agent-slack 0.4.4 → 0.5.1

package/dist/index.js

@@ -48,17 +48,190 @@ function getUserAgent() {
 }
 
 // src/auth/brave.ts
-import { execSync, execFileSync } from "node:child_process";
-import { existsSync as existsSync2 } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { existsSync as existsSync3 } from "node:fs";
 import { pbkdf2Sync, createDecipheriv } from "node:crypto";
+import { homedir as homedir2, platform as platform2 } from "node:os";
+import { join as join3 } from "node:path";
+
+// src/auth/firefox-profile.ts
+import { copyFile, mkdtemp, readdir, readFile, rm } from "node:fs/promises";
+import { existsSync as existsSync2 } from "node:fs";
+import { tmpdir } from "node:os";
 import { homedir, platform } from "node:os";
 import { join as join2 } from "node:path";
-var IS_MACOS = platform() === "darwin";
-function escapeOsaScript(script) {
-  return script.replace(/'/g, `'"'"'`);
+var PLATFORM = platform();
+var IS_MACOS = PLATFORM === "darwin";
+var IS_LINUX = PLATFORM === "linux";
+function isMissingBunSqliteModule(error) {
+  if (!error || typeof error !== "object") {
+    return false;
+  }
+  const err = error;
+  const code = typeof err.code === "string" ? err.code : "";
+  const message = typeof err.message === "string" ? err.message : "";
+  if (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_UNSUPPORTED_ESM_URL_SCHEME") {
+    return true;
+  }
+  if (!message.includes("bun:sqlite")) {
+    return false;
+  }
+  return message.includes("Cannot find module") || message.includes("Unknown builtin module") || message.includes("unsupported URL scheme") || message.includes("Only URLs with a scheme in");
+}
+async function queryReadonlySqlite(dbPath, sql) {
+  try {
+    const { Database } = await import("bun:sqlite");
+    const db = new Database(dbPath, { readonly: true });
+    try {
+      return db.query(sql).all();
+    } finally {
+      db.close();
+    }
+  } catch (error) {
+    if (!isMissingBunSqliteModule(error)) {
+      throw error;
+    }
+    const { DatabaseSync } = await import("node:sqlite");
+    const db = new DatabaseSync(dbPath, { readOnly: true });
+    try {
+      return db.prepare(sql).all();
+    } finally {
+      db.close();
+    }
+  }
+}
+function getFirefoxBaseDir() {
+  if (IS_LINUX) {
+    return join2(homedir(), ".mozilla", "firefox");
+  }
+  if (IS_MACOS) {
+    return join2(homedir(), "Library", "Application Support", "Firefox");
+  }
+  throw new Error(`Firefox extraction is not supported on ${PLATFORM}.`);
+}
+function parseProfilesIni(raw, baseDir) {
+  const lines = raw.split(/\r?\n/);
+  const profiles = [];
+  const installDefaults = new Set;
+  let section = "";
+  let current = null;
+  for (const lineRaw of lines) {
+    const line = lineRaw.trim();
+    if (!line || line.startsWith(";") || line.startsWith("#")) {
+      continue;
+    }
+    if (line.startsWith("[") && line.endsWith("]")) {
+      if (current) {
+        profiles.push(current);
+        current = null;
+      }
+      section = line.slice(1, -1);
+      if (section.startsWith("Profile")) {
+        current = { isRelative: true, isDefault: false };
+      }
+      continue;
+    }
+    const idx = line.indexOf("=");
+    if (idx === -1) {
+      continue;
+    }
+    const key = line.slice(0, idx).trim();
+    const value = line.slice(idx + 1).trim();
+    if (section.startsWith("Profile") && current) {
+      if (key === "Name") {
+        current.name = value;
+      } else if (key === "Path") {
+        current.path = value;
+      } else if (key === "IsRelative") {
+        current.isRelative = value !== "0";
+      } else if (key === "Default") {
+        current.isDefault = value === "1";
+      }
+      continue;
+    }
+    if (section.startsWith("Install") && key === "Default" && value) {
+      installDefaults.add(value);
+    }
+  }
+  if (current) {
+    profiles.push(current);
+  }
+  return profiles.filter((p) => Boolean(p.path)).map((p) => {
+    const profilePath = p.isRelative ? join2(baseDir, p.path) : p.path;
+    return {
+      name: p.name,
+      path: profilePath,
+      isDefault: p.isDefault || installDefaults.has(p.path)
+    };
+  });
+}
+async function listProfileCandidates() {
+  const baseDir = getFirefoxBaseDir();
+  const iniPath = join2(baseDir, "profiles.ini");
+  const candidates = [];
+  if (existsSync2(iniPath)) {
+    const raw = await readFile(iniPath, "utf8");
+    candidates.push(...parseProfilesIni(raw, baseDir));
+  }
+  const dirName = IS_MACOS ? "Profiles" : baseDir;
+  if (existsSync2(dirName)) {
+    const entries = await readdir(dirName, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) {
+        continue;
+      }
+      const profilePath = join2(dirName, entry.name);
+      if (!candidates.some((c) => c.path === profilePath)) {
+        candidates.push({ path: profilePath, isDefault: false });
+      }
+    }
+  }
+  const existing = candidates.filter((c) => existsSync2(c.path));
+  existing.sort((a, b) => Number(b.isDefault) - Number(a.isDefault));
+  return existing;
+}
+function pickCandidatesByProfile(candidates, profile) {
+  const selector = profile?.trim();
+  if (!selector) {
+    return candidates;
+  }
+  const normalized = selector.toLowerCase();
+  const matched = candidates.filter((c) => {
+    const name = c.name?.toLowerCase() ?? "";
+    const base = c.path.split("/").pop()?.toLowerCase() ?? "";
+    const full = c.path.toLowerCase();
+    return name === normalized || base === normalized || full.includes(normalized);
+  });
+  return matched;
+}
+async function copySqliteForRead(dbPath) {
+  const tmpPath = await mkdtemp(join2(tmpdir(), "agent-slack-firefox-"));
+  const base = dbPath.split("/").pop() || "db.sqlite";
+  const copyPath = join2(tmpPath, base);
+  await copyFile(dbPath, copyPath);
+  for (const suffix of ["-wal", "-shm"]) {
+    const sidecar = `${dbPath}${suffix}`;
+    if (!existsSync2(sidecar)) {
+      continue;
+    }
+    try {
+      await copyFile(sidecar, `${copyPath}${suffix}`);
+    } catch {}
+  }
+  return {
+    copyPath,
+    cleanup: async () => {
+      try {
+        await rm(tmpPath, { recursive: true, force: true });
+      } catch {}
+    }
+  };
 }
+
+// src/auth/brave.ts
+var IS_MACOS2 = platform2() === "darwin";
 function osascript(script) {
-  return execSync(`osascript -e '${escapeOsaScript(script)}'`, {
+  return execFileSync("osascript", ["-e", script], {
     encoding: "utf8",
     timeout: 7000,
     stdio: ["ignore", "pipe", "pipe"]
@@ -111,44 +284,7 @@ function extractTeamsFromBraveTab() {
   const teamsRecord = isRecord(teamsObj) ? teamsObj : {};
   return Object.values(teamsRecord).map((t) => toBraveTeam(t)).filter((t) => t !== null);
 }
-var BRAVE_COOKIES_DB = join2(homedir(), "Library", "Application Support", "BraveSoftware", "Brave-Browser", "Default", "Cookies");
-function isMissingBunSqliteModule(error) {
-  if (!error || typeof error !== "object") {
-    return false;
-  }
-  const err = error;
-  const code = typeof err.code === "string" ? err.code : "";
-  const message = typeof err.message === "string" ? err.message : "";
-  if (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_UNSUPPORTED_ESM_URL_SCHEME") {
-    return true;
-  }
-  if (!message.includes("bun:sqlite")) {
-    return false;
-  }
-  return message.includes("Cannot find module") || message.includes("Unknown builtin module") || message.includes("unsupported URL scheme") || message.includes("Only URLs with a scheme in");
-}
-async function queryReadonlySqlite(dbPath, sql) {
-  try {
-    const { Database } = await import("bun:sqlite");
-    const db = new Database(dbPath, { readonly: true });
-    try {
-      return db.query(sql).all();
-    } finally {
-      db.close();
-    }
-  } catch (error) {
-    if (!isMissingBunSqliteModule(error)) {
-      throw error;
-    }
-    const { DatabaseSync } = await import("node:sqlite");
-    const db = new DatabaseSync(dbPath, { readOnly: true });
-    try {
-      return db.prepare(sql).all();
-    } finally {
-      db.close();
-    }
-  }
-}
+var BRAVE_COOKIES_DB = join3(homedir2(), "Library", "Application Support", "BraveSoftware", "Brave-Browser", "Default", "Cookies");
 function getSafeStoragePasswords() {
   const services = [
     "Brave Safe Storage",
@@ -201,7 +337,7 @@ function decryptChromiumCookieValue(data, password) {
   }
 }
 async function extractCookieDFromBrave() {
-  if (!existsSync2(BRAVE_COOKIES_DB)) {
+  if (!existsSync3(BRAVE_COOKIES_DB)) {
     throw new Error(`Brave Cookies DB not found: ${BRAVE_COOKIES_DB}`);
   }
   const rows = await queryReadonlySqlite(BRAVE_COOKIES_DB, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
@@ -231,7 +367,7 @@ async function extractCookieDFromBrave() {
   throw new Error("Could not decrypt Slack 'd' cookie from Brave");
 }
 async function extractFromBrave() {
-  if (!IS_MACOS) {
+  if (!IS_MACOS2) {
     return null;
   }
   try {
@@ -250,14 +386,14 @@ async function extractFromBrave() {
 }
 
 // src/auth/chrome.ts
-import { execSync as execSync2 } from "node:child_process";
-import { platform as platform2 } from "node:os";
-var IS_MACOS2 = platform2() === "darwin";
-function escapeOsaScript2(script) {
+import { execSync } from "node:child_process";
+import { platform as platform3 } from "node:os";
+var IS_MACOS3 = platform3() === "darwin";
+function escapeOsaScript(script) {
   return script.replace(/'/g, `'"'"'`);
 }
 function osascript2(script) {
-  return execSync2(`osascript -e '${escapeOsaScript2(script)}'`, {
+  return execSync(`osascript -e '${escapeOsaScript(script)}'`, {
     encoding: "utf8",
     timeout: 7000,
     stdio: ["ignore", "pipe", "pipe"]
@@ -314,7 +450,7 @@ function teamsScript2() {
   `;
 }
 function extractFromChrome() {
-  if (!IS_MACOS2) {
+  if (!IS_MACOS3) {
     return null;
   }
   try {
@@ -376,16 +512,16 @@ function parseSlackCurlCommand(curlInput) {
 }
 
 // src/auth/desktop.ts
-import { cp, mkdir, rm, unlink } from "node:fs/promises";
-import { existsSync as existsSync3 } from "node:fs";
+import { cp, mkdir, rm as rm2, unlink } from "node:fs/promises";
+import { existsSync as existsSync4 } from "node:fs";
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { pbkdf2Sync as pbkdf2Sync2, createDecipheriv as createDecipheriv2 } from "node:crypto";
-import { homedir as homedir2, platform as platform3 } from "node:os";
-import { join as join4 } from "node:path";
+import { homedir as homedir3, platform as platform4 } from "node:os";
+import { join as join5 } from "node:path";
 
 // src/lib/leveldb-reader.ts
-import { readdir, readFile } from "node:fs/promises";
-import { join as join3 } from "node:path";
+import { readdir as readdir2, readFile as readFile2 } from "node:fs/promises";
+import { join as join4 } from "node:path";
 import { snappyUncompress } from "hysnappy";
 var LEVELDB_MAGIC = Buffer.from([87, 251, 128, 139, 36, 117, 71, 219]);
 var COMPRESSION_NONE = 0;
@@ -489,7 +625,7 @@ async function parseSSTable(filePath) {
   const entries = [];
   let data;
   try {
-    data = await readFile(filePath);
+    data = await readFile2(filePath);
   } catch {
     return entries;
   }
@@ -541,7 +677,7 @@ async function parseLogFile(filePath) {
   const entries = [];
   let data;
   try {
-    data = await readFile(filePath);
+    data = await readFile2(filePath);
   } catch {
     return entries;
   }
@@ -621,18 +757,18 @@ async function readChromiumLevelDB(dir) {
   const entries = [];
   let files;
   try {
-    files = await readdir(dir);
+    files = await readdir2(dir);
   } catch {
     return entries;
   }
   const sstFiles = files.filter((f) => f.endsWith(".ldb") || f.endsWith(".sst"));
   for (const file of sstFiles) {
-    const fileEntries = await parseSSTable(join3(dir, file));
+    const fileEntries = await parseSSTable(join4(dir, file));
     entries.push(...fileEntries);
   }
   const logFiles = files.filter((f) => f.endsWith(".log"));
   for (const file of logFiles) {
-    const fileEntries = await parseLogFile(join3(dir, file));
+    const fileEntries = await parseLogFile(join4(dir, file));
     entries.push(...fileEntries);
   }
   return entries;
@@ -680,28 +816,28 @@ async function queryReadonlySqlite2(dbPath, sql) {
     }
   }
 }
-var PLATFORM = platform3();
-var IS_MACOS3 = PLATFORM === "darwin";
-var IS_LINUX = PLATFORM === "linux";
-var SLACK_SUPPORT_DIR_ELECTRON = join4(homedir2(), "Library", "Application Support", "Slack");
-var SLACK_SUPPORT_DIR_APPSTORE = join4(homedir2(), "Library", "Containers", "com.tinyspeck.slackmacgap", "Data", "Library", "Application Support", "Slack");
-var SLACK_SUPPORT_DIR_LINUX = join4(homedir2(), ".config", "Slack");
-var SLACK_SUPPORT_DIR_LINUX_FLATPAK = join4(homedir2(), ".var", "app", "com.slack.Slack", "config", "Slack");
+var PLATFORM2 = platform4();
+var IS_MACOS4 = PLATFORM2 === "darwin";
+var IS_LINUX2 = PLATFORM2 === "linux";
+var SLACK_SUPPORT_DIR_ELECTRON = join5(homedir3(), "Library", "Application Support", "Slack");
+var SLACK_SUPPORT_DIR_APPSTORE = join5(homedir3(), "Library", "Containers", "com.tinyspeck.slackmacgap", "Data", "Library", "Application Support", "Slack");
+var SLACK_SUPPORT_DIR_LINUX = join5(homedir3(), ".config", "Slack");
+var SLACK_SUPPORT_DIR_LINUX_FLATPAK = join5(homedir3(), ".var", "app", "com.slack.Slack", "config", "Slack");
 function getSlackPaths() {
-  const candidates = IS_MACOS3 ? [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE] : IS_LINUX ? [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX] : [];
+  const candidates = IS_MACOS4 ? [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE] : IS_LINUX2 ? [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX] : [];
   if (candidates.length === 0) {
-    throw new Error(`Slack Desktop extraction is not supported on ${PLATFORM}.`);
+    throw new Error(`Slack Desktop extraction is not supported on ${PLATFORM2}.`);
   }
   for (const dir of candidates) {
-    const leveldbDir = join4(dir, "Local Storage", "leveldb");
-    if (existsSync3(leveldbDir)) {
-      const cookiesDbCandidates = [join4(dir, "Network", "Cookies"), join4(dir, "Cookies")];
-      const cookiesDb = cookiesDbCandidates.find((candidate) => existsSync3(candidate)) || cookiesDbCandidates[0];
+    const leveldbDir = join5(dir, "Local Storage", "leveldb");
+    if (existsSync4(leveldbDir)) {
+      const cookiesDbCandidates = [join5(dir, "Network", "Cookies"), join5(dir, "Cookies")];
+      const cookiesDb = cookiesDbCandidates.find((candidate) => existsSync4(candidate)) || cookiesDbCandidates[0];
       return { leveldbDir, cookiesDb };
     }
   }
   throw new Error(`Slack Desktop data not found. Checked:
-  - ${candidates.map((d) => join4(d, "Local Storage", "leveldb")).join(`
+  - ${candidates.map((d) => join5(d, "Local Storage", "leveldb")).join(`
   - `)}`);
 }
 function isRecord3(value) {
@@ -720,11 +856,11 @@ function toDesktopTeam(value) {
   return { url, name, token };
 }
 async function snapshotLevelDb(srcDir) {
-  const base = join4(homedir2(), ".config", "agent-slack", "cache", "leveldb-snapshots");
-  const dest = join4(base, `${Date.now()}`);
+  const base = join5(homedir3(), ".config", "agent-slack", "cache", "leveldb-snapshots");
+  const dest = join5(base, `${Date.now()}`);
   await mkdir(base, { recursive: true });
-  let useNodeCopy = !IS_MACOS3;
-  if (IS_MACOS3) {
+  let useNodeCopy = !IS_MACOS4;
+  if (IS_MACOS4) {
     try {
       execFileSync2("cp", ["-cR", srcDir, dest], {
         stdio: ["ignore", "ignore", "ignore"]
@@ -737,7 +873,7 @@ async function snapshotLevelDb(srcDir) {
     await cp(srcDir, dest, { recursive: true, force: true });
   }
   try {
-    await unlink(join4(dest, "LOCK"));
+    await unlink(join5(dest, "LOCK"));
   } catch {}
   return dest;
 }
@@ -779,7 +915,7 @@ function parseLocalConfig(raw) {
   throw lastErr || new Error("localConfig not parseable");
 }
 async function extractTeamsFromSlackLevelDb(leveldbDir) {
-  if (!existsSync3(leveldbDir)) {
+  if (!existsSync4(leveldbDir)) {
     throw new Error(`Slack LevelDB not found: ${leveldbDir}`);
   }
   const snap = await snapshotLevelDb(leveldbDir);
@@ -816,12 +952,12 @@ async function extractTeamsFromSlackLevelDb(leveldbDir) {
     return teams;
   } finally {
     try {
-      await rm(snap, { recursive: true, force: true });
+      await rm2(snap, { recursive: true, force: true });
     } catch {}
   }
 }
 function getSafeStoragePasswords2(prefix) {
-  if (IS_MACOS3) {
+  if (IS_MACOS4) {
     const services = ["Slack Safe Storage", "Chrome Safe Storage", "Chromium Safe Storage"];
     const passwords = [];
     for (const service of services) {
@@ -839,7 +975,7 @@ function getSafeStoragePasswords2(prefix) {
       return passwords;
     }
   }
-  if (IS_LINUX) {
+  if (IS_LINUX2) {
     const attributes = [
       ["application", "com.slack.Slack"],
       ["application", "Slack"],
@@ -872,7 +1008,7 @@ function decryptChromiumCookieValue2(data, password) {
   }
   const salt = Buffer.from("saltysalt", "utf8");
   const iv = Buffer.alloc(16, " ");
-  const key = pbkdf2Sync2(password, salt, IS_LINUX ? 1 : 1003, 16, "sha1");
+  const key = pbkdf2Sync2(password, salt, IS_LINUX2 ? 1 : 1003, 16, "sha1");
   const decipher = createDecipheriv2("aes-128-cbc", key, iv);
   decipher.setAutoPadding(true);
   const plain = Buffer.concat([decipher.update(data), decipher.final()]);
@@ -897,7 +1033,7 @@ function decryptChromiumCookieValue2(data, password) {
   }
 }
 async function extractCookieDFromSlackCookiesDb(cookiesPath) {
-  if (!existsSync3(cookiesPath)) {
+  if (!existsSync4(cookiesPath)) {
     throw new Error(`Slack Cookies DB not found: ${cookiesPath}`);
   }
   const rows = await queryReadonlySqlite2(cookiesPath, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
@@ -938,196 +1074,27 @@ async function extractFromSlackDesktop() {
 }
 
 // src/auth/firefox.ts
-import { copyFile, mkdtemp, readdir as readdir2, readFile as readFile2, rm as rm2 } from "node:fs/promises";
-import { existsSync as existsSync4 } from "node:fs";
-import { tmpdir } from "node:os";
-import { homedir as homedir3, platform as platform4 } from "node:os";
-import { join as join5 } from "node:path";
-var PLATFORM2 = platform4();
-var IS_MACOS4 = PLATFORM2 === "darwin";
-var IS_LINUX2 = PLATFORM2 === "linux";
-function isMissingBunSqliteModule3(error) {
-  if (!error || typeof error !== "object") {
-    return false;
-  }
-  const err = error;
-  const code = typeof err.code === "string" ? err.code : "";
-  const message = typeof err.message === "string" ? err.message : "";
-  if (code === "ERR_MODULE_NOT_FOUND" || code === "ERR_UNSUPPORTED_ESM_URL_SCHEME") {
-    return true;
+import { existsSync as existsSync5 } from "node:fs";
+import { join as join6 } from "node:path";
+var CONTROL_CHAR_RE = /[\u0000-\u001F]/g;
+function toStringValue(value) {
+  if (typeof value === "string") {
+    return value;
   }
-  if (!message.includes("bun:sqlite")) {
-    return false;
+  if (value instanceof Uint8Array) {
+    const buf = Buffer.from(value);
+    const strings = [];
+    strings.push(buf.toString("utf8"));
+    strings.push(buf.toString("utf16le"));
+    const [first] = buf;
+    if (first === 0 || first === 1 || first === 2) {
+      const sliced = buf.subarray(1);
+      strings.push(sliced.toString("utf8"));
+      strings.push(sliced.toString("utf16le"));
+    }
+    return strings.sort((a, b) => b.length - a.length)[0] ?? "";
   }
-  return message.includes("Cannot find module") || message.includes("Unknown builtin module") || message.includes("unsupported URL scheme") || message.includes("Only URLs with a scheme in");
-}
-async function queryReadonlySqlite3(dbPath, sql) {
-  try {
-    const { Database } = await import("bun:sqlite");
-    const db = new Database(dbPath, { readonly: true });
-    try {
-      return db.query(sql).all();
-    } finally {
-      db.close();
-    }
-  } catch (error) {
-    if (!isMissingBunSqliteModule3(error)) {
-      throw error;
-    }
-    const { DatabaseSync } = await import("node:sqlite");
-    const db = new DatabaseSync(dbPath, { readOnly: true });
-    try {
-      return db.prepare(sql).all();
-    } finally {
-      db.close();
-    }
-  }
-}
-function getFirefoxBaseDir() {
-  if (IS_LINUX2) {
-    return join5(homedir3(), ".mozilla", "firefox");
-  }
-  if (IS_MACOS4) {
-    return join5(homedir3(), "Library", "Application Support", "Firefox");
-  }
-  throw new Error(`Firefox extraction is not supported on ${PLATFORM2}.`);
-}
-function parseProfilesIni(raw, baseDir) {
-  const lines = raw.split(/\r?\n/);
-  const profiles = [];
-  const installDefaults = new Set;
-  let section = "";
-  let current = null;
-  for (const lineRaw of lines) {
-    const line = lineRaw.trim();
-    if (!line || line.startsWith(";") || line.startsWith("#")) {
-      continue;
-    }
-    if (line.startsWith("[") && line.endsWith("]")) {
-      if (current) {
-        profiles.push(current);
-        current = null;
-      }
-      section = line.slice(1, -1);
-      if (section.startsWith("Profile")) {
-        current = { isRelative: true, isDefault: false };
-      }
-      continue;
-    }
-    const idx = line.indexOf("=");
-    if (idx === -1) {
-      continue;
-    }
-    const key = line.slice(0, idx).trim();
-    const value = line.slice(idx + 1).trim();
-    if (section.startsWith("Profile") && current) {
-      if (key === "Name") {
-        current.name = value;
-      } else if (key === "Path") {
-        current.path = value;
-      } else if (key === "IsRelative") {
-        current.isRelative = value !== "0";
-      } else if (key === "Default") {
-        current.isDefault = value === "1";
-      }
-      continue;
-    }
-    if (section.startsWith("Install") && key === "Default" && value) {
-      installDefaults.add(value);
-    }
-  }
-  if (current) {
-    profiles.push(current);
-  }
-  return profiles.filter((p) => Boolean(p.path)).map((p) => {
-    const profilePath = p.isRelative ? join5(baseDir, p.path) : p.path;
-    return {
-      name: p.name,
-      path: profilePath,
-      isDefault: p.isDefault || installDefaults.has(p.path)
-    };
-  });
-}
-async function listProfileCandidates() {
-  const baseDir = getFirefoxBaseDir();
-  const iniPath = join5(baseDir, "profiles.ini");
-  const candidates = [];
-  if (existsSync4(iniPath)) {
-    const raw = await readFile2(iniPath, "utf8");
-    candidates.push(...parseProfilesIni(raw, baseDir));
-  }
-  const dirName = IS_MACOS4 ? "Profiles" : baseDir;
-  if (existsSync4(dirName)) {
-    const entries = await readdir2(dirName, { withFileTypes: true });
-    for (const entry of entries) {
-      if (!entry.isDirectory()) {
-        continue;
-      }
-      const profilePath = join5(dirName, entry.name);
-      if (!candidates.some((c) => c.path === profilePath)) {
-        candidates.push({ path: profilePath, isDefault: false });
-      }
-    }
-  }
-  const existing = candidates.filter((c) => existsSync4(c.path));
-  existing.sort((a, b) => Number(b.isDefault) - Number(a.isDefault));
-  return existing;
-}
-function pickCandidatesByProfile(candidates, profile) {
-  const selector = profile?.trim();
-  if (!selector) {
-    return candidates;
-  }
-  const normalized = selector.toLowerCase();
-  const matched = candidates.filter((c) => {
-    const name = c.name?.toLowerCase() ?? "";
-    const base = c.path.split("/").pop()?.toLowerCase() ?? "";
-    const full = c.path.toLowerCase();
-    return name === normalized || base === normalized || full.includes(normalized);
-  });
-  return matched;
-}
-async function copySqliteForRead(dbPath) {
-  const tmpPath = await mkdtemp(join5(tmpdir(), "agent-slack-firefox-"));
-  const base = dbPath.split("/").pop() || "db.sqlite";
-  const copyPath = join5(tmpPath, base);
-  await copyFile(dbPath, copyPath);
-  for (const suffix of ["-wal", "-shm"]) {
-    const sidecar = `${dbPath}${suffix}`;
-    if (!existsSync4(sidecar)) {
-      continue;
-    }
-    try {
-      await copyFile(sidecar, `${copyPath}${suffix}`);
-    } catch {}
-  }
-  return {
-    copyPath,
-    cleanup: async () => {
-      try {
-        await rm2(tmpPath, { recursive: true, force: true });
-      } catch {}
-    }
-  };
-}
-function toStringValue(value) {
-  if (typeof value === "string") {
-    return value;
-  }
-  if (value instanceof Uint8Array) {
-    const buf = Buffer.from(value);
-    const strings = [];
-    strings.push(buf.toString("utf8"));
-    strings.push(buf.toString("utf16le"));
-    const first = buf[0];
-    if (first === 0 || first === 1 || first === 2) {
-      const sliced = buf.subarray(1);
-      strings.push(sliced.toString("utf8"));
-      strings.push(sliced.toString("utf16le"));
-    }
-    return strings.sort((a, b) => b.length - a.length)[0] ?? "";
-  }
-  return String(value ?? "");
+  return String(value ?? "");
 }
 function parseJsonObjectFromValue(value) {
   const raw = toStringValue(value);
@@ -1147,7 +1114,7 @@ function parseJsonObjectFromValue(value) {
   if (direct) {
     return direct;
   }
-  const stripped = raw.replace(/[\u0000-\u001F]/g, "");
+  const stripped = raw.replace(CONTROL_CHAR_RE, "");
   const strippedDirect = tryDecode(stripped);
   if (strippedDirect) {
     return strippedDirect;
@@ -1162,7 +1129,7 @@ function parseJsonObjectFromValue(value) {
   if (slicedDirect) {
     return slicedDirect;
   }
-  return tryDecode(sliced.replace(/[\u0000-\u001F]/g, ""));
+  return tryDecode(sliced.replace(CONTROL_CHAR_RE, ""));
 }
 function toFirefoxTeam(value) {
   if (typeof value !== "object" || value === null) {
@@ -1182,9 +1149,7 @@ function extractTeamsFromRawText(raw) {
   const seen = new Set;
   const richPattern = /"name":"([^"]+)".*?"url":"(https:\/\/[^"\s]+slack\.com\/)".*?"token":"(xoxc-[^"]+)"/gs;
   for (const match of raw.matchAll(richPattern)) {
-    const name = match[1];
-    const url = match[2];
-    const token = match[3];
+    const [, name, url, token] = match;
     if (!name || !url || !token) {
       continue;
     }
@@ -1217,26 +1182,26 @@ function extractTeamsFromRawText(raw) {
   return teams;
 }
 function getLocalStorageDirs(profilePath) {
-  const roots = [join5(profilePath, "storage", "default")];
+  const roots = [join6(profilePath, "storage", "default")];
   const candidates = [];
   for (const root of roots) {
-    if (!existsSync4(root)) {
+    if (!existsSync5(root)) {
       continue;
     }
-    candidates.push(join5(root, "https+++app.slack.com", "ls"));
+    candidates.push(join6(root, "https+++app.slack.com", "ls"));
   }
   return candidates;
 }
 async function extractTeamsFromProfile(profilePath) {
   const lsDirs = getLocalStorageDirs(profilePath);
   for (const lsDir of lsDirs) {
-    const dbPath = join5(lsDir, "data.sqlite");
-    if (!existsSync4(dbPath)) {
+    const dbPath = join6(lsDir, "data.sqlite");
+    if (!existsSync5(dbPath)) {
       continue;
     }
     const copied = await copySqliteForRead(dbPath);
     try {
-      const rows = await queryReadonlySqlite3(copied.copyPath, "select key, value from data where key in ('localConfig_v2', 'localConfig_v3') order by key desc");
+      const rows = await queryReadonlySqlite(copied.copyPath, "select key, value from data where key in ('localConfig_v2', 'localConfig_v3') order by key desc");
       for (const row of rows) {
         const cfg = parseJsonObjectFromValue(row.value);
         const teamsRaw = cfg && typeof cfg.teams === "object" && cfg.teams !== null ? cfg.teams : {};
@@ -1256,13 +1221,13 @@ async function extractTeamsFromProfile(profilePath) {
   return null;
 }
 async function extractCookieDFromProfile(profilePath) {
-  const dbPath = join5(profilePath, "cookies.sqlite");
-  if (!existsSync4(dbPath)) {
+  const dbPath = join6(profilePath, "cookies.sqlite");
+  if (!existsSync5(dbPath)) {
     return null;
   }
   const copied = await copySqliteForRead(dbPath);
   try {
-    const rows = await queryReadonlySqlite3(copied.copyPath, "select value from moz_cookies where host like '%slack.com%' and name='d' order by length(value) desc");
+    const rows = await queryReadonlySqlite(copied.copyPath, "select value from moz_cookies where host like '%slack.com%' and name='d' order by length(value) desc");
     for (const row of rows) {
       if (row.value?.startsWith("xoxd-")) {
         return { cookie_d: decodeFirefoxCookieValue(row.value), sourcePath: dbPath };
@@ -1318,9 +1283,9 @@ async function extractFromFirefox(input) {
 
 // src/auth/paths.ts
 import { homedir as homedir4 } from "node:os";
-import { join as join6 } from "node:path";
-var AGENT_SLACK_DIR = join6(homedir4(), ".config", "agent-slack");
-var CREDENTIALS_FILE = join6(AGENT_SLACK_DIR, "credentials.json");
+import { join as join7 } from "node:path";
+var AGENT_SLACK_DIR = join7(homedir4(), ".config", "agent-slack");
+var CREDENTIALS_FILE = join7(AGENT_SLACK_DIR, "credentials.json");
 var KEYCHAIN_SERVICE = "agent-slack";
 
 // src/lib/fs.ts
@@ -1575,50 +1540,6 @@ async function resolveDefaultWorkspace() {
   return creds.workspaces[0] ?? null;
 }
 
-// src/cli/workspace-selector.ts
-function normalizeUrl(u) {
-  const url = new URL(u);
-  return `${url.protocol}//${url.host}`;
-}
-function normalizedWorkspaceCandidates(workspace) {
-  let host = "";
-  try {
-    host = new URL(workspace.workspace_url).host.toLowerCase();
-  } catch {
-    host = "";
-  }
-  const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
-  return [
-    workspace.workspace_url.toLowerCase(),
-    host,
-    hostWithoutSlackSuffix,
-    workspace.workspace_name?.toLowerCase() ?? "",
-    workspace.team_domain?.toLowerCase() ?? ""
-  ].filter(Boolean);
-}
-function resolveWorkspaceSelector(workspaces, selector) {
-  const raw = selector.trim();
-  if (!raw) {
-    return { match: null, ambiguous: [] };
-  }
-  try {
-    const normalized = normalizeUrl(raw).toLowerCase();
-    const exact = workspaces.find((w) => w.workspace_url.toLowerCase() === normalized);
-    if (exact) {
-      return { match: exact, ambiguous: [] };
-    }
-  } catch {}
-  const needle = raw.toLowerCase();
-  const matches = workspaces.filter((workspace) => normalizedWorkspaceCandidates(workspace).some((candidate) => candidate.includes(needle)));
-  if (matches.length === 1) {
-    return { match: matches[0], ambiguous: [] };
-  }
-  if (matches.length > 1) {
-    return { match: null, ambiguous: matches };
-  }
-  return { match: null, ambiguous: [] };
-}
-
 // src/lib/object-type-guards.ts
 function isRecord5(value) {
   return typeof value === "object" && value !== null;
@@ -1764,6 +1685,50 @@ function normalizeConversationsLimit(value) {
   return Math.min(Math.max(value ?? 100, 1), 1000);
 }
 
+// src/cli/workspace-selector.ts
+function normalizeUrl(u) {
+  const url = new URL(u);
+  return `${url.protocol}//${url.host}`;
+}
+function normalizedWorkspaceCandidates(workspace) {
+  let host = "";
+  try {
+    host = new URL(workspace.workspace_url).host.toLowerCase();
+  } catch {
+    host = "";
+  }
+  const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
+  return [
+    workspace.workspace_url.toLowerCase(),
+    host,
+    hostWithoutSlackSuffix,
+    workspace.workspace_name?.toLowerCase() ?? "",
+    workspace.team_domain?.toLowerCase() ?? ""
+  ].filter(Boolean);
+}
+function resolveWorkspaceSelector(workspaces, selector) {
+  const raw = selector.trim();
+  if (!raw) {
+    return { match: null, ambiguous: [] };
+  }
+  try {
+    const normalized = normalizeUrl(raw).toLowerCase();
+    const exact = workspaces.find((w) => w.workspace_url.toLowerCase() === normalized);
+    if (exact) {
+      return { match: exact, ambiguous: [] };
+    }
+  } catch {}
+  const needle = raw.toLowerCase();
+  const matches = workspaces.filter((workspace) => normalizedWorkspaceCandidates(workspace).some((candidate) => candidate.includes(needle)));
+  if (matches.length === 1) {
+    return { match: matches[0], ambiguous: [] };
+  }
+  if (matches.length > 1) {
+    return { match: null, ambiguous: matches };
+  }
+  return { match: null, ambiguous: [] };
+}
+
 // src/slack/client.ts
 import { WebClient } from "@slack/web-api";
 class SlackApiClient {
@@ -1801,7 +1766,7 @@ class SlackApiClient {
   async browserApi(input) {
     const attempt = input.attempt ?? 0;
     const url = `${input.workspaceUrl.replace(/\/$/, "")}/api/${input.method}`;
-    const cleanedEntries = Object.entries(input.params).filter(([, v]) => v !== undefined).map(([k, v]) => [k, String(v)]);
+    const cleanedEntries = Object.entries(input.params).filter(([, v]) => v !== undefined).map(([k, v]) => [k, typeof v === "object" ? JSON.stringify(v) : String(v)]);
     const formBody = new URLSearchParams({
       token: input.auth.xoxc_token,
       ...Object.fromEntries(cleanedEntries)
@@ -1840,86 +1805,16 @@ function isRecord6(value) {
   return typeof value === "object" && value !== null;
 }
 
-// src/cli/context.ts
-function isEnvAuthConfigured() {
-  return Boolean(process.env.SLACK_TOKEN?.trim());
-}
-function effectiveWorkspaceUrl(flag) {
-  return flag?.trim() || process.env.SLACK_WORKSPACE_URL?.trim() || undefined;
-}
-function errorMessage(err) {
-  return err instanceof Error ? err.message : String(err);
+// src/cli/context-client-resolver.ts
+function normalizeUrl2(u) {
+  const url = new URL(u);
+  return `${url.protocol}//${url.host}`;
 }
-function parseContentType(value) {
-  const raw = String(value ?? "any").toLowerCase();
-  if (raw === "text" || raw === "image" || raw === "snippet" || raw === "file") {
-    return raw;
-  }
-  return "any";
-}
-async function assertWorkspaceSpecifiedForChannelNames(input) {
-  const hasName = input.channels.some((c) => normalizeChannelInput(c).kind === "name");
-  if (!hasName) {
-    return;
-  }
-  const creds = await loadCredentials();
-  if ((creds.workspaces?.length ?? 0) <= 1) {
-    return;
-  }
-  if (!input.workspaceUrl) {
-    throw new Error('Ambiguous channel name across multiple workspaces. Pass --workspace "<url-or-unique-substring>" (or set SLACK_WORKSPACE_URL).');
-  }
-}
-function isAuthErrorMessage(message) {
-  return /(?:^|[^a-z])(invalid_auth|token_expired)(?:$|[^a-z])/i.test(message);
-}
-function normalizeUrl2(u) {
-  const url = new URL(u);
-  return `${url.protocol}//${url.host}`;
-}
-function tryNormalizeUrl(u) {
-  try {
-    return normalizeUrl2(u);
-  } catch {
-    return;
-  }
-}
-async function refreshFromDesktopIfPossible() {
-  if (process.platform !== "darwin" && process.platform !== "linux") {
-    return false;
-  }
-  try {
-    const extracted = await extractFromSlackDesktop();
-    await upsertWorkspaces(extracted.teams.map((team) => ({
-      workspace_url: normalizeUrl2(team.url),
-      workspace_name: team.name,
-      auth: {
-        auth_type: "browser",
-        xoxc_token: team.token,
-        xoxd_cookie: extracted.cookie_d
-      }
-    })));
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function withAutoRefresh(input) {
-  try {
-    return await input.work();
-  } catch (err) {
-    const message = errorMessage(err);
-    if (isEnvAuthConfigured()) {
-      throw err;
-    }
-    if (!isAuthErrorMessage(message)) {
-      throw err;
-    }
-    const refreshed = await refreshFromDesktopIfPossible();
-    if (!refreshed) {
-      throw err;
-    }
-    return await input.work();
+function tryNormalizeUrl(u) {
+  try {
+    return normalizeUrl2(u);
+  } catch {
+    return;
   }
 }
 function pickAuthFromEnv() {
@@ -2011,104 +1906,161 @@ async function getClientForWorkspace(workspaceUrl) {
       };
     }
   } catch {}
-  const chrome = extractFromChrome() ?? await extractFromBrave();
-  if (chrome && chrome.teams.length > 0) {
-    let chosen = chrome.teams[0];
-    if (selector) {
-      const normalizedSelector = selector.toLowerCase();
-      const matches = chrome.teams.filter((t) => {
-        const normalizedUrl = normalizeUrl2(t.url).toLowerCase();
-        const host = new URL(t.url).host.toLowerCase();
-        const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
-        const name = t.name?.toLowerCase() ?? "";
-        return normalizedUrl.includes(normalizedSelector) || host.includes(normalizedSelector) || hostWithoutSlackSuffix.includes(normalizedSelector) || name.includes(normalizedSelector);
-      });
-      if (matches.length > 1) {
-        throw new Error(`Workspace selector "${selector}" is ambiguous in Chrome workspaces. Matches: ${matches.map((t) => normalizeUrl2(t.url)).join(", ")}. Pass a more specific selector or full workspace URL.`);
-      }
-      if (matches.length === 1) {
-        chosen = matches[0];
-      } else if (normalizedSelectorUrl) {
-        try {
-          chosen = chrome.teams.find((t) => normalizeUrl2(t.url) === normalizeUrl2(selector)) ?? chosen;
-        } catch {}
-      } else {
-        throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
-      }
-    }
-    const auth = {
-      auth_type: "browser",
-      xoxc_token: chosen.token,
-      xoxd_cookie: chrome.cookie_d
-    };
-    await upsertWorkspace({
-      workspace_url: normalizeUrl2(chosen.url),
-      workspace_name: chosen.name,
-      auth: {
-        auth_type: "browser",
-        xoxc_token: chosen.token,
-        xoxd_cookie: chrome.cookie_d
-      }
+  const browserSources = [];
+  const chromeResult = extractFromChrome();
+  if (chromeResult && chromeResult.teams.length > 0) {
+    browserSources.push(chromeResult);
+  }
+  const braveResult = await extractFromBrave();
+  if (braveResult && braveResult.teams.length > 0) {
+    browserSources.push(braveResult);
+  }
+  const firefoxResult = await extractFromFirefox();
+  if (firefoxResult && firefoxResult.teams.length > 0) {
+    browserSources.push(firefoxResult);
+  }
+  for (const source of browserSources) {
+    const result = await matchAndUpsertBrowserTeam({
+      teams: source.teams,
+      cookieD: source.cookie_d,
+      selector,
+      normalizedSelectorUrl
     });
-    return {
-      client: new SlackApiClient(auth, {
-        workspaceUrl: normalizeUrl2(chosen.url)
-      }),
-      auth,
-      workspace_url: normalizeUrl2(chosen.url)
-    };
+    if (result) {
+      return result;
+    }
   }
-  const firefox = await extractFromFirefox();
-  if (firefox && firefox.teams.length > 0) {
-    let chosen = firefox.teams[0];
-    if (selector) {
-      const normalizedSelector = selector.toLowerCase();
-      const matches = firefox.teams.filter((t) => {
-        const normalizedUrl = normalizeUrl2(t.url).toLowerCase();
-        const host = new URL(t.url).host.toLowerCase();
-        const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
-        const name = t.name?.toLowerCase() ?? "";
-        return normalizedUrl.includes(normalizedSelector) || host.includes(normalizedSelector) || hostWithoutSlackSuffix.includes(normalizedSelector) || name.includes(normalizedSelector);
-      });
-      if (matches.length > 1) {
-        throw new Error(`Workspace selector "${selector}" is ambiguous in Firefox workspaces. Matches: ${matches.map((t) => normalizeUrl2(t.url)).join(", ")}. Pass a more specific selector or full workspace URL.`);
-      }
-      if (matches.length === 1) {
-        chosen = matches[0];
-      } else if (normalizedSelectorUrl) {
+  if (selector && !normalizedSelectorUrl) {
+    throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
+  }
+  throw new Error('No Slack credentials available. Try "agent-slack auth import-desktop", "agent-slack auth import-chrome", "agent-slack auth import-brave", "agent-slack auth import-firefox", or set SLACK_TOKEN / SLACK_COOKIE_D.');
+}
+async function matchAndUpsertBrowserTeam(input) {
+  const { teams, cookieD, selector, normalizedSelectorUrl } = input;
+  let chosen = teams[0];
+  if (selector) {
+    const normalizedSelector = selector.toLowerCase();
+    const matches = teams.filter((t) => {
+      const normalizedUrl = normalizeUrl2(t.url).toLowerCase();
+      const host = new URL(t.url).host.toLowerCase();
+      const hostWithoutSlackSuffix = host.replace(/\.slack\.com$/i, "");
+      const name = t.name?.toLowerCase() ?? "";
+      return normalizedUrl.includes(normalizedSelector) || host.includes(normalizedSelector) || hostWithoutSlackSuffix.includes(normalizedSelector) || name.includes(normalizedSelector);
+    });
+    if (matches.length > 1) {
+      throw new Error(`Workspace selector "${selector}" is ambiguous. Matches: ${matches.map((t) => normalizeUrl2(t.url)).join(", ")}. Pass a more specific selector or full workspace URL.`);
+    }
+    if (matches.length === 1) {
+      chosen = matches[0];
+    } else if (normalizedSelectorUrl) {
+      const exact = teams.find((t) => {
         try {
-          chosen = firefox.teams.find((t) => normalizeUrl2(t.url) === normalizeUrl2(selector)) ?? chosen;
-        } catch {}
+          return normalizeUrl2(t.url) === normalizeUrl2(selector);
+        } catch {
+          return false;
+        }
+      });
+      if (exact) {
+        chosen = exact;
       } else {
-        throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
+        return null;
       }
+    } else {
+      return null;
     }
-    const auth = {
+  }
+  const auth = {
+    auth_type: "browser",
+    xoxc_token: chosen.token,
+    xoxd_cookie: cookieD
+  };
+  const workspaceUrl = normalizeUrl2(chosen.url);
+  await upsertWorkspace({
+    workspace_url: workspaceUrl,
+    workspace_name: chosen.name,
+    auth: {
       auth_type: "browser",
       xoxc_token: chosen.token,
-      xoxd_cookie: firefox.cookie_d
-    };
-    await upsertWorkspace({
-      workspace_url: normalizeUrl2(chosen.url),
-      workspace_name: chosen.name,
+      xoxd_cookie: cookieD
+    }
+  });
+  return {
+    client: new SlackApiClient(auth, { workspaceUrl }),
+    auth,
+    workspace_url: workspaceUrl
+  };
+}
+
+// src/cli/context.ts
+function isEnvAuthConfigured() {
+  return Boolean(process.env.SLACK_TOKEN?.trim());
+}
+function effectiveWorkspaceUrl(flag) {
+  return flag?.trim() || process.env.SLACK_WORKSPACE_URL?.trim() || undefined;
+}
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+function parseContentType(value) {
+  const raw = String(value ?? "any").toLowerCase();
+  if (raw === "text" || raw === "image" || raw === "snippet" || raw === "file") {
+    return raw;
+  }
+  return "any";
+}
+async function assertWorkspaceSpecifiedForChannelNames(input) {
+  const hasName = input.channels.some((c) => normalizeChannelInput(c).kind === "name");
+  if (!hasName) {
+    return;
+  }
+  const creds = await loadCredentials();
+  if ((creds.workspaces?.length ?? 0) <= 1) {
+    return;
+  }
+  if (!input.workspaceUrl) {
+    throw new Error('Ambiguous channel name across multiple workspaces. Pass --workspace "<url-or-unique-substring>" (or set SLACK_WORKSPACE_URL).');
+  }
+}
+function isAuthErrorMessage(message) {
+  return /(?:^|[^a-z])(invalid_auth|token_expired)(?:$|[^a-z])/i.test(message);
+}
+async function refreshFromDesktopIfPossible() {
+  if (process.platform !== "darwin" && process.platform !== "linux") {
+    return false;
+  }
+  try {
+    const extracted = await extractFromSlackDesktop();
+    await upsertWorkspaces(extracted.teams.map((team) => ({
+      workspace_url: normalizeUrl2(team.url),
+      workspace_name: team.name,
       auth: {
         auth_type: "browser",
-        xoxc_token: chosen.token,
-        xoxd_cookie: firefox.cookie_d
+        xoxc_token: team.token,
+        xoxd_cookie: extracted.cookie_d
       }
-    });
-    return {
-      client: new SlackApiClient(auth, {
-        workspaceUrl: normalizeUrl2(chosen.url)
-      }),
-      auth,
-      workspace_url: normalizeUrl2(chosen.url)
-    };
+    })));
+    return true;
+  } catch {
+    return false;
   }
-  if (selector && !normalizedSelectorUrl) {
-    throw new Error(`No configured workspace matches selector "${selector}". Run "agent-slack auth whoami" to list available workspaces.`);
+}
+async function withAutoRefresh(input) {
+  try {
+    return await input.work();
+  } catch (err) {
+    const message = errorMessage(err);
+    if (isEnvAuthConfigured()) {
+      throw err;
+    }
+    if (!isAuthErrorMessage(message)) {
+      throw err;
+    }
+    const refreshed = await refreshFromDesktopIfPossible();
+    if (!refreshed) {
+      throw err;
+    }
+    return await input.work();
   }
-  throw new Error('No Slack credentials available. Try "agent-slack auth import-desktop", "agent-slack auth import-chrome", "agent-slack auth import-brave", "agent-slack auth import-firefox", or set SLACK_TOKEN / SLACK_COOKIE_D.');
 }
 function createCliContext() {
   return {
@@ -2386,15 +2338,15 @@ function registerAuthCommand(input) {
 
 // src/slack/files.ts
 import { mkdir as mkdir3, writeFile as writeFile2 } from "node:fs/promises";
-import { basename, join as join7, resolve } from "node:path";
-import { existsSync as existsSync5 } from "node:fs";
+import { basename, join as join8, resolve } from "node:path";
+import { existsSync as existsSync6 } from "node:fs";
 async function downloadSlackFile(input) {
   const { auth, url, destDir, preferredName, options } = input;
   const absDir = resolve(destDir);
   await mkdir3(absDir, { recursive: true });
   const name = sanitizeFilename(preferredName || basename(new URL(url).pathname) || "file");
-  const path = join7(absDir, name);
-  if (existsSync5(path)) {
+  const path = join8(absDir, name);
+  if (existsSync6(path)) {
     return path;
   }
   const headers = {};
@@ -2449,27 +2401,27 @@ function extractTag(html, tag) {
 }
 
 // src/lib/tmp-paths.ts
-import { join as join9, resolve as resolve2 } from "node:path";
+import { join as join10, resolve as resolve2 } from "node:path";
 import { mkdir as mkdir4 } from "node:fs/promises";
 
 // src/lib/app-dir.ts
 import { homedir as homedir5, tmpdir as tmpdir2 } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join9 } from "node:path";
 function getAppDir() {
   const xdg = process.env.XDG_RUNTIME_DIR?.trim();
   if (xdg) {
-    return join8(xdg, "agent-slack");
+    return join9(xdg, "agent-slack");
   }
   const home = homedir5();
   if (home) {
-    return join8(home, ".agent-slack");
+    return join9(home, ".agent-slack");
   }
-  return join8(tmpdir2(), "agent-slack");
+  return join9(tmpdir2(), "agent-slack");
 }
 
 // src/lib/tmp-paths.ts
 function getDownloadsDir() {
-  return resolve2(join9(getAppDir(), "tmp", "downloads"));
+  return resolve2(join10(getAppDir(), "tmp", "downloads"));
 }
 async function ensureDownloadsDir() {
   const dir = getDownloadsDir();
@@ -2634,119 +2586,70 @@ function slackMrkdwnToMarkdown(text) {
   return out;
 }
 
-// src/slack/render.ts
-var MAX_ATTACHMENT_DEPTH = 8;
-function renderSlackMessageContent(msg) {
-  const msgObj = isRecord7(msg) ? msg : {};
-  const blockMrkdwn = extractMrkdwnFromBlocks(msgObj.blocks);
-  const attachmentMrkdwn = extractMrkdwnFromAttachments(msgObj.attachments, {
-    depth: 0,
-    seen: new WeakSet
-  });
-  const combined = [blockMrkdwn.trim(), attachmentMrkdwn.trim()].filter(Boolean).join(`
-
-`);
-  if (combined) {
-    return slackMrkdwnToMarkdown(combined).trim();
+// src/slack/message-api-parsing.ts
+function toSlackFileSummary(value) {
+  if (!isRecord5(value)) {
+    return null;
   }
-  const text = getString2(msgObj.text).trim();
-  if (text) {
-    return slackMrkdwnToMarkdown(text).trim();
+  const id = getString(value.id);
+  if (!id) {
+    return null;
   }
-  return "";
+  return {
+    id,
+    name: getString(value.name),
+    title: getString(value.title),
+    mimetype: getString(value.mimetype),
+    filetype: getString(value.filetype),
+    mode: getString(value.mode),
+    permalink: getString(value.permalink),
+    url_private: getString(value.url_private),
+    url_private_download: getString(value.url_private_download),
+    size: getNumber(value.size)
+  };
 }
-function extractMrkdwnFromBlocks(blocks) {
-  if (!Array.isArray(blocks)) {
+async function enrichFiles(client, files) {
+  const out = [];
+  for (const f of files) {
+    if (f.mode === "snippet" || !f.url_private_download) {
+      try {
+        const info = await client.api("files.info", { file: f.id });
+        const file = isRecord5(info.file) ? info.file : null;
+        out.push({
+          ...f,
+          name: f.name ?? getString(file?.name),
+          title: f.title ?? getString(file?.title),
+          mimetype: f.mimetype ?? getString(file?.mimetype),
+          filetype: f.filetype ?? getString(file?.filetype),
+          mode: f.mode ?? getString(file?.mode),
+          permalink: f.permalink ?? getString(file?.permalink),
+          url_private: f.url_private ?? getString(file?.url_private),
+          url_private_download: f.url_private_download ?? getString(file?.url_private_download),
+          snippet: {
+            content: getString(file?.content),
+            language: getString(file?.filetype)
+          }
+        });
+        continue;
+      } catch {}
+    }
+    out.push(f);
+  }
+  return out;
+}
+
+// src/slack/render-rich-text.ts
+function isRecord7(value) {
+  return typeof value === "object" && value !== null;
+}
+function getString2(value) {
+  return typeof value === "string" ? value : "";
+}
+function extractMrkdwnFromRichTextBlock(block) {
+  if (!isRecord7(block)) {
     return "";
   }
-  const out = [];
-  for (const b of blocks) {
-    if (!isRecord7(b)) {
-      continue;
-    }
-    const type = getString2(b.type);
-    if (type === "section") {
-      const text = isRecord7(b.text) ? b.text : null;
-      const textType = text ? getString2(text.type) : "";
-      if (textType === "mrkdwn" || textType === "plain_text") {
-        out.push(getString2(text?.text));
-      }
-      if (Array.isArray(b.fields)) {
-        for (const f of b.fields) {
-          if (!isRecord7(f)) {
-            continue;
-          }
-          const fieldType = getString2(f.type);
-          if (fieldType === "mrkdwn" || fieldType === "plain_text") {
-            out.push(getString2(f.text));
-          }
-        }
-      }
-      const accessory = isRecord7(b.accessory) ? b.accessory : null;
-      if (getString2(accessory?.type) === "button") {
-        const label = getString2(accessory?.text?.text);
-        const url = getString2(accessory?.url);
-        if (url) {
-          out.push(label ? `${label}: ${url}` : url);
-        }
-      }
-      continue;
-    }
-    if (type === "actions" && Array.isArray(b.elements)) {
-      for (const el of b.elements) {
-        if (!isRecord7(el)) {
-          continue;
-        }
-        if (getString2(el.type) === "button") {
-          const label = getString2(el.text?.text);
-          const url = getString2(el.url);
-          if (url) {
-            out.push(label ? `${label}: ${url}` : url);
-          }
-        }
-      }
-      continue;
-    }
-    if (type === "context" && Array.isArray(b.elements)) {
-      for (const el of b.elements) {
-        if (!isRecord7(el)) {
-          continue;
-        }
-        const elType = getString2(el.type);
-        if (elType === "mrkdwn") {
-          out.push(getString2(el.text));
-        }
-        if (elType === "plain_text") {
-          out.push(getString2(el.text));
-        }
-      }
-      continue;
-    }
-    if (type === "image") {
-      const alt = getString2(b.alt_text);
-      const url = getString2(b.image_url);
-      if (url) {
-        out.push(alt ? `${alt}: ${url}` : url);
-      }
-      continue;
-    }
-    if (type === "rich_text") {
-      const rich = extractMrkdwnFromRichTextBlock(b);
-      if (rich.trim()) {
-        out.push(rich);
-      }
-      continue;
-    }
-  }
-  return out.join(`
-
-`);
-}
-function extractMrkdwnFromRichTextBlock(block) {
-  if (!isRecord7(block)) {
-    return "";
-  }
-  const elements = Array.isArray(block.elements) ? block.elements : [];
+  const elements = Array.isArray(block.elements) ? block.elements : [];
   const out = [];
   for (const el of elements) {
     const txt = extractMrkdwnFromRichTextElement(el);
@@ -2795,13 +2698,14 @@ function extractMrkdwnFromRichTextElement(el) {
     const style = typeof el.style === "string" ? el.style : "bullet";
     const items = [];
     const itemEls = Array.isArray(el.elements) ? el.elements : [];
-    for (let idx = 0;idx < itemEls.length; idx++) {
-      const item = itemEls[idx];
+    let num = 0;
+    for (const item of itemEls) {
       const txt = extractMrkdwnFromRichTextElement(item).trim();
       if (!txt) {
         continue;
       }
-      const prefix = style === "ordered" ? `${idx + 1}. ` : "- ";
+      num++;
+      const prefix = style === "ordered" ? `${num}. ` : "- ";
       items.push(`${prefix}${txt}`);
     }
     return items.join(`
@@ -2850,6 +2754,115 @@ function extractMrkdwnFromRichTextElement(el) {
   }
   return "";
 }
+
+// src/slack/render.ts
+var MAX_ATTACHMENT_DEPTH = 8;
+function renderSlackMessageContent(msg) {
+  const msgObj = isRecord8(msg) ? msg : {};
+  const blockMrkdwn = extractMrkdwnFromBlocks(msgObj.blocks);
+  const attachmentMrkdwn = extractMrkdwnFromAttachments(msgObj.attachments, {
+    depth: 0,
+    seen: new WeakSet
+  });
+  const combined = [blockMrkdwn.trim(), attachmentMrkdwn.trim()].filter(Boolean).join(`
+
+`);
+  if (combined) {
+    return slackMrkdwnToMarkdown(combined).trim();
+  }
+  const text = getString3(msgObj.text).trim();
+  if (text) {
+    return slackMrkdwnToMarkdown(text).trim();
+  }
+  return "";
+}
+function extractMrkdwnFromBlocks(blocks) {
+  if (!Array.isArray(blocks)) {
+    return "";
+  }
+  const out = [];
+  for (const b of blocks) {
+    if (!isRecord8(b)) {
+      continue;
+    }
+    const type = getString3(b.type);
+    if (type === "section") {
+      const text = isRecord8(b.text) ? b.text : null;
+      const textType = text ? getString3(text.type) : "";
+      if (textType === "mrkdwn" || textType === "plain_text") {
+        out.push(getString3(text?.text));
+      }
+      if (Array.isArray(b.fields)) {
+        for (const f of b.fields) {
+          if (!isRecord8(f)) {
+            continue;
+          }
+          const fieldType = getString3(f.type);
+          if (fieldType === "mrkdwn" || fieldType === "plain_text") {
+            out.push(getString3(f.text));
+          }
+        }
+      }
+      const accessory = isRecord8(b.accessory) ? b.accessory : null;
+      if (getString3(accessory?.type) === "button") {
+        const label = getString3(accessory?.text?.text);
+        const url = getString3(accessory?.url);
+        if (url) {
+          out.push(label ? `${label}: ${url}` : url);
+        }
+      }
+      continue;
+    }
+    if (type === "actions" && Array.isArray(b.elements)) {
+      for (const el of b.elements) {
+        if (!isRecord8(el)) {
+          continue;
+        }
+        if (getString3(el.type) === "button") {
+          const label = getString3(el.text?.text);
+          const url = getString3(el.url);
+          if (url) {
+            out.push(label ? `${label}: ${url}` : url);
+          }
+        }
+      }
+      continue;
+    }
+    if (type === "context" && Array.isArray(b.elements)) {
+      for (const el of b.elements) {
+        if (!isRecord8(el)) {
+          continue;
+        }
+        const elType = getString3(el.type);
+        if (elType === "mrkdwn") {
+          out.push(getString3(el.text));
+        }
+        if (elType === "plain_text") {
+          out.push(getString3(el.text));
+        }
+      }
+      continue;
+    }
+    if (type === "image") {
+      const alt = getString3(b.alt_text);
+      const url = getString3(b.image_url);
+      if (url) {
+        out.push(alt ? `${alt}: ${url}` : url);
+      }
+      continue;
+    }
+    if (type === "rich_text") {
+      const rich = extractMrkdwnFromRichTextBlock(b);
+      if (rich.trim()) {
+        out.push(rich);
+      }
+      continue;
+    }
+  }
+  return out.join(`
+
+`);
+}
 function extractMrkdwnFromAttachments(attachments, state) {
   if (state.depth >= MAX_ATTACHMENT_DEPTH) {
     return "";
@@ -2859,7 +2872,7 @@ function extractMrkdwnFromAttachments(attachments, state) {
   }
   const parts = [];
   for (const a of attachments) {
-    if (!isRecord7(a)) {
+    if (!isRecord8(a)) {
       continue;
     }
     if (state.seen.has(a)) {
@@ -2870,7 +2883,7 @@ function extractMrkdwnFromAttachments(attachments, state) {
     const chunk = [];
     if (isSharedMessage) {
       chunk.push(formatForwardHeader(a));
-      const body = extractForwardedMessageBody(a, state).trim() || extractMrkdwnFromAttachments(a.attachments, nextState(state)).trim() || getString2(a.text).trim();
+      const body = extractForwardedMessageBody(a, state).trim() || extractMrkdwnFromAttachments(a.attachments, nextState(state)).trim() || getString3(a.text).trim();
       if (body) {
         chunk.push(quoteMarkdown(body));
       }
@@ -2884,12 +2897,12 @@ function extractMrkdwnFromAttachments(attachments, state) {
     if (blocks.trim()) {
       chunk.push(blocks);
     }
-    const pretext = getString2(a.pretext);
+    const pretext = getString3(a.pretext);
     if (pretext) {
       chunk.push(pretext);
     }
-    const title = getString2(a.title);
-    const titleLink = getString2(a.title_link);
+    const title = getString3(a.title);
+    const titleLink = getString3(a.title_link);
     if (titleLink && title) {
       chunk.push(`<${titleLink}|${title}>`);
     } else if (title) {
@@ -2897,17 +2910,17 @@ function extractMrkdwnFromAttachments(attachments, state) {
     } else if (titleLink) {
       chunk.push(titleLink);
     }
-    const text = getString2(a.text);
+    const text = getString3(a.text);
     if (text) {
       chunk.push(text);
     }
     if (Array.isArray(a.fields)) {
       for (const f of a.fields) {
-        if (!isRecord7(f)) {
+        if (!isRecord8(f)) {
           continue;
         }
-        const fieldTitle = getString2(f.title);
-        const value = getString2(f.value);
+        const fieldTitle = getString3(f.title);
+        const value = getString3(f.value);
         if (fieldTitle && value) {
           chunk.push(`${fieldTitle}
 ${value}`);
@@ -2918,7 +2931,7 @@ ${value}`);
         }
       }
     }
-    const fallback = getString2(a.fallback);
+    const fallback = getString3(a.fallback);
     if (chunk.length === 0 && fallback) {
       chunk.push(fallback);
     }
@@ -2936,9 +2949,9 @@ ${value}`);
 `);
 }
 function formatForwardHeader(a) {
-  const authorName = getString2(a.author_name);
-  const authorLink = getString2(a.author_link);
-  const fromUrl = getString2(a.from_url);
+  const authorName = getString3(a.author_name);
+  const authorLink = getString3(a.author_link);
+  const fromUrl = getString3(a.from_url);
   const authorPart = authorName && authorLink ? `<${authorLink}|${authorName}>` : authorName || "";
   const sourcePart = fromUrl ? `<${fromUrl}|original>` : "";
   if (authorPart && sourcePart) {
@@ -2960,14 +2973,14 @@ function extractForwardedMessageBody(attachment, state) {
   }
   const out = [];
   for (const mb of messageBlocks) {
-    if (!isRecord7(mb)) {
+    if (!isRecord8(mb)) {
       continue;
     }
-    const message = isRecord7(mb.message) ? mb.message : null;
+    const message = isRecord8(mb.message) ? mb.message : null;
     if (!message) {
       continue;
     }
-    const messageText = getString2(message.text).trim();
+    const messageText = getString3(message.text).trim();
     const blocksContent = extractMrkdwnFromBlocks(message.blocks).trim();
     const attachmentsContent = extractMrkdwnFromAttachments(message.attachments, nextState(state)).trim();
     const fileMentions = extractFileMentions(message.files).trim();
@@ -3013,11 +3026,11 @@ function extractFileMentions(files) {
   }
   const lines = [];
   for (const f of files) {
-    if (!isRecord7(f)) {
+    if (!isRecord8(f)) {
       continue;
     }
-    const name = getString2(f.title) || getString2(f.name) || "file";
-    const url = getString2(f.permalink) || getString2(f.url_private_download) || getString2(f.url_private);
+    const name = getString3(f.title) || getString3(f.name) || "file";
+    const url = getString3(f.permalink) || getString3(f.url_private_download) || getString3(f.url_private);
     if (url) {
       lines.push(`<${url}|${name}>`);
       continue;
@@ -3027,66 +3040,14 @@ function extractFileMentions(files) {
   return uniqueTexts(lines).join(`
 `);
 }
-function isRecord7(value) {
+function isRecord8(value) {
   return typeof value === "object" && value !== null;
 }
-function getString2(value) {
+function getString3(value) {
   return typeof value === "string" ? value : "";
 }
 
-// src/slack/message-api-parsing.ts
-function toSlackFileSummary(value) {
-  if (!isRecord5(value)) {
-    return null;
-  }
-  const id = getString(value.id);
-  if (!id) {
-    return null;
-  }
-  return {
-    id,
-    name: getString(value.name),
-    title: getString(value.title),
-    mimetype: getString(value.mimetype),
-    filetype: getString(value.filetype),
-    mode: getString(value.mode),
-    permalink: getString(value.permalink),
-    url_private: getString(value.url_private),
-    url_private_download: getString(value.url_private_download),
-    size: getNumber(value.size)
-  };
-}
-async function enrichFiles(client, files) {
-  const out = [];
-  for (const f of files) {
-    if (f.mode === "snippet" || !f.url_private_download) {
-      try {
-        const info = await client.api("files.info", { file: f.id });
-        const file = isRecord5(info.file) ? info.file : null;
-        out.push({
-          ...f,
-          name: f.name ?? getString(file?.name),
-          title: f.title ?? getString(file?.title),
-          mimetype: f.mimetype ?? getString(file?.mimetype),
-          filetype: f.filetype ?? getString(file?.filetype),
-          mode: f.mode ?? getString(file?.mode),
-          permalink: f.permalink ?? getString(file?.permalink),
-          url_private: f.url_private ?? getString(file?.url_private),
-          url_private_download: f.url_private_download ?? getString(file?.url_private_download),
-          snippet: {
-            content: getString(file?.content),
-            language: getString(file?.filetype)
-          }
-        });
-        continue;
-      } catch {}
-    }
-    out.push(f);
-  }
-  return out;
-}
-
-// src/slack/messages.ts
+// src/slack/message-compact.ts
 function toCompactMessage(msg, input) {
   const maxBodyChars = input?.maxBodyChars ?? 8000;
   const includeReactions = input?.includeReactions ?? false;
@@ -3174,6 +3135,8 @@ function extractForwardedThreads(attachments) {
   }
   return out.length ? out : undefined;
 }
+
+// src/slack/messages.ts
 async function fetchMessage(client, input) {
   const history = await client.api("conversations.history", {
     channel: input.ref.channel_id,
@@ -3444,28 +3407,242 @@ function parseMsgTarget(input) {
   return { kind: "channel", channel: `#${trimmed}` };
 }
 
-// src/cli/message-file-downloads.ts
-import { readFile as readFile5, writeFile as writeFile3 } from "node:fs/promises";
-import { join as join10 } from "node:path";
-function inferFileExtension(file) {
-  const mt = (file.mimetype || "").toLowerCase();
-  const ft = (file.filetype || "").toLowerCase();
-  if (mt === "image/png" || ft === "png") {
-    return "png";
-  }
-  if (mt === "image/jpeg" || mt === "image/jpg" || ft === "jpg" || ft === "jpeg") {
-    return "jpg";
-  }
-  if (mt === "image/webp" || ft === "webp") {
-    return "webp";
+// src/cli/message-url-warning.ts
+function warnOnTruncatedSlackUrl(ref) {
+  if (ref.possiblyTruncated) {
+    console.error(`Hint: URL may have been truncated by shell. Quote URLs containing "&":
+` + '  agent-slack message get "https://...?thread_ts=...&cid=..."');
   }
-  if (mt === "image/gif" || ft === "gif") {
-    return "gif";
+}
+
+// src/slack/rich-text.ts
+var BULLET_RE = /^(\s*)[•◦▪▫▸‣●○◆◇\-*]\s+(.*)$/;
+var ORDERED_RE = /^(\s*)\d+[.)]\s+(.*)$/;
+var CODE_BLOCK_START = /^```/;
+var BLOCKQUOTE_RE = /^> (.*)$/;
+function parseInlineElements(text) {
+  const elements = [];
+  const re = /`([^`]+)`|\*([^*]+)\*|_([^_]+)_|~([^~]+)~|<([^>|]+)\|([^>]+)>|<([^>|]+)>/g;
+  let lastIndex = 0;
+  let match;
+  while ((match = re.exec(text)) !== null) {
+    if (match.index > lastIndex) {
+      elements.push({ type: "text", text: text.slice(lastIndex, match.index) });
+    }
+    const [, code, bold, italic, strike, linkUrl, linkText, bareUrl] = match;
+    if (code != null) {
+      elements.push({ type: "text", text: code, style: { code: true } });
+    } else if (bold != null) {
+      elements.push({ type: "text", text: bold, style: { bold: true } });
+    } else if (italic != null) {
+      elements.push({ type: "text", text: italic, style: { italic: true } });
+    } else if (strike != null) {
+      elements.push({ type: "text", text: strike, style: { strike: true } });
+    } else if (linkUrl != null && linkText != null) {
+      elements.push({ type: "link", url: linkUrl, text: linkText });
+    } else if (bareUrl != null) {
+      elements.push({ type: "link", url: bareUrl });
+    }
+    lastIndex = match.index + match[0].length;
+  }
+  if (lastIndex < text.length) {
+    elements.push({ type: "text", text: text.slice(lastIndex) });
+  }
+  return elements.length > 0 ? elements : [{ type: "text", text }];
+}
+function textToRichTextBlocks(text) {
+  const lines = text.split(`
+`);
+  const elements = [];
+  let hasLists = false;
+  let idx = 0;
+  while (idx < lines.length) {
+    const line = lines[idx];
+    if (CODE_BLOCK_START.test(line)) {
+      idx++;
+      const codeLines = [];
+      while (idx < lines.length && !CODE_BLOCK_START.test(lines[idx])) {
+        codeLines.push(lines[idx]);
+        idx++;
+      }
+      if (idx < lines.length) {
+        idx++;
+      }
+      elements.push({
+        type: "rich_text_preformatted",
+        elements: [{ type: "text", text: codeLines.join(`
+`) }]
+      });
+      continue;
+    }
+    const quoteMatch = line.match(BLOCKQUOTE_RE);
+    if (quoteMatch) {
+      const quoteLines = [];
+      while (idx < lines.length) {
+        const qm = lines[idx].match(BLOCKQUOTE_RE);
+        if (!qm) {
+          break;
+        }
+        quoteLines.push(qm[1]);
+        idx++;
+      }
+      elements.push({
+        type: "rich_text_quote",
+        elements: parseInlineElements(quoteLines.join(`
+`))
+      });
+      continue;
+    }
+    if (BULLET_RE.test(line)) {
+      hasLists = true;
+      idx = collectList({ lines, startIdx: idx, style: "bullet", pattern: BULLET_RE, elements });
+      continue;
+    }
+    if (ORDERED_RE.test(line)) {
+      hasLists = true;
+      idx = collectList({ lines, startIdx: idx, style: "ordered", pattern: ORDERED_RE, elements });
+      continue;
+    }
+    const textLines = [];
+    while (idx < lines.length) {
+      const l = lines[idx];
+      if (BULLET_RE.test(l) || ORDERED_RE.test(l) || CODE_BLOCK_START.test(l) || BLOCKQUOTE_RE.test(l)) {
+        break;
+      }
+      textLines.push(l);
+      idx++;
+    }
+    const content = textLines.join(`
+`);
+    if (content.trim()) {
+      elements.push({
+        type: "rich_text_section",
+        elements: parseInlineElements(content.endsWith(`
+`) ? content : `${content}
+`)
+      });
+    }
   }
-  if (mt === "text/plain" || ft === "text") {
-    return "txt";
+  if (!hasLists) {
+    return null;
   }
-  if (mt === "text/markdown" || ft === "markdown" || ft === "md") {
+  return [{ type: "rich_text", elements }];
+}
+function collectList(input) {
+  const { lines, startIdx, style, pattern, elements } = input;
+  let idx = startIdx;
+  const firstMatch = lines[startIdx].match(pattern);
+  const baseIndent = firstMatch[1].length;
+  let currentIndent = -1;
+  let currentItems = [];
+  while (idx < lines.length) {
+    const match = lines[idx].match(pattern);
+    if (!match) {
+      break;
+    }
+    const indent = match[1].length >= baseIndent + 2 ? 1 : 0;
+    const content = match[2];
+    if (currentIndent !== -1 && indent !== currentIndent) {
+      elements.push({
+        type: "rich_text_list",
+        style,
+        ...currentIndent > 0 ? { indent: currentIndent } : {},
+        elements: currentItems
+      });
+      currentItems = [];
+    }
+    currentIndent = indent;
+    currentItems.push({
+      type: "rich_text_section",
+      elements: parseInlineElements(content)
+    });
+    idx++;
+  }
+  if (currentItems.length > 0) {
+    elements.push({
+      type: "rich_text_list",
+      style,
+      ...currentIndent > 0 ? { indent: currentIndent } : {},
+      elements: currentItems
+    });
+  }
+  return idx;
+}
+
+// src/slack/upload.ts
+import { readFile as readFile5, stat, realpath } from "node:fs/promises";
+import { basename as basename2 } from "node:path";
+var MAX_FILE_SIZE = 100 * 1024 * 1024;
+async function uploadLocalFileToSlack(input) {
+  const resolvedPath = await realpath(input.filePath);
+  const fileStats = await stat(resolvedPath);
+  if (!fileStats.isFile()) {
+    throw new Error(`Attachment path is not a file: ${input.filePath}`);
+  }
+  if (fileStats.size > MAX_FILE_SIZE) {
+    throw new Error(`File too large (${Math.round(fileStats.size / 1024 / 1024)}MB). Slack allows up to 100MB.`);
+  }
+  const bytes = await readFile5(resolvedPath);
+  const filename = basename2(resolvedPath);
+  const uploadInitResp = await input.client.api("files.getUploadURLExternal", {
+    filename,
+    length: bytes.length
+  });
+  if (isRecord5(uploadInitResp) && uploadInitResp.ok === false) {
+    const errMsg = typeof uploadInitResp.error === "string" ? uploadInitResp.error : "unknown";
+    throw new Error(`Slack files.getUploadURLExternal failed: ${errMsg}`);
+  }
+  const uploadUrl = getString(uploadInitResp.upload_url);
+  const fileId = getString(uploadInitResp.file_id);
+  if (!uploadUrl || !fileId) {
+    throw new Error("Slack did not return an upload URL for file attachment");
+  }
+  const uploadResp = await fetch(uploadUrl, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/octet-stream",
+      "Content-Length": String(bytes.length)
+    },
+    body: bytes
+  });
+  if (!uploadResp.ok) {
+    const body = await uploadResp.text().catch(() => "");
+    throw new Error(`Failed to upload attachment bytes (HTTP ${uploadResp.status})${body ? `: ${body}` : ""}`);
+  }
+  const completeResp = await input.client.api("files.completeUploadExternal", {
+    files: [{ id: fileId, title: filename }],
+    channel_id: input.channelId,
+    thread_ts: input.threadTs,
+    initial_comment: input.initialComment?.trim() || undefined
+  });
+  if (!isRecord5(completeResp) || completeResp.ok !== true) {
+    const errMsg = isRecord5(completeResp) && typeof completeResp.error === "string" ? completeResp.error : "unknown";
+    throw new Error(`Slack files.completeUploadExternal failed: ${errMsg}`);
+  }
+}
+
+// src/cli/message-file-downloads.ts
+import { readFile as readFile6, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join11 } from "node:path";
+function inferFileExtension(file) {
+  const mt = (file.mimetype || "").toLowerCase();
+  const ft = (file.filetype || "").toLowerCase();
+  if (mt === "image/png" || ft === "png") {
+    return "png";
+  }
+  if (mt === "image/jpeg" || mt === "image/jpg" || ft === "jpg" || ft === "jpeg") {
+    return "jpg";
+  }
+  if (mt === "image/webp" || ft === "webp") {
+    return "webp";
+  }
+  if (mt === "image/gif" || ft === "gif") {
+    return "gif";
+  }
+  if (mt === "text/plain" || ft === "text") {
+    return "txt";
+  }
+  if (mt === "text/markdown" || ft === "markdown" || ft === "md") {
     return "md";
   }
   if (mt === "application/json" || ft === "json") {
@@ -3487,13 +3664,13 @@ async function downloadCanvasAsMarkdown(input) {
     preferredName: `${input.fileId}.html`,
     options: { allowHtml: true }
   });
-  const html = await readFile5(htmlPath, "utf8");
+  const html = await readFile6(htmlPath, "utf8");
   if (looksLikeAuthPage(html)) {
     throw new Error("Downloaded auth/login page instead of canvas content (token may be expired)");
   }
   const markdown = htmlToMarkdown(html).trim();
   const safeName = `${input.fileId.replace(/[\\/<>"|?*]/g, "_")}.md`;
-  const markdownPath = join10(input.destDir, safeName);
+  const markdownPath = join11(input.destDir, safeName);
   await writeFile3(markdownPath, markdown, "utf8");
   return markdownPath;
 }
@@ -3535,14 +3712,6 @@ async function downloadMessageFiles(input) {
   return downloadedPaths;
 }
 
-// src/cli/message-url-warning.ts
-function warnOnTruncatedSlackUrl(ref) {
-  if (ref.possiblyTruncated) {
-    console.error(`Hint: URL may have been truncated by shell. Quote URLs containing "&":
-` + '  agent-slack message get "https://...?thread_ts=...&cid=..."');
-  }
-}
-
 // src/cli/message-thread-info.ts
 function getNumber2(value) {
   return typeof value === "number" ? value : undefined;
@@ -3573,48 +3742,7 @@ function toThreadListMessage(m) {
   return rest;
 }
 
-// src/cli/message-actions.ts
-function parseLimit(raw) {
-  if (raw === undefined) {
-    return;
-  }
-  const n = Number.parseInt(raw, 10);
-  if (!Number.isFinite(n) || n < 1) {
-    throw new Error(`Invalid --limit value "${raw}": must be a positive integer`);
-  }
-  return n;
-}
-function requireMessageTs(raw) {
-  const ts = raw?.trim();
-  if (!ts) {
-    throw new Error('When targeting a channel, you must pass --ts "<seconds>.<micros>"');
-  }
-  return ts;
-}
-function parseReactionFilters(raw) {
-  if (!Array.isArray(raw) || raw.length === 0) {
-    return [];
-  }
-  const out = [];
-  for (const value of raw) {
-    const normalized = normalizeSlackReactionName(String(value));
-    if (!out.includes(normalized)) {
-      out.push(normalized);
-    }
-  }
-  return out;
-}
-function requireOldestWhenReactionFiltersUsed(input) {
-  const hasReactionFilters = input.withReactions.length > 0 || input.withoutReactions.length > 0;
-  const oldest = input.oldest?.trim();
-  if (!hasReactionFilters) {
-    return oldest;
-  }
-  if (!oldest) {
-    throw new Error('Reaction filters require --oldest "<seconds>.<micros>" to bound scan size. Example: --oldest "1770165109.628379"');
-  }
-  return oldest;
-}
+// src/cli/message-read-actions.ts
 async function handleMessageGet(input) {
   const target = parseMsgTarget(input.targetInput);
   if (target.kind === "user") {
@@ -3756,8 +3884,53 @@ async function handleMessageList(input) {
     }
   });
 }
+
+// src/cli/message-actions.ts
+function parseLimit(raw) {
+  if (raw === undefined) {
+    return;
+  }
+  const n = Number.parseInt(raw, 10);
+  if (!Number.isFinite(n) || n < 1) {
+    throw new Error(`Invalid --limit value "${raw}": must be a positive integer`);
+  }
+  return n;
+}
+function requireMessageTs(raw) {
+  const ts = raw?.trim();
+  if (!ts) {
+    throw new Error('When targeting a channel, you must pass --ts "<seconds>.<micros>"');
+  }
+  return ts;
+}
+function parseReactionFilters(raw) {
+  if (!Array.isArray(raw) || raw.length === 0) {
+    return [];
+  }
+  const out = [];
+  for (const value of raw) {
+    const normalized = normalizeSlackReactionName(String(value));
+    if (!out.includes(normalized)) {
+      out.push(normalized);
+    }
+  }
+  return out;
+}
+function requireOldestWhenReactionFiltersUsed(input) {
+  const hasReactionFilters = input.withReactions.length > 0 || input.withoutReactions.length > 0;
+  const oldest = input.oldest?.trim();
+  if (!hasReactionFilters) {
+    return oldest;
+  }
+  if (!oldest) {
+    throw new Error('Reaction filters require --oldest "<seconds>.<micros>" to bound scan size. Example: --oldest "1770165109.628379"');
+  }
+  return oldest;
+}
 async function sendMessage(input) {
   const target = parseMsgTarget(String(input.targetInput));
+  const blocks = input.text ? textToRichTextBlocks(input.text) : null;
+  const attachPaths = normalizeAttachPaths(input.options.attach);
   if (target.kind === "url") {
     const { ref } = target;
     warnOnTruncatedSlackUrl(ref);
@@ -3767,10 +3940,13 @@ async function sendMessage(input) {
         const { client } = await input.ctx.getClientForWorkspace(ref.workspace_url);
         const msg = await fetchMessage(client, { ref });
         const threadTs = msg.thread_ts ?? msg.ts;
-        await client.api("chat.postMessage", {
-          channel: ref.channel_id,
+        await sendMessageToChannel({
+          client,
+          channelId: ref.channel_id,
           text: input.text,
-          thread_ts: threadTs
+          blocks,
+          threadTs,
+          attachPaths
         });
       }
     });
@@ -3783,9 +3959,12 @@ async function sendMessage(input) {
       work: async () => {
         const { client } = await input.ctx.getClientForWorkspace(workspaceUrl2);
         const dmChannelId = await openDmChannel(client, target.userId);
-        await client.api("chat.postMessage", {
-          channel: dmChannelId,
-          text: input.text
+        await sendMessageToChannel({
+          client,
+          channelId: dmChannelId,
+          text: input.text,
+          blocks,
+          attachPaths
         });
       }
     });
@@ -3801,15 +3980,56 @@ async function sendMessage(input) {
     work: async () => {
       const { client } = await input.ctx.getClientForWorkspace(workspaceUrl);
       const channelId = await resolveChannelId(client, String(target.channel));
-      await client.api("chat.postMessage", {
-        channel: channelId,
+      await sendMessageToChannel({
+        client,
+        channelId,
         text: input.text,
-        thread_ts: input.options.threadTs ? String(input.options.threadTs) : undefined
+        blocks,
+        threadTs: input.options.threadTs ? String(input.options.threadTs) : undefined,
+        attachPaths
       });
     }
   });
   return { ok: true };
 }
+function normalizeAttachPaths(raw) {
+  if (!Array.isArray(raw) || raw.length === 0) {
+    return [];
+  }
+  const out = [];
+  for (const p of raw.map((v) => String(v).trim()).filter(Boolean)) {
+    if (!out.includes(p)) {
+      out.push(p);
+    }
+  }
+  return out;
+}
+async function sendMessageToChannel(input) {
+  if (input.attachPaths.length === 0) {
+    await input.client.api("chat.postMessage", {
+      channel: input.channelId,
+      text: input.text,
+      thread_ts: input.threadTs,
+      ...input.blocks ? { blocks: input.blocks } : {}
+    });
+    return;
+  }
+  if (input.blocks) {
+    process.stderr.write(`Warning: rich text formatting is not supported with file attachments; sending as plain text.
+`);
+  }
+  let initialComment = input.text;
+  for (const filePath of input.attachPaths) {
+    await uploadLocalFileToSlack({
+      client: input.client,
+      channelId: input.channelId,
+      filePath,
+      threadTs: input.threadTs,
+      initialComment
+    });
+    initialComment = "";
+  }
+}
 async function editMessage(input) {
   const target = parseMsgTarget(String(input.targetInput));
   if (target.kind === "user") {
@@ -3904,1403 +4124,164 @@ async function reactOnTarget(input) {
       const ts = requireMessageTs(input.options?.ts);
       await input.ctx.assertWorkspaceSpecifiedForChannelNames({
         workspaceUrl,
-        channels: [target.channel]
-      });
-      const { client } = await input.ctx.getClientForWorkspace(workspaceUrl);
-      const channelId = await resolveChannelId(client, target.channel);
-      const name = normalizeSlackReactionName(input.emoji);
-      await client.api(`reactions.${input.action}`, {
-        channel: channelId,
-        timestamp: ts,
-        name
-      });
-    }
-  });
-  return { ok: true };
-}
-
-// src/cli/draft-server.ts
-import { createServer } from "node:http";
-import { exec } from "node:child_process";
-function openDraftEditor(config) {
-  return new Promise((resolve3, reject) => {
-    let settled = false;
-    const server = createServer(async (req, res) => {
-      if (req.method === "GET" && (req.url === "/" || req.url === "/index.html")) {
-        const html = buildEditorHtml(config);
-        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-        res.end(html);
-        return;
-      }
-      if (req.method === "POST" && req.url === "/send") {
-        try {
-          const body = await readBody(req);
-          const data = JSON.parse(body);
-          if (typeof data.text !== "string" || !data.text.trim()) {
-            res.writeHead(400, { "Content-Type": "application/json" });
-            res.end(JSON.stringify({ ok: false, error: "text is required" }));
-            return;
-          }
-          const sendResult = await config.onSend(data.text);
-          res.writeHead(200, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: true, ts: sendResult.ts }));
-          settled = true;
-          resolve3({ sent: true, text: data.text });
-          setTimeout(() => server.close(), 300);
-        } catch (err) {
-          res.writeHead(500, { "Content-Type": "application/json" });
-          res.end(JSON.stringify({ ok: false, error: String(err) }));
-        }
-        return;
-      }
-      if (req.method === "POST" && req.url === "/cancel") {
-        res.writeHead(200, { "Content-Type": "application/json" });
-        res.end(JSON.stringify({ ok: true }));
-        settled = true;
-        resolve3({ cancelled: true });
-        setTimeout(() => server.close(), 300);
-        return;
-      }
-      res.writeHead(404);
-      res.end("Not found");
-    });
-    server.on("error", (err) => {
-      if (!settled) {
-        reject(err);
-      }
-    });
-    server.on("close", () => {
-      clearTimeout(idleTimeout);
-      if (!settled) {
-        settled = true;
-        resolve3({ cancelled: true });
-      }
-    });
-    const idleTimeout = setTimeout(() => {
-      if (!settled) {
-        server.close();
-      }
-    }, 30 * 60 * 1000);
-    server.listen(0, "127.0.0.1", () => {
-      const addr = server.address();
-      const port = typeof addr === "object" && addr ? addr.port : 0;
-      const url = `http://127.0.0.1:${port}`;
-      process.stderr.write(`Draft editor: ${url}
-`);
-      openBrowser(url);
-    });
-  });
-}
-function readBody(req) {
-  return new Promise((resolve3, reject) => {
-    const chunks = [];
-    req.on("data", (chunk) => chunks.push(chunk));
-    req.on("end", () => resolve3(Buffer.concat(chunks).toString()));
-    req.on("error", reject);
-  });
-}
-function openBrowser(url) {
-  const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
-  exec(`${cmd} "${url}"`, () => {});
-}
-function buildSlackThreadUrl(config) {
-  if (!config.workspaceUrl || !config.channelId || !config.threadTs) {
-    return null;
-  }
-  const tsNoDot = config.threadTs.replace(".", "");
-  return `${config.workspaceUrl.replace(/\/$/, "")}/archives/${config.channelId}/p${tsNoDot}`;
-}
-function extractWorkspaceName(url) {
-  if (!url) {
-    return null;
-  }
-  try {
-    const host = new URL(url).hostname;
-    const parts = host.split(".");
-    if (parts.length >= 3 && parts.at(-2) === "slack") {
-      return parts.slice(0, -2).join(".");
-    }
-    return host;
-  } catch {
-    return null;
-  }
-}
-function buildEditorHtml(config) {
-  const threadUrl = buildSlackThreadUrl(config);
-  const workspaceName = extractWorkspaceName(config.workspaceUrl);
-  const injectedConfig = JSON.stringify({
-    channelName: config.channelName,
-    channelId: config.channelId || null,
-    workspaceUrl: config.workspaceUrl || null,
-    workspaceName,
-    threadTs: config.threadTs || null,
-    threadUrl,
-    initialText: config.initialText || ""
-  });
-  return EDITOR_HTML.replace("__DRAFT_CONFIG__", injectedConfig.replace(/</g, "\\u003c"));
-}
-var EDITOR_HTML = `<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>Draft Message — Agent Slack</title>
-<link rel="preconnect" href="https://fonts.googleapis.com">
-<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500&display=swap" rel="stylesheet">
-<style>
-  :root {
-    --bg: #1a1d21;
-    --surface: #222529;
-    --surface-raised: #2c2d31;
-    --border: #393b3f;
-    --border-focus: #1264a3;
-    --text: #d1d2d3;
-    --text-secondary: #ababad;
-    --text-muted: #696a6d;
-    --green: #007a5a;
-    --green-hover: #148567;
-    --red: #e01e5a;
-    --blue: #1264a3;
-    --blue-link: #1d9bd1;
-    --code-bg: #1a1d21;
-    --blockquote-border: #616061;
-    --toolbar-active: rgba(29,155,209,0.15);
-  }
-
-  * { margin: 0; padding: 0; box-sizing: border-box; }
-
-  body {
-    font-family: Slack-Lato, Lato, appleLogo, sans-serif;
-    background: var(--bg);
-    color: var(--text);
-    display: flex;
-    align-items: flex-start;
-    justify-content: center;
-    min-height: 100vh;
-    padding: 40px 24px;
-  }
-
-  .page {
-    width: 100%;
-    max-width: 720px;
-    display: flex;
-    flex-direction: column;
-    align-items: center;
-    animation: fadeIn 0.18s ease-out;
-  }
-
-  @keyframes fadeIn {
-    from { opacity: 0; transform: translateY(6px); }
-    to   { opacity: 1; transform: translateY(0); }
-  }
-
-  /* ── Branding ── */
-  .brand {
-    position: relative;
-    text-align: center;
-    margin-bottom: 20px;
-    user-select: none;
-  }
-  .brand-name {
-    font-size: 17px;
-    font-weight: 900;
-    letter-spacing: -0.3px;
-    color: var(--text);
-  }
-  .brand-byline {
-    display: flex;
-    align-items: center;
-    gap: 6px;
-    margin-top: 2px;
-    justify-content: center;
-    font-family: 'Inter', sans-serif;
-    font-size: 10px;
-    font-weight: 500;
-    color: rgba(255,255,255,0.5);
-  }
-  .brand-byline a {
-    color: rgba(255,255,255,0.6);
-    text-decoration: none;
-  }
-  .brand-byline a:hover {
-    color: rgba(255,255,255,0.8);
-  }
-  .brand-sub {
-    font-size: 11px;
-    font-weight: 600;
-    letter-spacing: 1.5px;
-    text-transform: uppercase;
-    color: var(--text-muted);
-    margin-top: 8px;
-  }
-  .brand-byline img {
-    width: 12px;
-    height: 12px;
-    opacity: 0.6;
-    vertical-align: -1px;
-  }
-
-  /* ── Context bar ── */
-  .context-bar {
-    width: 100%;
-    display: flex;
-    align-items: center;
-    gap: 6px;
-    padding: 0 4px;
-    margin-bottom: 10px;
-    font-size: 13px;
-    color: var(--text-secondary);
-  }
-
-  .context-bar .hash-icon {
-    width: 15px;
-    height: 15px;
-    color: var(--text-muted);
-    flex-shrink: 0;
-  }
-
-  .context-bar .channel {
-    font-weight: 700;
-    color: var(--text);
-  }
-
-  .context-bar .workspace-label {
-    color: var(--text-muted);
-    font-size: 13px;
-    margin-left: 8px;
-  }
-
-  .context-bar .thread-link {
-    margin-left: auto;
-    font-size: 12px;
-    color: var(--blue-link);
-    text-decoration: none;
-    display: flex;
-    align-items: center;
-    gap: 4px;
-  }
-  .context-bar .thread-link:hover { text-decoration: underline; }
-  .context-bar .thread-link svg {
-    width: 12px;
-    height: 12px;
-    fill: none;
-    stroke: currentColor;
-    stroke-width: 2;
-  }
-
-  /* ── Composer card ── */
-  .composer {
-    width: 100%;
-    background: var(--surface);
-    border: 1px solid #818385;
-    border-radius: 8px;
-    overflow: hidden;
-    transition: border-color 0.15s;
-  }
-
-  .composer:focus-within {
-    border-color: var(--border-focus);
-  }
-
-  /* ── Toolbar ── */
-  .toolbar {
-    display: flex;
-    align-items: center;
-    gap: 1px;
-    padding: 4px 8px;
-    border-bottom: 1px solid var(--border);
-    background: var(--surface);
-  }
-
-  .toolbar-btn {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    width: 32px;
-    height: 32px;
-    border: none;
-    border-radius: 4px;
-    background: transparent;
-    color: var(--text-secondary);
-    cursor: pointer;
-    font-size: 13px;
-    font-family: inherit;
-    transition: all 0.08s;
-    position: relative;
-    flex-shrink: 0;
-  }
-
-  .toolbar-btn:hover {
-    background: var(--surface-raised);
-    color: var(--text);
-  }
-
-  .toolbar-btn.active {
-    background: var(--toolbar-active);
-    color: var(--blue-link);
-  }
-
-  .toolbar-btn.disabled {
-    opacity: 0.3;
-    pointer-events: none;
-  }
-
-  .toolbar-btn svg { width: 16px; height: 16px; fill: currentColor; }
-  .toolbar-btn .b  { font-weight: 800; font-size: 15px; line-height: 1; }
-  .toolbar-btn .i  { font-style: italic; font-weight: 600; font-size: 15px; font-family: Georgia, serif; line-height: 1; }
-  .toolbar-btn .s  { text-decoration: line-through; font-weight: 600; font-size: 13px; line-height: 1; }
-
-  .toolbar-sep {
-    width: 1px;
-    height: 20px;
-    background: var(--border);
-    margin: 0 4px;
-    flex-shrink: 0;
-  }
-
-  /* Tooltip */
-  .toolbar-btn[data-tip]::after {
-    content: attr(data-tip);
-    position: absolute;
-    bottom: calc(100% + 6px);
-    left: 50%;
-    transform: translateX(-50%);
-    background: #1d1d1d;
-    color: #e0e0e0;
-    font-size: 11px;
-    font-weight: 400;
-    font-style: normal;
-    text-decoration: none;
-    padding: 4px 8px;
-    border-radius: 6px;
-    white-space: nowrap;
-    pointer-events: none;
-    opacity: 0;
-    transition: opacity 0.12s;
-    z-index: 20;
-  }
-  .toolbar-btn:hover[data-tip]::after { opacity: 1; }
-
-  /* ── Editor ── */
-  .editor {
-    min-height: 200px;
-    max-height: 55vh;
-    overflow-y: auto;
-    padding: 12px 16px;
-    font-size: 15px;
-    line-height: 1.46668;
-    color: var(--text);
-    outline: none;
-    word-wrap: break-word;
-    overflow-wrap: break-word;
-  }
-
-  .editor:empty::before {
-    content: attr(data-placeholder);
-    color: var(--text-muted);
-    pointer-events: none;
-  }
-
-  .editor b, .editor strong { font-weight: 700; }
-  .editor i, .editor em { font-style: italic; }
-  .editor s, .editor strike, .editor del { text-decoration: line-through; }
-
-  .editor code {
-    background: var(--code-bg);
-    border: 1px solid var(--border);
-    border-radius: 3px;
-    padding: 2px 4px;
-    font-family: Monaco, Menlo, Consolas, 'Courier New', monospace;
-    font-size: 12px;
-    color: #e06c75;
-  }
-
-  .editor pre {
-    background: var(--code-bg);
-    border: 1px solid var(--border);
-    border-radius: 4px;
-    padding: 8px 12px;
-    margin: 4px 0;
-    font-family: Monaco, Menlo, Consolas, 'Courier New', monospace;
-    font-size: 12px;
-    line-height: 1.5;
-    overflow-x: auto;
-    white-space: pre-wrap;
-    color: var(--text);
-  }
-
-  .editor pre code {
-    background: none;
-    border: none;
-    padding: 0;
-    font-size: inherit;
-    color: inherit;
-  }
-
-  /* Adjacent <pre> elements look like one code block (browser splits on Enter) */
-  .editor pre + pre,
-  .editor pre + br + pre {
-    border-top: none;
-    margin-top: -4px; /* collapse gap */
-    padding-top: 0;
-    border-top-left-radius: 0;
-    border-top-right-radius: 0;
-  }
-  .editor pre:has(+ pre),
-  .editor pre:has(+ br + pre) {
-    border-bottom: none;
-    margin-bottom: 0;
-    padding-bottom: 0;
-    border-bottom-left-radius: 0;
-    border-bottom-right-radius: 0;
-  }
-
-  .editor blockquote {
-    border-left: 4px solid var(--blockquote-border);
-    padding: 4px 0 4px 16px;
-    margin: 4px 0;
-    color: var(--text-secondary);
-  }
-
-  .editor ul, .editor ol { padding-left: 26px; margin: 4px 0; }
-  .editor li { margin: 2px 0; }
-  .editor a { color: var(--blue-link); text-decoration: none; }
-  .editor a:hover { text-decoration: underline; }
-
-  /* ── Source textarea ── */
-  .source-editor {
-    display: none;
-    min-height: 200px;
-    max-height: 55vh;
-    width: 100%;
-    padding: 12px 16px;
-    font-family: Monaco, Menlo, Consolas, 'Courier New', monospace;
-    font-size: 13px;
-    line-height: 1.5;
-    background: var(--surface);
-    color: var(--text);
-    border: none;
-    outline: none;
-    resize: vertical;
-  }
-
-  /* ── Bottom bar ── */
-  .bottom-bar {
-    display: flex;
-    align-items: center;
-    justify-content: space-between;
-    padding: 6px 10px;
-    border-top: 1px solid var(--border);
-    background: var(--surface);
-  }
-
-  .bottom-left {
-    display: flex;
-    align-items: center;
-    gap: 10px;
-  }
-
-  .hint {
-    font-size: 12px;
-    color: var(--text-muted);
-  }
-  .hint kbd {
-    background: var(--surface-raised);
-    border: 1px solid var(--border);
-    border-radius: 3px;
-    padding: 1px 4px;
-    font-family: inherit;
-    font-size: 11px;
-  }
-
-  .btn-send {
-    background: var(--green);
-    color: #fff;
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    width: 32px;
-    height: 32px;
-    border: none;
-    border-radius: 4px;
-    cursor: pointer;
-    transition: all 0.1s;
-    flex-shrink: 0;
-  }
-  .btn-send:hover { background: var(--green-hover); }
-  .btn-send:disabled { opacity: 0.3; cursor: not-allowed; }
-  .btn-send svg { width: 16px; height: 16px; fill: currentColor; }
-
-  .cancel-link {
-    background: none;
-    border: none;
-    color: var(--text-muted);
-    font-size: 12px;
-    font-family: inherit;
-    cursor: pointer;
-    padding: 4px 6px;
-  }
-  .cancel-link:hover { color: var(--text-secondary); text-decoration: underline; }
-
-  .btn-aa {
-    display: inline-flex;
-    align-items: center;
-    justify-content: center;
-    width: 32px;
-    height: 32px;
-    border: none;
-    border-radius: 4px;
-    background: transparent;
-    color: var(--text-secondary);
-    cursor: pointer;
-    font-size: 14px;
-    font-weight: 700;
-    font-family: inherit;
-    transition: all 0.08s;
-    flex-shrink: 0;
-  }
-  .btn-aa:hover { background: var(--surface-raised); color: var(--text); }
-  .btn-aa.active { background: var(--toolbar-active); color: var(--blue-link); }
-
-  .btn-source {
-    background: transparent;
-    color: var(--text-muted);
-    font-size: 11px;
-    font-weight: 600;
-    padding: 3px 6px;
-    border-radius: 4px;
-    border: 1px solid transparent;
-    cursor: pointer;
-    font-family: Monaco, Menlo, Consolas, monospace;
-  }
-  .btn-source:hover { color: var(--text-secondary); border-color: var(--border); }
-  .btn-source.active { color: var(--blue-link); border-color: rgba(29,155,209,0.3); }
-
-  /* ── Inline link popover (Slack-style two-field) ── */
-  .link-popover {
-    display: none;
-    position: absolute;
-    z-index: 30;
-    background: var(--surface-raised);
-    border: 1px solid var(--border);
-    border-radius: 8px;
-    padding: 12px 14px;
-    box-shadow: 0 4px 20px rgba(0,0,0,0.5);
-    flex-direction: column;
-    gap: 8px;
-    width: 340px;
-  }
-  .link-popover.visible { display: flex; }
-
-  .link-popover label {
-    font-size: 12px;
-    font-weight: 600;
-    color: var(--text-secondary);
-    display: block;
-    margin-bottom: 3px;
-  }
-
-  .link-popover input {
-    width: 100%;
-    background: var(--bg);
-    border: 1px solid var(--border);
-    border-radius: 4px;
-    padding: 6px 8px;
-    font-size: 13px;
-    color: var(--text);
-    font-family: inherit;
-    outline: none;
-  }
-  .link-popover input:focus { border-color: var(--border-focus); }
-  .link-popover input::placeholder { color: var(--text-muted); }
-
-  .link-popover .popover-actions {
-    display: flex;
-    justify-content: flex-end;
-    gap: 6px;
-    margin-top: 2px;
-  }
-
-  .link-popover .popover-btn {
-    border: none;
-    border-radius: 4px;
-    padding: 5px 12px;
-    font-size: 12px;
-    font-weight: 700;
-    cursor: pointer;
-    font-family: inherit;
-  }
-  .link-popover .popover-btn-save {
-    background: var(--green);
-    color: #fff;
-  }
-  .link-popover .popover-btn-save:hover { background: var(--green-hover); }
-  .link-popover .popover-btn-cancel {
-    background: transparent;
-    color: var(--text-muted);
-  }
-  .link-popover .popover-btn-cancel:hover { color: var(--text-secondary); }
-
-  /* ── Result overlay ── */
-  .overlay {
-    display: none;
-    position: fixed;
-    inset: 0;
-    background: rgba(0,0,0,0.8);
-    z-index: 100;
-    align-items: center;
-    justify-content: center;
-  }
-  .overlay.visible { display: flex; }
-
-  .overlay-msg {
-    text-align: center;
-    font-size: 18px;
-    font-weight: 600;
-  }
-  .overlay-msg.success { color: #2eb67d; }
-  .overlay-msg.error { color: var(--red); }
-  .overlay-msg small {
-    display: block;
-    margin-top: 8px;
-    font-size: 13px;
-    font-weight: 400;
-    color: var(--text-muted);
-  }
-
-  /* Scrollbar */
-  .editor::-webkit-scrollbar { width: 6px; }
-  .editor::-webkit-scrollbar-track { background: transparent; }
-  .editor::-webkit-scrollbar-thumb { background: var(--border); border-radius: 3px; }
-</style>
-</head>
-<body>
-
-<div class="page">
-  <!-- Branding -->
-  <div class="brand">
-    <div class="brand-name">Agent Slack</div>
-    <div class="brand-byline">By <a href="https://stably.ai" target="_blank" rel="noopener"><img src="data:image/svg+xml;base64,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" alt="" /></a><a href="https://stably.ai" target="_blank" rel="noopener">Stably.ai</a></div>
-    <div class="brand-sub">draft mode</div>
-  </div>
-
-  <!-- Context: channel + thread link -->
-  <div class="context-bar">
-    <svg class="hash-icon" viewBox="0 0 20 20" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round">
-      <line x1="7.5" y1="2" x2="6" y2="18"/><line x1="14" y1="2" x2="12.5" y2="18"/>
-      <line x1="3" y1="7" x2="17.5" y2="7"/><line x1="2.5" y1="13" x2="17" y2="13"/>
-    </svg>
-    <span class="channel" id="channelName"></span>
-    <span class="workspace-label" id="workspaceName"></span>
-    <a class="thread-link" id="threadLink" style="display:none" target="_blank">
-      <span>View thread</span>
-      <svg viewBox="0 0 16 16" stroke-linecap="round" stroke-linejoin="round">
-        <path d="M6 3h7v7"/><path d="M13 3L6 10"/>
-      </svg>
-    </a>
-  </div>
-
-  <!-- Composer -->
-  <div class="composer">
-    <div class="toolbar" id="toolbar">
-      <button class="toolbar-btn" data-cmd="bold"               data-tip="Bold (&#8984;B)"><span class="b">B</span></button>
-      <button class="toolbar-btn" data-cmd="italic"             data-tip="Italic (&#8984;I)"><span class="i">I</span></button>
-      <button class="toolbar-btn" data-cmd="strikethrough"      data-tip="Strikethrough (&#8984;&#8679;X)"><span class="s">S</span></button>
-      <div class="toolbar-sep"></div>
-      <button class="toolbar-btn" data-cmd="link"               data-tip="Link (&#8984;K)">
-        <svg viewBox="0 0 16 16"><path d="M6.354 5.5H4a3 3 0 0 0 0 6h3a3 3 0 0 0 2.83-4M9.646 10.5H12a3 3 0 0 0 0-6H9a3 3 0 0 0-2.83 4" fill="none" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/></svg>
-      </button>
-      <div class="toolbar-sep"></div>
-      <button class="toolbar-btn" data-cmd="insertOrderedList"  data-tip="Numbered list (&#8984;&#8679;7)">
-        <svg viewBox="0 0 16 16"><text x="1" y="5" font-size="5" fill="currentColor" font-family="system-ui" font-weight="600">1.</text><line x1="7" y1="3.5" x2="15" y2="3.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><text x="1" y="10" font-size="5" fill="currentColor" font-family="system-ui" font-weight="600">2.</text><line x1="7" y1="8.5" x2="15" y2="8.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><text x="1" y="15" font-size="5" fill="currentColor" font-family="system-ui" font-weight="600">3.</text><line x1="7" y1="13.5" x2="15" y2="13.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/></svg>
-      </button>
-      <button class="toolbar-btn" data-cmd="insertUnorderedList" data-tip="Bulleted list (&#8984;&#8679;8)">
-        <svg viewBox="0 0 16 16"><circle cx="3" cy="3.5" r="1.5" fill="currentColor"/><line x1="7" y1="3.5" x2="15" y2="3.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><circle cx="3" cy="8.5" r="1.5" fill="currentColor"/><line x1="7" y1="8.5" x2="15" y2="8.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><circle cx="3" cy="13.5" r="1.5" fill="currentColor"/><line x1="7" y1="13.5" x2="15" y2="13.5" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/></svg>
-      </button>
-      <div class="toolbar-sep"></div>
-      <button class="toolbar-btn" data-cmd="blockquote"          data-tip="Quote (&#8984;&#8679;9)">
-        <svg viewBox="0 0 16 16"><rect x="1" y="2" width="2.5" height="12" rx="1" fill="currentColor" opacity="0.5"/><line x1="6" y1="4" x2="15" y2="4" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><line x1="6" y1="8" x2="13" y2="8" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/><line x1="6" y1="12" x2="11" y2="12" stroke="currentColor" stroke-width="1.2" stroke-linecap="round"/></svg>
-      </button>
-      <div class="toolbar-sep"></div>
-      <button class="toolbar-btn" data-cmd="code"                data-tip="Code (&#8984;E)">
-        <svg viewBox="0 0 16 16"><polyline points="5,3 1,8 5,13" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/><polyline points="11,3 15,8 11,13" fill="none" stroke="currentColor" stroke-width="1.4" stroke-linecap="round" stroke-linejoin="round"/></svg>
-      </button>
-      <button class="toolbar-btn" data-cmd="codeblock"           data-tip="Code block (&#8984;&#8679;C)">
-        <svg viewBox="0 0 16 16"><rect x="1" y="1" width="14" height="14" rx="2" fill="none" stroke="currentColor" stroke-width="1.2"/><polyline points="5,5 3,8 5,11" fill="none" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/><polyline points="11,5 13,8 11,11" fill="none" stroke="currentColor" stroke-width="1.1" stroke-linecap="round" stroke-linejoin="round"/></svg>
-      </button>
-    </div>
-
-    <div
-      class="editor"
-      id="editor"
-      contenteditable="true"
-      data-placeholder="Message #channel"
-      spellcheck="true"
-    ></div>
-
-    <textarea class="source-editor" id="sourceEditor" spellcheck="false"></textarea>
-
-    <div class="bottom-bar">
-      <div class="bottom-left">
-        <button class="btn-aa active" id="aaToggle" onclick="toggleToolbar()" data-tip="Formatting">Aa</button>
-        <button class="btn-source" id="sourceToggle" onclick="toggleSourceMode()">mrkdwn</button>
-        <span class="hint"><kbd id="modKey">&#8984;</kbd><kbd>Enter</kbd> to send</span>
-      </div>
-      <div style="display:flex;align-items:center;gap:8px;">
-        <button class="cancel-link" onclick="handleCancel()">Cancel</button>
-        <button class="btn-send" id="sendBtn" onclick="handleSend()" disabled>
-          <svg viewBox="0 0 20 20"><path d="M1.7 9.1l7.3 1 .01 0L1.7 9.1zm0 1.8l7.3-1-7.3 1zM1.5 2.1c-.2-.7.5-1.3 1.1-1L19 8.9c.6.3.6 1.2 0 1.5L2.6 18.9c-.7.3-1.3-.3-1.1-1l1.8-6.9L11 10 3.3 8.9 1.5 2.1z"/></svg>
-        </button>
-      </div>
-    </div>
-  </div>
-</div>
-
-<!-- Inline link popover (Slack-style two-field) -->
-<div class="link-popover" id="linkPopover">
-  <div>
-    <label>Text</label>
-    <input type="text" id="linkTextInput" placeholder="Display text">
-  </div>
-  <div>
-    <label>Link</label>
-    <input type="text" id="linkUrlInput" placeholder="https://example.com">
-  </div>
-  <div class="popover-actions">
-    <button class="popover-btn popover-btn-cancel" onclick="closeLinkPopover()">Cancel</button>
-    <button class="popover-btn popover-btn-save" onclick="applyLink()">Save</button>
-  </div>
-</div>
-
-<!-- Result overlay -->
-<div class="overlay" id="resultOverlay">
-  <div class="overlay-msg" id="resultMsg"></div>
-</div>
-
-<script>
-// ─── Config ───
-const CONFIG = __DRAFT_CONFIG__;
-const IS_MAC = /Mac|iPhone/.test(navigator.platform);
-const MOD = IS_MAC ? 'metaKey' : 'ctrlKey';
-
-// ─── Init header ───
-document.getElementById('channelName').textContent = CONFIG.channelName;
-if (CONFIG.workspaceName) {
-  document.getElementById('workspaceName').textContent = CONFIG.workspaceName;
-}
-if (!IS_MAC) {
-  document.getElementById('modKey').textContent = 'Ctrl';
-  document.querySelectorAll('[data-tip]').forEach(el => {
-    el.dataset.tip = el.dataset.tip.replace(/\\u2318/g, 'Ctrl+').replace(/\\u21E7/g, 'Shift+');
-  });
-}
-if (CONFIG.threadTs) {
-  const link = document.getElementById('threadLink');
-  link.style.display = '';
-  if (CONFIG.threadUrl) {
-    link.href = CONFIG.threadUrl;
-  } else {
-    link.removeAttribute('href');
-    link.style.cursor = 'default';
-    link.style.color = 'var(--text-muted)';
-  }
-}
-
-// ─── Editor refs ───
-const editor = document.getElementById('editor');
-const sourceEditor = document.getElementById('sourceEditor');
-const linkPopover = document.getElementById('linkPopover');
-const linkUrlInput = document.getElementById('linkUrlInput');
-let sourceMode = false;
-
-// Set Slack-style placeholder
-editor.dataset.placeholder = 'Message #' + CONFIG.channelName;
-
-// ─── Detect if cursor is inside a code element ───
-function isInsideCode(node) {
-  let el = node;
-  while (el && el !== editor) {
-    if (el.nodeType === 1) {
-      const tag = el.tagName.toLowerCase();
-      if (tag === 'pre' || tag === 'code') { return true; }
-    }
-    el = el.parentNode;
-  }
-  return false;
-}
-
-function cursorInCode() {
-  const sel = window.getSelection();
-  if (!sel || sel.rangeCount === 0) { return false; }
-  return isInsideCode(sel.anchorNode);
-}
-
-// ─── mrkdwn to HTML (initial content) ───
-function escapeHtml(t) {
-  return t.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-}
-
-function mrkdwnToHtml(text) {
-  if (!text) { return ''; }
-  const codeBlocks = [];
-  text = text.replace(/\`\`\`([\\s\\S]*?)\`\`\`/g, (_, code) => {
-    codeBlocks.push('<pre>' + escapeHtml(code.trim()) + '</pre>');
-    return '\\x00CB' + (codeBlocks.length - 1) + '\\x00';
-  });
-  const inlineCodes = [];
-  text = text.replace(/\`([^\`\\n]+)\`/g, (_, code) => {
-    inlineCodes.push('<code>' + escapeHtml(code) + '</code>');
-    return '\\x00IC' + (inlineCodes.length - 1) + '\\x00';
-  });
-
-  const lines = text.split('\\n');
-  let html = '', idx = 0;
-  while (idx < lines.length) {
-    const line = lines[idx];
-    if (line.startsWith('> ')) {
-      const q = [];
-      while (idx < lines.length && lines[idx].startsWith('> ')) { q.push(fmtInline(lines[idx].slice(2))); idx++; }
-      html += '<blockquote>' + q.join('<br>') + '</blockquote>'; continue;
-    }
-    if (/^[\\u2022\\-\\*] /.test(line)) {
-      const items = [];
-      while (idx < lines.length && /^[\\u2022\\-\\*] /.test(lines[idx])) { items.push('<li>' + fmtInline(lines[idx].replace(/^[\\u2022\\-\\*] /, '')) + '</li>'); idx++; }
-      html += '<ul>' + items.join('') + '</ul>'; continue;
-    }
-    if (/^\\d+[\\.\\)] /.test(line)) {
-      const items = [];
-      while (idx < lines.length && /^\\d+[\\.\\)] /.test(lines[idx])) { items.push('<li>' + fmtInline(lines[idx].replace(/^\\d+[\\.\\)] /, '')) + '</li>'); idx++; }
-      html += '<ol>' + items.join('') + '</ol>'; continue;
-    }
-    html += (line ? fmtInline(line) : '') + '<br>';
-    idx++;
-  }
-  codeBlocks.forEach((b, i) => { html = html.replace('\\x00CB' + i + '\\x00', b); });
-  inlineCodes.forEach((c, i) => { html = html.replace('\\x00IC' + i + '\\x00', c); });
-  return html.replace(/(<br>)+$/, '');
-}
-
-function fmtInline(t) {
-  t = t.replace(/<(https?:\\/\\/[^|>]+)\\|([^>]+)>/g, '<a href="$1" target="_blank">$2</a>');
-  t = t.replace(/<(https?:\\/\\/[^>]+)>/g, '<a href="$1" target="_blank">$1</a>');
-  t = t.replace(/\\*([^\\*]+)\\*/g, '<b>$1</b>');
-  t = t.replace(/(?<![a-zA-Z0-9])_([^_]+)_(?![a-zA-Z0-9])/g, '<i>$1</i>');
-  t = t.replace(/~([^~]+)~/g, '<s>$1</s>');
-  return t;
-}
-
-// ─── HTML to mrkdwn (submission) ───
-function htmlToMrkdwn(root) {
-  const visited = new Set();
-  function walk(node) {
-    if (visited.has(node)) { return ''; }
-    if (node.nodeType === 3) { return node.textContent || ''; }
-    if (node.nodeType !== 1) { return ''; }
-    const el = node;
-    const tag = el.tagName.toLowerCase();
-    const kids = () => Array.from(el.childNodes).map(walk).join('');
-    switch (tag) {
-      case 'b': case 'strong': { const c = kids(); return c.trim() ? '*' + c + '*' : c; }
-      case 'i': case 'em':     { const c = kids(); return c.trim() ? '_' + c + '_' : c; }
-      case 's': case 'strike': case 'del': { const c = kids(); return c.trim() ? '~' + c + '~' : c; }
-      case 'code': return '\`' + (el.textContent || '') + '\`';
-      case 'pre': {
-        // Collect adjacent pres into one code block
-        const lines = [(el.textContent || '').trimEnd()];
-        let next = el.nextElementSibling;
-        while (next && next.tagName === 'PRE') {
-          lines.push((next.textContent || '').trimEnd());
-          visited.add(next);
-          next = next.nextElementSibling;
-        }
-        return '\`\`\`\\n' + lines.filter(l => l).join('\\n') + '\\n\`\`\`\\n';
-      }
-      case 'blockquote': { const c = kids().trim(); return c.split('\\n').map(l => '> ' + l).join('\\n') + '\\n'; }
-      case 'ul': { let r = ''; for (const li of el.querySelectorAll(':scope > li')) { r += '\\u2022 ' + walk(li).trim() + '\\n'; } return r; }
-      case 'ol': { let r = '', n = 1; for (const li of el.querySelectorAll(':scope > li')) { r += n + '. ' + walk(li).trim() + '\\n'; n++; } return r; }
-      case 'li': return kids();
-      case 'a':  { const h = el.getAttribute('href'); const t = kids(); return (h && t && h !== t) ? '<' + h + '|' + t + '>' : (h || t); }
-      case 'br': return '\\n';
-      case 'div': case 'p': {
-        const c = kids();
-        const p = el.parentElement;
-        if (p && ['li','blockquote','td'].includes(p.tagName.toLowerCase())) { return c; }
-        return c.endsWith('\\n') ? c : c + '\\n';
-      }
-      case 'span': {
-        const st = el.style;
-        let c = kids();
-        if (st.fontWeight === 'bold' || Number(st.fontWeight) >= 700) { c = c.trim() ? '*' + c + '*' : c; }
-        if (st.fontStyle === 'italic') { c = c.trim() ? '_' + c + '_' : c; }
-        if (st.textDecoration && st.textDecoration.includes('line-through')) { c = c.trim() ? '~' + c + '~' : c; }
-        return c;
-      }
-      default: return kids();
+        channels: [target.channel]
+      });
+      const { client } = await input.ctx.getClientForWorkspace(workspaceUrl);
+      const channelId = await resolveChannelId(client, target.channel);
+      const name = normalizeSlackReactionName(input.emoji);
+      await client.api(`reactions.${input.action}`, {
+        channel: channelId,
+        timestamp: ts,
+        name
+      });
     }
-  }
-  return walk(root).replace(/\\n{3,}/g, '\\n\\n').trim();
+  });
+  return { ok: true };
 }
 
-// ─── Init editor content ───
-if (CONFIG.initialText) { editor.innerHTML = mrkdwnToHtml(CONFIG.initialText); }
-
-// ─── Toolbar execution ───
-function execCmd(command) {
-  // Block formatting inside code (except toggling code off)
-  const inCode = cursorInCode();
-  if (inCode && command !== 'code' && command !== 'codeblock') { return; }
-
-  switch (command) {
-    case 'bold':
-    case 'italic':
-    case 'strikethrough':
-    case 'insertOrderedList':
-    case 'insertUnorderedList':
-      document.execCommand(command, false, null);
-      break;
-    case 'blockquote':
-      document.execCommand('formatBlock', false, 'blockquote');
-      break;
-    case 'code': {
-      const sel = window.getSelection();
-      if (!sel || sel.rangeCount === 0) { break; }
-      // If already in code, unwrap
-      if (inCode) {
-        const codeEl = sel.anchorNode.nodeType === 1 ? sel.anchorNode : sel.anchorNode.parentElement;
-        const code = codeEl.closest('code');
-        if (code) {
-          const text = document.createTextNode(code.textContent || '');
-          code.parentNode.replaceChild(text, code);
-          const r = document.createRange(); r.selectNodeContents(text); sel.removeAllRanges(); sel.addRange(r);
+// src/cli/draft-server.ts
+import { createServer } from "node:http";
+import { execFile } from "node:child_process";
+import { readFileSync as readFileSync2 } from "node:fs";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { dirname as dirname3, join as join12 } from "node:path";
+function openDraftEditor(config) {
+  return new Promise((resolve3, reject) => {
+    let settled = false;
+    const server = createServer(async (req, res) => {
+      if (req.method === "GET" && (req.url === "/" || req.url === "/index.html")) {
+        const html = buildEditorHtml(config);
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        res.end(html);
+        return;
+      }
+      if (req.method === "POST" && req.url === "/send") {
+        try {
+          const body = await readBody(req);
+          const data = JSON.parse(body);
+          if (typeof data.text !== "string" || !data.text.trim()) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: false, error: "text is required" }));
+            return;
+          }
+          const sendResult = await config.onSend(data.text);
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ ok: true, ts: sendResult.ts }));
+          settled = true;
+          resolve3({ sent: true, text: data.text });
+          setTimeout(() => server.close(), 300);
+        } catch (err) {
+          const safeMessage = err instanceof Error ? err.message.replace(/xox[a-z]-[A-Za-z0-9-]+/g, "[REDACTED]") : "Send failed";
+          res.writeHead(500, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ ok: false, error: safeMessage }));
         }
-        break;
+        return;
       }
-      const range = sel.getRangeAt(0);
-      if (range.collapsed) { break; }
-      const code = document.createElement('code');
-      try { range.surroundContents(code); } catch (_) {
-        const frag = range.extractContents(); code.appendChild(frag); range.insertNode(code);
+      if (req.method === "POST" && req.url === "/cancel") {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ ok: true }));
+        settled = true;
+        resolve3({ cancelled: true });
+        setTimeout(() => server.close(), 300);
+        return;
       }
-      sel.removeAllRanges();
-      const nr = document.createRange(); nr.selectNodeContents(code); sel.addRange(nr);
-      break;
-    }
-    case 'codeblock': {
-      if (inCode) { break; } // No nesting
-      const sel = window.getSelection();
-      if (!sel) { break; }
-      const pre = document.createElement('pre');
-      if (!sel.isCollapsed) {
-        const range = sel.getRangeAt(0);
-        pre.textContent = range.extractContents().textContent || '';
-        range.insertNode(pre);
-      } else {
-        pre.innerHTML = '<br>';
-        const range = sel.getRangeAt(0);
-        range.insertNode(pre);
-        const nr = document.createRange(); nr.setStart(pre, 0); nr.collapse(true);
-        sel.removeAllRanges(); sel.addRange(nr);
+      res.writeHead(404);
+      res.end("Not found");
+    });
+    server.on("error", (err) => {
+      if (!settled) {
+        reject(err);
       }
-      break;
-    }
-    case 'link':
-      openLinkPopover();
-      return; // Don't refocus — popover takes focus
-  }
-  editor.focus();
-  updateToolbarState();
-}
-
-// Toolbar button clicks
-document.querySelectorAll('.toolbar-btn[data-cmd]').forEach(btn => {
-  btn.addEventListener('mousedown', (e) => {
-    e.preventDefault();
-    execCmd(btn.dataset.cmd);
-  });
-});
-
-// ─── Toolbar state ───
-function updateToolbarState() {
-  const inCode = cursorInCode();
-  document.querySelectorAll('.toolbar-btn[data-cmd]').forEach(btn => {
-    const cmd = btn.dataset.cmd;
-    // Disable non-code buttons when inside code
-    if (inCode && cmd !== 'code' && cmd !== 'codeblock') {
-      btn.classList.add('disabled');
-      btn.classList.remove('active');
-      return;
-    }
-    btn.classList.remove('disabled');
-    let active = false;
-    try {
-      if (['bold','italic','strikethrough','insertOrderedList','insertUnorderedList'].includes(cmd)) {
-        active = document.queryCommandState(cmd);
+    });
+    server.on("close", () => {
+      clearTimeout(idleTimeout);
+      if (!settled) {
+        settled = true;
+        resolve3({ cancelled: true });
+      }
+    });
+    const idleTimeout = setTimeout(() => {
+      if (!settled) {
+        server.close();
       }
-      if (cmd === 'code') { active = inCode; }
-    } catch (_) {}
-    btn.classList.toggle('active', active);
+    }, 30 * 60 * 1000);
+    server.listen(0, "127.0.0.1", () => {
+      const addr = server.address();
+      const port = typeof addr === "object" && addr ? addr.port : 0;
+      const url = `http://127.0.0.1:${port}`;
+      process.stderr.write(`Draft editor: ${url}
+`);
+      openBrowser(url);
+    });
   });
 }
-
-editor.addEventListener('keyup', updateToolbarState);
-editor.addEventListener('mouseup', updateToolbarState);
-editor.addEventListener('focus', updateToolbarState);
-
-// ─── Keyboard shortcuts (Slack-identical) ───
-editor.addEventListener('keydown', (e) => {
-  const mod = e[MOD];
-
-  // Cmd+Enter → Send
-  if (mod && e.key === 'Enter') { e.preventDefault(); handleSend(); return; }
-
-  // Cmd+B → Bold
-  if (mod && !e.shiftKey && e.key === 'b') { e.preventDefault(); execCmd('bold'); return; }
-
-  // Cmd+I → Italic
-  if (mod && !e.shiftKey && e.key === 'i') { e.preventDefault(); execCmd('italic'); return; }
-
-  // Cmd+Shift+X → Strikethrough
-  if (mod && e.shiftKey && (e.key === 'X' || e.key === 'x')) { e.preventDefault(); execCmd('strikethrough'); return; }
-
-  // Cmd+E → Inline code (Slack's actual shortcut)
-  if (mod && !e.shiftKey && e.key === 'e') { e.preventDefault(); execCmd('code'); return; }
-
-  // Cmd+Shift+C → Code block
-  if (mod && e.shiftKey && (e.key === 'C' || e.key === 'c' || e.code === 'KeyC')) { e.preventDefault(); execCmd('codeblock'); return; }
-
-  // Cmd+K → Link
-  if (mod && !e.shiftKey && e.key === 'k') { e.preventDefault(); execCmd('link'); return; }
-
-  // Cmd+Shift+7 → Numbered list
-  if (mod && e.shiftKey && e.key === '7') { e.preventDefault(); execCmd('insertOrderedList'); return; }
-
-  // Cmd+Shift+8 → Bulleted list
-  if (mod && e.shiftKey && e.key === '8') { e.preventDefault(); execCmd('insertUnorderedList'); return; }
-
-  // Cmd+Shift+9 → Blockquote
-  if (mod && e.shiftKey && e.key === '9') { e.preventDefault(); execCmd('blockquote'); return; }
-});
-
-// ─── Code block: merge split <pre> elements + escape logic ───
-function findParentPre(node) {
-  while (node && node !== editor) {
-    if (node.nodeType === 1 && node.tagName === 'PRE') { return node; }
-    node = node.parentNode;
-  }
-  return null;
-}
-
-function exitCodeBlock(pre) {
-  const sel = window.getSelection();
-  const p = document.createElement('div');
-  p.innerHTML = '<br>';
-  if (pre.parentNode === editor) {
-    pre.parentNode.insertBefore(p, pre.nextSibling);
-  } else {
-    const wrapper = pre.parentNode;
-    wrapper.parentNode.insertBefore(p, wrapper.nextSibling);
-  }
-  const nr = document.createRange();
-  nr.setStart(p, 0);
-  nr.collapse(true);
-  sel.removeAllRanges();
-  sel.addRange(nr);
-}
-
-// Code block management: the browser splits <pre> on Enter, creating adjacent
-// <pre> elements. We let this happen and handle it via:
-// 1. CSS: adjacent pres look like one block (no gaps/borders between them)
-// 2. Serialization: htmlToMrkdwn treats adjacent pres as one code block
-// 3. Escape: when user creates an empty pre after another empty pre, exit code
-
-// Track code block escape (double-Enter on empty line)
-editor.addEventListener('input', () => {
-  const pres = Array.from(editor.querySelectorAll('pre'));
-  if (pres.length < 2) { return; }
-
-  // Check for escape: last two adjacent pres are both empty
-  for (let i = pres.length - 1; i > 0; i--) {
-    const cur = pres[i];
-    const prev = pres[i - 1];
-    const curEmpty = !cur.textContent?.trim();
-    const prevEmpty = !prev.textContent?.trim();
-
-    if (curEmpty && prevEmpty) {
-      // Double-Enter escape: remove both empty pres, place cursor after
-      const lastRealPre = pres[i - 2] || null;
-      // Remove the two empty pres and their wrappers
-      [cur, prev].forEach(p => {
-        const parent = p.parentNode;
-        p.remove();
-        if (parent && parent !== editor && parent.tagName === 'DIV' && !parent.textContent?.trim()) {
-          parent.remove();
-        }
-      });
-      if (lastRealPre) {
-        exitCodeBlock(lastRealPre);
-      } else {
-        // No code left — just place cursor
-        const sel = window.getSelection();
-        if (sel) {
-          const div = document.createElement('div');
-          div.innerHTML = '<br>';
-          editor.appendChild(div);
-          const r = document.createRange();
-          r.setStart(div, 0);
-          r.collapse(true);
-          sel.removeAllRanges();
-          sel.addRange(r);
-        }
+var MAX_BODY_BYTES = 1024 * 1024;
+function readBody(req) {
+  return new Promise((resolve3, reject) => {
+    const chunks = [];
+    let totalBytes = 0;
+    req.on("data", (chunk) => {
+      totalBytes += chunk.length;
+      if (totalBytes > MAX_BODY_BYTES) {
+        req.destroy();
+        reject(new Error("Request body too large"));
+        return;
       }
-      return;
-    }
-  }
-});
-
-// ArrowDown at end of last code block → exit
-editor.addEventListener('keydown', (e) => {
-  if (e.key === 'ArrowDown') {
-    const sel = window.getSelection();
-    if (!sel || sel.rangeCount === 0) { return; }
-    const pre = findParentPre(sel.anchorNode);
-    if (pre && !pre.nextElementSibling) {
-      e.preventDefault();
-      exitCodeBlock(pre);
-    }
-  }
-}, true);
-
-// ─── Paste handler ───
-editor.addEventListener('paste', (e) => {
-  const cd = e.clipboardData;
-  if (!cd) { return; }
-  const html = cd.getData('text/html');
-  if (html) {
-    e.preventDefault();
-    const tmp = document.createElement('div');
-    tmp.innerHTML = html;
-    tmp.querySelectorAll('script,style,meta,link').forEach(el => el.remove());
-    tmp.querySelectorAll('[style]').forEach(el => {
-      const s = el.style;
-      const keep = {};
-      if (s.fontWeight === 'bold' || Number(s.fontWeight) >= 700) { keep.fontWeight = s.fontWeight; }
-      if (s.fontStyle === 'italic') { keep.fontStyle = s.fontStyle; }
-      if (s.textDecoration?.includes('line-through')) { keep.textDecoration = 'line-through'; }
-      el.removeAttribute('style');
-      Object.assign(el.style, keep);
+      chunks.push(chunk);
     });
-    document.execCommand('insertHTML', false, tmp.innerHTML);
-  }
-});
-
-// ─── Link popover (Slack-style: select text, Cmd+K, two-field form) ───
-let linkSavedRange = null;
-let linkPopoverOpen = false;
-const linkTextInput = document.getElementById('linkTextInput');
-
-function openLinkPopover() {
-  const sel = window.getSelection();
-  if (!sel || sel.rangeCount === 0) { return; }
-
-  linkSavedRange = sel.getRangeAt(0).cloneRange();
-  const selectedText = sel.toString();
-
-  // Position near selection
-  const rect = linkSavedRange.getBoundingClientRect();
-  const editorRect = editor.getBoundingClientRect();
-  linkPopover.style.top = (rect.bottom + window.scrollY + 6) + 'px';
-  linkPopover.style.left = Math.max(8, Math.min(rect.left + window.scrollX, editorRect.right - 360)) + 'px';
-
-  // Pre-fill text field with selected text
-  linkTextInput.value = selectedText;
-
-  // If selection is already a link, pre-fill URL
-  let existingUrl = '';
-  const anchor = sel.anchorNode?.parentElement?.closest('a');
-  if (anchor) {
-    existingUrl = anchor.getAttribute('href') || '';
-    linkTextInput.value = anchor.textContent || selectedText;
-  }
-  linkUrlInput.value = existingUrl;
-
-  // Show popover (use rAF to avoid same-frame mousedown closing it)
-  requestAnimationFrame(() => {
-    linkPopover.classList.add('visible');
-    linkPopoverOpen = true;
-    linkUrlInput.focus();
-    linkUrlInput.select();
+    req.on("end", () => resolve3(Buffer.concat(chunks).toString()));
+    req.on("error", reject);
   });
 }
-
-function closeLinkPopover() {
-  linkPopover.classList.remove('visible');
-  linkPopoverOpen = false;
-  editor.focus();
-  if (linkSavedRange) {
-    const sel = window.getSelection();
-    sel.removeAllRanges();
-    sel.addRange(linkSavedRange);
-  }
-}
-
-function applyLink() {
-  const url = linkUrlInput.value.trim();
-  const text = linkTextInput.value.trim();
-  linkPopover.classList.remove('visible');
-  linkPopoverOpen = false;
-
-  if (!url || !linkSavedRange) { editor.focus(); return; }
-
-  const sel = window.getSelection();
-  sel.removeAllRanges();
-  sel.addRange(linkSavedRange);
-
-  // Check if we're updating an existing link
-  const anchor = sel.anchorNode?.parentElement?.closest('a');
-  if (anchor) {
-    anchor.setAttribute('href', url);
-    if (text) { anchor.textContent = text; }
-  } else {
-    // Create new link
-    const a = document.createElement('a');
-    a.href = url;
-    a.target = '_blank';
-    a.textContent = text || url;
-
-    if (!linkSavedRange.collapsed) {
-      linkSavedRange.deleteContents();
-    }
-    linkSavedRange.insertNode(a);
-
-    const nr = document.createRange();
-    nr.setStartAfter(a);
-    nr.collapse(true);
-    sel.removeAllRanges();
-    sel.addRange(nr);
-  }
-
-  editor.focus();
-  linkSavedRange = null;
+function openBrowser(url) {
+  const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+  execFile(cmd, [url], () => {});
 }
-
-// Popover key handling — both inputs
-[linkTextInput, linkUrlInput].forEach(input => {
-  input.addEventListener('keydown', (e) => {
-    if (e.key === 'Enter')  { e.preventDefault(); applyLink(); }
-    if (e.key === 'Escape') { e.preventDefault(); closeLinkPopover(); }
-  });
-});
-
-// Close popover on outside click (delayed check to avoid same-event close)
-document.addEventListener('mousedown', (e) => {
-  if (linkPopoverOpen && !linkPopover.contains(e.target) && !e.target.closest('.toolbar-btn')) {
-    closeLinkPopover();
+function buildSlackThreadUrl(config) {
+  if (!config.workspaceUrl || !config.channelId || !config.threadTs) {
+    return null;
   }
-});
-
-// ─── Toolbar toggle (Aa button) ───
-let toolbarVisible = true;
-function toggleToolbar() {
-  toolbarVisible = !toolbarVisible;
-  document.getElementById('toolbar').style.display = toolbarVisible ? '' : 'none';
-  document.getElementById('aaToggle').classList.toggle('active', toolbarVisible);
-}
-
-// ─── Send button state ───
-function updateSendBtn() {
-  const text = sourceMode ? sourceEditor.value.trim() : (editor.textContent || '').trim();
-  document.getElementById('sendBtn').disabled = !text;
+  const tsNoDot = config.threadTs.replaceAll(".", "");
+  return `${config.workspaceUrl.replace(/\/$/, "")}/archives/${config.channelId}/p${tsNoDot}`;
 }
-editor.addEventListener('input', updateSendBtn);
-
-// ─── Source mode ───
-function toggleSourceMode() {
-  sourceMode = !sourceMode;
-  document.getElementById('sourceToggle').classList.toggle('active', sourceMode);
-  if (sourceMode) {
-    sourceEditor.value = htmlToMrkdwn(editor);
-    editor.style.display = 'none';
-    sourceEditor.style.display = 'block';
-    document.getElementById('toolbar').style.display = 'none';
-    document.getElementById('aaToggle').style.display = 'none';
-    sourceEditor.focus();
-  } else {
-    editor.innerHTML = mrkdwnToHtml(sourceEditor.value);
-    sourceEditor.style.display = 'none';
-    editor.style.display = '';
-    document.getElementById('toolbar').style.display = toolbarVisible ? '' : 'none';
-    document.getElementById('aaToggle').style.display = '';
-    editor.focus();
+function extractWorkspaceName(url) {
+  if (!url) {
+    return null;
   }
-  updateSendBtn();
-}
-
-sourceEditor.addEventListener('keydown', (e) => {
-  if (e[MOD] && e.key === 'Enter') { e.preventDefault(); handleSend(); }
-});
-sourceEditor.addEventListener('input', updateSendBtn);
-
-// ─── Send / Cancel ───
-let sending = false;
-
-async function handleSend() {
-  if (sending) { return; }
-  const text = sourceMode ? sourceEditor.value.trim() : htmlToMrkdwn(editor);
-  if (!text) { editor.focus(); return; }
-
-  sending = true;
-  const btn = document.getElementById('sendBtn');
-  btn.disabled = true;
-  btn.innerHTML = '\\u2026';
-
   try {
-    const resp = await fetch('/send', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ text }),
-    });
-    const data = await resp.json();
-    if (data.ok) {
-      let sub = 'You can close this tab.';
-      if (data.ts && CONFIG.workspaceUrl && CONFIG.channelId) {
-        const tsNoDot = data.ts.replace('.', '');
-        const baseUrl = CONFIG.workspaceUrl.replace(/\\/$/, '');
-        const msgUrl = baseUrl + '/archives/' + CONFIG.channelId + '/p' + tsNoDot;
-        sub = '<a href="' + msgUrl + '" target="_blank" style="color:var(--accent);text-decoration:none;">View in Slack \\u2197</a><br><span style="opacity:0.6;font-size:12px;">You can close this tab.</span>';
-      }
-      showOverlay('Message sent \\u2705', sub, 'success');
-    } else {
-      throw new Error(data.error || 'Send failed');
+    const host = new URL(url).hostname;
+    const parts = host.split(".");
+    if (parts.length >= 3 && parts.at(-2) === "slack") {
+      return parts.slice(0, -2).join(".");
     }
-  } catch (err) {
-    showOverlay('Failed to send', err.message, 'error');
-    sending = false;
-    btn.disabled = false;
-    btn.innerHTML = '<svg viewBox="0 0 20 20" style="width:16px;height:16px;fill:currentColor"><path d="M1.7 9.1l7.3 1 .01 0L1.7 9.1zm0 1.8l7.3-1-7.3 1zM1.5 2.1c-.2-.7.5-1.3 1.1-1L19 8.9c.6.3.6 1.2 0 1.5L2.6 18.9c-.7.3-1.3-.3-1.1-1l1.8-6.9L11 10 3.3 8.9 1.5 2.1z"/></svg>';
+    return host;
+  } catch {
+    return null;
   }
 }
-
-async function handleCancel() {
-  try { await fetch('/cancel', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: '{}' }); } catch (_) {}
-  showOverlay('Draft cancelled', 'You can close this tab.', 'success');
+function buildEditorHtml(config) {
+  const threadUrl = buildSlackThreadUrl(config);
+  const workspaceName = extractWorkspaceName(config.workspaceUrl);
+  const injectedConfig = JSON.stringify({
+    channelName: config.channelName,
+    channelId: config.channelId || null,
+    workspaceUrl: config.workspaceUrl || null,
+    workspaceName,
+    threadTs: config.threadTs || null,
+    threadUrl,
+    initialText: config.initialText || ""
+  });
+  const safeConfig = injectedConfig.replace(/</g, "\\u003c").replace(/>/g, "\\u003e");
+  return getEditorHtml().replace("__DRAFT_CONFIG__", safeConfig);
 }
-
-function showOverlay(title, sub, type) {
-  const overlay = document.getElementById('resultOverlay');
-  const msg = document.getElementById('resultMsg');
-  msg.className = 'overlay-msg ' + type;
-  msg.innerHTML = title + '<small>' + sub + '</small>';
-  overlay.classList.add('visible');
+var _editorHtml;
+function getEditorHtml() {
+  if (!_editorHtml) {
+    _editorHtml = readFileSync2(join12(dirname3(fileURLToPath2(import.meta.url)), "draft-editor.html"), "utf-8");
+  }
+  return _editorHtml;
 }
 
-// ─── Focus ───
-editor.focus();
-updateSendBtn();
-</script>
-</body>
-</html>`;
-
 // src/cli/draft-actions.ts
 async function draftMessage(input) {
   const target = parseMsgTarget(String(input.targetInput));
@@ -5442,13 +4423,19 @@ function registerMessageCommand(input) {
       process.exitCode = 1;
     }
   });
-  messageCmd.command("send").description("Send a message (optionally into a thread)").argument("<target>", "Slack message URL, #name/name, or channel id").argument("<text>", "Message text to post").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--thread-ts <ts>", "Thread root ts to post into (optional)").action(async (...args) => {
+  messageCmd.command("send").description("Send a message (optionally into a thread)").argument("<target>", "Slack message URL, #name/name, or channel id").argument("[text]", "Message text to post (optional when using --attach)").option("--workspace <url>", "Workspace selector (full URL or unique substring; needed when using #channel/channel id across multiple workspaces)").option("--thread-ts <ts>", "Thread root ts to post into (optional)").option("--attach <path>", "Attach a local file path (repeatable)", collectOptionValue, []).action(async (...args) => {
     const [targetInput, text, options] = args;
+    const hasAttach = (options.attach ?? []).length > 0;
+    if (!text && !hasAttach) {
+      console.error("Error: <text> is required when no --attach files are provided.");
+      process.exitCode = 1;
+      return;
+    }
     try {
       const payload = await sendMessage({
         ctx: input.ctx,
         targetInput,
-        text,
+        text: text ?? "",
         options
       });
       console.log(JSON.stringify(payload, null, 2));
@@ -6217,15 +5204,15 @@ function registerSearchCommand(input) {
 }
 
 // src/lib/update.ts
-import { execSync as execSync3 } from "node:child_process";
+import { execSync as execSync2 } from "node:child_process";
 import { createHash } from "node:crypto";
-import { chmod, copyFile as copyFile2, mkdir as mkdir5, readFile as readFile6, rename, rm as rm3, writeFile as writeFile4 } from "node:fs/promises";
+import { chmod, copyFile as copyFile2, mkdir as mkdir5, readFile as readFile7, rename, rm as rm3, writeFile as writeFile4 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import { basename as basename2, join as join11 } from "node:path";
+import { basename as basename3, join as join13 } from "node:path";
 var REPO = "stablyai/agent-slack";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
 function getCachePath() {
-  return join11(getAppDir(), "update-check.json");
+  return join13(getAppDir(), "update-check.json");
 }
 function compareSemver(a, b) {
   const pa = a.replace(/^v/, "").split(".").map(Number);
@@ -6282,10 +5269,10 @@ async function checkForUpdate(force = false) {
   };
 }
 function detectInstallMethod() {
-  if (process.versions.bun && basename2(process.execPath) === "bun") {
+  if (process.versions.bun && basename3(process.execPath) === "bun") {
     return "bun";
   }
-  const execName = basename2(process.execPath);
+  const execName = basename3(process.execPath);
   if (["node", "nodejs", "node.exe"].includes(execName) || process.env.npm_execpath) {
     return "npm";
   }
@@ -6305,7 +5292,7 @@ function getUpdateCommand(method) {
 function performPackageManagerUpdate(method) {
   const cmd = getUpdateCommand(method);
   try {
-    execSync3(cmd, { stdio: ["inherit", "pipe", "inherit"] });
+    execSync2(cmd, { stdio: ["inherit", "pipe", "inherit"] });
     return { success: true, message: `Updated agent-slack via: ${cmd}` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -6320,17 +5307,17 @@ function detectPlatformAsset() {
   return `agent-slack-${platform7}-${arch}${ext}`;
 }
 async function sha256(filePath) {
-  const data = await readFile6(filePath);
+  const data = await readFile7(filePath);
   return createHash("sha256").update(data).digest("hex");
 }
 async function performUpdate(latest) {
   const asset = detectPlatformAsset();
   const tag = `v${latest}`;
   const baseUrl = `https://github.com/${REPO}/releases/download/${tag}`;
-  const tmp = join11(tmpdir3(), `agent-slack-update-${Date.now()}`);
+  const tmp = join13(tmpdir3(), `agent-slack-update-${Date.now()}`);
   await mkdir5(tmp, { recursive: true });
-  const binTmp = join11(tmp, asset);
-  const sumsTmp = join11(tmp, "checksums-sha256.txt");
+  const binTmp = join13(tmp, asset);
+  const sumsTmp = join13(tmp, "checksums-sha256.txt");
   try {
     const [binResp, sumsResp] = await Promise.all([
       fetch(`${baseUrl}/${asset}`, { signal: AbortSignal.timeout(120000) }),
@@ -6445,36 +5432,47 @@ function registerUpdateCommand(input) {
 async function listUsers(client, options) {
   const limit = Math.min(Math.max(options?.limit ?? 200, 1), 1000);
   const includeBots = options?.includeBots ?? false;
-  const out = [];
-  let cursor = options?.cursor;
-  while (out.length < limit) {
-    const pageSize = Math.min(200, limit - out.length);
-    const resp = await client.api("users.list", {
-      limit: pageSize,
-      cursor
-    });
-    const members = asArray(resp.members).filter(isRecord5);
-    for (const m of members) {
-      const id = getString(m.id);
-      if (!id) {
-        continue;
-      }
-      if (!includeBots && m.is_bot) {
-        continue;
-      }
-      out.push(toCompactUser(m));
-      if (out.length >= limit) {
-        break;
+  let next_cursor;
+  const [out, dmMap] = await Promise.all([
+    (async () => {
+      const users = [];
+      let cursor = options?.cursor;
+      while (users.length < limit) {
+        const pageSize = Math.min(200, limit - users.length);
+        const resp = await client.api("users.list", { limit: pageSize, cursor });
+        const members = asArray(resp.members).filter(isRecord5);
+        for (const m of members) {
+          const id = getString(m.id);
+          if (!id) {
+            continue;
+          }
+          if (!includeBots && m.is_bot) {
+            continue;
+          }
+          users.push(toCompactUser(m));
+          if (users.length >= limit) {
+            break;
+          }
+        }
+        const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+        const next = meta ? getString(meta.next_cursor) : undefined;
+        if (!next) {
+          break;
+        }
+        cursor = next;
+        next_cursor = next;
       }
+      return users;
+    })(),
+    fetchDmMap(client)
+  ]);
+  for (const u of out) {
+    const dmId = dmMap.get(u.id);
+    if (dmId) {
+      u.dm_id = dmId;
     }
-    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
-    const next = meta ? getString(meta.next_cursor) : undefined;
-    if (!next) {
-      return { users: out };
-    }
-    cursor = next;
   }
-  return { users: out, next_cursor: cursor };
+  return { users: out, next_cursor };
 }
 async function getUser(client, input) {
   const trimmed = input.trim();
@@ -6542,6 +5540,32 @@ async function resolveUserId2(client, input) {
   }
   return null;
 }
+async function fetchDmMap(client) {
+  const map = new Map;
+  let cursor;
+  for (;; ) {
+    const resp = await client.api("conversations.list", {
+      types: "im",
+      limit: 200,
+      cursor
+    });
+    const channels = asArray(resp.channels).filter(isRecord5);
+    for (const ch of channels) {
+      const id = getString(ch.id);
+      const user = getString(ch.user);
+      if (id && user) {
+        map.set(user, id);
+      }
+    }
+    const meta = isRecord5(resp.response_metadata) ? resp.response_metadata : null;
+    const next = meta ? getString(meta.next_cursor) : undefined;
+    if (!next) {
+      break;
+    }
+    cursor = next;
+  }
+  return map;
+}
 function toCompactUser(u) {
   const profile = isRecord5(u.profile) ? u.profile : {};
   return {
@@ -6854,5 +5878,5 @@ if (subcommand && subcommand !== "update") {
   backgroundUpdateCheck();
 }
 
-//# debugId=24F295C11738082464756E2164756E21
+//# debugId=DBCD03BFA3C520AC64756E2164756E21
 //# sourceMappingURL=index.js.map