slack-agent-cli v0.2.3

slack-agent-cli v0.2.3

This patch release adds the canonical user-only workspace profile for one
operator acting through their own Slack identity.

The user-workspace-message-write manifest supports allowlisted public
channels, private channels, one-to-one direct messages, group direct messages,
and explicitly confirmed plain-text sends. Its user scopes are limited to
channels:history, channels:read, groups:history, groups:read,
im:history, im:read, mpim:history, mpim:read, users:read, and
chat:write; it has no bot, search, files, reactions, admin, event, redirect,
or chat:write.public capability.

Replacing a profile credential now requires an explicit stale-policy rebind.
That transition replaces the read allowlist and drops all prior write targets;
writes must then be explicitly rebuilt. Direct-message preflight revalidates
the exact other participant and fails closed on cross-workspace or incomplete
identity data.

Existing guarantees remain unchanged: every network call requires an explicit
profile, content reads stay bounded and exact-ID allowlisted, and writes remain
one-shot after local dry-run receipt and exact confirmation.

Install or upgrade with Homebrew:

brew update
brew upgrade slack-agent-cli

Or install from source with Go 1.25.14 or newer:

go install github.com/abigotado/slack-agent-cli/cmd/slack-agent-cli@v0.2.3