agent-slack 0.5.1 → 0.5.2

package/README.md

@@ -95,10 +95,10 @@ Notes:
 
 ## Authentication (no fancy setup)
 
-On macOS, authentication happens automatically:
+On macOS and Windows, authentication happens automatically:
 
 - Default: reads Slack Desktop local data (no need to quit Slack)
-- Fallbacks: if that fails, tries Chrome/Firefox extraction
+- Fallbacks: if that fails, tries Chrome/Firefox extraction (macOS)
 
 You can also run manual imports:
 

package/dist/index.js

@@ -513,10 +513,17 @@ function parseSlackCurlCommand(curlInput) {
 
 // src/auth/desktop.ts
 import { cp, mkdir, rm as rm2, unlink } from "node:fs/promises";
-import { existsSync as existsSync4 } from "node:fs";
+import {
+  existsSync as existsSync4,
+  readFileSync as readFileSync2,
+  readdirSync,
+  copyFileSync,
+  writeFileSync,
+  unlinkSync
+} from "node:fs";
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { pbkdf2Sync as pbkdf2Sync2, createDecipheriv as createDecipheriv2 } from "node:crypto";
-import { homedir as homedir3, platform as platform4 } from "node:os";
+import { homedir as homedir3, platform as platform4, tmpdir as tmpdir2 } from "node:os";
 import { join as join5 } from "node:path";
 
 // src/lib/leveldb-reader.ts
@@ -819,12 +826,38 @@ async function queryReadonlySqlite2(dbPath, sql) {
 var PLATFORM2 = platform4();
 var IS_MACOS4 = PLATFORM2 === "darwin";
 var IS_LINUX2 = PLATFORM2 === "linux";
+var IS_WIN32 = PLATFORM2 === "win32";
 var SLACK_SUPPORT_DIR_ELECTRON = join5(homedir3(), "Library", "Application Support", "Slack");
 var SLACK_SUPPORT_DIR_APPSTORE = join5(homedir3(), "Library", "Containers", "com.tinyspeck.slackmacgap", "Data", "Library", "Application Support", "Slack");
 var SLACK_SUPPORT_DIR_LINUX = join5(homedir3(), ".config", "Slack");
 var SLACK_SUPPORT_DIR_LINUX_FLATPAK = join5(homedir3(), ".var", "app", "com.slack.Slack", "config", "Slack");
+var SLACK_SUPPORT_DIR_WIN_APPDATA = join5(process.env.APPDATA || join5(homedir3(), "AppData", "Roaming"), "Slack");
+function getWindowsStoreSlackPath() {
+  const pkgBase = join5(process.env.LOCALAPPDATA || join5(homedir3(), "AppData", "Local"), "Packages");
+  try {
+    const entries = readdirSync(pkgBase);
+    const slackPkg = entries.find((e) => e.startsWith("com.tinyspeck.slackdesktop_"));
+    if (slackPkg) {
+      return join5(pkgBase, slackPkg, "LocalCache", "Roaming", "Slack");
+    }
+  } catch {}
+  return null;
+}
 function getSlackPaths() {
-  const candidates = IS_MACOS4 ? [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE] : IS_LINUX2 ? [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX] : [];
+  let candidates;
+  if (IS_MACOS4) {
+    candidates = [SLACK_SUPPORT_DIR_ELECTRON, SLACK_SUPPORT_DIR_APPSTORE];
+  } else if (IS_LINUX2) {
+    candidates = [SLACK_SUPPORT_DIR_LINUX_FLATPAK, SLACK_SUPPORT_DIR_LINUX];
+  } else if (IS_WIN32) {
+    candidates = [SLACK_SUPPORT_DIR_WIN_APPDATA];
+    const storePath = getWindowsStoreSlackPath();
+    if (storePath) {
+      candidates.push(storePath);
+    }
+  } else {
+    candidates = [];
+  }
   if (candidates.length === 0) {
     throw new Error(`Slack Desktop extraction is not supported on ${PLATFORM2}.`);
   }
@@ -833,7 +866,7 @@ function getSlackPaths() {
     if (existsSync4(leveldbDir)) {
       const cookiesDbCandidates = [join5(dir, "Network", "Cookies"), join5(dir, "Cookies")];
       const cookiesDb = cookiesDbCandidates.find((candidate) => existsSync4(candidate)) || cookiesDbCandidates[0];
-      return { leveldbDir, cookiesDb };
+      return { leveldbDir, cookiesDb, baseDir: dir };
     }
   }
   throw new Error(`Slack Desktop data not found. Checked:
@@ -1032,11 +1065,74 @@ function decryptChromiumCookieValue2(data, password) {
     return rawToken;
   }
 }
-async function extractCookieDFromSlackCookiesDb(cookiesPath) {
+function decryptCookieWindows(encrypted, slackDataDir) {
+  const localStatePath = join5(slackDataDir, "Local State");
+  if (!existsSync4(localStatePath)) {
+    throw new Error(`Local State file not found: ${localStatePath}`);
+  }
+  const localState = JSON.parse(readFileSync2(localStatePath, "utf8"));
+  if (!localState.os_crypt?.encrypted_key) {
+    throw new Error("No os_crypt.encrypted_key in Local State");
+  }
+  const encKeyFull = Buffer.from(localState.os_crypt.encrypted_key, "base64");
+  const encKeyBlob = encKeyFull.subarray(5);
+  const encKeyFile = join5(tmpdir2(), `as-key-enc-${Date.now()}.bin`);
+  const decKeyFile = join5(tmpdir2(), `as-key-dec-${Date.now()}.bin`);
+  writeFileSync(encKeyFile, encKeyBlob);
+  try {
+    const psEncKeyFile = encKeyFile.replaceAll("'", "''");
+    const psDecKeyFile = decKeyFile.replaceAll("'", "''");
+    const psCmd = [
+      "Add-Type -AssemblyName System.Security",
+      `$e=[System.IO.File]::ReadAllBytes('${psEncKeyFile}')`,
+      "$d=[System.Security.Cryptography.ProtectedData]::Unprotect($e,$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser)",
+      `[System.IO.File]::WriteAllBytes('${psDecKeyFile}',$d)`
+    ].join("; ");
+    execFileSync2("powershell", ["-ExecutionPolicy", "Bypass", "-Command", psCmd], {
+      stdio: "pipe"
+    });
+    if (!existsSync4(decKeyFile)) {
+      throw new Error("DPAPI decryption failed: PowerShell did not produce the decrypted key file");
+    }
+    const aesKey = readFileSync2(decKeyFile);
+    const nonce = encrypted.subarray(3, 15);
+    const ciphertextWithTag = encrypted.subarray(15);
+    const tag = ciphertextWithTag.subarray(-16);
+    const ciphertext = ciphertextWithTag.subarray(0, -16);
+    const decipher = createDecipheriv2("aes-256-gcm", aesKey, nonce);
+    decipher.setAuthTag(tag);
+    let decrypted = decipher.update(ciphertext, undefined, "utf8");
+    decrypted += decipher.final("utf8");
+    return decrypted;
+  } finally {
+    try {
+      unlinkSync(encKeyFile);
+    } catch {}
+    try {
+      unlinkSync(decKeyFile);
+    } catch {}
+  }
+}
+async function extractCookieDFromSlackCookiesDb(cookiesPath, slackDataDir) {
   if (!existsSync4(cookiesPath)) {
     throw new Error(`Slack Cookies DB not found: ${cookiesPath}`);
   }
-  const rows = await queryReadonlySqlite2(cookiesPath, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
+  let dbPathToQuery = cookiesPath;
+  if (IS_WIN32) {
+    const tmpCopy = join5(tmpdir2(), `agent-slack-cookies-${Date.now()}`);
+    copyFileSync(cookiesPath, tmpCopy);
+    dbPathToQuery = tmpCopy;
+  }
+  let rows;
+  try {
+    rows = await queryReadonlySqlite2(dbPathToQuery, "select host_key, name, value, encrypted_value from cookies where name = 'd' and host_key like '%slack.com' order by length(encrypted_value) desc");
+  } finally {
+    if (IS_WIN32 && dbPathToQuery !== cookiesPath) {
+      try {
+        unlinkSync(dbPathToQuery);
+      } catch {}
+    }
+  }
   if (!rows || rows.length === 0) {
     throw new Error("No Slack 'd' cookie found");
   }
@@ -1049,6 +1145,18 @@ async function extractCookieDFromSlackCookiesDb(cookiesPath) {
     throw new Error("Slack 'd' cookie had no encrypted_value");
   }
   const prefix = encrypted.subarray(0, 3).toString("utf8");
+  if (IS_WIN32 && (prefix === "v10" || prefix === "v11")) {
+    const decrypted = decryptCookieWindows(encrypted, slackDataDir);
+    const match = decrypted.match(/xoxd-[A-Za-z0-9%/+_=.-]+/);
+    if (match) {
+      try {
+        return decodeURIComponent(match[0]);
+      } catch {
+        return match[0];
+      }
+    }
+    throw new Error("Could not locate xoxd-* in DPAPI-decrypted Slack cookie");
+  }
   const data = prefix === "v10" || prefix === "v11" ? encrypted.subarray(3) : encrypted;
   const passwords = getSafeStoragePasswords2(prefix);
   for (const password of passwords) {
@@ -1063,9 +1171,9 @@ async function extractCookieDFromSlackCookiesDb(cookiesPath) {
   throw new Error("Could not locate xoxd-* in decrypted Slack cookie");
 }
 async function extractFromSlackDesktop() {
-  const { leveldbDir, cookiesDb } = getSlackPaths();
+  const { leveldbDir, cookiesDb, baseDir } = getSlackPaths();
   const teams = await extractTeamsFromSlackLevelDb(leveldbDir);
-  const cookie_d = await extractCookieDFromSlackCookiesDb(cookiesDb);
+  const cookie_d = await extractCookieDFromSlackCookiesDb(cookiesDb, baseDir);
   return {
     cookie_d,
     teams,
@@ -2025,7 +2133,7 @@ function isAuthErrorMessage(message) {
   return /(?:^|[^a-z])(invalid_auth|token_expired)(?:$|[^a-z])/i.test(message);
 }
 async function refreshFromDesktopIfPossible() {
-  if (process.platform !== "darwin" && process.platform !== "linux") {
+  if (process.platform !== "darwin" && process.platform !== "linux" && process.platform !== "win32") {
     return false;
   }
   try {
@@ -2405,7 +2513,7 @@ import { join as join10, resolve as resolve2 } from "node:path";
 import { mkdir as mkdir4 } from "node:fs/promises";
 
 // src/lib/app-dir.ts
-import { homedir as homedir5, tmpdir as tmpdir2 } from "node:os";
+import { homedir as homedir5, tmpdir as tmpdir3 } from "node:os";
 import { join as join9 } from "node:path";
 function getAppDir() {
   const xdg = process.env.XDG_RUNTIME_DIR?.trim();
@@ -2416,7 +2524,7 @@ function getAppDir() {
   if (home) {
     return join9(home, ".agent-slack");
   }
-  return join9(tmpdir2(), "agent-slack");
+  return join9(tmpdir3(), "agent-slack");
 }
 
 // src/lib/tmp-paths.ts
@@ -4142,7 +4250,7 @@ async function reactOnTarget(input) {
 // src/cli/draft-server.ts
 import { createServer } from "node:http";
 import { execFile } from "node:child_process";
-import { readFileSync as readFileSync2 } from "node:fs";
+import { readFileSync as readFileSync3 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { dirname as dirname3, join as join12 } from "node:path";
 function openDraftEditor(config) {
@@ -4277,7 +4385,7 @@ function buildEditorHtml(config) {
 var _editorHtml;
 function getEditorHtml() {
   if (!_editorHtml) {
-    _editorHtml = readFileSync2(join12(dirname3(fileURLToPath2(import.meta.url)), "draft-editor.html"), "utf-8");
+    _editorHtml = readFileSync3(join12(dirname3(fileURLToPath2(import.meta.url)), "draft-editor.html"), "utf-8");
   }
   return _editorHtml;
 }
@@ -5207,7 +5315,7 @@ function registerSearchCommand(input) {
 import { execSync as execSync2 } from "node:child_process";
 import { createHash } from "node:crypto";
 import { chmod, copyFile as copyFile2, mkdir as mkdir5, readFile as readFile7, rename, rm as rm3, writeFile as writeFile4 } from "node:fs/promises";
-import { tmpdir as tmpdir3 } from "node:os";
+import { tmpdir as tmpdir4 } from "node:os";
 import { basename as basename3, join as join13 } from "node:path";
 var REPO = "stablyai/agent-slack";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
@@ -5314,7 +5422,7 @@ async function performUpdate(latest) {
   const asset = detectPlatformAsset();
   const tag = `v${latest}`;
   const baseUrl = `https://github.com/${REPO}/releases/download/${tag}`;
-  const tmp = join13(tmpdir3(), `agent-slack-update-${Date.now()}`);
+  const tmp = join13(tmpdir4(), `agent-slack-update-${Date.now()}`);
   await mkdir5(tmp, { recursive: true });
   const binTmp = join13(tmp, asset);
   const sumsTmp = join13(tmp, "checksums-sha256.txt");
@@ -5878,5 +5986,5 @@ if (subcommand && subcommand !== "update") {
   backgroundUpdateCheck();
 }
 
-//# debugId=DBCD03BFA3C520AC64756E2164756E21
+//# debugId=1E9C1FBA7D38320464756E2164756E21
 //# sourceMappingURL=index.js.map