slack-term 1.21.0 → 1.21.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "slack-term",
-  "version": "1.21.0",
+  "version": "1.21.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/snomiao/slack-term.git"

package/ts/auth.ts

@@ -263,6 +263,29 @@ export async function cmdAuthChrome(opts: { workspace?: string } = {}): Promise<
     }
   }
 
+  // A Chrome xoxd session cookie only augments a desktop *user* session token (xoxc-); it has
+  // no effect on a bot token (xoxb-). Attaching it to a bot profile silently does nothing and
+  // user-level actions (tail @user, DMs, users.list) still fail with missing_scope /
+  // cannot_dm_bot. Stop early with a pointer to a user-token workspace instead.
+  const selected = profiles.find((p) => p.name === profileName)!;
+  if (selected.profile.token.startsWith("xoxb-")) {
+    console.error(
+      `\nWorkspace "${profileName}" uses a bot token (xoxb-). A Chrome session cookie only\n` +
+      `augments a user session token (xoxc-) — it has no effect on a bot token, so user-level\n` +
+      `actions (tail @user, DMs, listing users) would still fail.`,
+    );
+    const userProfiles = profiles.filter(
+      (p) => p.profile.token.startsWith("xoxc-") || p.profile.token.startsWith("xoxp-"),
+    );
+    if (userProfiles.length > 0) {
+      console.error(`  Target a user-token workspace instead: ${userProfiles.map((p) => p.name).join(", ")}`);
+      console.error(`    slack auth chrome -w ${userProfiles[0]!.name}`);
+    } else {
+      console.error(`  Import your Slack desktop user session instead:  slack auth login`);
+    }
+    process.exit(1);
+  }
+
   console.log("Scanning Chrome profiles for Slack session...");
   console.log("macOS may show a dialog asking for your login password — click Allow.");
 

package/ts/cli.ts

@@ -1297,6 +1297,21 @@ async function main(): Promise<void> {
 
   await yargs(hideBin(process.argv))
     .scriptName("slack")
+    // A thrown handler error (e.g. a Slack API failure) is a runtime error, not a usage
+    // mistake — print just the clean one-line message, never the command's --help block or a
+    // minified source stack. Reserve the usage/help output for actual argument-parse errors
+    // (err is undefined then). showHelpOnFail(false) stops yargs' default help dump.
+    .showHelpOnFail(false)
+    .fail((msg, err, y) => {
+      if (err) {
+        console.error(err.message);
+        process.exit(1);
+      }
+      console.error(msg);
+      console.error("");
+      y.showHelp();
+      process.exit(1);
+    })
     .option("workspace", { alias: "w", type: "string", describe: "Workspace name" })
     .middleware(async (argv) => {
       const cmd = String((argv._ ?? [])[0] ?? "");

package/ts/profiles.ts

@@ -2,8 +2,8 @@
 // Profiles are stored in ~/.config/slack-cli/profiles.json.
 //
 // Workspace selection uses lockfiles:
-//   Local (cwd):  .slack-cli/workspace   — set with: slack workspace use <name>
-//   Global (home): ~/.slack-cli/workspace — set with: slack workspace use -g <name>
+//   Local (cwd):  .slack-cli/workspace   — set with: slack auth use <name>
+//   Global (home): ~/.slack-cli/workspace — set with: slack auth use -g <name>
 //
 // Token resolution order (no --workspace flag):
 //   1. process.env SLACK_TOKEN or SLACK_BOT_TOKEN
@@ -262,8 +262,8 @@ export function resolveToken(workspaceFlag?: string): string {
   if (names.length > 0) {
     throw new Error(
       `Workspace not selected (${names.join(", ")} available).\n` +
-      `  Select locally:  slack workspace use <name>          (writes .slack-cli/workspace)\n` +
-      `  Select globally: slack workspace use -g <name>       (writes ~/.slack-cli/workspace)`,
+      `  Select locally:  slack auth use <name>          (writes .slack-cli/workspace)\n` +
+      `  Select globally: slack auth use -g <name>       (writes ~/.slack-cli/workspace)`,
     );
   }
 

package/ts/slack-app.ts

@@ -271,16 +271,39 @@ export type ChromeCookieCandidate = {
   cookie: string;      // decrypted xoxd-...
 };
 
-/** Read the display name for a Chrome profile from its Preferences JSON. */
+/**
+ * Read a human-friendly display name (nickname + email) for a Chrome profile so a bare
+ * "Default"/"Profile N" is never shown alone.
+ *
+ * Prefers Chrome's `Local State` → profile.info_cache, which reliably carries both the
+ * nickname (`name`) and account email (`user_name`); the per-profile Preferences file
+ * often has neither. Only nickname + email are surfaced — the gaia real name is never read.
+ */
 function chromeProfileName(userDataDir: string, profileDir: string): string {
+  const label = (name: string, email: string): string => {
+    if (name && email) return `${name} (${email})`;
+    return name || email || profileDir;
+  };
+  try {
+    const localState = JSON.parse(
+      readFileSync(join(userDataDir, "Local State"), "utf8"),
+    ) as { profile?: { info_cache?: Record<string, { name?: string; user_name?: string }> } };
+    const info = localState.profile?.info_cache?.[profileDir];
+    if (info && (info.name || info.user_name)) {
+      return label(info.name ?? "", info.user_name ?? "");
+    }
+  } catch {
+    // fall through to Preferences
+  }
   try {
     const prefs = JSON.parse(
       readFileSync(join(userDataDir, profileDir, "Preferences"), "utf8"),
     ) as Record<string, unknown>;
     const profile = prefs.profile as Record<string, unknown> | undefined;
-    const name = (profile?.name as string | undefined) ?? "";
-    const email = (profile?.user_name as string | undefined) ?? "";
-    return email ? `${name} (${email})` : name || profileDir;
+    return label(
+      (profile?.name as string | undefined) ?? "",
+      (profile?.user_name as string | undefined) ?? "",
+    );
   } catch {
     return profileDir;
   }

package/ts/slack.ts

@@ -44,7 +44,20 @@ async function call(token: string, method: string, init: RequestInit, cookie?: s
       throw new Error(
         `Desktop app token (xoxc-) is not accepted by the public Slack API.\n` +
         `Replace it with an xoxp- user token:\n` +
-        `  slack workspace set-token <name> <xoxp-token>`,
+        `  slack auth token`,
+      );
+    }
+    // Bot tokens (xoxb-) can't act as a user: they lack user scopes (missing_scope) and can't
+    // open a DM with themselves (cannot_dm_bot, e.g. `tail @you`). Point at a user-token workspace.
+    if ((err === "missing_scope" || err === "cannot_dm_bot") && token.startsWith("xoxb-")) {
+      const why = err === "cannot_dm_bot"
+        ? `you're authenticated as a bot, so "@you" is the bot itself and it can't DM itself`
+        : `this bot token lacks the user scope this action needs`;
+      throw new Error(
+        `Slack error on ${method}: ${err} — ${why}.\n` +
+        `Tailing/DMing people and listing users need a user session, not a bot token.\n` +
+        `  Switch workspace:  slack auth ls   then   slack auth use <name>\n` +
+        `  Or import your Slack desktop session:  slack auth login`,
       );
     }
     throw new Error(`Slack error on ${method}: ${err}`);
@@ -77,14 +90,13 @@ async function callSession(token: string, method: string, init: RequestInit, coo
     if ((err === "invalid_auth" || err === "not_authed") && !token.startsWith("xoxc-")) {
       throw new Error(
         `The draft API requires a desktop app session token (xoxc-).\n` +
-        `Import from Slack desktop:  slack workspace import`,
+        `Import from Slack desktop:  slack auth login`,
       );
     }
     if ((err === "invalid_auth" || err === "not_authed") && !cookie) {
       throw new Error(
         `drafts.list also requires the xoxd session cookie.\n` +
-        `Set it with:  slack workspace set-cookie <workspace-name> <xoxd-value>\n` +
-        `Get xoxd from browser: DevTools → Application → Cookies → slack.com → d`,
+        `Attach it with:  slack auth chrome   (macOS)   or   slack auth firefox`,
       );
     }
     throw new Error(`Slack error on ${method}: ${err}`);