agent-slack 0.2.13 → 0.3.0

package/dist/index.js

@@ -47,9 +47,12 @@ function getUserAgent() {
   return `agent-slack/${getPackageVersion()}`;
 }
 
-// src/auth/chrome.ts
-import { execSync } from "node:child_process";
-import { platform } from "node:os";
+// src/auth/brave.ts
+import { execSync, execFileSync } from "node:child_process";
+import { existsSync as existsSync2 } from "node:fs";
+import { pbkdf2Sync, createDecipheriv } from "node:crypto";
+import { homedir, platform } from "node:os";
+import { join as join2 } from "node:path";
 var IS_MACOS = platform() === "darwin";
 function escapeOsaScript(script) {
   return script.replace(/'/g, `'"'"'`);
@@ -61,6 +64,205 @@ function osascript(script) {
     stdio: ["ignore", "pipe", "pipe"]
   }).trim();
 }
+var TEAM_JSON_PATHS = [
+  "JSON.stringify(JSON.parse(localStorage.localConfig_v2).teams)",
+  "JSON.stringify(JSON.parse(localStorage.localConfig_v3).teams)",
+  "JSON.stringify(JSON.parse(localStorage.getItem('reduxPersist:localConfig'))?.teams || {})",
+  "JSON.stringify(window.boot_data?.teams || {})"
+];
+function teamsScript() {
+  const tryPaths = TEAM_JSON_PATHS.map((expr) => `try { var v = ${expr}; if (v && v !== '{}' && v !== 'null') return v; } catch(e) {}`);
+  return `
+    tell application "Brave Browser"
+      repeat with w in windows
+        repeat with t in tabs of w
+          if URL of t contains "slack.com" then
+            return execute t javascript "(function(){ ${tryPaths.join(" ")} return '{}'; })()"
+          end if
+        end repeat
+      end repeat
+      return "{}"
+    end tell
+  `;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function toBraveTeam(value) {
+  if (!isRecord(value)) {
+    return null;
+  }
+  const token = typeof value.token === "string" ? value.token : null;
+  const url = typeof value.url === "string" ? value.url : null;
+  if (!token || !url || !token.startsWith("xoxc-")) {
+    return null;
+  }
+  const name = typeof value.name === "string" ? value.name : undefined;
+  return { url, name, token };
+}
+function extractTeamsFromBraveTab() {
+  const teamsRaw = osascript(teamsScript());
+  let teamsObj = {};
+  try {
+    teamsObj = JSON.parse(teamsRaw || "{}");
+  } catch {
+    teamsObj = {};
+  }
+  const teamsRecord = isRecord(teamsObj) ? teamsObj : {};
+  return Object.values(teamsRecord).map((t) => toBraveTeam(t)).filter((t) => t !== null);
+}
+var BRAVE_COOKIES_DB = join2(homedir(), "Library", "Application Support", "BraveSoftware", "Brave-Browser", "Default", "Cookies");
+function isMissingBunSqliteModule(error) {
+  if (!error || typeof error !== "object") {
+    return false;
+  }
+  const err = error;
+  const code = typeof err.code === "string" ? err.code : "";
+  const message = typeof err.message === "string" ? err.message : "";
+  if (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_UNSUPPORTED_ESM_URL_SCHEME") {
+    return true;
+  }
+  if (!message.includes("bun:sqlite")) {
+    return false;
+  }
+  return message.includes("Cannot find module") || message.includes("Unknown builtin module") || message.includes("unsupported URL scheme") || message.includes("Only URLs with a scheme in");
+}
+async function queryReadonlySqlite(dbPath, sql) {
+  try {
+    const { Database } = await import("bun:sqlite");
+    const db = new Database(dbPath, { readonly: true });
+    try {
+      return db.query(sql).all();
+    } finally {
+      db.close();
+    }
+  } catch (error) {
+    if (!isMissingBunSqliteModule(error)) {
+      throw error;
+    }
+    const { DatabaseSync } = await import("node:sqlite");
+    const db = new DatabaseSync(dbPath, { readOnly: true });
+    try {
+      return db.prepare(sql).all();
+    } finally {
+      db.close();
+    }
+  }
+}
+function getSafeStoragePasswords() {
+  const services = [
+    "Brave Safe Storage",
+    "Brave Browser Safe Storage",
+    "Chrome Safe Storage",
+    "Chromium Safe Storage"
+  ];
+  const passwords = [];
+  for (const service of services) {
+    try {
+      const out = execFileSync("security", ["find-generic-password", "-w", "-s", service], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"]
+      }).trim();
+      if (out) {
+        passwords.push(out);
+      }
+    } catch {}
+  }
+  return passwords;
+}
+function decryptChromiumCookieValue(data, password) {
+  if (!data || data.length === 0) {
+    return "";
+  }
+  const salt = Buffer.from("saltysalt", "utf8");
+  const iv = Buffer.alloc(16, " ");
+  const key = pbkdf2Sync(password, salt, 1003, 16, "sha1");
+  const decipher = createDecipheriv("aes-128-cbc", key, iv);
+  decipher.setAutoPadding(true);
+  const plain = Buffer.concat([decipher.update(data), decipher.final()]);
+  const marker = Buffer.from("xoxd-");
+  const idx = plain.indexOf(marker);
+  if (idx === -1) {
+    return plain.toString("utf8");
+  }
+  let end = idx;
+  while (end < plain.length) {
+    const b = plain[end];
+    if (b < 33 || b > 126) {
+      break;
+    }
+    end++;
+  }
+  const rawToken = plain.subarray(idx, end).toString("utf8");
+  try {
+    return decodeURIComponent(rawToken);
+  } catch {
+    return rawToken;
+  }
+}
+async function extractCookieDFromBrave() {
+  if (!existsSync2(BRAVE_COOKIES_DB)) {
+    throw new Error(`Brave Cookies DB not found: ${BRAVE_COOKIES_DB}`);
+  }
+  const rows = await queryReadonlySqlite(BRAVE_COOKIES_DB, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
+  if (!rows || rows.length === 0) {
+    throw new Error("No Slack 'd' cookie found in Brave");
+  }
+  const row = rows[0];
+  if (row.value && row.value.startsWith("xoxd-")) {
+    return row.value;
+  }
+  const encrypted = Buffer.from(row.encrypted_value || []);
+  if (encrypted.length === 0) {
+    throw new Error("Brave Slack 'd' cookie had no encrypted_value");
+  }
+  const prefix = encrypted.subarray(0, 3).toString("utf8");
+  const data = prefix === "v10" || prefix === "v11" ? encrypted.subarray(3) : encrypted;
+  const passwords = getSafeStoragePasswords();
+  for (const password of passwords) {
+    try {
+      const decrypted = decryptChromiumCookieValue(data, password);
+      const match = decrypted.match(/xoxd-[A-Za-z0-9%/+_=.-]+/);
+      if (match) {
+        return match[0];
+      }
+    } catch {}
+  }
+  throw new Error("Could not decrypt Slack 'd' cookie from Brave");
+}
+async function extractFromBrave() {
+  if (!IS_MACOS) {
+    return null;
+  }
+  try {
+    const teams = extractTeamsFromBraveTab();
+    if (teams.length === 0) {
+      return null;
+    }
+    const cookie_d = await extractCookieDFromBrave();
+    if (!cookie_d || !cookie_d.startsWith("xoxd-")) {
+      return null;
+    }
+    return { cookie_d, teams };
+  } catch {
+    return null;
+  }
+}
+
+// src/auth/chrome.ts
+import { execSync as execSync2 } from "node:child_process";
+import { platform as platform2 } from "node:os";
+var IS_MACOS2 = platform2() === "darwin";
+function escapeOsaScript2(script) {
+  return script.replace(/'/g, `'"'"'`);
+}
+function osascript2(script) {
+  return execSync2(`osascript -e '${escapeOsaScript2(script)}'`, {
+    encoding: "utf8",
+    timeout: 7000,
+    stdio: ["ignore", "pipe", "pipe"]
+  }).trim();
+}
 function cookieScript() {
   return `
     tell application "Google Chrome"
@@ -75,17 +277,17 @@ function cookieScript() {
     end tell
   `;
 }
-var TEAM_JSON_PATHS = [
+var TEAM_JSON_PATHS2 = [
   "JSON.stringify(JSON.parse(localStorage.localConfig_v2).teams)",
   "JSON.stringify(JSON.parse(localStorage.localConfig_v3).teams)",
   "JSON.stringify(JSON.parse(localStorage.getItem('reduxPersist:localConfig'))?.teams || {})",
   "JSON.stringify(window.boot_data?.teams || {})"
 ];
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null;
 }
 function toChromeTeam(value) {
-  if (!isRecord(value)) {
+  if (!isRecord2(value)) {
     return null;
   }
   const token = typeof value.token === "string" ? value.token : null;
@@ -96,8 +298,8 @@ function toChromeTeam(value) {
   const name = typeof value.name === "string" ? value.name : undefined;
   return { url, name, token };
 }
-function teamsScript() {
-  const tryPaths = TEAM_JSON_PATHS.map((expr) => `try { var v = ${expr}; if (v && v !== '{}' && v !== 'null') return v; } catch(e) {}`);
+function teamsScript2() {
+  const tryPaths = TEAM_JSON_PATHS2.map((expr) => `try { var v = ${expr}; if (v && v !== '{}' && v !== 'null') return v; } catch(e) {}`);
   return `
     tell application "Google Chrome"
       repeat with w in windows
@@ -112,22 +314,22 @@ function teamsScript() {
   `;
 }
 function extractFromChrome() {
-  if (!IS_MACOS) {
+  if (!IS_MACOS2) {
     return null;
   }
   try {
-    const cookie = osascript(cookieScript());
+    const cookie = osascript2(cookieScript());
     if (!cookie || !cookie.startsWith("xoxd-")) {
       return null;
     }
-    const teamsRaw = osascript(teamsScript());
+    const teamsRaw = osascript2(teamsScript2());
     let teamsObj = {};
     try {
       teamsObj = JSON.parse(teamsRaw || "{}");
     } catch {
       teamsObj = {};
     }
-    const teamsRecord = isRecord(teamsObj) ? teamsObj : {};
+    const teamsRecord = isRecord2(teamsObj) ? teamsObj : {};
     const teams = Object.values(teamsRecord).map((t) => toChromeTeam(t)).filter((t) => t !== null);
     if (teams.length === 0) {
       return null;
@@ -175,15 +377,15 @@ function parseSlackCurlCommand(curlInput) {
 
 // src/auth/desktop.ts
 import { cp, mkdir, rm, unlink } from "node:fs/promises";
-import { existsSync as existsSync2 } from "node:fs";
-import { execFileSync } from "node:child_process";
-import { pbkdf2Sync, createDecipheriv } from "node:crypto";
-import { homedir, platform as platform2 } from "node:os";
-import { join as join3 } from "node:path";
+import { existsSync as existsSync3 } from "node:fs";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { pbkdf2Sync as pbkdf2Sync2, createDecipheriv as createDecipheriv2 } from "node:crypto";
+import { homedir as homedir2, platform as platform3 } from "node:os";
+import { join as join4 } from "node:path";
 
 // src/lib/leveldb-reader.ts
 import { readdir, readFile } from "node:fs/promises";
-import { join as join2 } from "node:path";
+import { join as join3 } from "node:path";
 import { snappyUncompress } from "hysnappy";
 var LEVELDB_MAGIC = Buffer.from([87, 251, 128, 139, 36, 117, 71, 219]);
 var COMPRESSION_NONE = 0;
@@ -425,12 +627,12 @@ async function readChromiumLevelDB(dir) {
   }
   const sstFiles = files.filter((f) => f.endsWith(".ldb") || f.endsWith(".sst"));
   for (const file of sstFiles) {
-    const fileEntries = await parseSSTable(join2(dir, file));
+    const fileEntries = await parseSSTable(join3(dir, file));
     entries.push(...fileEntries);
   }
   const logFiles = files.filter((f) => f.endsWith(".log"));
   for (const file of logFiles) {
-    const fileEntries = await parseLogFile(join2(dir, file));
+    const fileEntries = await parseLogFile(join3(dir, file));
     entries.push(...fileEntries);
   }
   return entries;
@@ -441,7 +643,7 @@ async function findKeysContaining(dir, substring) {
 }
 
 // src/auth/desktop.ts
-function isMissingBunSqliteModule(error) {
+function isMissingBunSqliteModule2(error) {
   if (!error || typeof error !== "object") {
     return false;
   }
@@ -456,7 +658,7 @@ function isMissingBunSqliteModule(error) {
   }
   return message.includes("Cannot find module") || message.includes("Unknown builtin module") || message.includes("unsupported URL scheme") || message.includes("Only URLs with a scheme in");
 }
-async function queryReadonlySqlite(dbPath, sql) {
+async function queryReadonlySqlite2(dbPath, sql) {
   try {
     const { Database } = await import("bun:sqlite");
     const db = new Database(dbPath, { readonly: true });
@@ -466,7 +668,7 @@ async function queryReadonlySqlite(dbPath, sql) {
       db.close();
     }
   } catch (error) {
-    if (!isMissingBunSqliteModule(error)) {
+    if (!isMissingBunSqliteModule2(error)) {
       throw error;
     }
     const { DatabaseSync } = await import("node:sqlite");
@@ -478,35 +680,35 @@ async function queryReadonlySqlite(dbPath, sql) {
     }
   }
 }
-var PLATFORM = platform2();
-var IS_MACOS2 = PLATFORM === "darwin";
+var PLATFORM = platform3();
+var IS_MACOS3 = PLATFORM === "darwin";
 var IS_LINUX = PLATFORM === "linux";
-var SLACK_SUPPORT_DIR_ELECTRON = join3(homedir(), "Library", "Application Support", "Slack");
-var SLACK_SUPPORT_DIR_APPSTORE = join3(homedir(), "Library", "Containers", "com.tinyspeck.slackmacgap", "Data", "Library", "Application Support", "Slack");
-var SLACK_SUPPORT_DIR_LINUX = join3(homedir(), ".config", "Slack");
-var SLACK_SUPPORT_DIR_LINUX_FLATPAK = join3(homedir(), ".var", "app", "com.slack.Slack", "config", "Slack");
+var SLACK_SUPPORT_DIR_ELECTRON = join4(homedir2(), "Library", "Application Support", "Slack");
+var SLACK_SUPPORT_DIR_APPSTORE = join4(homedir2(), "Library", "Containers", "com.tinyspeck.slackmacgap", "Data", "Library", "Application Support", "Slack");
+var SLACK_SUPPORT_DIR_LINUX = join4(homedir2(), ".config", "Slack");
+var SLACK_SUPPORT_DIR_LINUX_FLATPAK = join4(homedir2(), ".var", "app", "com.slack.Slack", "config", "Slack");
 function getSlackPaths() {
-  const candidates = IS_MACOS2 ? [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE] : IS_LINUX ? [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX] : [];
+  const candidates = IS_MACOS3 ? [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE] : IS_LINUX ? [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX] : [];
   if (candidates.length === 0) {
     throw new Error(`Slack Desktop extraction is not supported on ${PLATFORM}.`);
   }
   for (const dir of candidates) {
-    const leveldbDir = join3(dir, "Local Storage", "leveldb");
-    if (existsSync2(leveldbDir)) {
-      const cookiesDbCandidates = [join3(dir, "Network", "Cookies"), join3(dir, "Cookies")];
-      const cookiesDb = cookiesDbCandidates.find((candidate) => existsSync2(candidate)) || cookiesDbCandidates[0];
+    const leveldbDir = join4(dir, "Local Storage", "leveldb");
+    if (existsSync3(leveldbDir)) {
+      const cookiesDbCandidates = [join4(dir, "Network", "Cookies"), join4(dir, "Cookies")];
+      const cookiesDb = cookiesDbCandidates.find((candidate) => existsSync3(candidate)) || cookiesDbCandidates[0];
       return { leveldbDir, cookiesDb };
     }
   }
   throw new Error(`Slack Desktop data not found. Checked:
-  - ${candidates.map((d) => join3(d, "Local Storage", "leveldb")).join(`
+  - ${candidates.map((d) => join4(d, "Local Storage", "leveldb")).join(`
   - `)}`);
 }
-function isRecord2(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null;
 }
 function toDesktopTeam(value) {
-  if (!isRecord2(value)) {
+  if (!isRecord3(value)) {
     return null;
   }
   const url = typeof value.url === "string" ? value.url : null;
@@ -518,13 +720,13 @@ function toDesktopTeam(value) {
   return { url, name, token };
 }
 async function snapshotLevelDb(srcDir) {
-  const base = join3(homedir(), ".config", "agent-slack", "cache", "leveldb-snapshots");
-  const dest = join3(base, `${Date.now()}`);
+  const base = join4(homedir2(), ".config", "agent-slack", "cache", "leveldb-snapshots");
+  const dest = join4(base, `${Date.now()}`);
   await mkdir(base, { recursive: true });
-  let useNodeCopy = !IS_MACOS2;
-  if (IS_MACOS2) {
+  let useNodeCopy = !IS_MACOS3;
+  if (IS_MACOS3) {
     try {
-      execFileSync("cp", ["-cR", srcDir, dest], {
+      execFileSync2("cp", ["-cR", srcDir, dest], {
         stdio: ["ignore", "ignore", "ignore"]
       });
     } catch {
@@ -535,7 +737,7 @@ async function snapshotLevelDb(srcDir) {
     await cp(srcDir, dest, { recursive: true, force: true });
   }
   try {
-    await unlink(join3(dest, "LOCK"));
+    await unlink(join4(dest, "LOCK"));
   } catch {}
   return dest;
 }
@@ -577,7 +779,7 @@ function parseLocalConfig(raw) {
   throw lastErr || new Error("localConfig not parseable");
 }
 async function extractTeamsFromSlackLevelDb(leveldbDir) {
-  if (!existsSync2(leveldbDir)) {
+  if (!existsSync3(leveldbDir)) {
     throw new Error(`Slack LevelDB not found: ${leveldbDir}`);
   }
   const snap = await snapshotLevelDb(leveldbDir);
@@ -605,8 +807,8 @@ async function extractTeamsFromSlackLevelDb(leveldbDir) {
       throw new Error("Slack LevelDB did not contain localConfig_v2/v3");
     }
     const cfg = parseLocalConfig(configBuf);
-    const teamsValue = isRecord2(cfg) ? cfg.teams : undefined;
-    const teamsObj = isRecord2(teamsValue) ? teamsValue : {};
+    const teamsValue = isRecord3(cfg) ? cfg.teams : undefined;
+    const teamsObj = isRecord3(teamsValue) ? teamsValue : {};
     const teams = Object.values(teamsObj).map((t) => toDesktopTeam(t)).filter((t) => t !== null).filter((t) => t.token.startsWith("xoxc-"));
     if (teams.length === 0) {
       throw new Error("No xoxc tokens found in Slack localConfig");
@@ -618,13 +820,13 @@ async function extractTeamsFromSlackLevelDb(leveldbDir) {
     } catch {}
   }
 }
-function getSafeStoragePasswords(prefix) {
-  if (IS_MACOS2) {
+function getSafeStoragePasswords2(prefix) {
+  if (IS_MACOS3) {
     const services = ["Slack Safe Storage", "Chrome Safe Storage", "Chromium Safe Storage"];
     const passwords = [];
     for (const service of services) {
       try {
-        const out = execFileSync("security", ["find-generic-password", "-w", "-s", service], {
+        const out = execFileSync2("security", ["find-generic-password", "-w", "-s", service], {
           encoding: "utf8",
           stdio: ["ignore", "pipe", "ignore"]
         }).trim();
@@ -647,7 +849,7 @@ function getSafeStoragePasswords(prefix) {
     const passwords = [];
     for (const pair of attributes) {
       try {
-        const out = execFileSync("secret-tool", ["lookup", ...pair], {
+        const out = execFileSync2("secret-tool", ["lookup", ...pair], {
           encoding: "utf8",
           stdio: ["ignore", "pipe", "ignore"]
         }).trim();
@@ -664,14 +866,14 @@ function getSafeStoragePasswords(prefix) {
   }
   throw new Error("Could not read Safe Storage password from desktop keychain.");
 }
-function decryptChromiumCookieValue(data, password) {
+function decryptChromiumCookieValue2(data, password) {
   if (!data || data.length === 0) {
     return "";
   }
   const salt = Buffer.from("saltysalt", "utf8");
   const iv = Buffer.alloc(16, " ");
-  const key = pbkdf2Sync(password, salt, IS_LINUX ? 1 : 1003, 16, "sha1");
-  const decipher = createDecipheriv("aes-128-cbc", key, iv);
+  const key = pbkdf2Sync2(password, salt, IS_LINUX ? 1 : 1003, 16, "sha1");
+  const decipher = createDecipheriv2("aes-128-cbc", key, iv);
   decipher.setAutoPadding(true);
   const plain = Buffer.concat([decipher.update(data), decipher.final()]);
   const marker = Buffer.from("xoxd-");
@@ -695,10 +897,10 @@ function decryptChromiumCookieValue(data, password) {
   }
 }
 async function extractCookieDFromSlackCookiesDb(cookiesPath) {
-  if (!existsSync2(cookiesPath)) {
+  if (!existsSync3(cookiesPath)) {
     throw new Error(`Slack Cookies DB not found: ${cookiesPath}`);
   }
-  const rows = await queryReadonlySqlite(cookiesPath, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
+  const rows = await queryReadonlySqlite2(cookiesPath, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
   if (!rows || rows.length === 0) {
     throw new Error("No Slack 'd' cookie found");
   }
@@ -712,10 +914,10 @@ async function extractCookieDFromSlackCookiesDb(cookiesPath) {
   }
   const prefix = encrypted.subarray(0, 3).toString("utf8");
   const data = prefix === "v10" || prefix === "v11" ? encrypted.subarray(3) : encrypted;
-  const passwords = getSafeStoragePasswords(prefix);
+  const passwords = getSafeStoragePasswords2(prefix);
   for (const password of passwords) {
     try {
-      const decrypted = decryptChromiumCookieValue(data, password);
+      const decrypted = decryptChromiumCookieValue2(data, password);
       const match = decrypted.match(/xoxd-[A-Za-z0-9%/+_=.-]+/);
       if (match) {
         return match[0];
@@ -736,10 +938,10 @@ async function extractFromSlackDesktop() {
 }
 
 // src/auth/paths.ts
-import { homedir as homedir2 } from "node:os";
-import { join as join4 } from "node:path";
-var AGENT_SLACK_DIR = join4(homedir2(), ".config", "agent-slack");
-var CREDENTIALS_FILE = join4(AGENT_SLACK_DIR, "credentials.json");
+import { homedir as homedir3 } from "node:os";
+import { join as join5 } from "node:path";
+var AGENT_SLACK_DIR = join5(homedir3(), ".config", "agent-slack");
+var CREDENTIALS_FILE = join5(AGENT_SLACK_DIR, "credentials.json");
 var KEYCHAIN_SERVICE = "agent-slack";
 
 // src/lib/fs.ts
@@ -750,7 +952,7 @@ async function readJsonFile(path) {
     const raw = await readFile2(path, "utf8");
     return JSON.parse(raw);
   } catch (err) {
-    if (isRecord3(err) && err.code === "ENOENT") {
+    if (isRecord4(err) && err.code === "ENOENT") {
       return null;
     }
     if (err instanceof SyntaxError) {
@@ -764,7 +966,7 @@ async function writeJsonFile(path, data) {
   await writeFile(path, `${JSON.stringify(data, null, 2)}
 `, { mode: 384 });
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null;
 }
 
@@ -796,32 +998,32 @@ var CredentialsSchema = z.object({
 });
 
 // src/auth/keychain.ts
-import { platform as platform3 } from "node:os";
-import { execFileSync as execFileSync2 } from "node:child_process";
-var IS_MACOS3 = platform3() === "darwin";
+import { platform as platform4 } from "node:os";
+import { execFileSync as execFileSync3 } from "node:child_process";
+var IS_MACOS4 = platform4() === "darwin";
 function keychainGet(account, service) {
-  if (!IS_MACOS3) {
+  if (!IS_MACOS4) {
     return null;
   }
   try {
-    const result = execFileSync2("security", ["find-generic-password", "-s", service, "-a", account, "-w"], { encoding: "utf8", stdio: ["pipe", "pipe", "ignore"] });
+    const result = execFileSync3("security", ["find-generic-password", "-s", service, "-a", account, "-w"], { encoding: "utf8", stdio: ["pipe", "pipe", "ignore"] });
     return result.trim() || null;
   } catch {
     return null;
   }
 }
 function keychainSet(input) {
-  if (!IS_MACOS3) {
+  if (!IS_MACOS4) {
     return false;
   }
   const { account, value, service } = input;
   try {
     try {
-      execFileSync2("security", ["delete-generic-password", "-s", service, "-a", account], {
+      execFileSync3("security", ["delete-generic-password", "-s", service, "-a", account], {
         stdio: ["pipe", "pipe", "ignore"]
       });
     } catch {}
-    execFileSync2("security", ["add-generic-password", "-s", service, "-a", account, "-w", value], {
+    execFileSync3("security", ["add-generic-password", "-s", service, "-a", account, "-w", value], {
       stdio: "pipe"
     });
     return true;
@@ -831,9 +1033,9 @@ function keychainSet(input) {
 }
 
 // src/auth/store.ts
-import { platform as platform4 } from "node:os";
+import { platform as platform5 } from "node:os";
 var KEYCHAIN_PLACEHOLDER = "__KEYCHAIN__";
-var IS_MACOS4 = platform4() === "darwin";
+var IS_MACOS5 = platform5() === "darwin";
 function normalizeWorkspaceUrl(workspaceUrl) {
   const u = new URL(workspaceUrl);
   return `${u.protocol}//${u.host}`;
@@ -887,7 +1089,7 @@ async function saveCredentials(credentials) {
     }))
   };
   const filePayload = structuredClone(payload);
-  if (IS_MACOS4) {
+  if (IS_MACOS5) {
     const firstBrowser = payload.workspaces.find((w) => w.auth.auth_type === "browser");
     let xoxdStored = false;
     if (firstBrowser?.auth.auth_type === "browser" && !isPlaceholderSecret(firstBrowser.auth.xoxd_cookie)) {
@@ -994,6 +1196,64 @@ async function resolveDefaultWorkspace() {
   return creds.workspaces[0] ?? null;
 }
 
+// src/cli/workspace-selector.ts
+function normalizeUrl(u) {
+  const url = new URL(u);
+  return `${url.protocol}//${url.host}`;
+}
+function normalizedWorkspaceCandidates(workspace) {
+  let host = "";
+  try {
+    host = new URL(workspace.workspace_url).host.toLowerCase();
+  } catch {
+    host = "";
+  }
+  const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
+  return [
+    workspace.workspace_url.toLowerCase(),
+    host,
+    hostWithoutSlackSuffix,
+    workspace.workspace_name?.toLowerCase() ?? "",
+    workspace.team_domain?.toLowerCase() ?? ""
+  ].filter(Boolean);
+}
+function resolveWorkspaceSelector(workspaces, selector) {
+  const raw = selector.trim();
+  if (!raw) {
+    return { match: null, ambiguous: [] };
+  }
+  try {
+    const normalized = normalizeUrl(raw).toLowerCase();
+    const exact = workspaces.find((w) => w.workspace_url.toLowerCase() === normalized);
+    if (exact) {
+      return { match: exact, ambiguous: [] };
+    }
+  } catch {}
+  const needle = raw.toLowerCase();
+  const matches = workspaces.filter((workspace) => normalizedWorkspaceCandidates(workspace).some((candidate) => candidate.includes(needle)));
+  if (matches.length === 1) {
+    return { match: matches[0], ambiguous: [] };
+  }
+  if (matches.length > 1) {
+    return { match: null, ambiguous: matches };
+  }
+  return { match: null, ambiguous: [] };
+}
+
+// src/lib/object-type-guards.ts
+function isRecord5(value) {
+  return typeof value === "object" && value !== null;
+}
+function asArray(value) {
+  return Array.isArray(value) ? value : [];
+}
+function getString(value) {
+  return typeof value === "string" ? value : undefined;
+}
+function getNumber(value) {
+  return typeof value === "number" ? value : undefined;
+}
+
 // src/slack/channels.ts
 function isChannelId(input) {
   return /^[CDG][A-Z0-9]{8,}$/.test(input);
@@ -1017,8 +1277,24 @@ async function resolveChannelId(client, input) {
   if (!name) {
     throw new Error("Channel name is empty");
   }
+  try {
+    const searchResp = await client.api("search.messages", {
+      query: `in:#${name}`,
+      count: 1,
+      sort: "timestamp",
+      sort_dir: "desc"
+    });
+    const messages = isRecord5(searchResp) ? searchResp.messages : null;
+    const matches = isRecord5(messages) ? asArray(messages.matches).filter(isRecord5) : [];
+    if (matches.length > 0) {
+      const channel = isRecord5(matches[0].channel) ? matches[0].channel : null;
+      const channelId = channel ? getString(channel.id) : undefined;
+      if (channelId) {
+        return channelId;
+      }
+    }
+  } catch {}
   let cursor;
-  const matches = [];
   for (;; ) {
     const resp = await client.api("conversations.list", {
       exclude_archived: true,
@@ -1026,39 +1302,20 @@ async function resolveChannelId(client, input) {
       cursor,
       types: "public_channel,private_channel"
     });
-    const chans = asArray(resp.channels).filter(isRecord4);
+    const chans = asArray(resp.channels).filter(isRecord5);
     for (const c of chans) {
       if (getString(c.name) === name && getString(c.id)) {
-        matches.push({
-          id: getString(c.id) ?? "",
-          name: getString(c.name) ?? undefined,
-          is_private: typeof c.is_private === "boolean" ? c.is_private : undefined
-        });
+        return getString(c.id);
       }
     }
-    const meta = isRecord4(resp.response_metadata) ? resp.response_metadata : null;
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
     const next = meta ? getString(meta.next_cursor) : undefined;
     if (!next) {
       break;
     }
     cursor = next;
   }
-  if (matches.length === 1) {
-    return matches[0].id;
-  }
-  if (matches.length === 0) {
-    throw new Error(`Could not resolve channel name: #${name}`);
-  }
-  throw new Error(`Ambiguous channel name: #${name} (matched ${matches.length} channels: ${matches.map((m) => m.id).join(", ")})`);
-}
-function isRecord4(value) {
-  return typeof value === "object" && value !== null;
-}
-function asArray(value) {
-  return Array.isArray(value) ? value : [];
-}
-function getString(value) {
-  return typeof value === "string" ? value : undefined;
+  throw new Error(`Could not resolve channel name: #${name}`);
 }
 
 // src/slack/client.ts
@@ -1126,14 +1383,14 @@ class SlackApiClient {
     if (!response.ok) {
       throw new Error(`Slack HTTP ${response.status} calling ${input.method}`);
     }
-    if (!isRecord5(data) || data.ok !== true) {
-      const error = isRecord5(data) && typeof data.error === "string" ? data.error : null;
+    if (!isRecord6(data) || data.ok !== true) {
+      const error = isRecord6(data) && typeof data.error === "string" ? data.error : null;
       throw new Error(error || `Slack API error calling ${input.method}`);
     }
     return data;
   }
 }
-function isRecord5(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null;
 }
 
@@ -1164,16 +1421,23 @@ async function assertWorkspaceSpecifiedForChannelNames(input) {
     return;
   }
   if (!input.workspaceUrl) {
-    throw new Error('Ambiguous channel name across multiple workspaces. Pass --workspace "https://...slack.com" (or set SLACK_WORKSPACE_URL).');
+    throw new Error('Ambiguous channel name across multiple workspaces. Pass --workspace "<url-or-unique-substring>" (or set SLACK_WORKSPACE_URL).');
   }
 }
 function isAuthErrorMessage(message) {
   return /(?:^|[^a-z])(invalid_auth|token_expired)(?:$|[^a-z])/i.test(message);
 }
-function normalizeUrl(u) {
+function normalizeUrl2(u) {
   const url = new URL(u);
   return `${url.protocol}//${url.host}`;
 }
+function tryNormalizeUrl(u) {
+  try {
+    return normalizeUrl2(u);
+  } catch {
+    return;
+  }
+}
 async function refreshFromDesktopIfPossible() {
   if (process.platform !== "darwin" && process.platform !== "linux") {
     return false;
@@ -1181,7 +1445,7 @@ async function refreshFromDesktopIfPossible() {
   try {
     const extracted = await extractFromSlackDesktop();
     await upsertWorkspaces(extracted.teams.map((team) => ({
-      workspace_url: normalizeUrl(team.url),
+      workspace_url: normalizeUrl2(team.url),
       workspace_name: team.name,
       auth: {
         auth_type: "browser",
@@ -1227,18 +1491,35 @@ function pickAuthFromEnv() {
   return { auth_type: "standard", token };
 }
 async function getClientForWorkspace(workspaceUrl) {
+  const selector = workspaceUrl?.trim() || undefined;
+  const normalizedSelectorUrl = selector ? tryNormalizeUrl(selector) : undefined;
+  const selectorProvided = Boolean(selector);
+  let resolvedWorkspaceUrl = normalizedSelectorUrl;
+  if (selector) {
+    const creds = await loadCredentials();
+    const resolved = resolveWorkspaceSelector(creds.workspaces, selector);
+    if (resolved.ambiguous.length > 0) {
+      const options = resolved.ambiguous.map((w) => w.workspace_url).join(", ");
+      throw new Error(`Workspace selector "${selector}" is ambiguous. Matches: ${options}. Pass a more specific selector or full workspace URL.`);
+    }
+    if (resolved.match) {
+      resolvedWorkspaceUrl = resolved.match.workspace_url;
+    } else if (!normalizedSelectorUrl) {
+      resolvedWorkspaceUrl = undefined;
+    }
+  }
   const env = pickAuthFromEnv();
   if (env) {
     const envWorkspaceUrl = process.env.SLACK_WORKSPACE_URL?.trim();
-    const urlForBrowser = workspaceUrl || envWorkspaceUrl;
+    const urlForBrowser = resolvedWorkspaceUrl || envWorkspaceUrl;
     return {
       client: new SlackApiClient(env, { workspaceUrl: urlForBrowser }),
       auth: env,
       workspace_url: urlForBrowser
     };
   }
-  if (workspaceUrl) {
-    const ws = await resolveWorkspaceForUrl(workspaceUrl);
+  if (resolvedWorkspaceUrl) {
+    const ws = await resolveWorkspaceForUrl(resolvedWorkspaceUrl);
     if (ws) {
       return {
         client: new SlackApiClient(ws.auth, {
@@ -1249,20 +1530,22 @@ async function getClientForWorkspace(workspaceUrl) {
       };
     }
   }
-  const def = await resolveDefaultWorkspace();
-  if (def) {
-    return {
-      client: new SlackApiClient(def.auth, {
-        workspaceUrl: def.workspace_url
-      }),
-      auth: def.auth,
-      workspace_url: def.workspace_url
-    };
+  if (!selectorProvided) {
+    const def = await resolveDefaultWorkspace();
+    if (def) {
+      return {
+        client: new SlackApiClient(def.auth, {
+          workspaceUrl: def.workspace_url
+        }),
+        auth: def.auth,
+        workspace_url: def.workspace_url
+      };
+    }
   }
   try {
     const extracted = await extractFromSlackDesktop();
     await upsertWorkspaces(extracted.teams.map((team) => ({
-      workspace_url: normalizeUrl(team.url),
+      workspace_url: normalizeUrl2(team.url),
       workspace_name: team.name,
       auth: {
         auth_type: "browser",
@@ -1270,8 +1553,8 @@ async function getClientForWorkspace(workspaceUrl) {
         xoxd_cookie: extracted.cookie_d
       }
     })));
-    const desired = workspaceUrl ? await resolveWorkspaceForUrl(workspaceUrl) : await resolveDefaultWorkspace();
-    const chosen = desired ?? await resolveDefaultWorkspace();
+    const desired = resolvedWorkspaceUrl ? await resolveWorkspaceForUrl(resolvedWorkspaceUrl) : selector ? resolveWorkspaceSelector((await loadCredentials()).workspaces, selector).match : await resolveDefaultWorkspace();
+    const chosen = desired ?? (!selectorProvided ? await resolveDefaultWorkspace() : null);
     if (chosen) {
       return {
         client: new SlackApiClient(chosen.auth, {
@@ -1282,16 +1565,38 @@ async function getClientForWorkspace(workspaceUrl) {
       };
     }
   } catch {}
-  const chrome = extractFromChrome();
+  const chrome = extractFromChrome() ?? await extractFromBrave();
   if (chrome && chrome.teams.length > 0) {
-    const chosen = (workspaceUrl ? chrome.teams.find((t) => normalizeUrl(t.url) === normalizeUrl(workspaceUrl)) : null) ?? chrome.teams[0];
+    let chosen = chrome.teams[0];
+    if (selector) {
+      const normalizedSelector = selector.toLowerCase();
+      const matches = chrome.teams.filter((t) => {
+        const normalizedUrl = normalizeUrl2(t.url).toLowerCase();
+        const host = new URL(t.url).host.toLowerCase();
+        const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
+        const name = t.name?.toLowerCase() ?? "";
+        return normalizedUrl.includes(normalizedSelector) || host.includes(normalizedSelector) || hostWithoutSlackSuffix.includes(normalizedSelector) || name.includes(normalizedSelector);
+      });
+      if (matches.length > 1) {
+        throw new Error(`Workspace selector "${selector}" is ambiguous in Chrome workspaces. Matches: ${matches.map((t) => normalizeUrl2(t.url)).join(", ")}. Pass a more specific selector or full workspace URL.`);
+      }
+      if (matches.length === 1) {
+        chosen = matches[0];
+      } else if (normalizedSelectorUrl) {
+        try {
+          chosen = chrome.teams.find((t) => normalizeUrl2(t.url) === normalizeUrl2(selector)) ?? chosen;
+        } catch {}
+      } else {
+        throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
+      }
+    }
     const auth = {
       auth_type: "browser",
       xoxc_token: chosen.token,
       xoxd_cookie: chrome.cookie_d
     };
     await upsertWorkspace({
-      workspace_url: normalizeUrl(chosen.url),
+      workspace_url: normalizeUrl2(chosen.url),
       workspace_name: chosen.name,
       auth: {
         auth_type: "browser",
@@ -1301,13 +1606,16 @@ async function getClientForWorkspace(workspaceUrl) {
     });
     return {
       client: new SlackApiClient(auth, {
-        workspaceUrl: normalizeUrl(chosen.url)
+        workspaceUrl: normalizeUrl2(chosen.url)
       }),
       auth,
-      workspace_url: normalizeUrl(chosen.url)
+      workspace_url: normalizeUrl2(chosen.url)
     };
   }
-  throw new Error('No Slack credentials available. Try "agent-slack auth import-desktop" or set SLACK_TOKEN / SLACK_COOKIE_D.');
+  if (selector && !normalizedSelectorUrl) {
+    throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
+  }
+  throw new Error('No Slack credentials available. Try "agent-slack auth import-desktop", "agent-slack auth import-chrome", "agent-slack auth import-brave", or set SLACK_TOKEN / SLACK_COOKIE_D.');
 }
 function createCliContext() {
   return {
@@ -1315,12 +1623,13 @@ function createCliContext() {
     assertWorkspaceSpecifiedForChannelNames,
     withAutoRefresh,
     getClientForWorkspace,
-    normalizeUrl,
+    normalizeUrl: normalizeUrl2,
     errorMessage,
     parseContentType,
     parseCurl: parseSlackCurlCommand,
     importDesktop: extractFromSlackDesktop,
-    importChrome: extractFromChrome
+    importChrome: extractFromChrome,
+    importBrave: extractFromBrave
   };
 }
 
@@ -1400,7 +1709,7 @@ function registerAuthCommand(input) {
       process.exitCode = 1;
     }
   });
-  auth.command("test").description("Verify credentials (calls Slack auth.test)").option("--workspace <url>", "Workspace URL (needed when you have multiple workspaces)").action(async (...args) => {
+  auth.command("test").description("Verify credentials (calls Slack auth.test)").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when you have multiple workspaces)").action(async (...args) => {
     const [options] = args;
     try {
       const resp = await runAuthTest({
@@ -1436,6 +1745,29 @@ function registerAuthCommand(input) {
       process.exitCode = 1;
     }
   });
+  auth.command("import-brave").description("Import xoxc/xoxd from a logged-in Slack tab in Brave Browser (macOS)").action(async () => {
+    try {
+      const extracted = await input.ctx.importBrave();
+      if (!extracted) {
+        throw new Error("Could not extract tokens from Brave. Open Slack in Brave and ensure you're logged in.");
+      }
+      for (const team of extracted.teams) {
+        await upsertWorkspace({
+          workspace_url: input.ctx.normalizeUrl(team.url),
+          workspace_name: team.name,
+          auth: {
+            auth_type: "browser",
+            xoxc_token: team.token,
+            xoxd_cookie: extracted.cookie_d
+          }
+        });
+      }
+      console.log(`Imported ${extracted.teams.length} workspace token(s) from Brave.`);
+    } catch (err) {
+      console.error(input.ctx.errorMessage(err));
+      process.exitCode = 1;
+    }
+  });
   auth.command("parse-curl").description("Paste a Slack API request copied as cURL (extracts xoxc/xoxd and saves locally)").action(async () => {
     try {
       const curlInput = await new Response(process.stdin).text();
@@ -1537,15 +1869,15 @@ function registerAuthCommand(input) {
 
 // src/slack/files.ts
 import { mkdir as mkdir3, writeFile as writeFile2 } from "node:fs/promises";
-import { basename, join as join5, resolve } from "node:path";
-import { existsSync as existsSync3 } from "node:fs";
+import { basename, join as join6, resolve } from "node:path";
+import { existsSync as existsSync4 } from "node:fs";
 async function downloadSlackFile(input) {
   const { auth, url, destDir, preferredName, options } = input;
   const absDir = resolve(destDir);
   await mkdir3(absDir, { recursive: true });
   const name = sanitizeFilename(preferredName || basename(new URL(url).pathname) || "file");
-  const path = join5(absDir, name);
-  if (existsSync3(path)) {
+  const path = join6(absDir, name);
+  if (existsSync4(path)) {
     return path;
   }
   const headers = {};
@@ -1600,27 +1932,27 @@ function extractTag(html, tag) {
 }
 
 // src/lib/tmp-paths.ts
-import { join as join7, resolve as resolve2 } from "node:path";
+import { join as join8, resolve as resolve2 } from "node:path";
 import { mkdir as mkdir4 } from "node:fs/promises";
 
 // src/lib/app-dir.ts
-import { homedir as homedir3, tmpdir } from "node:os";
-import { join as join6 } from "node:path";
+import { homedir as homedir4, tmpdir } from "node:os";
+import { join as join7 } from "node:path";
 function getAppDir() {
   const xdg = process.env.XDG_RUNTIME_DIR?.trim();
   if (xdg) {
-    return join6(xdg, "agent-slack");
+    return join7(xdg, "agent-slack");
   }
-  const home = homedir3();
+  const home = homedir4();
   if (home) {
-    return join6(home, ".agent-slack");
+    return join7(home, ".agent-slack");
   }
-  return join6(tmpdir(), "agent-slack");
+  return join7(tmpdir(), "agent-slack");
 }
 
 // src/lib/tmp-paths.ts
 function getDownloadsDir() {
-  return resolve2(join7(getAppDir(), "tmp", "downloads"));
+  return resolve2(join8(getAppDir(), "tmp", "downloads"));
 }
 async function ensureDownloadsDir() {
   const dir = getDownloadsDir();
@@ -1653,12 +1985,12 @@ function parseSlackCanvasUrl(input) {
 }
 async function fetchCanvasMarkdown(client, input) {
   const info = await client.api("files.info", { file: input.canvasId });
-  const file = isRecord6(info.file) ? info.file : null;
+  const file = isRecord5(info.file) ? info.file : null;
   if (!file) {
     throw new Error("Canvas not found (files.info returned no file)");
   }
-  const title = (getString2(file.title) || getString2(file.name) || "").trim() || undefined;
-  const downloadUrl = getString2(file.url_private_download) ?? getString2(file.url_private);
+  const title = (getString(file.title) || getString(file.name) || "").trim() || undefined;
+  const downloadUrl = getString(file.url_private_download) ?? getString(file.url_private);
   if (!downloadUrl) {
     throw new Error("Canvas has no download URL");
   }
@@ -1700,17 +2032,11 @@ async function fetchCanvasMarkdown(client, input) {
     }
   };
 }
-function isRecord6(value) {
-  return typeof value === "object" && value !== null;
-}
-function getString2(value) {
-  return typeof value === "string" ? value : undefined;
-}
 
 // src/cli/canvas-command.ts
 function registerCanvasCommand(input) {
   const canvasCmd = input.program.command("canvas").description("Work with Slack canvases");
-  canvasCmd.command("get").description("Fetch a Slack canvas and convert it to Markdown").argument("<canvas>", "Slack canvas URL (…/docs/…/F…) or canvas id (F…)").option("--workspace <url>", "Workspace URL (required if passing a canvas id and you have multiple workspaces)").option("--max-chars <n>", "Max markdown characters to include (default 20000, -1 for unlimited)", "20000").action(async (...args) => {
+  canvasCmd.command("get").description("Fetch a Slack canvas and convert it to Markdown").argument("<canvas>", "Slack canvas URL (…/docs/…/F…) or canvas id (F…)").option("--workspace <url>", "Workspace selector (full URL or unique substring; required if passing a canvas id across multiple workspaces)").option("--max-chars <n>", "Max markdown characters to include (default 20000, -1 for unlimited)", "20000").action(async (...args) => {
     const [value, options] = args;
     try {
       let workspaceUrl;
@@ -1792,17 +2118,21 @@ function slackMrkdwnToMarkdown(text) {
 }
 
 // src/slack/render.ts
+var MAX_ATTACHMENT_DEPTH = 8;
 function renderSlackMessageContent(msg) {
   const msgObj = isRecord7(msg) ? msg : {};
   const blockMrkdwn = extractMrkdwnFromBlocks(msgObj.blocks);
-  if (blockMrkdwn.trim()) {
-    return slackMrkdwnToMarkdown(blockMrkdwn).trim();
-  }
-  const attachmentMrkdwn = extractMrkdwnFromAttachments(msgObj.attachments);
-  if (attachmentMrkdwn.trim()) {
-    return slackMrkdwnToMarkdown(attachmentMrkdwn).trim();
+  const attachmentMrkdwn = extractMrkdwnFromAttachments(msgObj.attachments, {
+    depth: 0,
+    seen: new WeakSet
+  });
+  const combined = [blockMrkdwn.trim(), attachmentMrkdwn.trim()].filter(Boolean).join(`
+
+`);
+  if (combined) {
+    return slackMrkdwnToMarkdown(combined).trim();
   }
-  const text = getString3(msgObj.text).trim();
+  const text = getString2(msgObj.text).trim();
   if (text) {
     return slackMrkdwnToMarkdown(text).trim();
   }
@@ -1817,28 +2147,28 @@ function extractMrkdwnFromBlocks(blocks) {
     if (!isRecord7(b)) {
       continue;
     }
-    const type = getString3(b.type);
+    const type = getString2(b.type);
     if (type === "section") {
       const text = isRecord7(b.text) ? b.text : null;
-      const textType = text ? getString3(text.type) : "";
+      const textType = text ? getString2(text.type) : "";
       if (textType === "mrkdwn" || textType === "plain_text") {
-        out.push(getString3(text?.text));
+        out.push(getString2(text?.text));
       }
       if (Array.isArray(b.fields)) {
         for (const f of b.fields) {
           if (!isRecord7(f)) {
             continue;
           }
-          const fieldType = getString3(f.type);
+          const fieldType = getString2(f.type);
           if (fieldType === "mrkdwn" || fieldType === "plain_text") {
-            out.push(getString3(f.text));
+            out.push(getString2(f.text));
           }
         }
       }
       const accessory = isRecord7(b.accessory) ? b.accessory : null;
-      if (getString3(accessory?.type) === "button") {
-        const label = getString3(accessory?.text?.text);
-        const url = getString3(accessory?.url);
+      if (getString2(accessory?.type) === "button") {
+        const label = getString2(accessory?.text?.text);
+        const url = getString2(accessory?.url);
         if (url) {
           out.push(label ? `${label}: ${url}` : url);
         }
@@ -1850,9 +2180,9 @@ function extractMrkdwnFromBlocks(blocks) {
         if (!isRecord7(el)) {
           continue;
         }
-        if (getString3(el.type) === "button") {
-          const label = getString3(el.text?.text);
-          const url = getString3(el.url);
+        if (getString2(el.type) === "button") {
+          const label = getString2(el.text?.text);
+          const url = getString2(el.url);
           if (url) {
             out.push(label ? `${label}: ${url}` : url);
           }
@@ -1865,19 +2195,19 @@ function extractMrkdwnFromBlocks(blocks) {
         if (!isRecord7(el)) {
           continue;
         }
-        const elType = getString3(el.type);
+        const elType = getString2(el.type);
         if (elType === "mrkdwn") {
-          out.push(getString3(el.text));
+          out.push(getString2(el.text));
         }
         if (elType === "plain_text") {
-          out.push(getString3(el.text));
+          out.push(getString2(el.text));
         }
       }
       continue;
     }
     if (type === "image") {
-      const alt = getString3(b.alt_text);
-      const url = getString3(b.image_url);
+      const alt = getString2(b.alt_text);
+      const url = getString2(b.image_url);
       if (url) {
         out.push(alt ? `${alt}: ${url}` : url);
       }
@@ -1915,7 +2245,7 @@ function extractMrkdwnFromRichTextElement(el) {
   if (!isRecord7(el)) {
     return "";
   }
-  const t = getString3(el.type);
+  const t = getString2(el.type);
   if (t === "rich_text_section") {
     const parts = [];
     for (const child of Array.isArray(el.elements) ? el.elements : []) {
@@ -1961,7 +2291,7 @@ function extractMrkdwnFromRichTextElement(el) {
 `);
   }
   if (t === "text") {
-    const raw = getString3(el.text);
+    const raw = getString2(el.text);
     const style = isRecord7(el.style) ? el.style : null;
     if (!style) {
       return raw;
@@ -1982,28 +2312,31 @@ function extractMrkdwnFromRichTextElement(el) {
     return text;
   }
   if (t === "link") {
-    const url = getString3(el.url);
-    const text = getString3(el.text);
+    const url = getString2(el.url);
+    const text = getString2(el.text);
     if (!url) {
       return text;
     }
     return text ? `<${url}|${text}>` : url;
   }
   if (t === "emoji") {
-    const name = getString3(el.name);
+    const name = getString2(el.name);
     return name ? `:${name}:` : "";
   }
   if (t === "user") {
-    const userId = getString3(el.user_id);
+    const userId = getString2(el.user_id);
     return userId ? `<@${userId}>` : "";
   }
   if (t === "channel") {
-    const channelId = getString3(el.channel_id);
+    const channelId = getString2(el.channel_id);
     return channelId ? `<#${channelId}>` : "";
   }
   return "";
 }
-function extractMrkdwnFromAttachments(attachments) {
+function extractMrkdwnFromAttachments(attachments, state) {
+  if (state.depth >= MAX_ATTACHMENT_DEPTH) {
+    return "";
+  }
   if (!Array.isArray(attachments)) {
     return "";
   }
@@ -2012,17 +2345,34 @@ function extractMrkdwnFromAttachments(attachments) {
     if (!isRecord7(a)) {
       continue;
     }
+    if (state.seen.has(a)) {
+      continue;
+    }
+    state.seen.add(a);
+    const isSharedMessage = Boolean(a.is_share || a.is_msg_unfurl && Array.isArray(a.message_blocks));
     const chunk = [];
+    if (isSharedMessage) {
+      chunk.push(formatForwardHeader(a));
+      const body = extractForwardedMessageBody(a, state).trim() || extractMrkdwnFromAttachments(a.attachments, nextState(state)).trim() || getString2(a.text).trim();
+      if (body) {
+        chunk.push(quoteMarkdown(body));
+      }
+      if (chunk.length > 0) {
+        parts.push(chunk.join(`
+`));
+      }
+      continue;
+    }
     const blocks = extractMrkdwnFromBlocks(a.blocks);
     if (blocks.trim()) {
       chunk.push(blocks);
     }
-    const pretext = getString3(a.pretext);
+    const pretext = getString2(a.pretext);
     if (pretext) {
       chunk.push(pretext);
     }
-    const title = getString3(a.title);
-    const titleLink = getString3(a.title_link);
+    const title = getString2(a.title);
+    const titleLink = getString2(a.title_link);
     if (titleLink && title) {
       chunk.push(`<${titleLink}|${title}>`);
     } else if (title) {
@@ -2030,7 +2380,7 @@ function extractMrkdwnFromAttachments(attachments) {
     } else if (titleLink) {
       chunk.push(titleLink);
     }
-    const text = getString3(a.text);
+    const text = getString2(a.text);
     if (text) {
       chunk.push(text);
     }
@@ -2039,8 +2389,8 @@ function extractMrkdwnFromAttachments(attachments) {
         if (!isRecord7(f)) {
           continue;
         }
-        const fieldTitle = getString3(f.title);
-        const value = getString3(f.value);
+        const fieldTitle = getString2(f.title);
+        const value = getString2(f.value);
         if (fieldTitle && value) {
           chunk.push(`${fieldTitle}
 ${value}`);
@@ -2051,26 +2401,174 @@ ${value}`);
         }
       }
     }
-    const fallback = getString3(a.fallback);
+    const fallback = getString2(a.fallback);
     if (chunk.length === 0 && fallback) {
       chunk.push(fallback);
     }
+    const nestedAttachments = extractMrkdwnFromAttachments(a.attachments, nextState(state));
+    if (nestedAttachments.trim()) {
+      chunk.push(nestedAttachments);
+    }
     if (chunk.length > 0) {
-      parts.push(chunk.join(`
+      parts.push(uniqueTexts(chunk).join(`
 `));
     }
   }
-  return parts.join(`
+  return uniqueTexts(parts).join(`
+
+`);
+}
+function formatForwardHeader(a) {
+  const authorName = getString2(a.author_name);
+  const authorLink = getString2(a.author_link);
+  const fromUrl = getString2(a.from_url);
+  const authorPart = authorName && authorLink ? `<${authorLink}|${authorName}>` : authorName || "";
+  const sourcePart = fromUrl ? `<${fromUrl}|original>` : "";
+  if (authorPart && sourcePart) {
+    return `*Forwarded from ${authorPart} | ${sourcePart}*`;
+  }
+  if (authorPart) {
+    return `*Forwarded from ${authorPart}*`;
+  }
+  if (sourcePart) {
+    return `*Forwarded message | ${sourcePart}*`;
+  }
+  return "*Forwarded message*";
+}
+function extractForwardedMessageBody(attachment, state) {
+  const messageBlocks = attachment.message_blocks;
+  const topLevelFiles = extractFileMentions(attachment.files).trim();
+  if (!Array.isArray(messageBlocks)) {
+    return topLevelFiles;
+  }
+  const out = [];
+  for (const mb of messageBlocks) {
+    if (!isRecord7(mb)) {
+      continue;
+    }
+    const message = isRecord7(mb.message) ? mb.message : null;
+    if (!message) {
+      continue;
+    }
+    const messageText = getString2(message.text).trim();
+    const blocksContent = extractMrkdwnFromBlocks(message.blocks).trim();
+    const attachmentsContent = extractMrkdwnFromAttachments(message.attachments, nextState(state)).trim();
+    const fileMentions = extractFileMentions(message.files).trim();
+    const content = uniqueTexts([
+      blocksContent,
+      attachmentsContent,
+      messageText,
+      fileMentions
+    ]).join(`
 
+`);
+    if (content) {
+      out.push(content);
+    }
+  }
+  return uniqueTexts([topLevelFiles, ...out]).join(`
+`);
+}
+function nextState(state) {
+  return { depth: state.depth + 1, seen: state.seen };
+}
+function quoteMarkdown(text) {
+  return text.split(`
+`).map((line) => `> ${line}`).join(`
+`);
+}
+function uniqueTexts(values) {
+  const out = [];
+  const seen = new Set;
+  for (const value of values) {
+    const text = value.trim();
+    if (!text || seen.has(text)) {
+      continue;
+    }
+    seen.add(text);
+    out.push(text);
+  }
+  return out;
+}
+function extractFileMentions(files) {
+  if (!Array.isArray(files)) {
+    return "";
+  }
+  const lines = [];
+  for (const f of files) {
+    if (!isRecord7(f)) {
+      continue;
+    }
+    const name = getString2(f.title) || getString2(f.name) || "file";
+    const url = getString2(f.permalink) || getString2(f.url_private_download) || getString2(f.url_private);
+    if (url) {
+      lines.push(`<${url}|${name}>`);
+      continue;
+    }
+    lines.push(name);
+  }
+  return uniqueTexts(lines).join(`
 `);
 }
 function isRecord7(value) {
   return typeof value === "object" && value !== null;
 }
-function getString3(value) {
+function getString2(value) {
   return typeof value === "string" ? value : "";
 }
 
+// src/slack/message-api-parsing.ts
+function toSlackFileSummary(value) {
+  if (!isRecord5(value)) {
+    return null;
+  }
+  const id = getString(value.id);
+  if (!id) {
+    return null;
+  }
+  return {
+    id,
+    name: getString(value.name),
+    title: getString(value.title),
+    mimetype: getString(value.mimetype),
+    filetype: getString(value.filetype),
+    mode: getString(value.mode),
+    permalink: getString(value.permalink),
+    url_private: getString(value.url_private),
+    url_private_download: getString(value.url_private_download),
+    size: getNumber(value.size)
+  };
+}
+async function enrichFiles(client, files) {
+  const out = [];
+  for (const f of files) {
+    if (f.mode === "snippet" || !f.url_private_download) {
+      try {
+        const info = await client.api("files.info", { file: f.id });
+        const file = isRecord5(info.file) ? info.file : null;
+        out.push({
+          ...f,
+          name: f.name ?? getString(file?.name),
+          title: f.title ?? getString(file?.title),
+          mimetype: f.mimetype ?? getString(file?.mimetype),
+          filetype: f.filetype ?? getString(file?.filetype),
+          mode: f.mode ?? getString(file?.mode),
+          permalink: f.permalink ?? getString(file?.permalink),
+          url_private: f.url_private ?? getString(file?.url_private),
+          url_private_download: f.url_private_download ?? getString(file?.url_private_download),
+          snippet: {
+            content: getString(file?.content),
+            language: getString(file?.filetype)
+          }
+        });
+        continue;
+      } catch {}
+    }
+    out.push(f);
+  }
+  return out;
+}
+
 // src/slack/messages.ts
 function toCompactMessage(msg, input) {
   const maxBodyChars = input?.maxBodyChars ?? 8000;
@@ -2096,7 +2594,8 @@ function toCompactMessage(msg, input) {
     author: msg.user || msg.bot_id ? { user_id: msg.user, bot_id: msg.bot_id } : undefined,
     content: content ? content : undefined,
     files: files && files.length > 0 ? files : undefined,
-    reactions: includeReactions ? compactReactions(msg.reactions) : undefined
+    reactions: includeReactions ? compactReactions(msg.reactions) : undefined,
+    forwarded_threads: extractForwardedThreads(msg.attachments)
   };
 }
 function compactReactions(reactions) {
@@ -2105,10 +2604,10 @@ function compactReactions(reactions) {
   }
   const out = [];
   for (const r of reactions) {
-    if (!isRecord8(r)) {
+    if (!isRecord5(r)) {
       continue;
     }
-    const name = getString4(r.name)?.trim() ?? "";
+    const name = getString(r.name)?.trim() ?? "";
     if (!name) {
       continue;
     }
@@ -2118,6 +2617,46 @@ function compactReactions(reactions) {
   }
   return out.length ? out : undefined;
 }
+function extractForwardedThreads(attachments) {
+  if (!Array.isArray(attachments) || attachments.length === 0) {
+    return;
+  }
+  const out = [];
+  const seen = new Set;
+  for (const attachment of attachments) {
+    if (!isRecord5(attachment)) {
+      continue;
+    }
+    const fromUrl = getString(attachment.from_url)?.trim();
+    if (!fromUrl) {
+      continue;
+    }
+    let parsed;
+    try {
+      parsed = new URL(fromUrl);
+    } catch {
+      continue;
+    }
+    const threadTs = parsed.searchParams.get("thread_ts")?.trim();
+    if (!threadTs || !/^\d{6,}\.\d{6}$/.test(threadTs)) {
+      continue;
+    }
+    const channelId = parsed.searchParams.get("cid")?.trim();
+    const replyCount = getNumber(attachment.reply_count);
+    const key = `${fromUrl}::${threadTs}`;
+    if (seen.has(key)) {
+      continue;
+    }
+    seen.add(key);
+    out.push({
+      url: fromUrl,
+      thread_ts: threadTs,
+      channel_id: channelId || undefined,
+      reply_count: replyCount
+    });
+  }
+  return out.length ? out : undefined;
+}
 async function fetchMessage(client, input) {
   const history = await client.api("conversations.history", {
     channel: input.ref.channel_id,
@@ -2126,8 +2665,8 @@ async function fetchMessage(client, input) {
     limit: 5,
     include_all_metadata: input.includeReactions ? true : undefined
   });
-  const historyMessages = asArray2(history.messages);
-  let msg = historyMessages.find((m) => isRecord8(m) && getString4(m.ts) === input.ref.message_ts);
+  const historyMessages = asArray(history.messages);
+  let msg = historyMessages.find((m) => isRecord5(m) && getString(m.ts) === input.ref.message_ts);
   if (!msg && input.ref.thread_ts_hint) {
     msg = await findMessageInThread(client, {
       channelId: input.ref.channel_id,
@@ -2144,8 +2683,8 @@ async function fetchMessage(client, input) {
         limit: 1,
         include_all_metadata: input.includeReactions ? true : undefined
       });
-      const [root] = asArray2(rootResp.messages);
-      if (isRecord8(root) && getString4(root.ts) === input.ref.message_ts) {
+      const [root] = asArray(rootResp.messages);
+      if (isRecord5(root) && getString(root.ts) === input.ref.message_ts) {
         msg = root;
       }
     } catch {}
@@ -2153,20 +2692,20 @@ async function fetchMessage(client, input) {
   if (!msg) {
     throw new Error("Message not found (no access or wrong URL)");
   }
-  const files = asArray2(msg.files).map((f) => toSlackFileSummary(f)).filter((f) => f !== null);
+  const files = asArray(msg.files).map((f) => toSlackFileSummary(f)).filter((f) => f !== null);
   const enrichedFiles = files.length > 0 ? await enrichFiles(client, files) : undefined;
-  const text = getString4(msg.text) ?? "";
-  const ts = getString4(msg.ts) ?? input.ref.message_ts;
+  const text = getString(msg.text) ?? "";
+  const ts = getString(msg.ts) ?? input.ref.message_ts;
   const blocks = Array.isArray(msg.blocks) ? msg.blocks : undefined;
   const attachments = Array.isArray(msg.attachments) ? msg.attachments : undefined;
   const reactions = Array.isArray(msg.reactions) ? msg.reactions : undefined;
   return {
     channel_id: input.ref.channel_id,
     ts,
-    thread_ts: getString4(msg.thread_ts),
+    thread_ts: getString(msg.thread_ts),
     reply_count: getNumber(msg.reply_count),
-    user: getString4(msg.user),
-    bot_id: getString4(msg.bot_id),
+    user: getString(msg.user),
+    bot_id: getString(msg.bot_id),
     text,
     markdown: slackMrkdwnToMarkdown(text),
     blocks,
@@ -2185,19 +2724,105 @@ async function findMessageInThread(client, input) {
       cursor,
       include_all_metadata: input.includeReactions ? true : undefined
     });
-    const messages = asArray2(resp.messages);
-    const found = messages.find((m) => isRecord8(m) && getString4(m.ts) === input.targetTs);
+    const messages = asArray(resp.messages);
+    const found = messages.find((m) => isRecord5(m) && getString(m.ts) === input.targetTs);
     if (found) {
       return found;
     }
-    const meta = isRecord8(resp.response_metadata) ? resp.response_metadata : null;
-    const next = meta ? getString4(meta.next_cursor) : undefined;
-    if (!next) {
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+    const next = meta ? getString(meta.next_cursor) : undefined;
+    if (!next) {
+      break;
+    }
+    cursor = next;
+  }
+  return;
+}
+async function fetchChannelHistory(client, input) {
+  const raw = input.limit ?? 25;
+  const limit = Number.isFinite(raw) ? Math.min(Math.max(raw, 1), 200) : 25;
+  const out = [];
+  const withReactions = input.withReactions ?? [];
+  const withoutReactions = input.withoutReactions ?? [];
+  const hasReactionFilters = withReactions.length > 0 || withoutReactions.length > 0;
+  const pageLimit = hasReactionFilters ? 200 : limit;
+  let cursorLatest = input.latest;
+  for (;; ) {
+    const resp = await client.api("conversations.history", {
+      channel: input.channelId,
+      limit: pageLimit,
+      latest: cursorLatest,
+      oldest: input.oldest,
+      include_all_metadata: input.includeReactions || hasReactionFilters ? true : undefined
+    });
+    const messages = asArray(resp.messages);
+    if (messages.length === 0) {
+      break;
+    }
+    for (const m of messages) {
+      if (!isRecord5(m)) {
+        continue;
+      }
+      if (hasReactionFilters && !passesReactionNameFilters(m, {
+        withReactions,
+        withoutReactions
+      })) {
+        continue;
+      }
+      const files = asArray(m.files).map((f) => toSlackFileSummary(f)).filter((f) => f !== null);
+      const enrichedFiles = files.length > 0 ? await enrichFiles(client, files) : undefined;
+      const text = getString(m.text) ?? "";
+      out.push({
+        channel_id: input.channelId,
+        ts: getString(m.ts) ?? "",
+        thread_ts: getString(m.thread_ts),
+        reply_count: getNumber(m.reply_count),
+        user: getString(m.user),
+        bot_id: getString(m.bot_id),
+        text,
+        markdown: slackMrkdwnToMarkdown(text),
+        blocks: Array.isArray(m.blocks) ? m.blocks : undefined,
+        attachments: Array.isArray(m.attachments) ? m.attachments : undefined,
+        files: enrichedFiles,
+        reactions: Array.isArray(m.reactions) ? m.reactions : undefined
+      });
+      if (out.length >= limit) {
+        break;
+      }
+    }
+    if (out.length >= limit || !hasReactionFilters) {
       break;
     }
-    cursor = next;
+    const last = messages.at(-1);
+    const nextLatest = isRecord5(last) ? getString(last.ts) : undefined;
+    if (!nextLatest || nextLatest === cursorLatest) {
+      break;
+    }
+    cursorLatest = nextLatest;
   }
-  return;
+  out.sort((a, b) => Number.parseFloat(a.ts) - Number.parseFloat(b.ts));
+  return out;
+}
+function passesReactionNameFilters(msg, input) {
+  const withReactions = input.withReactions ?? [];
+  const withoutReactions = input.withoutReactions ?? [];
+  const names = new Set;
+  for (const r of asArray(msg.reactions)) {
+    if (!isRecord5(r)) {
+      continue;
+    }
+    const name = getString(r.name)?.trim();
+    if (name) {
+      names.add(name);
+    }
+  }
+  if (withReactions.some((name) => !names.has(name))) {
+    return false;
+  }
+  if (withoutReactions.some((name) => names.has(name))) {
+    return false;
+  }
+  return true;
 }
 async function fetchThread(client, input) {
   const out = [];
@@ -2210,21 +2835,21 @@ async function fetchThread(client, input) {
       cursor,
       include_all_metadata: input.includeReactions ? true : undefined
     });
-    const messages = asArray2(resp.messages);
+    const messages = asArray(resp.messages);
     for (const m of messages) {
-      if (!isRecord8(m)) {
+      if (!isRecord5(m)) {
         continue;
       }
-      const files = asArray2(m.files).map((f) => toSlackFileSummary(f)).filter((f) => f !== null);
+      const files = asArray(m.files).map((f) => toSlackFileSummary(f)).filter((f) => f !== null);
       const enrichedFiles = files.length > 0 ? await enrichFiles(client, files) : undefined;
-      const text = getString4(m.text) ?? "";
+      const text = getString(m.text) ?? "";
       out.push({
         channel_id: input.channelId,
-        ts: getString4(m.ts) ?? "",
-        thread_ts: getString4(m.thread_ts),
+        ts: getString(m.ts) ?? "",
+        thread_ts: getString(m.thread_ts),
         reply_count: getNumber(m.reply_count),
-        user: getString4(m.user),
-        bot_id: getString4(m.bot_id),
+        user: getString(m.user),
+        bot_id: getString(m.bot_id),
         text,
         markdown: slackMrkdwnToMarkdown(text),
         blocks: Array.isArray(m.blocks) ? m.blocks : undefined,
@@ -2233,8 +2858,8 @@ async function fetchThread(client, input) {
         reactions: Array.isArray(m.reactions) ? m.reactions : undefined
       });
     }
-    const meta = isRecord8(resp.response_metadata) ? resp.response_metadata : null;
-    const next = meta ? getString4(meta.next_cursor) : undefined;
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+    const next = meta ? getString(meta.next_cursor) : undefined;
     if (!next) {
       break;
     }
@@ -2243,68 +2868,6 @@ async function fetchThread(client, input) {
   out.sort((a, b) => Number.parseFloat(a.ts) - Number.parseFloat(b.ts));
   return out;
 }
-async function enrichFiles(client, files) {
-  const out = [];
-  for (const f of files) {
-    if (f.mode === "snippet" || !f.url_private_download) {
-      try {
-        const info = await client.api("files.info", { file: f.id });
-        const file = isRecord8(info.file) ? info.file : null;
-        out.push({
-          ...f,
-          name: f.name ?? getString4(file?.name),
-          title: f.title ?? getString4(file?.title),
-          mimetype: f.mimetype ?? getString4(file?.mimetype),
-          filetype: f.filetype ?? getString4(file?.filetype),
-          mode: f.mode ?? getString4(file?.mode),
-          permalink: f.permalink ?? getString4(file?.permalink),
-          url_private: f.url_private ?? getString4(file?.url_private),
-          url_private_download: f.url_private_download ?? getString4(file?.url_private_download),
-          snippet: {
-            content: getString4(file?.content),
-            language: getString4(file?.filetype)
-          }
-        });
-        continue;
-      } catch {}
-    }
-    out.push(f);
-  }
-  return out;
-}
-function isRecord8(value) {
-  return typeof value === "object" && value !== null;
-}
-function getString4(value) {
-  return typeof value === "string" ? value : undefined;
-}
-function getNumber(value) {
-  return typeof value === "number" ? value : undefined;
-}
-function asArray2(value) {
-  return Array.isArray(value) ? value : [];
-}
-function toSlackFileSummary(value) {
-  if (!isRecord8(value)) {
-    return null;
-  }
-  const id = getString4(value.id);
-  if (!id) {
-    return null;
-  }
-  return {
-    id,
-    name: getString4(value.name),
-    title: getString4(value.title),
-    mimetype: getString4(value.mimetype),
-    filetype: getString4(value.filetype),
-    mode: getString4(value.mode),
-    permalink: getString4(value.permalink),
-    url_private: getString4(value.url_private),
-    url_private_download: getString4(value.url_private_download),
-    size: getNumber(value.size)
-  };
-}
 
 // src/slack/url.ts
 function parseSlackMessageUrl(input) {
@@ -2361,38 +2924,10 @@ function parseMsgTarget(input) {
   return { kind: "channel", channel: `#${trimmed}` };
 }
 
-// src/cli/message-actions.ts
-function isRecord9(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function asArray3(value) {
-  return Array.isArray(value) ? value : [];
-}
-function getNumber2(value) {
-  return typeof value === "number" ? value : undefined;
-}
-async function getThreadSummary(client, input) {
-  const replyCount = input.msg.reply_count ?? 0;
-  const rootTs = input.msg.thread_ts ?? (replyCount > 0 ? input.msg.ts : null);
-  if (!rootTs) {
-    return null;
-  }
-  if (!input.msg.thread_ts && replyCount > 0) {
-    return { ts: rootTs, length: 1 + replyCount };
-  }
-  const resp = await client.api("conversations.replies", {
-    channel: input.channelId,
-    ts: rootTs,
-    limit: 1
-  });
-  const [root] = asArray3(isRecord9(resp) ? resp.messages : undefined);
-  const rootReplyCount = isRecord9(root) ? getNumber2(root.reply_count) : undefined;
-  if (rootReplyCount === undefined) {
-    return { ts: rootTs, length: 1 };
-  }
-  return { ts: rootTs, length: 1 + rootReplyCount };
-}
-function inferExt(file) {
+// src/cli/message-file-downloads.ts
+import { readFile as readFile4, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join9 } from "node:path";
+function inferFileExtension(file) {
   const mt = (file.mimetype || "").toLowerCase();
   const ft = (file.filetype || "").toLowerCase();
   if (mt === "image/png" || ft === "png") {
@@ -2417,42 +2952,148 @@ function inferExt(file) {
     return "json";
   }
   const name = file.name || file.title || "";
-  const m = name.match(/\.([A-Za-z0-9]{1,10})$/);
-  return m ? m[1].toLowerCase() : null;
+  const match = name.match(/\.([A-Za-z0-9]{1,10})$/);
+  return match ? match[1].toLowerCase() : null;
+}
+var CANVAS_MODES = new Set(["canvas", "quip", "docs"]);
+function looksLikeAuthPage(html) {
+  return /<form[^>]+signin|data-qa="signin|<title>[^<]*Sign\s*in/i.test(html);
+}
+async function downloadCanvasAsMarkdown(input) {
+  const htmlPath = await downloadSlackFile({
+    auth: input.auth,
+    url: input.url,
+    destDir: input.destDir,
+    preferredName: `${input.fileId}.html`,
+    options: { allowHtml: true }
+  });
+  const html = await readFile4(htmlPath, "utf8");
+  if (looksLikeAuthPage(html)) {
+    throw new Error("Downloaded auth/login page instead of canvas content (token may be expired)");
+  }
+  const markdown = htmlToMarkdown(html).trim();
+  const safeName = `${input.fileId.replace(/[\\/<>"|?*]/g, "_")}.md`;
+  const markdownPath = join9(input.destDir, safeName);
+  await writeFile3(markdownPath, markdown, "utf8");
+  return markdownPath;
 }
-async function downloadFilesForMessages(input) {
+async function downloadMessageFiles(input) {
   const downloadedPaths = {};
   const downloadsDir = await ensureDownloadsDir();
-  for (const m of input.messages) {
-    for (const f of m.files ?? []) {
-      if (downloadedPaths[f.id]) {
+  for (const message of input.messages) {
+    for (const file of message.files ?? []) {
+      if (downloadedPaths[file.id]) {
         continue;
       }
-      const url = f.url_private_download || f.url_private;
+      const isCanvas = file.mode != null && CANVAS_MODES.has(file.mode);
+      const url = isCanvas ? file.url_private || file.url_private_download : file.url_private_download || file.url_private;
       if (!url) {
         continue;
       }
-      const ext = inferExt(f);
-      const path = await downloadSlackFile({
-        auth: input.auth,
-        url,
-        destDir: downloadsDir,
-        preferredName: `${f.id}${ext ? `.${ext}` : ""}`
-      });
-      downloadedPaths[f.id] = path;
+      try {
+        if (isCanvas) {
+          downloadedPaths[file.id] = await downloadCanvasAsMarkdown({
+            auth: input.auth,
+            fileId: file.id,
+            url,
+            destDir: downloadsDir
+          });
+        } else {
+          const ext = inferFileExtension(file);
+          downloadedPaths[file.id] = await downloadSlackFile({
+            auth: input.auth,
+            url,
+            destDir: downloadsDir,
+            preferredName: `${file.id}${ext ? `.${ext}` : ""}`
+          });
+        }
+      } catch (err) {
+        console.error(`Warning: skipping file ${file.id}: ${err instanceof Error ? err.message : String(err)}`);
+      }
     }
   }
   return downloadedPaths;
 }
+
+// src/cli/message-url-warning.ts
+function warnOnTruncatedSlackUrl(ref) {
+  if (ref.possiblyTruncated) {
+    console.error(`Hint: URL may have been truncated by shell. Quote URLs containing "&":
+` + '  agent-slack message get "https://...?thread_ts=...&cid=..."');
+  }
+}
+
+// src/cli/message-thread-info.ts
+function getNumber2(value) {
+  return typeof value === "number" ? value : undefined;
+}
+async function getThreadSummary(client, input) {
+  const replyCount = input.msg.reply_count ?? 0;
+  const rootTs = input.msg.thread_ts ?? (replyCount > 0 ? input.msg.ts : null);
+  if (!rootTs) {
+    return null;
+  }
+  if (!input.msg.thread_ts && replyCount > 0) {
+    return { ts: rootTs, length: 1 + replyCount };
+  }
+  const resp = await client.api("conversations.replies", {
+    channel: input.channelId,
+    ts: rootTs,
+    limit: 1
+  });
+  const [root] = asArray(isRecord5(resp) ? resp.messages : undefined);
+  const rootReplyCount = isRecord5(root) ? getNumber2(root.reply_count) : undefined;
+  if (rootReplyCount === undefined) {
+    return { ts: rootTs, length: 1 };
+  }
+  return { ts: rootTs, length: 1 + rootReplyCount };
+}
 function toThreadListMessage(m) {
   const { channel_id: _channelId, thread_ts: _threadTs, ...rest } = m;
   return rest;
 }
-function warnIfTruncated(ref) {
-  if (ref.possiblyTruncated) {
-    console.error(`Hint: URL may have been truncated by shell. Quote URLs containing "&":
-` + '  agent-slack message get "https://...?thread_ts=...&cid=..."');
+
+// src/cli/message-actions.ts
+function parseLimit(raw) {
+  if (raw === undefined) {
+    return;
+  }
+  const n = Number.parseInt(raw, 10);
+  if (!Number.isFinite(n) || n < 1) {
+    throw new Error(`Invalid --limit value "${raw}": must be a positive integer`);
+  }
+  return n;
+}
+function requireMessageTs(raw) {
+  const ts = raw?.trim();
+  if (!ts) {
+    throw new Error('When targeting a channel, you must pass --ts "<seconds>.<micros>"');
+  }
+  return ts;
+}
+function parseReactionFilters(raw) {
+  if (!Array.isArray(raw) || raw.length === 0) {
+    return [];
+  }
+  const out = [];
+  for (const value of raw) {
+    const normalized = normalizeSlackReactionName(String(value));
+    if (!out.includes(normalized)) {
+      out.push(normalized);
+    }
+  }
+  return out;
+}
+function requireOldestWhenReactionFiltersUsed(input) {
+  const hasReactionFilters = input.withReactions.length > 0 || input.withoutReactions.length > 0;
+  const oldest = input.oldest?.trim();
+  if (!hasReactionFilters) {
+    return oldest;
+  }
+  if (!oldest) {
+    throw new Error('Reaction filters require --oldest "<seconds>.<micros>" to bound scan size. Example: --oldest "1770165109.628379"');
   }
+  return oldest;
 }
 async function handleMessageGet(input) {
   const target = parseMsgTarget(input.targetInput);
@@ -2462,12 +3103,12 @@ async function handleMessageGet(input) {
     work: async () => {
       if (target.kind === "url") {
         const { ref: ref2 } = target;
-        warnIfTruncated(ref2);
+        warnOnTruncatedSlackUrl(ref2);
         const { client: client2, auth: auth2 } = await input.ctx.getClientForWorkspace(ref2.workspace_url);
         const includeReactions2 = Boolean(input.options.includeReactions);
         const msg2 = await fetchMessage(client2, { ref: ref2, includeReactions: includeReactions2 });
         const thread2 = await getThreadSummary(client2, { channelId: ref2.channel_id, msg: msg2 });
-        const downloadedPaths2 = await downloadFilesForMessages({ auth: auth2, messages: [msg2] });
+        const downloadedPaths2 = await downloadMessageFiles({ auth: auth2, messages: [msg2] });
         const maxBodyChars2 = Number.parseInt(input.options.maxBodyChars, 10);
         const message2 = toCompactMessage(msg2, { maxBodyChars: maxBodyChars2, includeReactions: includeReactions2, downloadedPaths: downloadedPaths2 });
         return pruneEmpty({ message: message2, thread: thread2 });
@@ -2492,7 +3133,7 @@ async function handleMessageGet(input) {
       };
       const msg = await fetchMessage(client, { ref, includeReactions });
       const thread = await getThreadSummary(client, { channelId, msg });
-      const downloadedPaths = await downloadFilesForMessages({ auth, messages: [msg] });
+      const downloadedPaths = await downloadMessageFiles({ auth, messages: [msg] });
       const maxBodyChars = Number.parseInt(input.options.maxBodyChars, 10);
       const message = toCompactMessage(msg, { maxBodyChars, includeReactions, downloadedPaths });
       return pruneEmpty({ message, thread });
@@ -2505,9 +3146,15 @@ async function handleMessageList(input) {
   return input.ctx.withAutoRefresh({
     workspaceUrl: target.kind === "url" ? target.ref.workspace_url : workspaceUrl,
     work: async () => {
+      const withReactions = parseReactionFilters(input.options.withReaction);
+      const withoutReactions = parseReactionFilters(input.options.withoutReaction);
+      const hasReactionFilters = withReactions.length > 0 || withoutReactions.length > 0;
       if (target.kind === "url") {
+        if (hasReactionFilters) {
+          throw new Error("Reaction filters are only supported for channel history mode (not message URL thread mode)");
+        }
         const { ref } = target;
-        warnIfTruncated(ref);
+        warnOnTruncatedSlackUrl(ref);
         const { client: client2, auth: auth2 } = await input.ctx.getClientForWorkspace(ref.workspace_url);
         const includeReactions2 = Boolean(input.options.includeReactions);
         const msg = await fetchMessage(client2, { ref, includeReactions: includeReactions2 });
@@ -2517,7 +3164,7 @@ async function handleMessageList(input) {
           threadTs: rootTs2,
           includeReactions: includeReactions2
         });
-        const downloadedPaths2 = await downloadFilesForMessages({ auth: auth2, messages: threadMessages2 });
+        const downloadedPaths2 = await downloadMessageFiles({ auth: auth2, messages: threadMessages2 });
         const maxBodyChars2 = Number.parseInt(input.options.maxBodyChars, 10);
         return pruneEmpty({
           messages: threadMessages2.map((m) => toCompactMessage(m, { maxBodyChars: maxBodyChars2, includeReactions: includeReactions2, downloadedPaths: downloadedPaths2 })).map(toThreadListMessage)
@@ -2532,7 +3179,31 @@ async function handleMessageList(input) {
       const threadTs = input.options.threadTs?.trim();
       const ts = input.options.ts?.trim();
       if (!threadTs && !ts) {
-        throw new Error('When targeting a channel, you must pass --thread-ts "<seconds>.<micros>" (or --ts to resolve a message to its thread)');
+        const includeReactions2 = Boolean(input.options.includeReactions);
+        const limit = parseLimit(input.options.limit);
+        const oldest = requireOldestWhenReactionFiltersUsed({
+          oldest: input.options.oldest,
+          withReactions,
+          withoutReactions
+        });
+        const channelMessages = await fetchChannelHistory(client, {
+          channelId,
+          limit,
+          latest: input.options.latest?.trim(),
+          oldest,
+          includeReactions: includeReactions2 || hasReactionFilters,
+          withReactions,
+          withoutReactions
+        });
+        const downloadedPaths2 = await downloadMessageFiles({ auth, messages: channelMessages });
+        const maxBodyChars2 = Number.parseInt(input.options.maxBodyChars, 10);
+        return pruneEmpty({
+          channel_id: channelId,
+          messages: channelMessages.map((m) => toCompactMessage(m, { maxBodyChars: maxBodyChars2, includeReactions: includeReactions2, downloadedPaths: downloadedPaths2 }))
+        });
+      }
+      if (hasReactionFilters) {
+        throw new Error("Reaction filters are only supported for channel history mode (without --thread-ts/--ts)");
       }
       const rootTs = threadTs ?? await (async () => {
         const ref = {
@@ -2551,7 +3222,7 @@ async function handleMessageList(input) {
         threadTs: rootTs,
         includeReactions
       });
-      const downloadedPaths = await downloadFilesForMessages({ auth, messages: threadMessages });
+      const downloadedPaths = await downloadMessageFiles({ auth, messages: threadMessages });
       const maxBodyChars = Number.parseInt(input.options.maxBodyChars, 10);
       return pruneEmpty({
         messages: threadMessages.map((m) => toCompactMessage(m, { maxBodyChars, includeReactions, downloadedPaths })).map(toThreadListMessage)
@@ -2563,7 +3234,7 @@ async function sendMessage(input) {
   const target = parseMsgTarget(String(input.targetInput));
   if (target.kind === "url") {
     const { ref } = target;
-    warnIfTruncated(ref);
+    warnOnTruncatedSlackUrl(ref);
     await input.ctx.withAutoRefresh({
       workspaceUrl: ref.workspace_url,
       work: async () => {
@@ -2598,6 +3269,70 @@ async function sendMessage(input) {
   });
   return { ok: true };
 }
+async function editMessage(input) {
+  const target = parseMsgTarget(String(input.targetInput));
+  const workspaceUrl = input.ctx.effectiveWorkspaceUrl(input.options.workspace);
+  await input.ctx.withAutoRefresh({
+    workspaceUrl: target.kind === "url" ? target.ref.workspace_url : workspaceUrl,
+    work: async () => {
+      if (target.kind === "url") {
+        const { ref } = target;
+        warnOnTruncatedSlackUrl(ref);
+        const { client: client2 } = await input.ctx.getClientForWorkspace(ref.workspace_url);
+        await client2.api("chat.update", {
+          channel: ref.channel_id,
+          ts: ref.message_ts,
+          text: input.text
+        });
+        return;
+      }
+      const ts = requireMessageTs(input.options.ts);
+      await input.ctx.assertWorkspaceSpecifiedForChannelNames({
+        workspaceUrl,
+        channels: [target.channel]
+      });
+      const { client } = await input.ctx.getClientForWorkspace(workspaceUrl);
+      const channelId = await resolveChannelId(client, target.channel);
+      await client.api("chat.update", {
+        channel: channelId,
+        ts,
+        text: input.text
+      });
+    }
+  });
+  return { ok: true };
+}
+async function deleteMessage(input) {
+  const target = parseMsgTarget(String(input.targetInput));
+  const workspaceUrl = input.ctx.effectiveWorkspaceUrl(input.options.workspace);
+  await input.ctx.withAutoRefresh({
+    workspaceUrl: target.kind === "url" ? target.ref.workspace_url : workspaceUrl,
+    work: async () => {
+      if (target.kind === "url") {
+        const { ref } = target;
+        warnOnTruncatedSlackUrl(ref);
+        const { client: client2 } = await input.ctx.getClientForWorkspace(ref.workspace_url);
+        await client2.api("chat.delete", {
+          channel: ref.channel_id,
+          ts: ref.message_ts
+        });
+        return;
+      }
+      const ts = requireMessageTs(input.options.ts);
+      await input.ctx.assertWorkspaceSpecifiedForChannelNames({
+        workspaceUrl,
+        channels: [target.channel]
+      });
+      const { client } = await input.ctx.getClientForWorkspace(workspaceUrl);
+      const channelId = await resolveChannelId(client, target.channel);
+      await client.api("chat.delete", {
+        channel: channelId,
+        ts
+      });
+    }
+  });
+  return { ok: true };
+}
 async function reactOnTarget(input) {
   const target = parseMsgTarget(input.targetInput);
   const workspaceUrl = input.ctx.effectiveWorkspaceUrl(input.options?.workspace);
@@ -2606,7 +3341,7 @@ async function reactOnTarget(input) {
     work: async () => {
       if (target.kind === "url") {
         const { ref } = target;
-        warnIfTruncated(ref);
+        warnOnTruncatedSlackUrl(ref);
         const { client: client2 } = await input.ctx.getClientForWorkspace(ref.workspace_url);
         const name2 = normalizeSlackReactionName(input.emoji);
         await client2.api(`reactions.${input.action}`, {
@@ -2616,10 +3351,7 @@ async function reactOnTarget(input) {
         });
         return;
       }
-      const ts = input.options?.ts?.trim();
-      if (!ts) {
-        throw new Error('When targeting a channel, you must pass --ts "<seconds>.<micros>"');
-      }
+      const ts = requireMessageTs(input.options?.ts);
       await input.ctx.assertWorkspaceSpecifiedForChannelNames({
         workspaceUrl,
         channels: [target.channel]
@@ -2638,9 +3370,12 @@ async function reactOnTarget(input) {
 }
 
 // src/cli/message-command.ts
+function collectOptionValue(value, previous = []) {
+  return [...previous, value];
+}
 function registerMessageCommand(input) {
   const messageCmd = input.program.command("message").description("Read/write Slack messages (token-efficient JSON)");
-  messageCmd.command("get", { isDefault: true }).description("Fetch a single Slack message (with thread summary if any)").argument("<target>", "Slack message URL, #channel, or channel ID").option("--workspace <url>", "Workspace URL (needed when using #channel/channel id and you have multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").option("--thread-ts <ts>", "Thread root ts hint (useful for thread permalinks)").option("--max-body-chars <n>", "Max content characters to include (default 8000, -1 for unlimited)", "8000").option("--include-reactions", "Include reactions + reacting users").action(async (...args) => {
+  messageCmd.command("get", { isDefault: true }).description("Fetch a single Slack message (with thread summary if any)").argument("<target>", "Slack message URL, #channel, or channel ID").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").option("--thread-ts <ts>", "Thread root ts hint (useful for thread permalinks)").option("--max-body-chars <n>", "Max content characters to include (default 8000, -1 for unlimited)", "8000").option("--include-reactions", "Include reactions + reacting users").action(async (...args) => {
     const [targetInput, options] = args;
     try {
       const payload = await handleMessageGet({ ctx: input.ctx, targetInput, options });
@@ -2650,7 +3385,7 @@ function registerMessageCommand(input) {
       process.exitCode = 1;
     }
   });
-  messageCmd.command("list").description("Fetch the full thread for a Slack message URL").argument("<target>", "Slack message URL, #channel, or channel ID").option("--workspace <url>", "Workspace URL (needed when using #channel/channel id and you have multiple workspaces)").option("--thread-ts <ts>", "Thread root ts (required when using #channel/channel id unless you pass --ts)").option("--ts <ts>", "Message ts (optional: resolve message to its thread)").option("--max-body-chars <n>", "Max content characters to include (default 8000, -1 for unlimited)", "8000").option("--include-reactions", "Include reactions + reacting users").action(async (...args) => {
+  messageCmd.command("list").description("List recent channel messages, or fetch a full thread").argument("<target>", "Slack message URL, #channel, or channel ID").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--thread-ts <ts>", "Thread root ts (lists thread replies instead of channel history)").option("--ts <ts>", "Message ts (resolve message to its thread)").option("--limit <n>", "Max messages to return for channel history (default 25, max 200)").option("--oldest <ts>", "Only messages after this ts (channel history mode)").option("--latest <ts>", "Only messages before this ts (channel history mode)").option("--with-reaction <emoji>", "Only include messages with this reaction (repeatable; channel history mode; requires --oldest)", collectOptionValue, []).option("--without-reaction <emoji>", "Only include messages without this reaction (repeatable; channel history mode; requires --oldest)", collectOptionValue, []).option("--max-body-chars <n>", "Max content characters to include (default 8000, -1 for unlimited)", "8000").option("--include-reactions", "Include reactions + reacting users").action(async (...args) => {
     const [targetInput, options] = args;
     try {
       const payload = await handleMessageList({ ctx: input.ctx, targetInput, options });
@@ -2660,7 +3395,36 @@ function registerMessageCommand(input) {
       process.exitCode = 1;
     }
   });
-  messageCmd.command("send").description("Send a message (optionally into a thread)").argument("<target>", "Slack message URL, #name/name, or channel id").argument("<text>", "Message text to post").option("--workspace <url>", "Workspace URL (needed when using #channel/channel id and you have multiple workspaces)").option("--thread-ts <ts>", "Thread root ts to post into (optional)").action(async (...args) => {
+  messageCmd.command("edit").description("Edit a message").argument("<target>", "Slack message URL, #channel, or channel ID").argument("<text>", "New message text").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
+    const [targetInput, text, options] = args;
+    try {
+      const payload = await editMessage({
+        ctx: input.ctx,
+        targetInput,
+        text,
+        options
+      });
+      console.log(JSON.stringify(payload, null, 2));
+    } catch (err) {
+      console.error(input.ctx.errorMessage(err));
+      process.exitCode = 1;
+    }
+  });
+  messageCmd.command("delete").description("Delete a message").argument("<target>", "Slack message URL, #channel, or channel ID").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
+    const [targetInput, options] = args;
+    try {
+      const payload = await deleteMessage({
+        ctx: input.ctx,
+        targetInput,
+        options
+      });
+      console.log(JSON.stringify(payload, null, 2));
+    } catch (err) {
+      console.error(input.ctx.errorMessage(err));
+      process.exitCode = 1;
+    }
+  });
+  messageCmd.command("send").description("Send a message (optionally into a thread)").argument("<target>", "Slack message URL, #name/name, or channel id").argument("<text>", "Message text to post").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--thread-ts <ts>", "Thread root ts to post into (optional)").action(async (...args) => {
     const [targetInput, text, options] = args;
     try {
       const payload = await sendMessage({
@@ -2676,7 +3440,7 @@ function registerMessageCommand(input) {
     }
   });
   const reactCmd = messageCmd.command("react").description("Add or remove reactions");
-  reactCmd.command("add").description("Add a reaction to a message").argument("<target>", "Slack message URL, #channel, or channel ID").argument("<emoji>", "Emoji to react with (:rocket:, rocket, or \uD83D\uDE80)").option("--workspace <url>", "Workspace URL (needed when using #channel/channel id and you have multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
+  reactCmd.command("add").description("Add a reaction to a message").argument("<target>", "Slack message URL, #channel, or channel ID").argument("<emoji>", "Emoji to react with (:rocket:, rocket, or \uD83D\uDE80)").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
     const [targetInput, emoji2, options] = args;
     try {
       const payload = await reactOnTarget({
@@ -2692,7 +3456,7 @@ function registerMessageCommand(input) {
       process.exitCode = 1;
     }
   });
-  reactCmd.command("remove").description("Remove a reaction from a message").argument("<target>", "Slack message URL, #channel, or channel ID").argument("<emoji>", "Emoji to remove (:rocket:, rocket, or \uD83D\uDE80)").option("--workspace <url>", "Workspace URL (needed when using #channel/channel id and you have multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
+  reactCmd.command("remove").description("Remove a reaction from a message").argument("<target>", "Slack message URL, #channel, or channel ID").argument("<emoji>", "Emoji to remove (:rocket:, rocket, or \uD83D\uDE80)").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--ts <ts>", "Message ts (required when using #channel/channel id)").action(async (...args) => {
     const [targetInput, emoji2, options] = args;
     try {
       const payload = await reactOnTarget({
@@ -2710,20 +3474,6 @@ function registerMessageCommand(input) {
   });
 }
 
-// src/slack/search-guards.ts
-function isRecord10(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function asArray4(value) {
-  return Array.isArray(value) ? value : [];
-}
-function getString5(value) {
-  return typeof value === "string" ? value : undefined;
-}
-function getNumber3(value) {
-  return typeof value === "number" ? value : undefined;
-}
-
 // src/slack/search-query.ts
 async function buildSlackSearchQuery(client, input) {
   const parts = [];
@@ -2776,8 +3526,8 @@ async function userTokenForSearch(client, user) {
   if (/^U[A-Z0-9]{8,}$/.test(trimmed)) {
     try {
       const info = await client.api("users.info", { user: trimmed });
-      const infoUser = isRecord10(info) ? info.user : null;
-      const name = isRecord10(infoUser) ? (getString5(infoUser.name) ?? "").trim() : "";
+      const infoUser = isRecord5(info) ? info.user : null;
+      const name = isRecord5(infoUser) ? (getString(infoUser.name) ?? "").trim() : "";
       return name ? `from:@${name}` : null;
     } catch {
       return null;
@@ -2798,8 +3548,8 @@ async function channelTokenForSearch(client, channel) {
     const info = await client.api("conversations.info", {
       channel: normalized.value
     });
-    const channelInfo = isRecord10(info) ? info.channel : null;
-    const name = isRecord10(channelInfo) ? (getString5(channelInfo.name) ?? "").trim() : "";
+    const channelInfo = isRecord5(info) ? info.channel : null;
+    const name = isRecord5(channelInfo) ? (getString(channelInfo.name) ?? "").trim() : "";
     if (name) {
       return `in:#${name}`;
     }
@@ -2818,19 +3568,19 @@ async function resolveUserId(client, input) {
   let cursor;
   for (;; ) {
     const resp = await client.api("users.list", { limit: 200, cursor });
-    const members = isRecord10(resp) ? asArray4(resp.members).filter(isRecord10) : [];
+    const members = isRecord5(resp) ? asArray(resp.members).filter(isRecord5) : [];
     const found = members.find((m) => {
-      const mName = getString5(m.name);
-      const profile = isRecord10(m.profile) ? m.profile : null;
-      const display = profile ? getString5(profile.display_name) : undefined;
+      const mName = getString(m.name);
+      const profile = isRecord5(m.profile) ? m.profile : null;
+      const display = profile ? getString(profile.display_name) : undefined;
       return mName === name || display === name;
     });
-    const foundId = found ? getString5(found.id) : undefined;
+    const foundId = found ? getString(found.id) : undefined;
     if (foundId) {
       return foundId;
     }
-    const meta = isRecord10(resp) ? resp.response_metadata : null;
-    const next = isRecord10(meta) ? getString5(meta.next_cursor) : undefined;
+    const meta = isRecord5(resp) ? resp.response_metadata : null;
+    const next = isRecord5(meta) ? getString(meta.next_cursor) : undefined;
     if (!next) {
       break;
     }
@@ -2854,11 +3604,11 @@ async function searchMessagesRaw(client, input) {
       sort: "timestamp",
       sort_dir: "desc"
     });
-    const messages = isRecord10(resp) ? resp.messages : null;
-    const matches = isRecord10(messages) ? asArray4(messages.matches).filter(isRecord10) : [];
+    const messages = isRecord5(resp) ? resp.messages : null;
+    const matches = isRecord5(messages) ? asArray(messages.matches).filter(isRecord5) : [];
     out.push(...matches);
-    const paging = isRecord10(messages) ? messages.paging ?? messages.pagination : null;
-    const totalPages = Number(isRecord10(paging) ? paging.pages ?? 1 : 1);
+    const paging = isRecord5(messages) ? messages.paging ?? messages.pagination : null;
+    const totalPages = Number(isRecord5(paging) ? paging.pages ?? 1 : 1);
     if (Number.isFinite(totalPages) && totalPages > 0) {
       pages = totalPages;
     }
@@ -2889,11 +3639,11 @@ async function searchFilesRaw(client, input) {
       sort: "timestamp",
       sort_dir: "desc"
     });
-    const files = isRecord10(resp) ? resp.files : null;
-    const matches = isRecord10(files) ? asArray4(files.matches).filter(isRecord10) : [];
+    const files = isRecord5(resp) ? resp.files : null;
+    const matches = isRecord5(files) ? asArray(files.matches).filter(isRecord5) : [];
     out.push(...matches);
-    const paging = isRecord10(files) ? files.paging ?? files.pagination : null;
-    const totalPages = Number(isRecord10(paging) ? paging.pages ?? 1 : 1);
+    const paging = isRecord5(files) ? files.paging ?? files.pagination : null;
+    const totalPages = Number(isRecord5(paging) ? paging.pages ?? 1 : 1);
     if (Number.isFinite(totalPages) && totalPages > 0) {
       pages = totalPages;
     }
@@ -2912,7 +3662,7 @@ async function searchFilesRaw(client, input) {
 }
 
 // src/slack/search-file-ext.ts
-function inferExt2(file) {
+function inferExt(file) {
   const mt = (file.mimetype || "").toLowerCase();
   const ft = (file.filetype || "").toLowerCase();
   if (mt === "image/png" || ft === "png") {
@@ -2950,22 +3700,22 @@ async function searchFilesViaSearchApi(client, input) {
   const downloadsDir = await ensureDownloadsDir();
   const out = [];
   for (const f of matches) {
-    const mode = getString5(f.mode);
-    const mimetype = getString5(f.mimetype);
+    const mode = getString(f.mode);
+    const mimetype = getString(f.mimetype);
     if (!passesFileContentTypeFilter({ mode, mimetype }, input.contentType)) {
       continue;
     }
-    const url = getString5(f.url_private_download) ?? getString5(f.url_private);
+    const url = getString(f.url_private_download) ?? getString(f.url_private);
     if (!url) {
       continue;
     }
-    const ext = inferExt2({
+    const ext = inferExt({
       mimetype,
-      filetype: getString5(f.filetype),
-      name: getString5(f.name),
-      title: getString5(f.title)
+      filetype: getString(f.filetype),
+      name: getString(f.name),
+      title: getString(f.title)
     });
-    const id = getString5(f.id);
+    const id = getString(f.id);
     if (!id) {
       continue;
     }
@@ -2975,7 +3725,7 @@ async function searchFilesViaSearchApi(client, input) {
       destDir: downloadsDir,
       preferredName: `${id}${ext ? `.${ext}` : ""}`
     });
-    const title = (getString5(f.title) || getString5(f.name) || "").trim();
+    const title = (getString(f.title) || getString(f.name) || "").trim();
     out.push({
       title: title || undefined,
       mimetype,
@@ -3007,31 +3757,31 @@ async function searchFilesInChannelsFallback(client, input) {
         count: 100,
         page
       });
-      const files = isRecord10(resp) ? asArray4(resp.files).filter(isRecord10) : [];
+      const files = isRecord5(resp) ? asArray(resp.files).filter(isRecord5) : [];
       if (files.length === 0) {
         break;
       }
       for (const f of files) {
-        const mode = getString5(f.mode);
-        const mimetype = getString5(f.mimetype);
+        const mode = getString(f.mode);
+        const mimetype = getString(f.mimetype);
         if (!passesFileContentTypeFilter({ mode, mimetype }, input.contentType)) {
           continue;
         }
-        const title = (getString5(f.title) || getString5(f.name) || "").trim();
+        const title = (getString(f.title) || getString(f.name) || "").trim();
         if (queryLower && !title.toLowerCase().includes(queryLower)) {
           continue;
         }
-        const url = getString5(f.url_private_download) ?? getString5(f.url_private);
+        const url = getString(f.url_private_download) ?? getString(f.url_private);
         if (!url) {
           continue;
         }
-        const ext = inferExt2({
+        const ext = inferExt({
           mimetype,
-          filetype: getString5(f.filetype),
-          name: getString5(f.name),
-          title: getString5(f.title)
+          filetype: getString(f.filetype),
+          name: getString(f.name),
+          title: getString(f.title)
         });
-        const id = getString5(f.id);
+        const id = getString(f.id);
         if (!id) {
           continue;
         }
@@ -3051,8 +3801,8 @@ async function searchFilesInChannelsFallback(client, input) {
           return out;
         }
       }
-      const paging = isRecord10(resp) ? isRecord10(resp.paging) ? resp.paging : resp.pagination : null;
-      const pages = Number(isRecord10(paging) ? paging.pages ?? paging.page_count : undefined);
+      const paging = isRecord5(resp) ? isRecord5(resp.paging) ? resp.paging : resp.pagination : null;
+      const pages = Number(isRecord5(paging) ? paging.pages ?? paging.page_count : undefined);
       if (Number.isFinite(pages) && page >= pages) {
         break;
       }
@@ -3088,19 +3838,19 @@ async function searchMessagesViaSearchApi(client, input) {
   }
   const messageRefs = [];
   for (const m of matches) {
-    const ts = getString5(m.ts)?.trim() ?? "";
+    const ts = getString(m.ts)?.trim() ?? "";
     if (!ts) {
       continue;
     }
-    const channelValue = isRecord10(m.channel) ? m.channel : null;
-    const channelId = channelValue && getString5(channelValue.id) ? getString5(channelValue.id) : channelValue && getString5(channelValue.name) ? await resolveChannelId(client, `#${getString5(channelValue.name)}`) : "";
+    const channelValue = isRecord5(m.channel) ? m.channel : null;
+    const channelId = channelValue && getString(channelValue.id) ? getString(channelValue.id) : channelValue && getString(channelValue.name) ? await resolveChannelId(client, `#${getString(channelValue.name)}`) : "";
     if (!channelId) {
       continue;
     }
     messageRefs.push({
       channel_id: channelId,
       message_ts: ts,
-      permalink: getString5(m.permalink)
+      permalink: getString(m.permalink)
     });
     if (messageRefs.length >= input.limit) {
       break;
@@ -3170,7 +3920,7 @@ async function searchMessagesInChannelsFallback(client, input) {
         limit: 200,
         latest: cursorLatest
       });
-      const messages = isRecord10(resp) ? asArray4(resp.messages).filter(isRecord10) : [];
+      const messages = isRecord5(resp) ? asArray(resp.messages).filter(isRecord5) : [];
       if (messages.length === 0) {
         break;
       }
@@ -3217,7 +3967,7 @@ async function searchMessagesInChannelsFallback(client, input) {
         break;
       }
       const last = messages.at(-1);
-      cursorLatest = last ? getString5(last.ts) : undefined;
+      cursorLatest = last ? getString(last.ts) : undefined;
       if (!cursorLatest) {
         break;
       }
@@ -3260,7 +4010,7 @@ async function downloadFilesForMessage(input) {
     if (!url) {
       continue;
     }
-    const ext = inferExt2(f);
+    const ext = inferExt(f);
     const path = await downloadSlackFile({
       auth: input.auth,
       url,
@@ -3271,15 +4021,15 @@ async function downloadFilesForMessage(input) {
   }
 }
 function messageSummaryFromApiMessage(channelId, msg) {
-  const text = getString5(msg.text) ?? "";
-  const files = asArray4(msg.files).map((f) => toSlackFileSummary2(f)).filter((f) => f !== null);
+  const text = getString(msg.text) ?? "";
+  const files = asArray(msg.files).map((f) => toSlackFileSummary2(f)).filter((f) => f !== null);
   return {
     channel_id: channelId,
-    ts: getString5(msg.ts) ?? "",
-    thread_ts: getString5(msg.thread_ts),
-    reply_count: getNumber3(msg.reply_count),
-    user: getString5(msg.user),
-    bot_id: getString5(msg.bot_id),
+    ts: getString(msg.ts) ?? "",
+    thread_ts: getString(msg.thread_ts),
+    reply_count: getNumber(msg.reply_count),
+    user: getString(msg.user),
+    bot_id: getString(msg.bot_id),
     text,
     markdown: slackMrkdwnToMarkdown(text),
     blocks: Array.isArray(msg.blocks) ? msg.blocks : undefined,
@@ -3289,24 +4039,24 @@ function messageSummaryFromApiMessage(channelId, msg) {
   };
 }
 function toSlackFileSummary2(value) {
-  if (!isRecord10(value)) {
+  if (!isRecord5(value)) {
     return null;
   }
-  const id = getString5(value.id);
+  const id = getString(value.id);
   if (!id) {
     return null;
   }
   return {
     id,
-    name: getString5(value.name),
-    title: getString5(value.title),
-    mimetype: getString5(value.mimetype),
-    filetype: getString5(value.filetype),
-    mode: getString5(value.mode),
-    permalink: getString5(value.permalink),
-    url_private: getString5(value.url_private),
-    url_private_download: getString5(value.url_private_download),
-    size: getNumber3(value.size)
+    name: getString(value.name),
+    title: getString(value.title),
+    mimetype: getString(value.mimetype),
+    filetype: getString(value.filetype),
+    mode: getString(value.mode),
+    permalink: getString(value.permalink),
+    url_private: getString(value.url_private),
+    url_private_download: getString(value.url_private_download),
+    size: getNumber(value.size)
   };
 }
 
@@ -3383,7 +4133,7 @@ async function searchSlack(input) {
 
 // src/cli/search-command.ts
 function addSearchOptions(cmd) {
-  return cmd.option("--workspace <url>", "Workspace URL (needed when searching across multiple workspaces)").option("--channel <channel...>", "Channel filter (#name, name, or id). Repeatable.").option("--user <user>", "User filter (@name, name, or user id U...)").option("--after <date>", "Only results after YYYY-MM-DD").option("--before <date>", "Only results before YYYY-MM-DD").option("--content-type <type>", "Filter content type: any|text|image|snippet|file (default any)").option("--limit <n>", "Max results (default 20)", "20").option("--max-content-chars <n>", "Max message content characters (default 4000, -1 for unlimited)", "4000");
+  return cmd.option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when searching across multiple workspaces)").option("--channel <channel...>", "Channel filter (#name, name, or id). Repeatable.").option("--user <user>", "User filter (@name, name, or user id U...)").option("--after <date>", "Only results after YYYY-MM-DD").option("--before <date>", "Only results before YYYY-MM-DD").option("--content-type <type>", "Filter content type: any|text|image|snippet|file (default any)").option("--limit <n>", "Max results (default 20)", "20").option("--max-content-chars <n>", "Max message content characters (default 4000, -1 for unlimited)", "4000");
 }
 async function runSearch(input) {
   const workspaceUrl = input.ctx.effectiveWorkspaceUrl(input.options.workspace);
@@ -3435,13 +4185,13 @@ function registerSearchCommand(input) {
 
 // src/lib/update.ts
 import { createHash } from "node:crypto";
-import { chmod, copyFile, mkdir as mkdir5, readFile as readFile4, rename, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
+import { chmod, copyFile, mkdir as mkdir5, readFile as readFile5, rename, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join10 } from "node:path";
 var REPO = "stablyai/agent-slack";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
 function getCachePath() {
-  return join8(getAppDir(), "update-check.json");
+  return join10(getAppDir(), "update-check.json");
 }
 function compareSemver(a, b) {
   const pa = a.replace(/^v/, "").split(".").map(Number);
@@ -3498,24 +4248,24 @@ async function checkForUpdate(force = false) {
   };
 }
 function detectPlatformAsset() {
-  const platform5 = process.platform === "win32" ? "windows" : process.platform;
+  const platform6 = process.platform === "win32" ? "windows" : process.platform;
   const archMap = { x64: "x64", arm64: "arm64" };
   const arch = archMap[process.arch] ?? process.arch;
-  const ext = platform5 === "windows" ? ".exe" : "";
-  return `agent-slack-${platform5}-${arch}${ext}`;
+  const ext = platform6 === "windows" ? ".exe" : "";
+  return `agent-slack-${platform6}-${arch}${ext}`;
 }
 async function sha256(filePath) {
-  const data = await readFile4(filePath);
+  const data = await readFile5(filePath);
   return createHash("sha256").update(data).digest("hex");
 }
 async function performUpdate(latest) {
   const asset = detectPlatformAsset();
   const tag = `v${latest}`;
   const baseUrl = `https://github.com/${REPO}/releases/download/${tag}`;
-  const tmp = join8(tmpdir2(), `agent-slack-update-${Date.now()}`);
+  const tmp = join10(tmpdir2(), `agent-slack-update-${Date.now()}`);
   await mkdir5(tmp, { recursive: true });
-  const binTmp = join8(tmp, asset);
-  const sumsTmp = join8(tmp, "checksums-sha256.txt");
+  const binTmp = join10(tmp, asset);
+  const sumsTmp = join10(tmp, "checksums-sha256.txt");
   try {
     const [binResp, sumsResp] = await Promise.all([
       fetch(`${baseUrl}/${asset}`, { signal: AbortSignal.timeout(120000) }),
@@ -3527,9 +4277,9 @@ async function performUpdate(latest) {
     if (!sumsResp.ok) {
       return { success: false, message: `Failed to download checksums: HTTP ${sumsResp.status}` };
     }
-    await writeFile3(binTmp, Buffer.from(await binResp.arrayBuffer()));
+    await writeFile4(binTmp, Buffer.from(await binResp.arrayBuffer()));
     const sumsText = await sumsResp.text();
-    await writeFile3(sumsTmp, sumsText);
+    await writeFile4(sumsTmp, sumsText);
     const expected = sumsText.split(`
 `).map((line) => line.trim().split(/\s+/)).find((parts) => parts[1] === asset)?.[0];
     if (!expected) {
@@ -3623,9 +4373,9 @@ async function listUsers(client, options) {
       limit: pageSize,
       cursor
     });
-    const members = asArray5(resp.members).filter(isRecord11);
+    const members = asArray(resp.members).filter(isRecord5);
     for (const m of members) {
-      const id = getString6(m.id);
+      const id = getString(m.id);
       if (!id) {
         continue;
       }
@@ -3637,8 +4387,8 @@ async function listUsers(client, options) {
         break;
       }
     }
-    const meta = isRecord11(resp.response_metadata) ? resp.response_metadata : null;
-    const next = meta ? getString6(meta.next_cursor) : undefined;
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+    const next = meta ? getString(meta.next_cursor) : undefined;
     if (!next) {
       return { users: out };
     }
@@ -3656,8 +4406,8 @@ async function getUser(client, input) {
     throw new Error(`Could not resolve user: ${input}`);
   }
   const resp = await client.api("users.info", { user: userId });
-  const u = isRecord11(resp.user) ? resp.user : null;
-  if (!u || !getString6(u.id)) {
+  const u = isRecord5(resp.user) ? resp.user : null;
+  if (!u || !getString(u.id)) {
     throw new Error("users.info returned no user");
   }
   return toCompactUser(u);
@@ -3674,16 +4424,16 @@ async function resolveUserId2(client, input) {
   let cursor;
   for (;; ) {
     const resp = await client.api("users.list", { limit: 200, cursor });
-    const members = asArray5(resp.members).filter(isRecord11);
-    const found = members.find((m) => getString6(m.name) === handle);
+    const members = asArray(resp.members).filter(isRecord5);
+    const found = members.find((m) => getString(m.name) === handle);
     if (found) {
-      const id = getString6(found.id);
+      const id = getString(found.id);
       if (id) {
         return id;
       }
     }
-    const meta = isRecord11(resp.response_metadata) ? resp.response_metadata : null;
-    const next = meta ? getString6(meta.next_cursor) : undefined;
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+    const next = meta ? getString(meta.next_cursor) : undefined;
     if (!next) {
       break;
     }
@@ -3692,33 +4442,24 @@ async function resolveUserId2(client, input) {
   return null;
 }
 function toCompactUser(u) {
-  const profile = isRecord11(u.profile) ? u.profile : {};
+  const profile = isRecord5(u.profile) ? u.profile : {};
   return {
-    id: getString6(u.id) ?? "",
-    name: getString6(u.name) ?? undefined,
-    real_name: getString6(u.real_name) ?? undefined,
-    display_name: getString6(profile.display_name) ?? undefined,
-    email: getString6(profile.email) ?? undefined,
-    title: getString6(profile.title) ?? undefined,
-    tz: getString6(u.tz) ?? undefined,
+    id: getString(u.id) ?? "",
+    name: getString(u.name) ?? undefined,
+    real_name: getString(u.real_name) ?? undefined,
+    display_name: getString(profile.display_name) ?? undefined,
+    email: getString(profile.email) ?? undefined,
+    title: getString(profile.title) ?? undefined,
+    tz: getString(u.tz) ?? undefined,
     is_bot: typeof u.is_bot === "boolean" ? u.is_bot : undefined,
     deleted: typeof u.deleted === "boolean" ? u.deleted : undefined
   };
 }
-function isRecord11(value) {
-  return typeof value === "object" && value !== null;
-}
-function asArray5(value) {
-  return Array.isArray(value) ? value : [];
-}
-function getString6(value) {
-  return typeof value === "string" ? value : undefined;
-}
 
 // src/cli/user-command.ts
 function registerUserCommand(input) {
   const userCmd = input.program.command("user").description("Workspace user directory");
-  userCmd.command("list").description("List users in the workspace").option("--workspace <url>", "Workspace URL (required if you have multiple workspaces)").option("--limit <n>", "Max users (default 200)", "200").option("--cursor <cursor>", "Pagination cursor").option("--include-bots", "Include bot users").action(async (...args) => {
+  userCmd.command("list").description("List users in the workspace").option("--workspace <url>", "Workspace selector (full URL or unique substring; required if you have multiple workspaces)").option("--limit <n>", "Max users (default 200)", "200").option("--cursor <cursor>", "Pagination cursor").option("--include-bots", "Include bot users").action(async (...args) => {
     const [options] = args;
     try {
       const workspaceUrl = input.ctx.effectiveWorkspaceUrl(options.workspace);
@@ -3740,7 +4481,7 @@ function registerUserCommand(input) {
       process.exitCode = 1;
     }
   });
-  userCmd.command("get").description("Get a single user by id (U...) or handle (@name)").argument("<user>", "User id (U...) or @handle/handle").option("--workspace <url>", "Workspace URL (required if you have multiple workspaces)").action(async (...args) => {
+  userCmd.command("get").description("Get a single user by id (U...) or handle (@name)").argument("<user>", "User id (U...) or @handle/handle").option("--workspace <url>", "Workspace selector (full URL or unique substring; required if you have multiple workspaces)").action(async (...args) => {
     const [user, options] = args;
     try {
       const workspaceUrl = input.ctx.effectiveWorkspaceUrl(options.workspace);
@@ -3778,5 +4519,5 @@ if (subcommand && subcommand !== "update") {
   backgroundUpdateCheck();
 }
 
-//# debugId=FD1EE5153F86A96C64756E2164756E21
+//# debugId=6879354D2CF2337D64756E2164756E21
 //# sourceMappingURL=index.js.map