,MAAK;QACP,CAAC;QACD,GAAG,GAAG,IAAI,CAAA;IACZ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACvC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,eAAuB;IAClD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC/D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAsD,CAAA;IAClF,IAAI,OAAO,UAAU,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAA;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/B,CAAC"}
+{"version":3,"file":"qr-http-login.js","sourceRoot":"","sources":["../../../../src/platforms/slack/qr-http-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAc1C,MAAM,kBAAkB,GACtB,uHAAuH,CAAA;AACzH,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAEhC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,EAAE,UAA0B,EAAE;IAC7E,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,KAAK,EAAE,CAAC,4BAA4B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAA;IAEtD,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACtF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAClB,uBAAuB,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,EAClF,mBAAmB,CACpB,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,yBAAyB,CAAC,CAAA;IAElC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;IAC5F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAClB,4EAA4E,EAC5E,iBAAiB,CAClB,CAAA;IACH,CAAC;IACD,KAAK,EAAE,CAAC,wBAAwB,CAAC,CAAA;IAEjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;AACtD,CAAC;AAOD,SAAS,uBAAuB,CAAC,YAA2B,EAAE,UAA4B,EAAE;IAC1F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAA;IAEjF,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACtE,OAAO;YACL,mBAAmB,SAAS,gBAAgB,GAAG,uCAAuC;YACtF,EAAE;YACF,qEAAqE,GAAG,2BAA2B;YACnG,iGAAiG;YACjG,kGAAkG;YAClG,2DAA2D;YAC3D,EAAE;YACF,qBAAqB;YACrB,+FAA+F;YAC/F,kCAAkC;YAClC,4EAA4E;YAC5E,EAAE;YACF,2EAA2E;SAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC;IACD,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;QACpC,OAAO;YACL,yBAAyB,SAAS,mCAAmC;YACrE,kGAAkG;YAClG,gFAAgF;YAChF,EAAE;YACF,2FAA2F;YAC3F,kCAAkC;SACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC;IACD,IAAI,YAAY,KAAK,8BAA8B,EAAE,CAAC;QACpD,OAAO;YACL,kCAAkC,SAAS,sDAAsD;YACjG,0DAA0D;YAC1D,EAAE;YACF,kFAAkF;SACnF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC;IACD,OAAO;QACL,2CAA2C,SAAS,oBAAoB;QACxE,wGAAwG;QACxG,EAAE;QACF,sGAAsG;QACtG,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAQD,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAuB;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAA;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAE3B,IAAI,GAAG,GAAG,QAAQ,CAAA;IAClB,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,IAAI,mBAAmB,GAAkB,IAAI,CAAA;IAC7C,IAAI,WAAW,GAAkB,IAAI,CAAA;IACrC,MAAM,SAAS,GAAa,EAAE,CAAA;IAE9B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC;QAC5C,4EAA4E;QAC5E,uEAAuE;QACvE,sCAAsC;QACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC,OAAO,GAAG,2BAA2B,CAAC,CAAA;YAC9C,MAAK;QACP,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE;gBACP,YAAY,EAAE,kBAAkB;gBAChC,MAAM,EAAE,iEAAiE;gBACzE,iBAAiB,EAAE,gBAAgB;gBACnC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D;SACF,CAAC,CAAA;QAEF,MAAM,WAAW,GAAa,EAAE,CAAA;QAChC,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;YACrC,IAAI,KAAK;gBAAE,OAAO,GAAG,KAAK,CAAA;YAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;YAC5C,IAAI,IAAI;gBAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;YAC5C,IAAI,IAAI;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,CAAC;QAED,KAAK,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,MAAM,gBAAgB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,CAAA;QAEzF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC1G,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO;gBAAE,mBAAmB,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAA;YACzE,MAAK;QACP,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,mBAAmB,GAAG,cAAc,CAAA;gBACpC,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;YACxC,CAAC;YACD,KAAK,EAAE,CAAC,OAAO,GAAG,0CAA0C,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAA;YAChG,MAAK;QACP,CAAC;QACD,GAAG,GAAG,IAAI,CAAA;IACZ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAA;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,KAAK,qBAAqB;QAAE,OAAO,QAAQ,CAAA;IACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,MAAM,CAAA;IAC1F,IAAI,QAAQ,KAAK,2BAA2B;QAAE,OAAO,WAAW,CAAA;IAChE,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,UAAU,CAAA;IACzD,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,eAAe,CAAA;IACvG,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,OAAO,CAAA;IACnD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAkB;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,OAAO,cAAc,CAAA;QACvB,CAAC;QACD,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpG,OAAO,8BAA8B,CAAA;QACvC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;QACvC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,eAAuB;IAClD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAA;IAC/D,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAsD,CAAA;IAClF,IAAI,OAAO,UAAU,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAClD,OAAO,UAAU,CAAC,YAAY,EAAE,CAAA;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/B,CAAC"}

package/docs/content/docs/sdk/discord.mdx

@@ -257,15 +257,7 @@ await listener.start() // connects via Gateway WebSocket
 // listener.stop()      // clean shutdown
 ```
 
-Custom intents (default includes non-privileged message/reaction/typing intents — add `MessageContent` to read message text):
-
-```typescript
-import { DiscordIntent } from 'agent-messenger/discord'
-
-const listener = new DiscordListener(client, {
-  intents: DiscordIntent.Guilds | DiscordIntent.GuildMessages | DiscordIntent.MessageContent, // MessageContent is privileged
-})
-```
+The user-account listener does not take intents — Gateway intents are a bot concept. It identifies as a user session and automatically receives full message content (including other users' messages), so no configuration is required.
 
 ### Available Events
 

package/e2e/README.md

@@ -41,7 +41,7 @@ Before running E2E tests, you need:
 
 ## Running E2E Tests Locally
 
-### Step 1: Extract Credentials
+### Step 1: Authenticate
 
 First, make sure the desktop apps (Slack/Discord) are running and logged into your **test** workspaces.
 
@@ -56,6 +56,8 @@ agent-discord auth extract
 agent-teams auth extract
 ```
 
+> For local runs you can also use QR code sign-in for the **test** accounts (`agent-slack auth qr` / `agent-discord auth qr`) instead of extraction — it's the recommended auth method and doesn't require the desktop app. CI uses the environment variables below (extracted token/cookie values), since QR sign-in is interactive.
+
 ### Step 2: Switch to Test Workspace
 
 Ensure you're targeting the correct test workspace:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-messenger",
-  "version": "2.26.0",
+  "version": "2.27.0",
   "description": "Multi-platform messaging CLI for AI agents (Slack, Discord, Teams, Webex, Telegram, Telegram Bot, WhatsApp, LINE, Instagram, KakaoTalk, Channel Talk)",
   "repository": {
     "type": "git",

package/skills/agent-channeltalk/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-channeltalk
 description: Interact with Channel Talk using extracted desktop app or browser credentials - read chats, send messages, search messages, manage groups
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-channeltalk:*)
 metadata:
   openclaw:

package/skills/agent-channeltalkbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-channeltalkbot
 description: Interact with Channel Talk workspaces using API credentials - send messages, read chats, manage groups and bots
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-channeltalkbot:*)
 metadata:
   openclaw:

package/skills/agent-discord/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-discord
 description: Interact with Discord servers - send messages, read channels, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-discord:*)
 metadata:
   openclaw:
@@ -39,8 +39,20 @@ On macOS, the system may prompt for your Keychain password the first time (requi
 
 **Obtaining tokens** — two options:
 
-- **`agent-discord auth extract`** (default): extracts from the Discord desktop app first, falling back to Chromium browsers if the app isn't installed. Best for automated/headless use.
-- **`agent-discord auth qr`**: signs in by scanning a QR code with the Discord mobile app (Settings → Scan QR Code). Use this when there is no desktop app or browser session to extract from. Requires a phone, so it cannot run headlessly.
+- **`agent-discord auth qr` — recommended**: signs in by scanning a QR code with the Discord mobile app (Settings → Scan QR Code). This is the safest and most reliable method — it authenticates through Discord's official Remote Auth flow instead of reading credentials off disk, and needs no desktop app or browser. Requires a phone to scan, so it cannot run headlessly.
+- **`agent-discord auth extract`**: extracts from the Discord desktop app first, falling back to Chromium browsers if the app isn't installed. Best for automated/headless use where no phone is available to scan.
+
+### QR Code Sign-In (Recommended)
+
+```bash
+# Generate a QR code and wait for you to scan it with the Discord mobile app
+agent-discord auth qr
+
+# Show protocol details while debugging
+agent-discord auth qr --debug
+```
+
+Open the Discord mobile app → **Settings → Scan QR Code**, scan the printed code, and confirm on your phone. The token (plus all discovered servers) is validated and stored like `auth extract`. The QR code expires after ~150 seconds — re-run the command to generate a fresh one. See [references/authentication.md](references/authentication.md) for the full flow.
 
 ### Multi-Server Support
 
@@ -418,7 +430,7 @@ All commands return consistent error format:
 
 Common errors:
 
-- `Not authenticated`: No valid token (auto-extraction failed — see Troubleshooting)
+- `Not authenticated`: No valid token (auto-extraction failed — run `auth qr` to sign in, or see Troubleshooting)
 - `No current server set`: Run `server switch <id>` first
 - `Message not found`: Invalid message ID
 - `Unknown Channel`: Invalid channel ID
@@ -452,6 +464,25 @@ if (!token) {
 const client = await new DiscordClient().login({ token })
 ```
 
+### QR Code Login (Recommended)
+
+`loginWithRemoteAuth` signs in by scanning a QR code with the Discord mobile app — no desktop app or token extraction required. It runs Discord's Remote Auth protocol and hands you a QR URL to display; once the user scans and confirms on their phone, you receive the user token.
+
+```typescript
+import { DiscordClient, loginWithRemoteAuth } from 'agent-messenger/discord'
+
+const session = await loginWithRemoteAuth({
+  onQrUrl: (url) => {
+    // Render this URL as a QR code (e.g. with the `qrcode` package)
+    console.log('Scan this with the Discord mobile app:', url)
+  },
+})
+
+const client = await new DiscordClient().login({ token: session.token })
+```
+
+`session` is `{ token, user }`, where `user` may be `null` if the gateway skips the user payload — call `await client.testAuth()` after login if you need the identity. If Discord requires a captcha on the final token exchange, the call rejects with a `DiscordError` of code `remote_auth_captcha`; fall back to `auth extract` in that case. Requires a phone with the Discord app, so it cannot run headlessly.
+
 ### Example
 
 ```typescript
@@ -478,12 +509,10 @@ await client.sendMessage(thread.id, 'First message in thread')
 `DiscordListener` connects to Discord's Gateway WebSocket for instant event streaming:
 
 ```typescript
-import { DiscordClient, DiscordListener, DiscordIntent } from 'agent-messenger/discord'
+import { DiscordClient, DiscordListener } from 'agent-messenger/discord'
 
 const client = await new DiscordClient().login()
-const listener = new DiscordListener(client, {
-  intents: DiscordIntent.Guilds | DiscordIntent.GuildMessages | DiscordIntent.MessageContent,
-})
+const listener = new DiscordListener(client)
 
 listener.on('message_create', (event) => {
   console.log(`${event.author.username}: ${event.content}`)

package/skills/agent-discord/references/authentication.md

@@ -2,7 +2,40 @@
 
 ## Overview
 
-agent-discord uses Discord's user token extracted from the Discord desktop application, with automatic fallback to Chromium browser profiles (Chrome, Chrome Canary, Edge, Arc, Brave, Vivaldi, Chromium) when the desktop app isn't installed.
+agent-discord supports two ways to authenticate:
+
+- **QR code sign-in (`auth qr`) — recommended.** Scan a QR code with the Discord mobile app to sign in through Discord's own Remote Auth flow. This is the safest and most reliable method: it never reads stored credentials off disk, works without a desktop app or browser, and uses Discord's official login confirmation on your phone.
+- **Token extraction (`auth extract`).** Reads Discord's user token from the desktop application, with automatic fallback to Chromium browser profiles (Chrome, Chrome Canary, Edge, Arc, Brave, Vivaldi, Chromium). Best for automated/headless environments where no phone is available to scan.
+
+> **Recommendation:** Prefer `agent-discord auth qr` whenever you can scan a QR code. Use `auth extract` for headless/CI setups where interactive scanning isn't possible.
+
+## QR Code Sign-In (Recommended)
+
+Sign in by scanning a QR code with the Discord mobile app — no desktop app or browser token extraction required. This runs Discord's official Remote Auth protocol, so you authenticate through Discord's own login confirmation rather than by reading stored credentials.
+
+```bash
+# Generate a QR code and wait for you to scan it
+agent-discord auth qr
+
+# Show protocol details while debugging
+agent-discord auth qr --debug
+
+# Human-readable output
+agent-discord auth qr --pretty
+```
+
+How it works:
+
+1. Opens a WebSocket to Discord's remote-auth gateway and performs an RSA key exchange
+2. Renders a QR code in your terminal (and opens it in the browser as a fallback)
+3. You scan it with the Discord mobile app: **Settings → Scan QR Code**, then confirm on your phone
+4. Discord returns an encrypted ticket, which is exchanged for your user token, validated, and stored like `auth extract` — along with all discovered servers
+
+Notes:
+
+- **Requires the Discord mobile app** (logged in) to scan. Because it's interactive, it cannot run headlessly — use `auth extract` for CI.
+- The QR code expires after about 150 seconds. Re-run `agent-discord auth qr` to generate a fresh one.
+- If Discord presents a captcha challenge during the token exchange, the CLI surfaces a typed error directing you to fall back to `auth extract`.
 
 ## Token Extraction
 
@@ -186,7 +219,10 @@ Discord user tokens can be invalidated when:
 If commands start failing with auth errors:
 
 ```bash
-# Re-extract credentials
+# Recommended: re-authenticate with a QR code
+agent-discord auth qr
+
+# Or re-extract credentials from the desktop app / browser
 agent-discord auth extract
 
 # Verify it worked
@@ -216,8 +252,9 @@ This shows:
 
 **Solution**:
 
-1. Log in to discord.com in a Chromium browser (Chrome, Edge, Arc, Brave) — the CLI will extract from browser automatically
-2. Or install the Discord desktop app, log in, and run `agent-discord auth extract` again
+1. Recommended: run `agent-discord auth qr` and scan the QR code with the Discord mobile app — no desktop app or browser required
+2. Or log in to discord.com in a Chromium browser (Chrome, Edge, Arc, Brave) — the CLI will extract from browser automatically
+3. Or install the Discord desktop app, log in, and run `agent-discord auth extract` again
 
 ### "No Discord token found"
 
@@ -275,10 +312,11 @@ With extracted credentials, agent-discord has the same permissions as you in Dis
 
 ### Best Practices
 
-1. **Protect credentials.json**: Never commit to version control
-2. **Use server switching**: Keep different contexts separate
-3. **Re-extract periodically**: Keep tokens fresh
-4. **Revoke if compromised**: Change your Discord password to invalidate tokens
+1. **Prefer QR sign-in**: Use `auth qr` when possible — it authenticates through Discord's official flow instead of reading credentials off disk
+2. **Protect credentials.json**: Never commit to version control
+3. **Use server switching**: Keep different contexts separate
+4. **Re-authenticate periodically**: Keep tokens fresh
+5. **Revoke if compromised**: Change your Discord password to invalidate tokens
 
 ## Manual Token Management (Advanced)
 

package/skills/agent-discordbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-discordbot
 description: Interact with Discord servers using bot tokens - send messages, read channels, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-discordbot:*)
 metadata:
   openclaw:

package/skills/agent-instagram/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-instagram
 description: Interact with Instagram DMs - send messages, read conversations, manage accounts
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-instagram:*)
 metadata:
   openclaw:

package/skills/agent-kakaotalk/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-kakaotalk
 description: Interact with KakaoTalk - send messages, read chats, manage conversations
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-kakaotalk:*)
 metadata:
   openclaw:

package/skills/agent-line/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-line
 description: Interact with LINE - send messages, read chats, manage conversations
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-line:*)
 metadata:
   openclaw:

package/skills/agent-slack/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-slack
 description: Interact with Slack workspaces - send messages, read channels, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-slack:*)
 metadata:
   openclaw:
@@ -37,11 +37,14 @@ Credentials are extracted automatically from the Slack desktop app (or Chromium
 
 On macOS, the system may prompt for your Keychain password the first time (required to decrypt Slack's stored token). This is a one-time prompt.
 
-**IMPORTANT**: Always use `agent-slack auth extract` to obtain tokens. The CLI extracts from the desktop app first, falling back to Chromium browsers if the app isn't installed.
+**Two ways to obtain tokens:**
 
-### QR Code Sign-In (No Desktop App Required)
+- **`agent-slack auth qr` — recommended.** Sign in with a QR code from Slack's "Sign in on mobile" screen. It's the safest and most reliable method: it authenticates through Slack's own login flow over plain HTTP instead of reading credentials off disk, and needs no desktop app or browser.
+- **`agent-slack auth extract`.** Extracts tokens from the Slack desktop app first, falling back to Chromium browsers if the app isn't installed. Best for automated/headless environments.
 
-If the Slack desktop app isn't installed (or extraction fails), you can sign in with a QR code from any device where you're already logged into Slack — no browser automation, fully over HTTP:
+### QR Code Sign-In (Recommended)
+
+Sign in with a QR code from any device where you're already logged into Slack — no desktop app, no browser automation, fully over HTTP:
 
 ```bash
 # In Slack (desktop or web): your name (top-left) → "Sign in on mobile".

package/skills/agent-slack/references/authentication.md

@@ -2,7 +2,12 @@
 
 ## Overview
 
-agent-slack uses Slack's web client credentials (xoxc token + xoxd cookie) extracted from the Slack desktop application, with automatic fallback to Chromium browser profiles (Chrome, Chrome Canary, Edge, Arc, Brave, Vivaldi, Chromium) when the desktop app isn't installed.
+agent-slack supports two ways to authenticate:
+
+- **QR code sign-in (`auth qr`) — recommended.** Sign in with a QR code from Slack's "Sign in on mobile" screen. This is the safest and most reliable method: it authenticates through Slack's own login flow over plain HTTP instead of reading stored credentials off disk, and works without a desktop app or browser.
+- **Token extraction (`auth extract`).** Reads Slack's web client credentials (xoxc token + xoxd cookie) from the desktop application, with automatic fallback to Chromium browser profiles (Chrome, Chrome Canary, Edge, Arc, Brave, Vivaldi, Chromium). Best for automated/headless environments.
+
+> **Recommendation:** Prefer `agent-slack auth qr`. Use `auth extract` for headless/CI setups or when you'd rather reuse an existing desktop/browser session.
 
 ## Token Extraction
 
@@ -34,9 +39,9 @@ This command:
 
 Use `--browser-profile <path>` for agent-browser profiles, custom Chrome user data dirs, or portable browser profiles. The option can be repeated or given comma-separated paths, and explicit paths are included even when desktop credentials are also present.
 
-### QR Code Sign-In
+### QR Code Sign-In (Recommended)
 
-When the desktop app isn't installed and browser extraction isn't an option, you can sign in with a QR code from a device where you're already logged into Slack. This runs entirely over HTTP — no browser automation:
+The recommended way to authenticate: sign in with a QR code from a device where you're already logged into Slack. This runs entirely over HTTP — no browser automation, and no desktop app required:
 
 ```bash
 # In Slack (desktop or web): your name (top-left) → "Sign in on mobile".

package/skills/agent-slackbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-slackbot
 description: Interact with Slack workspaces using bot tokens - send messages, read channels, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-slackbot:*)
 metadata:
   openclaw:

package/skills/agent-teams/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-teams
 description: Interact with Microsoft Teams - send messages, read channels, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-teams:*)
 metadata:
   openclaw:

package/skills/agent-telegram/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-telegram
 description: Interact with Telegram through TDLib - authenticate, inspect chats, and send messages
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-telegram:*)
 ---
 

package/skills/agent-telegrambot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-telegrambot
 description: Interact with Telegram using bot tokens - send messages, read chats, manage reactions
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-telegrambot:*)
 metadata:
   openclaw:

package/skills/agent-webex/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-webex
 description: Interact with Cisco Webex - send messages, read spaces, manage memberships
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-webex:*)
 metadata:
   openclaw:

package/skills/agent-webexbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-webexbot
 description: Interact with Cisco Webex using bot tokens - send messages, reply in threads, upload and download files, look up people, read spaces, manage memberships, stream real-time events
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-webexbot:*)
 metadata:
   openclaw:

package/skills/agent-wechatbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-wechatbot
 description: Interact with WeChat Official Account using API credentials - send messages, manage templates, list followers
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-wechatbot:*)
 metadata:
   openclaw:

package/skills/agent-whatsapp/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-whatsapp
 description: Interact with WhatsApp - send messages, read chats, manage conversations
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-whatsapp:*)
 metadata:
   openclaw:

package/skills/agent-whatsappbot/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: agent-whatsappbot
 description: Interact with WhatsApp using Cloud API credentials - send messages, manage templates
-version: 2.26.0
+version: 2.27.0
 allowed-tools: Bash(agent-whatsappbot:*)
 metadata:
   openclaw:

package/src/platforms/discord/listener.test.ts

@@ -171,10 +171,9 @@ describe('DiscordListener', () => {
       expect(identifyMsg.d.token).toBe('fake-token')
     })
 
-    it('sends Identify with custom intents', async () => {
+    it('sends a user-account Identify with the load-bearing default shape', async () => {
       const client = createMockClient()
-      const customIntents = 1 << 9
-      listener = new DiscordListener(client, { intents: customIntents })
+      listener = new DiscordListener(client)
 
       await listener.start()
       mockWsInstance.simulateOpen()
@@ -184,7 +183,16 @@ describe('DiscordListener', () => {
       const identifyMsg = sentMessages.find((m) => m.op === 2)
 
       expect(identifyMsg).toBeDefined()
-      expect(identifyMsg.d.intents).toBe(customIntents)
+      expect(identifyMsg.d.capabilities).toBe(16381)
+      expect(identifyMsg.d.client_state).toEqual({ guild_versions: {} })
+      expect(identifyMsg.d.compress).toBe(false)
+      expect(identifyMsg.d.presence).toEqual({ status: 'online', since: 0, activities: [], afk: false })
+      expect(identifyMsg.d.properties.browser).toBe('Chrome')
+      expect(identifyMsg.d.properties.client_build_number).toBe(648814)
+
+      // All intents incl. MESSAGE_CONTENT (1<<15); user sessions blank other users' content without it
+      expect(identifyMsg.d.intents).toBe(33_554_431)
+      expect(identifyMsg.d.intents & (1 << 15)).toBe(1 << 15)
     })
   })
 

package/src/platforms/discord/listener.ts

@@ -4,7 +4,7 @@ import WebSocket from 'ws'
 
 import type { DiscordClient } from './client'
 import type { DiscordListenerEventMap, DiscordGatewayGenericEvent } from './types'
-import { DiscordGatewayOpcode, DiscordIntent } from './types'
+import { DiscordGatewayOpcode } from './types'
 
 const GATEWAY_URL = 'wss://gateway.discord.gg/?v=10&encoding=json'
 const GATEWAY_QUERY = '?v=10&encoding=json'
@@ -13,20 +13,25 @@ const RECONNECT_MAX_DELAY = 30_000
 const NON_RECOVERABLE_CLOSE_CODES = [4004, 4010, 4011, 4012, 4013, 4014]
 const SESSION_RESET_CLOSE_CODES = [4007, 4009]
 
-const DEFAULT_INTENTS =
-  DiscordIntent.Guilds |
-  DiscordIntent.GuildMessages |
-  DiscordIntent.GuildMessageReactions |
-  DiscordIntent.GuildMessageTyping |
-  DiscordIntent.DirectMessages |
-  DiscordIntent.DirectMessageReactions |
-  DiscordIntent.DirectMessageTyping
+// User (non-bot) gateway capabilities bitmask, mirroring discord.py-self's default set.
+// Capabilities shape the READY payload; bit 10 (client_state_v2) requires client_state.guild_versions.
+const USER_GATEWAY_CAPABILITIES = 16381
+
+// Without MESSAGE_CONTENT (1<<15), Discord blanks `content`/`embeds`/`attachments` on messages
+// from OTHER users (self/DM/mention content still arrives). User sessions get all intents only
+// when `intents` is omitted OR explicitly set, so we send an all-intents value to guarantee content.
+const USER_GATEWAY_INTENTS = 33_554_431
+
+// Discord validates client_build_number against recent web-client builds; a stale value can
+// yield a connected-but-degraded session that fires READY yet delivers no message events.
+// Overridable via env so it can be refreshed without a release when it eventually goes stale.
+const DEFAULT_CLIENT_BUILD_NUMBER = 648814
+const USER_GATEWAY_BUILD_NUMBER = Number(process.env.AGENT_DISCORD_BUILD_NUMBER) || DEFAULT_CLIENT_BUILD_NUMBER
 
 type EventKey = keyof DiscordListenerEventMap
 
 export class DiscordListener {
   private client: DiscordClient
-  private intents: number
   private running = false
   private ws: WebSocket | null = null
   private emitter = new EventEmitter()
@@ -43,9 +48,8 @@ export class DiscordListener {
   private cachedUser: { id: string; username: string } | null = null
   private generation = 0
 
-  constructor(client: DiscordClient, options?: { intents?: number }) {
+  constructor(client: DiscordClient) {
     this.client = client
-    this.intents = options?.intents ?? DEFAULT_INTENTS
   }
 
   async start(): Promise<void> {
@@ -233,12 +237,28 @@ export class DiscordListener {
         op: DiscordGatewayOpcode.Identify,
         d: {
           token: this.token,
-          intents: this.intents,
+          capabilities: USER_GATEWAY_CAPABILITIES,
+          intents: USER_GATEWAY_INTENTS,
           properties: {
-            os: 'linux',
-            browser: 'agent-messenger',
-            device: 'agent-messenger',
+            os: 'Linux',
+            browser: 'Chrome',
+            device: '',
+            system_locale: 'en-US',
+            browser_user_agent:
+              'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36',
+            browser_version: '131.0.0.0',
+            os_version: '',
+            referrer: '',
+            referring_domain: '',
+            referrer_current: '',
+            referring_domain_current: '',
+            release_channel: 'stable',
+            client_build_number: USER_GATEWAY_BUILD_NUMBER,
+            client_event_source: null,
           },
+          presence: { status: 'online', since: 0, activities: [], afk: false },
+          compress: false,
+          client_state: { guild_versions: {} },
         },
       }),
     )

package/src/platforms/slack/qr-http-login.test.ts

@@ -132,6 +132,53 @@ describe('loginWithQr', () => {
     await expect(promise).rejects.toThrow(/expired/)
   })
 
+  it('reports SSO enforcement when the z-app hop redirects to an identity provider', async () => {
+    // Given a workspace whose z-app hop redirects off Slack to an SSO IdP (no d cookie issued)
+    const dataUrl = await qrDataUrl(ZAPP_URL)
+    const fetchImpl = (async (input: string | URL) => {
+      const url = typeof input === 'string' ? input : input.toString()
+      if (url.startsWith('https://app.slack.com/t/')) {
+        return redirect(`https://${WORKSPACE}.slack.com/z-app-secret`)
+      }
+      return redirect('https://accounts.google.com/o/oauth2/auth?redirect_uri=https://slack.com/sso/google')
+    }) as typeof fetch
+
+    // When logging in, the error names SSO + the detected provider and points to a working auth method
+    await expect(loginWithQr(dataUrl, { fetchImpl })).rejects.toThrow(/enforces SSO \(via Google\)/)
+    await expect(loginWithQr(dataUrl, { fetchImpl })).rejects.toThrow(/auth extract/)
+  })
+
+  it('reports SSO enforcement for an unrecognized/vanity IdP host', async () => {
+    // Given a z-app hop that redirects off Slack to a custom SAML IdP not in the known-provider list
+    const dataUrl = await qrDataUrl(ZAPP_URL)
+    const fetchImpl = (async (input: string | URL) => {
+      const url = typeof input === 'string' ? input : input.toString()
+      if (url.startsWith('https://app.slack.com/t/')) {
+        return redirect(`https://${WORKSPACE}.slack.com/z-app-secret`)
+      }
+      return redirect('https://login.acme.example/saml')
+    }) as typeof fetch
+
+    // When logging in, it is still classified as SSO (without naming a provider) and routes to auth extract
+    await expect(loginWithQr(dataUrl, { fetchImpl })).rejects.toThrow(/enforces SSO/)
+    await expect(loginWithQr(dataUrl, { fetchImpl })).rejects.toThrow(/auth extract/)
+  })
+
+  it('reports an expired link when the final page is Slack\u2019s "Link Expired" page', async () => {
+    // Given a z-app chain that completes on a Slack host but returns the expired page with no d cookie
+    const dataUrl = await qrDataUrl(ZAPP_URL)
+    const fetchImpl = (async (input: string | URL) => {
+      const url = typeof input === 'string' ? input : input.toString()
+      if (url.startsWith('https://app.slack.com/t/')) {
+        return redirect(`https://${WORKSPACE}.slack.com/z-app-secret`)
+      }
+      return new Response('<title>Link Expired | Slack</title>', { status: 200 })
+    }) as typeof fetch
+
+    // When logging in, the error names the expiry explicitly
+    await expect(loginWithQr(dataUrl, { fetchImpl })).rejects.toThrow(/has expired or was already used/)
+  })
+
   it('fails with qr_token_failed when the token cannot be retrieved', async () => {
     const dataUrl = await qrDataUrl(ZAPP_URL)
 

package/src/platforms/slack/qr-http-login.ts

@@ -23,10 +23,10 @@ export async function loginWithQr(dataUrl: string, options: QrLoginOptions = {})
   const debug = options.debug
   debug?.(`Decoded QR for workspace ${login.workspace}`)
 
-  const cookie = await captureDCookie(login.url, options)
+  const { cookie, denialReason, ssoProvider } = await captureDCookie(login.url, options)
   if (!cookie) {
     throw new SlackError(
-      'Could not establish a Slack session from the QR code. The link may have expired — generate a new QR code and try again.',
+      qrSessionFailureMessage(denialReason, { workspace: login.workspace, ssoProvider }),
       'qr_session_failed',
     )
   }
@@ -44,13 +44,74 @@ export async function loginWithQr(dataUrl: string, options: QrLoginOptions = {})
   return { token, cookie, workspace: login.workspace }
 }
 
-async function captureDCookie(startUrl: string, options: QrLoginOptions): Promise<string | null> {
+interface QrFailureContext {
+  workspace?: string
+  ssoProvider?: string | null
+}
+
+function qrSessionFailureMessage(denialReason: string | null, context: QrFailureContext = {}): string {
+  const workspace = context.workspace ? `"${context.workspace}"` : 'this workspace'
+
+  if (denialReason === 'sso_required') {
+    const via = context.ssoProvider ? ` (via ${context.ssoProvider})` : ''
+    return [
+      `Slack workspace ${workspace} enforces SSO${via}, so QR sign-in cannot complete here.`,
+      '',
+      `Why: scanning the QR redirects the login to your identity provider${via}. agent-slack follows the`,
+      'redirect chain over plain HTTP and never sends your session cookie off Slack-owned hosts, so it',
+      'stops at the IdP and no Slack session (the "d" cookie) is ever issued. Completing SSO requires a',
+      'real browser, which a headless environment does not have.',
+      '',
+      'What to do instead:',
+      '  On a computer where you are already signed in to Slack (desktop app or a Chromium browser),',
+      '  run:  agent-slack auth extract',
+      '  This reads your existing session locally — no SSO re-login, no DevTools.',
+      '',
+      'Background: https://github.com/agent-messenger/agent-messenger/issues/260',
+    ].join('\n')
+  }
+  if (denialReason === 'link_expired') {
+    return [
+      `The Slack QR code for ${workspace} has expired or was already used.`,
+      'The z-app sign-in link is single-use and short-lived: it is consumed the first time it is opened',
+      '(including previewing or scanning it), and re-using it returns "Link Expired".',
+      '',
+      'Generate a fresh QR (your name → "Sign in on mobile") and pipe it in immediately, without',
+      'previewing or scanning it first.',
+    ].join('\n')
+  }
+  if (denialReason === 'awaiting_device_confirmation') {
+    return [
+      `Slack requires this sign-in to ${workspace} to be confirmed on an already-authenticated device.`,
+      'QR sign-in over HTTP cannot complete that approval step.',
+      '',
+      'Use  agent-slack auth extract  on a computer already signed in to Slack instead.',
+    ].join('\n')
+  }
+  return [
+    `Could not establish a Slack session for ${workspace} from the QR code.`,
+    'The link may have expired, or the workspace requires a sign-in step that QR-over-HTTP cannot complete.',
+    '',
+    'Generate a fresh QR and try again, or run  agent-slack auth extract  on a computer already signed in',
+    'to Slack.',
+  ].join('\n')
+}
+
+interface CookieCapture {
+  cookie: string | null
+  denialReason: string | null
+  ssoProvider: string | null
+}
+
+async function captureDCookie(startUrl: string, options: QrLoginOptions): Promise<CookieCapture> {
   const doFetch = options.fetchImpl ?? fetch
   const maxRedirects = options.maxRedirects ?? DEFAULT_MAX_REDIRECTS
   const debug = options.debug
 
   let url = startUrl
   let dCookie: string | null = null
+  let sessionDenialReason: string | null = null
+  let ssoProvider: string | null = null
   const cookieJar: string[] = []
 
   for (let hop = 0; hop < maxRedirects; hop++) {
@@ -72,27 +133,71 @@ async function captureDCookie(startUrl: string, options: QrLoginOptions): Promis
       },
     })
 
+    const cookieNames: string[] = []
     for (const setCookie of getSetCookies(response)) {
       const value = parseDCookie(setCookie)
       if (value) dCookie = value
+      const name = setCookie.split('=')[0]?.trim()
+      if (name) cookieNames.push(name)
       const pair = setCookie.split(';')[0]?.trim()
       if (pair) cookieJar.push(pair)
     }
 
-    debug?.(`hop ${hop}: ${response.status}`)
+    debug?.(`hop ${hop}: ${response.status} set-cookie=[${cookieNames.join(',') || 'none'}]`)
 
     const location = response.status >= 300 && response.status < 400 ? response.headers.get('location') : null
-    if (!location) break
+    if (!location) {
+      if (!dCookie) sessionDenialReason = await classifySessionDenial(response)
+      break
+    }
 
     const next = new URL(location, url).toString()
     if (!isSlackHost(next)) {
-      debug?.(`hop ${hop}: redirect target is not a Slack host, stopping`)
+      // A no-cookie login QR that redirects off Slack is an SSO/IdP hand-off the
+      // HTTP flow cannot complete — classify it regardless of whether the IdP
+      // host is a recognized provider (custom/vanity SAML domains included).
+      if (!dCookie) {
+        sessionDenialReason = 'sso_required'
+        ssoProvider = ssoProviderFromUrl(next)
+      }
+      debug?.(`hop ${hop}: redirect target is not a Slack host (${new URL(next).hostname}), stopping`)
       break
     }
     url = next
   }
 
-  return dCookie
+  return { cookie: dCookie, denialReason: sessionDenialReason, ssoProvider }
+}
+
+function ssoProviderFromUrl(rawUrl: string): string | null {
+  let hostname: string
+  try {
+    hostname = new URL(rawUrl).hostname
+  } catch {
+    return null
+  }
+  if (hostname === 'accounts.google.com') return 'Google'
+  if (hostname.endsWith('.okta.com') || hostname.endsWith('.oktapreview.com')) return 'Okta'
+  if (hostname === 'login.microsoftonline.com') return 'Microsoft'
+  if (hostname.endsWith('.onelogin.com')) return 'OneLogin'
+  if (hostname.endsWith('.pingidentity.com') || hostname.endsWith('.pingone.com')) return 'Ping Identity'
+  if (hostname.endsWith('.auth0.com')) return 'Auth0'
+  return null
+}
+
+async function classifySessionDenial(response: Response): Promise<string | null> {
+  try {
+    const body = await response.text()
+    if (/Link Expired/i.test(body) || /trouble signing you in/i.test(body)) {
+      return 'link_expired'
+    }
+    if (/sign in on your other device/i.test(body) || /open Slack/i.test(body) || /confirm/i.test(body)) {
+      return 'awaiting_device_confirmation'
+    }
+    return null
+  } catch {
+    return null
+  }
 }
 
 export function isSlackHost(rawUrl: string): boolean {