@sentry/junior 0.156.0 → 0.158.0

package/dist/api.js

@@ -6,6 +6,7 @@ import {
   apiErrorSchema,
   archiveConversationBodySchema,
   archiveConversationResponseSchema,
+  conversationAttachmentParamsSchema,
   conversationDetailQuerySchema,
   conversationDetailReportSchema,
   conversationEventPageSchema,
@@ -33,23 +34,24 @@ import {
   taskListSchema,
   taskParamsSchema,
   taskRunListSchema
-} from "./chunk-X5NZQH5U.js";
+} from "./chunk-CZCMFRUQ.js";
 import {
   appendAndEnqueueApiConversationMessage,
   createAndEnqueueApiConversation,
+  createVercelAttachmentStorage,
   formatSlackConversationRedactedLabel,
   lookupSlackUser,
   readHealthReport,
   resolveSlackConversationContextFromThreadId,
   webActorFromEmail
-} from "./chunk-PMFGVLDU.js";
+} from "./chunk-KAFYW3O6.js";
 import {
   buildSentryConversationUrl,
   getWebAuthorization
-} from "./chunk-SE3D225X.js";
+} from "./chunk-SSU65ZTZ.js";
 import {
   getConversation
-} from "./chunk-6CINHXIL.js";
+} from "./chunk-A7EDLNGU.js";
 import {
   readTaskExecutionByConversationId,
   readTaskExecutionDays,
@@ -57,8 +59,8 @@ import {
   readTaskExecutionSummaries,
   readTaskExecutions,
   readTaskRuns
-} from "./chunk-GSBPZHLQ.js";
-import "./chunk-TN4LVILT.js";
+} from "./chunk-IEM3GFXL.js";
+import "./chunk-4XJ2WSTI.js";
 import {
   healthReportSchema,
   pluginOperationalReportFeedSchema,
@@ -81,17 +83,18 @@ import {
   listEventTasksCreatedBy,
   listPublicEventTasksForTeams,
   listPublicScheduledTasksForTeams,
+  readLiveAttachment,
   readStats
-} from "./chunk-KCA5MKHU.js";
+} from "./chunk-4Q6QVTKA.js";
 import {
   parseSlackThreadId
-} from "./chunk-CK2H7CFO.js";
+} from "./chunk-DTVTBZNP.js";
 import {
   agentTurnUsageSchema,
   fallbackShortTitle,
   hasAgentTurnUsage,
   renderJuniorNativeConversationEvent
-} from "./chunk-3L2PMOSR.js";
+} from "./chunk-C3FYJZSA.js";
 import "./chunk-3Y47VMHV.js";
 import "./chunk-PDO5BLNM.js";
 import {
@@ -101,11 +104,11 @@ import {
   renderPluginConversationEvent,
   resolveViewerUser,
   updateViewerDisplayName
-} from "./chunk-3FFUC32L.js";
+} from "./chunk-NOEERHHR.js";
 import {
   getSlackClient,
   withSlackRetries
-} from "./chunk-NTNU6T2D.js";
+} from "./chunk-ROOTB7J7.js";
 import {
   decodeStoredConversationEvent,
   getConversationStore,
@@ -113,7 +116,7 @@ import {
   getSqlExecutor,
   locationFromRow,
   parseSessionSource
-} from "./chunk-IIO5PFZX.js";
+} from "./chunk-AF4PHIP6.js";
 import {
   juniorApiTokens,
   juniorConversationEvents,
@@ -121,16 +124,16 @@ import {
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-AIJRG227.js";
+} from "./chunk-VURJ2NSF.js";
 import "./chunk-EM225ITJ.js";
-import "./chunk-MC57E5U5.js";
-import "./chunk-GKC43TLS.js";
+import "./chunk-PHQDXC27.js";
+import "./chunk-FAJ6SMEE.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   canExposeConversationPayload
-} from "./chunk-MJE7XKWP.js";
+} from "./chunk-UPPU3FQU.js";
 import "./chunk-BDUENQD3.js";
 import {
   parseSlackChannelId,
@@ -140,10 +143,10 @@ import {
 import {
   logException,
   logWarn
-} from "./chunk-X7W45B5G.js";
+} from "./chunk-KSZXVR5G.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-OGZPRMZA.js";
-import "./chunk-KBGMYLSV.js";
+import "./chunk-6GJCOUTA.js";
+import "./chunk-IXYGGJRA.js";
 import "./chunk-MLKGABMK.js";
 
 // src/api.ts
@@ -353,6 +356,47 @@ async function readConversationAccessFromSql(db, conversationIds, viewer) {
   );
 }
 
+// src/api/conversations/attachments.ts
+function mayDisplayInline(contentType) {
+  return contentType === "image/gif" || contentType === "image/jpeg" || contentType === "image/png" || contentType === "image/webp";
+}
+function contentDisposition(filename, contentType) {
+  const disposition = mayDisplayInline(contentType) ? "inline" : "attachment";
+  const fallback = filename.replace(/[^\x20-\x7e]|["\\]/g, "_");
+  return `${disposition}; filename="${fallback}"; filename*=UTF-8''${encodeURIComponent(filename)}`;
+}
+function conversationAttachmentHeaders(args) {
+  return new Headers({
+    "cache-control": "private, no-store",
+    "content-disposition": contentDisposition(args.filename, args.contentType),
+    "content-length": String(args.bytes),
+    "content-type": args.contentType,
+    "x-content-type-options": "nosniff"
+  });
+}
+async function openConversationAttachment(args) {
+  const access = (await readConversationAccessFromSql(
+    getDb(),
+    [args.conversationId],
+    args.viewer
+  )).get(args.conversationId);
+  if (!access?.canViewPrivateContent) return null;
+  const attachment = await readLiveAttachment({
+    attachmentId: args.attachmentId,
+    conversationId: args.conversationId,
+    db: getSqlExecutor()
+  });
+  if (!attachment) return null;
+  if (attachment.provider !== args.storage.provider) return null;
+  const body = await args.storage.get(attachment.storageKey);
+  return body ? { attachment, body } : null;
+}
+async function requireConversationAttachment(args) {
+  const opened = await openConversationAttachment(args);
+  if (!opened) throwApiError(404, "Attachment not found.");
+  return opened;
+}
+
 // src/api/conversations/create.ts
 function actorFromViewer(viewer) {
   const normalized = viewer.email.trim().toLowerCase();
@@ -1210,7 +1254,7 @@ async function readConversationEventPage(executor, args) {
 }
 
 // src/api/conversations/list.ts
-import { and as and7, asc as asc2, desc as desc2, eq as eq8, isNull as isNull3 } from "drizzle-orm";
+import { and as and8, asc as asc2, desc as desc2, eq as eq9, isNull as isNull3 } from "drizzle-orm";
 
 // src/api/conversations/shared.ts
 function slackStatsLocationLabel(input) {
@@ -1607,10 +1651,11 @@ async function readConversationAuxiliaryCostsFromSql(db, conversationIds, option
 // src/chat/plugins/unfinished-work.ts
 async function listConversationWork(conversationIds) {
   if (conversationIds.length === 0) {
-    return { assignedIds: [], unfinishedIds: [] };
+    return { assignedIds: [], finishedAtById: {}, unfinishedIds: [] };
   }
   const candidates = new Set(conversationIds);
   const assigned = /* @__PURE__ */ new Set();
+  const finishedAtById = /* @__PURE__ */ new Map();
   const unfinished = /* @__PURE__ */ new Set();
   for (const plugin of getPlugins()) {
     const hook = plugin.hooks?.unfinishedWork;
@@ -1630,6 +1675,17 @@ async function listConversationWork(conversationIds) {
       for (const conversationId of result.assignedConversationIds ?? []) {
         if (candidates.has(conversationId)) assigned.add(conversationId);
       }
+      for (const [conversationId, finishedAt] of Object.entries(
+        result.finishedWorkAtByConversationId ?? {}
+      )) {
+        if (!candidates.has(conversationId)) continue;
+        const time = Date.parse(finishedAt);
+        if (!Number.isFinite(time)) continue;
+        const current = finishedAtById.get(conversationId);
+        if (!current || time > Date.parse(current)) {
+          finishedAtById.set(conversationId, finishedAt);
+        }
+      }
     } catch (error) {
       logWarn("plugin.unfinished_work.hook.failed", {
         "app.plugin.name": plugin.manifest.name,
@@ -1641,24 +1697,82 @@ async function listConversationWork(conversationIds) {
     assignedIds: conversationIds.filter(
       (conversationId) => assigned.has(conversationId)
     ),
+    finishedAtById: Object.fromEntries(
+      conversationIds.flatMap((conversationId) => {
+        const finishedAt = finishedAtById.get(conversationId);
+        return finishedAt ? [[conversationId, finishedAt]] : [];
+      })
+    ),
     unfinishedIds: conversationIds.filter(
       (conversationId) => unfinished.has(conversationId)
     )
   };
 }
 
+// src/api/conversations/priority.ts
+var UNASSIGNED_PRIORITY_WINDOW_MS = 3 * 60 * 60 * 1e3;
+var UNFINISHED_PRIORITY_WINDOW_MS = 48 * 60 * 60 * 1e3;
+function isConversationPriority(conversation, nowMs) {
+  const lastSeenAt = Date.parse(conversation.lastSeenAt);
+  if (!Number.isFinite(lastSeenAt)) return false;
+  if (conversation.unfinishedWork) {
+    return nowMs - lastSeenAt <= UNFINISHED_PRIORITY_WINDOW_MS;
+  }
+  if (conversation.assignedWork) {
+    const finishedAt = Date.parse(conversation.finishedWorkAt ?? "");
+    const lastUserMessageAt = Date.parse(conversation.lastUserMessageAt ?? "");
+    return Number.isFinite(finishedAt) && Number.isFinite(lastUserMessageAt) && lastUserMessageAt > finishedAt;
+  }
+  return nowMs - lastSeenAt <= UNASSIGNED_PRIORITY_WINDOW_MS;
+}
+
+// src/api/conversations/user-message-activity.ts
+import { and as and7, eq as eq8, inArray as inArray6, isNotNull as isNotNull3, or as or3, sql as sql5 } from "drizzle-orm";
+async function readLastUserMessageAtByConversation(db, conversationIds) {
+  if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
+  const authority = sql5`${juniorConversationEvents.payload}->'provenance'->>'authority'`;
+  const actorPlatform = sql5`${juniorConversationEvents.payload}->'provenance'->'actor'->>'platform'`;
+  const role = sql5`${juniorConversationEvents.payload}->>'role'`;
+  const rows = await db.select({
+    conversationId: juniorConversationEvents.conversationId,
+    lastUserMessageAt: sql5`max(${juniorConversationEvents.createdAt})`
+  }).from(juniorConversationEvents).where(
+    and7(
+      inArray6(juniorConversationEvents.conversationId, conversationIds),
+      or3(
+        and7(
+          eq8(juniorConversationEvents.type, "user_message"),
+          eq8(authority, "instruction"),
+          sql5`${actorPlatform} in ('slack', 'local', 'web')`
+        ),
+        and7(
+          eq8(juniorConversationEvents.type, "message"),
+          eq8(role, "user"),
+          isNotNull3(juniorConversationEvents.actorIdentityId)
+        )
+      )
+    )
+  ).groupBy(juniorConversationEvents.conversationId);
+  return new Map(
+    rows.map((row) => [
+      row.conversationId,
+      new Date(row.lastUserMessageAt).toISOString()
+    ])
+  );
+}
+
 // src/api/conversations/list.ts
 var CONVERSATION_FEED_LIMIT = 50;
 function conversationFeedMembershipFilter(filter) {
   if (!filter) return void 0;
   if (filter.kind === "viewer") {
     return viewerConversationMembership({
-      actorMatch: eq8(juniorIdentities.userId, filter.userId),
+      actorMatch: eq9(juniorIdentities.userId, filter.userId),
       participantMatch: conversationHasParticipantUser(filter.userId)
     });
   }
   return viewerConversationMembership({
-    actorMatch: eq8(juniorUsers.primaryEmailNormalized, filter.email),
+    actorMatch: eq9(juniorUsers.primaryEmailNormalized, filter.email),
     participantMatch: conversationHasParticipantEmail(filter.email)
   });
 }
@@ -1675,12 +1789,12 @@ async function conversationRows(db, limit, filter) {
     userDisplayName: juniorUsers.displayName
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq8(juniorDestinations.id, juniorConversations.destinationId)
+    eq9(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq8(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq8(juniorUsers.id, juniorIdentities.userId)).where(
-    and7(
+    eq9(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(
+    and8(
       isNull3(juniorConversations.parentConversationId),
       isNull3(juniorConversations.archivedAt),
       conversationFeedMembershipFilter(filter)
@@ -1741,11 +1855,11 @@ async function readConversationRecordFromSql(conversationId) {
     userDisplayName: juniorUsers.displayName
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq8(juniorDestinations.id, juniorConversations.destinationId)
+    eq9(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq8(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq8(juniorUsers.id, juniorIdentities.userId)).where(eq8(juniorConversations.conversationId, conversationId)).limit(1);
+    eq9(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(eq9(juniorConversations.conversationId, conversationId)).limit(1);
   const row = rows[0];
   return row ? {
     conversation: conversationFromRow(row),
@@ -1787,7 +1901,8 @@ async function readConversationFeedFromSql(options = {}) {
     auxiliaryCostsByRoot,
     metricsByRoot,
     teamDomainByTeamId,
-    conversationWork
+    conversationWork,
+    lastUserMessageAtByConversation
   ] = await Promise.all([
     readConversationAccessFromSql(db, conversationIds, options.viewer),
     readConversationAuxiliaryCostsFromSql(db, conversationIds, {
@@ -1799,7 +1914,8 @@ async function readConversationFeedFromSql(options = {}) {
         (conversation) => conversation.sessionSource?.platform === "slack" ? [conversation.sessionSource.teamId] : []
       )
     ),
-    listConversationWork(conversationIds)
+    listConversationWork(conversationIds),
+    readLastUserMessageAtByConversation(db, conversationIds)
   ]);
   const assignedWork = new Set(conversationWork.assignedIds);
   const unfinishedWork = new Set(conversationWork.unfinishedIds);
@@ -1807,19 +1923,36 @@ async function readConversationFeedFromSql(options = {}) {
     conversations: conversations.map((conversation, index) => {
       const row = rows[index];
       const metrics = metricsByRoot.get(conversation.conversationId);
-      return {
-        ...conversationSummaryFromStoredConversation({
-          conversation,
-          access: accessByConversation.get(conversation.conversationId),
-          auxiliaryCosts: auxiliaryCostsByRoot.get(conversation.conversationId),
-          durationMs: metrics?.durationMs ?? row.conversation.durationMs,
-          teamDomainByTeamId,
-          ...row.destination?.visibility === "public" ? { locationId: row.destination.id } : {},
-          usage: metrics?.usage ?? row.conversation.usage ?? void 0
-        }),
+      const summary = conversationSummaryFromStoredConversation({
+        conversation,
+        access: accessByConversation.get(conversation.conversationId),
+        auxiliaryCosts: auxiliaryCostsByRoot.get(conversation.conversationId),
+        durationMs: metrics?.durationMs ?? row.conversation.durationMs,
+        teamDomainByTeamId,
+        ...row.destination?.visibility === "public" ? { locationId: row.destination.id } : {},
+        usage: metrics?.usage ?? row.conversation.usage ?? void 0
+      });
+      const work = {
         ...assignedWork.has(conversation.conversationId) ? { assignedWork: true } : {},
+        ...conversationWork.finishedAtById[conversation.conversationId] ? {
+          finishedWorkAt: conversationWork.finishedAtById[conversation.conversationId]
+        } : {},
         ...unfinishedWork.has(conversation.conversationId) ? { unfinishedWork: true } : {}
       };
+      return {
+        ...summary,
+        ...work,
+        isPriority: isConversationPriority(
+          {
+            lastSeenAt: summary.lastSeenAt,
+            lastUserMessageAt: lastUserMessageAtByConversation.get(
+              conversation.conversationId
+            ),
+            ...work
+          },
+          nowMs
+        )
+      };
     }),
     generatedAt: new Date(nowMs).toISOString(),
     source: "conversation_index"
@@ -1832,7 +1965,7 @@ async function readConversationFeed(options = {}) {
 }
 
 // src/chat/tasks/read.ts
-import { and as and8, eq as eq9, or as or3 } from "drizzle-orm";
+import { and as and9, eq as eq10, or as or4 } from "drizzle-orm";
 
 // src/chat/scheduled-tasks/personal.ts
 import { z as z3 } from "zod";
@@ -1942,16 +2075,16 @@ async function creatorProfileEmails(candidates) {
     email: juniorUsers.primaryEmailNormalized,
     slackUserId: juniorIdentities.providerSubjectId,
     teamId: juniorIdentities.providerTenantId
-  }).from(juniorIdentities).innerJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(
-    and8(
-      eq9(juniorIdentities.kind, "user"),
-      eq9(juniorIdentities.provider, "slack"),
-      eq9(juniorIdentities.emailVerified, true),
-      or3(
+  }).from(juniorIdentities).innerJoin(juniorUsers, eq10(juniorUsers.id, juniorIdentities.userId)).where(
+    and9(
+      eq10(juniorIdentities.kind, "user"),
+      eq10(juniorIdentities.provider, "slack"),
+      eq10(juniorIdentities.emailVerified, true),
+      or4(
         ...[...selectors.values()].map(
-          (selector) => and8(
-            eq9(juniorIdentities.providerTenantId, selector.teamId),
-            eq9(juniorIdentities.providerSubjectId, selector.slackUserId)
+          (selector) => and9(
+            eq10(juniorIdentities.providerTenantId, selector.teamId),
+            eq10(juniorIdentities.providerSubjectId, selector.slackUserId)
           )
         )
       )
@@ -1987,12 +2120,12 @@ async function destinationDetails(destinations) {
     providerTenantId: juniorDestinations.providerTenantId,
     visibility: juniorDestinations.visibility
   }).from(juniorDestinations).where(
-    or3(
+    or4(
       ...[...selectors.values()].map(
-        (destination) => and8(
-          eq9(juniorDestinations.provider, "slack"),
-          eq9(juniorDestinations.providerTenantId, destination.teamId),
-          eq9(juniorDestinations.providerDestinationId, destination.channelId)
+        (destination) => and9(
+          eq10(juniorDestinations.provider, "slack"),
+          eq10(juniorDestinations.providerTenantId, destination.teamId),
+          eq10(juniorDestinations.providerDestinationId, destination.channelId)
         )
       )
     )
@@ -2645,20 +2778,20 @@ async function requireConversationPendingMessages(conversationId, options = {})
 }
 
 // src/api/conversations/stats.query.ts
-import { and as and9, eq as eq10, gte, isNull as isNull4, lte, sql as sql6 } from "drizzle-orm";
+import { and as and10, eq as eq11, gte, isNull as isNull4, lte, sql as sql7 } from "drizzle-orm";
 import { alias as alias4 } from "drizzle-orm/pg-core";
 
 // src/api/conversations/aggregate.ts
-import { sql as sql5 } from "drizzle-orm";
+import { sql as sql6 } from "drizzle-orm";
 function usageTokenValue(source, field) {
-  return sql5`CASE
+  return sql6`CASE
     WHEN ${source.usage}->>${field} IS NOT NULL
       THEN (${source.usage}->>${field})::double precision
     ELSE NULL
   END`;
 }
 function tokenValue(source) {
-  return sql5`
+  return sql6`
     CASE
       WHEN COALESCE(
         ${source.usage}->>'inputTokens',
@@ -2677,7 +2810,7 @@ function tokenValue(source) {
   `;
 }
 function costValue(source) {
-  return sql5`
+  return sql6`
     CASE
       WHEN ${source.usage}->'cost'->>'total' IS NOT NULL
         THEN (${source.usage}->'cost'->>'total')::double precision
@@ -2698,34 +2831,34 @@ function costValue(source) {
 function conversationAggregateColumns(sources) {
   const metrics = sources?.metrics ?? juniorConversations;
   const roots = sources?.roots ?? juniorConversations;
-  const conversationCount = sources ? sql5`COUNT(DISTINCT ${roots.conversationId})` : sql5`COUNT(*)`;
+  const conversationCount = sources ? sql6`COUNT(DISTINCT ${roots.conversationId})` : sql6`COUNT(*)`;
   return {
-    active: sql5`${conversationCount} FILTER (
+    active: sql6`${conversationCount} FILTER (
       WHERE ${roots.executionStatus} NOT IN ('idle', 'failed')
     )::integer`,
-    conversations: sql5`${conversationCount}::integer`,
-    cachedInputTokens: sql5`SUM(${usageTokenValue(metrics, "cachedInputTokens")})::double precision`,
-    costUsd: sql5`SUM(${costValue(metrics)})::double precision`,
-    durationMs: sql5`COALESCE(SUM(${metrics.durationMs}), 0)::double precision`,
-    failed: sql5`${conversationCount} FILTER (
+    conversations: sql6`${conversationCount}::integer`,
+    cachedInputTokens: sql6`SUM(${usageTokenValue(metrics, "cachedInputTokens")})::double precision`,
+    costUsd: sql6`SUM(${costValue(metrics)})::double precision`,
+    durationMs: sql6`COALESCE(SUM(${metrics.durationMs}), 0)::double precision`,
+    failed: sql6`${conversationCount} FILTER (
       WHERE ${roots.executionStatus} = 'failed'
     )::integer`,
-    inputTokens: sql5`SUM(${usageTokenValue(metrics, "inputTokens")})::double precision`,
-    tokens: sql5`SUM(${tokenValue(metrics)})::double precision`
+    inputTokens: sql6`SUM(${usageTokenValue(metrics, "inputTokens")})::double precision`,
+    tokens: sql6`SUM(${tokenValue(metrics)})::double precision`
   };
 }
 function conversationRangeColumns() {
   return {
-    firstSeenAt: sql5`MIN(${juniorConversations.createdAt})`.mapWith(
+    firstSeenAt: sql6`MIN(${juniorConversations.createdAt})`.mapWith(
       juniorConversations.createdAt
     ),
-    lastSeenAt: sql5`MAX(${juniorConversations.lastActivityAt})`.mapWith(
+    lastSeenAt: sql6`MAX(${juniorConversations.lastActivityAt})`.mapWith(
       juniorConversations.lastActivityAt
     )
   };
 }
 function conversationActiveDaysColumn() {
-  return sql5`COUNT(DISTINCT (${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC')::date)::integer`;
+  return sql6`COUNT(DISTINCT (${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC')::date)::integer`;
 }
 
 // src/api/conversations/stats.query.ts
@@ -2789,7 +2922,7 @@ function statsItems(map) {
   );
 }
 function statsWhere(start, end) {
-  return and9(
+  return and10(
     isNull4(juniorConversations.parentConversationId),
     gte(juniorConversations.lastActivityAt, start),
     lte(juniorConversations.lastActivityAt, end)
@@ -2866,14 +2999,14 @@ function guardianStats(rows, endMs) {
 }
 async function aggregateStats(db, start, end) {
   const where = statsWhere(start, end);
-  const activityDate = sql6`TO_CHAR(
+  const activityDate = sql7`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
   const [totalsRows, actorRows, locationRows, metricRows] = await Promise.all([
     db.select(treeAggregateColumns).from(juniorConversations).innerJoin(
       treeConversation,
-      eq10(
+      eq11(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
@@ -2888,14 +3021,14 @@ async function aggregateStats(db, start, end) {
       ...treeAggregateColumns
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq10(
+      eq11(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
     ).leftJoin(
       juniorIdentities,
-      eq10(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).leftJoin(juniorUsers, eq10(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
+      eq11(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).leftJoin(juniorUsers, eq11(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
       juniorIdentities.displayName,
       juniorIdentities.emailNormalized,
       juniorIdentities.handle,
@@ -2913,13 +3046,13 @@ async function aggregateStats(db, start, end) {
       ...treeAggregateColumns
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq10(
+      eq11(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
     ).leftJoin(
       juniorDestinations,
-      eq10(juniorDestinations.id, juniorConversations.destinationId)
+      eq11(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(
       juniorConversations.channelName,
       juniorConversations.source,
@@ -2938,7 +3071,7 @@ async function aggregateStats(db, start, end) {
       tokens: treeAggregateColumns.tokens
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq10(
+      eq11(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
@@ -2947,26 +3080,26 @@ async function aggregateStats(db, start, end) {
   return { actorRows, locationRows, metricRows, totals: totalsRows[0] };
 }
 async function aggregateGuardianStats(db, start, end) {
-  const date = sql6`TO_CHAR(
+  const date = sql7`TO_CHAR(
     ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
-  const decision = sql6`${juniorConversationEvents.payload}->>'decision'`;
-  const cost2 = sql6`CASE
+  const decision = sql7`${juniorConversationEvents.payload}->>'decision'`;
+  const cost2 = sql7`CASE
     WHEN jsonb_typeof(${juniorConversationEvents.payload}->'costUsd') = 'number'
       THEN (${juniorConversationEvents.payload}->>'costUsd')::double precision
     ELSE NULL
   END`;
   return await db.select({
-    allow: sql6`COUNT(*) FILTER (WHERE ${decision} = 'allow')::integer`,
-    ask: sql6`COUNT(*) FILTER (WHERE ${decision} = 'ask')::integer`,
-    costUsd: sql6`SUM(${cost2})::double precision`,
+    allow: sql7`COUNT(*) FILTER (WHERE ${decision} = 'allow')::integer`,
+    ask: sql7`COUNT(*) FILTER (WHERE ${decision} = 'ask')::integer`,
+    costUsd: sql7`SUM(${cost2})::double precision`,
     date,
-    deny: sql6`COUNT(*) FILTER (WHERE ${decision} = 'deny')::integer`,
-    requests: sql6`COUNT(*)::integer`
+    deny: sql7`COUNT(*) FILTER (WHERE ${decision} = 'deny')::integer`,
+    requests: sql7`COUNT(*)::integer`
   }).from(juniorConversationEvents).where(
-    and9(
-      eq10(juniorConversationEvents.type, "guardian_action_reviewed"),
+    and10(
+      eq11(juniorConversationEvents.type, "guardian_action_reviewed"),
       gte(juniorConversationEvents.createdAt, start),
       lte(juniorConversationEvents.createdAt, end)
     )
@@ -3016,7 +3149,7 @@ async function readConversationStats() {
 }
 
 // src/api/conversations/routes.ts
-function createConversationRoutes() {
+function createConversationRoutes(options) {
   const app = new Hono();
   app.get(
     "/",
@@ -3144,6 +3277,31 @@ function createConversationRoutes() {
       );
     }
   );
+  app.get(
+    "/:conversationId/attachments/:attachmentId",
+    validateRequest(
+      "param",
+      conversationAttachmentParamsSchema,
+      "Invalid route parameters."
+    ),
+    async (context) => {
+      const { attachmentId, conversationId } = context.req.valid("param");
+      const viewer = context.get("viewer");
+      const opened = await requireConversationAttachment({
+        attachmentId,
+        conversationId,
+        storage: options.attachmentStorage,
+        ...viewer ? { viewer } : {}
+      });
+      return new Response(opened.body, {
+        headers: conversationAttachmentHeaders({
+          bytes: opened.attachment.bytes,
+          contentType: opened.attachment.contentType,
+          filename: opened.attachment.filename
+        })
+      });
+    }
+  );
   app.get(
     "/:conversationId",
     validateRequest(
@@ -3175,7 +3333,7 @@ function createConversationRoutes() {
 import { Hono as Hono2 } from "hono";
 
 // src/api/locations/query.ts
-import { and as and10, asc as asc3, desc as desc3, eq as eq11, gte as gte2, isNull as isNull5, sql as sql7 } from "drizzle-orm";
+import { and as and11, asc as asc3, desc as desc3, eq as eq12, gte as gte2, isNull as isNull5, sql as sql8 } from "drizzle-orm";
 import { alias as alias5 } from "drizzle-orm/pg-core";
 
 // src/api/conversations/reporting.ts
@@ -3283,10 +3441,10 @@ function topLevelWhere() {
   return isNull5(juniorConversations.parentConversationId);
 }
 function publicLocationWhere(destinationId) {
-  return and10(
+  return and11(
     topLevelWhere(),
-    eq11(juniorDestinations.id, destinationId),
-    eq11(juniorDestinations.visibility, "public")
+    eq12(juniorDestinations.id, destinationId),
+    eq12(juniorDestinations.visibility, "public")
   );
 }
 function locationColumns() {
@@ -3337,28 +3495,28 @@ async function directoryRows(db) {
     ...conversationRangeColumns()
   }).from(juniorConversations).innerJoin(
     treeConversation2,
-    eq11(
+    eq12(
       treeConversation2.rootConversationId,
       juniorConversations.conversationId
     )
   ).leftJoin(
     juniorDestinations,
-    eq11(juniorDestinations.id, juniorConversations.destinationId)
+    eq12(juniorDestinations.id, juniorConversations.destinationId)
   ).where(topLevelWhere()).groupBy(...locationGroupBy());
 }
 async function directoryActivityRows(db, start) {
-  const date = sql7`TO_CHAR(
+  const date = sql8`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
   return db.select({
-    conversations: sql7`COUNT(*)::integer`,
+    conversations: sql8`COUNT(*)::integer`,
     date,
     visibility: juniorDestinations.visibility
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq11(juniorDestinations.id, juniorConversations.destinationId)
-  ).where(and10(topLevelWhere(), gte2(juniorConversations.lastActivityAt, start))).groupBy(date, juniorDestinations.visibility);
+    eq12(juniorDestinations.id, juniorConversations.destinationId)
+  ).where(and11(topLevelWhere(), gte2(juniorConversations.lastActivityAt, start))).groupBy(date, juniorDestinations.visibility);
 }
 function directoryActivityDays(rows, nowMs) {
   const days = /* @__PURE__ */ new Map();
@@ -3431,7 +3589,7 @@ async function recentLocationRows(db, locationId) {
     createdAt: juniorConversations.createdAt,
     destinationId: juniorDestinations.id,
     durationMs: juniorConversations.durationMs,
-    email: sql7`COALESCE(
+    email: sql8`COALESCE(
         ${juniorUsers.primaryEmailNormalized},
         ${juniorIdentities.email}
       )`,
@@ -3440,7 +3598,7 @@ async function recentLocationRows(db, locationId) {
     fullName: juniorUsers.displayName,
     handle: juniorIdentities.handle,
     lastActivityAt: juniorConversations.lastActivityAt,
-    providerSubjectId: sql7`CASE
+    providerSubjectId: sql8`CASE
         WHEN ${juniorIdentities.provider} = 'slack'
           THEN ${juniorIdentities.providerSubjectId}
         ELSE NULL
@@ -3451,12 +3609,12 @@ async function recentLocationRows(db, locationId) {
     usage: juniorConversations.usage
   }).from(juniorConversations).innerJoin(
     juniorDestinations,
-    eq11(juniorDestinations.id, juniorConversations.destinationId)
+    eq12(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq11(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq11(juniorUsers.id, juniorIdentities.userId)).where(
-    and10(
+    eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).where(
+    and11(
       publicLocationWhere(locationId),
       isNull5(juniorConversations.archivedAt)
     )
@@ -3472,7 +3630,7 @@ async function readLocationDetailFromSql(locationId, options = {}) {
   const start = new Date(end);
   start.setUTCDate(start.getUTCDate() - (ACTIVITY_DAYS - 1));
   const where = publicLocationWhere(locationId);
-  const activityDate = sql7`TO_CHAR(
+  const activityDate = sql8`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
@@ -3483,27 +3641,27 @@ async function readLocationDetailFromSql(locationId, options = {}) {
       ...conversationRangeColumns()
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq11(
+      eq12(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq11(juniorDestinations.id, juniorConversations.destinationId)
+      eq12(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(...locationGroupBy()),
     getDb().select({
       date: activityDate,
       ...treeAggregateColumns2
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq11(
+      eq12(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq11(juniorDestinations.id, juniorConversations.destinationId)
-    ).where(and10(where, gte2(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
+      eq12(juniorDestinations.id, juniorConversations.destinationId)
+    ).where(and11(where, gte2(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
     getDb().select({
       actorIdentityId: juniorConversations.actorIdentityId,
       email: juniorUsers.primaryEmailNormalized,
@@ -3515,17 +3673,17 @@ async function readLocationDetailFromSql(locationId, options = {}) {
       ...treeAggregateColumns2
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq11(
+      eq12(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq11(juniorDestinations.id, juniorConversations.destinationId)
+      eq12(juniorDestinations.id, juniorConversations.destinationId)
     ).leftJoin(
       juniorIdentities,
-      eq11(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).leftJoin(juniorUsers, eq11(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
+      eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).leftJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
       juniorConversations.actorIdentityId,
       juniorUsers.primaryEmailNormalized,
       juniorUsers.displayName,
@@ -3638,10 +3796,10 @@ function createLocationRoutes() {
 import { Hono as Hono3 } from "hono";
 
 // src/api/people/list.query.ts
-import { and as and12, eq as eq13, gte as gte3, sql as sql9 } from "drizzle-orm";
+import { and as and13, eq as eq14, gte as gte3, sql as sql10 } from "drizzle-orm";
 
 // src/api/people/shared.ts
-import { and as and11, asc as asc4, desc as desc4, eq as eq12, isNull as isNull6, notExists, or as or4, sql as sql8 } from "drizzle-orm";
+import { and as and12, asc as asc4, desc as desc4, eq as eq13, isNull as isNull6, notExists, or as or5, sql as sql9 } from "drizzle-orm";
 import { alias as alias6 } from "drizzle-orm/pg-core";
 var RECENT_LIMIT2 = 25;
 var ACTIVITY_DAYS2 = 365;
@@ -3661,37 +3819,37 @@ var peopleTreeAggregateColumns = conversationAggregateColumns({
 function peopleTreeMetricsJoin() {
   const rootOwnedByActor = getDb().select({ conversationId: peopleRootConversation.conversationId }).from(peopleRootConversation).innerJoin(
     peopleRootIdentity,
-    eq12(peopleRootIdentity.id, peopleRootConversation.actorIdentityId)
+    eq13(peopleRootIdentity.id, peopleRootConversation.actorIdentityId)
   ).where(
-    and11(
-      eq12(
+    and12(
+      eq13(
         peopleRootConversation.conversationId,
         juniorConversations.rootConversationId
       ),
       isNull6(peopleRootConversation.parentConversationId),
-      eq12(
+      eq13(
         peopleRootConversation.rootConversationId,
         peopleRootConversation.conversationId
       ),
-      eq12(
+      eq13(
         peopleRootIdentity.emailNormalized,
         juniorUsers.primaryEmailNormalized
       ),
-      eq12(peopleRootIdentity.emailVerified, true)
+      eq13(peopleRootIdentity.emailVerified, true)
     )
   );
-  return and11(
-    eq12(
+  return and12(
+    eq13(
       peopleTreeConversation.rootConversationId,
       juniorConversations.rootConversationId
     ),
-    or4(
-      eq12(
+    or5(
+      eq13(
         juniorConversations.rootConversationId,
         juniorConversations.conversationId
       ),
-      and11(
-        eq12(
+      and12(
+        eq13(
           peopleTreeConversation.conversationId,
           juniorConversations.conversationId
         ),
@@ -3741,11 +3899,11 @@ function statsItems2(map) {
 }
 function verifiedActorWhere(email) {
   const normalizedEmail = normalizeEmail(email);
-  return and11(
-    eq12(juniorIdentities.provider, "slack"),
-    eq12(juniorIdentities.emailVerified, true),
-    sql8`${juniorUsers.primaryEmailNormalized} IS NOT NULL`,
-    normalizedEmail ? eq12(juniorUsers.primaryEmailNormalized, normalizedEmail) : void 0
+  return and12(
+    eq13(juniorIdentities.provider, "slack"),
+    eq13(juniorIdentities.emailVerified, true),
+    sql9`${juniorUsers.primaryEmailNormalized} IS NOT NULL`,
+    normalizedEmail ? eq13(juniorUsers.primaryEmailNormalized, normalizedEmail) : void 0
   );
 }
 async function recentActorRows(email) {
@@ -3768,12 +3926,12 @@ async function recentActorRows(email) {
     usage: juniorConversations.usage
   }).from(juniorConversations).innerJoin(
     juniorIdentities,
-    eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).innerJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).leftJoin(
+    eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(
     juniorDestinations,
-    eq12(juniorDestinations.id, juniorConversations.destinationId)
+    eq13(juniorDestinations.id, juniorConversations.destinationId)
   ).where(
-    and11(verifiedActorWhere(email), isNull6(juniorConversations.archivedAt))
+    and12(verifiedActorWhere(email), isNull6(juniorConversations.archivedAt))
   ).orderBy(
     desc4(juniorConversations.lastActivityAt),
     asc4(juniorConversations.conversationId)
@@ -3802,7 +3960,7 @@ function directoryActivityDays2(rows, nowMs) {
 async function readPeopleListFromSql() {
   const nowMs = Date.now();
   const { end, start } = activityWindow(nowMs);
-  const activityDate = sql9`TO_CHAR(
+  const activityDate = sql10`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
@@ -3810,24 +3968,24 @@ async function readPeopleListFromSql() {
     getDb().select({
       email: juniorUsers.primaryEmailNormalized,
       fullName: juniorUsers.displayName,
-      slackUserId: sql9`MAX(${juniorIdentities.providerSubjectId})`,
-      slackUserName: sql9`MAX(${juniorIdentities.handle})`,
+      slackUserId: sql10`MAX(${juniorIdentities.providerSubjectId})`,
+      slackUserName: sql10`MAX(${juniorIdentities.handle})`,
       activeDays: conversationActiveDaysColumn(),
       ...peopleTreeAggregateColumns,
       ...conversationRangeColumns()
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, peopleTreeMetricsJoin()).where(verifiedActorWhere()).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
+      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, peopleTreeMetricsJoin()).where(verifiedActorWhere()).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
     getDb().select({
-      activePeople: sql9`COUNT(DISTINCT ${juniorUsers.id})::int`,
-      conversations: sql9`COUNT(*)::int`,
+      activePeople: sql10`COUNT(DISTINCT ${juniorUsers.id})::int`,
+      conversations: sql10`COUNT(*)::int`,
       date: activityDate
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).where(
-      and12(
+      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).where(
+      and13(
         verifiedActorWhere(),
         gte3(juniorConversations.lastActivityAt, start)
       )
@@ -3870,7 +4028,7 @@ async function readPeopleList() {
 }
 
 // src/api/people/profile.query.ts
-import { and as and13, eq as eq14, gte as gte4, sql as sql10 } from "drizzle-orm";
+import { and as and14, eq as eq15, gte as gte4, sql as sql11 } from "drizzle-orm";
 function emptyProfile(email, nowMs) {
   const end = new Date(nowMs);
   end.setUTCHours(0, 0, 0, 0);
@@ -3905,7 +4063,7 @@ function addAggregate2(map, label, row) {
   map.set(label, item);
 }
 function surfaceExpression() {
-  return sql10`CASE
+  return sql11`CASE
     WHEN ${juniorConversations.source} IN ('api', 'scheduler', 'slack')
       THEN ${juniorConversations.source}
     WHEN ${juniorConversations.conversationId} LIKE 'slack:%' THEN 'slack'
@@ -3934,30 +4092,30 @@ async function readPeopleProfileFromSql(email, options = {}) {
   const where = verifiedActorWhere(normalizedEmail);
   const metricsJoin = peopleTreeMetricsJoin();
   const surface = surfaceExpression();
-  const activityDate = sql10`TO_CHAR(
+  const activityDate = sql11`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
-  const channel = sql10`SPLIT_PART(${juniorConversations.conversationId}, ':', 2)`;
+  const channel = sql11`SPLIT_PART(${juniorConversations.conversationId}, ':', 2)`;
   const [totalsRows, dayRows, locationRows, surfaceRows, recentRows] = await Promise.all([
     getDb().select({
       email: juniorUsers.primaryEmailNormalized,
       fullName: juniorUsers.displayName,
-      slackUserId: sql10`MAX(${juniorIdentities.providerSubjectId})`,
-      slackUserName: sql10`MAX(${juniorIdentities.handle})`,
+      slackUserId: sql11`MAX(${juniorIdentities.providerSubjectId})`,
+      slackUserName: sql11`MAX(${juniorIdentities.handle})`,
       activeDays: conversationActiveDaysColumn(),
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
+      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
     getDb().select({
       date: activityDate,
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(and13(where, gte4(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
+      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(and14(where, gte4(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
     getDb().select({
       channel,
       channelName: juniorConversations.channelName,
@@ -3966,10 +4124,10 @@ async function readPeopleProfileFromSql(email, options = {}) {
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).leftJoin(
+      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).leftJoin(
       juniorDestinations,
-      eq14(juniorDestinations.id, juniorConversations.destinationId)
+      eq15(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(
       channel,
       juniorConversations.channelName,
@@ -3978,8 +4136,8 @@ async function readPeopleProfileFromSql(email, options = {}) {
     ),
     getDb().select({ surface, ...peopleTreeAggregateColumns }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(surface),
+      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(surface),
     recentActorRows(normalizedEmail)
   ]);
   const totalsRow = totalsRows[0];
@@ -4057,7 +4215,7 @@ async function readPeopleProfile(email, options = {}) {
 }
 
 // src/api/people/spend.query.ts
-import { and as and14, eq as eq15, gte as gte5, lte as lte2, sql as sql11 } from "drizzle-orm";
+import { and as and15, eq as eq16, gte as gte5, lte as lte2, sql as sql12 } from "drizzle-orm";
 var SEVEN_DAY_OFFSET = 6;
 var THIRTY_DAY_OFFSET = 29;
 function addUsd2(current, next) {
@@ -4076,7 +4234,7 @@ function spendWindow(nowMs) {
 async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
   const normalizedEmail = normalizeEmail(email);
   const { end, sevenDayStart, thirtyDayStart } = spendWindow(nowMs);
-  const activityDate = sql11`TO_CHAR(
+  const activityDate = sql12`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
   )`;
@@ -4086,9 +4244,9 @@ async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
     date: activityDate
   }).from(juniorConversations).innerJoin(
     juniorIdentities,
-    eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(
-    and14(
+    eq16(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).innerJoin(juniorUsers, eq16(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(
+    and15(
       verifiedActorWhere(normalizedEmail),
       gte5(juniorConversations.lastActivityAt, thirtyDayStart),
       lte2(juniorConversations.lastActivityAt, end)
@@ -4176,7 +4334,7 @@ import { Hono as Hono4 } from "hono";
 
 // src/personal-tokens/store.ts
 import { createHash, randomBytes, randomUUID } from "crypto";
-import { and as and15, desc as desc5, eq as eq16, gt, isNull as isNull7 } from "drizzle-orm";
+import { and as and16, desc as desc5, eq as eq17, gt, isNull as isNull7 } from "drizzle-orm";
 var TOKEN_PREFIX = "jr_pat_";
 var TOKEN_SUFFIX_LENGTH = 8;
 var DEFAULT_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1e3;
@@ -4213,8 +4371,8 @@ async function createPersonalToken(args) {
 }
 async function listPersonalTokens(email, now = /* @__PURE__ */ new Date()) {
   const rows = await getDb().select().from(juniorApiTokens).where(
-    and15(
-      eq16(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(email)),
+    and16(
+      eq17(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(email)),
       isNull7(juniorApiTokens.revokedAt),
       gt(juniorApiTokens.expiresAt, now)
     )
@@ -4223,9 +4381,9 @@ async function listPersonalTokens(email, now = /* @__PURE__ */ new Date()) {
 }
 async function revokePersonalToken(args) {
   const rows = await getDb().update(juniorApiTokens).set({ revokedAt: args.now ?? /* @__PURE__ */ new Date() }).where(
-    and15(
-      eq16(juniorApiTokens.id, args.id),
-      eq16(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(args.email)),
+    and16(
+      eq17(juniorApiTokens.id, args.id),
+      eq17(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(args.email)),
       isNull7(juniorApiTokens.revokedAt)
     )
   ).returning({ id: juniorApiTokens.id });
@@ -4237,15 +4395,15 @@ async function authenticatePersonalToken(token2, now = /* @__PURE__ */ new Date(
     id: juniorApiTokens.id,
     ownerEmailNormalized: juniorApiTokens.ownerEmailNormalized
   }).from(juniorApiTokens).where(
-    and15(
-      eq16(juniorApiTokens.tokenHash, hashToken(token2)),
+    and16(
+      eq17(juniorApiTokens.tokenHash, hashToken(token2)),
       isNull7(juniorApiTokens.revokedAt),
       gt(juniorApiTokens.expiresAt, now)
     )
   ).limit(1);
   const match = rows[0];
   if (!match) return void 0;
-  await getDb().update(juniorApiTokens).set({ lastUsedAt: now }).where(eq16(juniorApiTokens.id, match.id));
+  await getDb().update(juniorApiTokens).set({ lastUsedAt: now }).where(eq17(juniorApiTokens.id, match.id));
   return match.ownerEmailNormalized;
 }
 
@@ -4502,7 +4660,7 @@ function readDescriptionText(home) {
   }
 }
 async function readSkillReports() {
-  const { discoverSkills } = await import("./skills-4GZTZX4V.js");
+  const { discoverSkills } = await import("./skills-WZWKZIFQ.js");
   const skills = await discoverSkills();
   return skillReportsSchema.parse(
     skills.map((skill) => ({
@@ -4512,7 +4670,7 @@ async function readSkillReports() {
   );
 }
 async function readPlugins() {
-  const { pluginCatalogRuntime } = await import("./catalog-runtime-3SNKYCBG.js");
+  const { pluginCatalogRuntime } = await import("./catalog-runtime-7GZ25WTR.js");
   return pluginsSchema.parse(
     pluginCatalogRuntime.getProviders().map((plugin) => ({
       configKeys: plugin.manifest.configKeys ?? [],
@@ -4525,7 +4683,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
   const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
     import("./discovery-GUFTFBTL.js"),
-    import("./catalog-runtime-3SNKYCBG.js"),
+    import("./catalog-runtime-7GZ25WTR.js"),
     readPlugins(),
     readSkillReports()
   ]);
@@ -4541,7 +4699,7 @@ async function readRuntimeInfoReport() {
 }
 async function readPluginOperationalReportFeed() {
   const nowMs = Date.now();
-  const { getPluginOperationalReports } = await import("./agent-hooks-CCAR46PQ.js");
+  const { getPluginOperationalReports } = await import("./agent-hooks-BOWFTDE5.js");
   return pluginOperationalReportFeedSchema.parse({
     source: "plugins",
     generatedAt: new Date(nowMs).toISOString(),
@@ -4579,7 +4737,12 @@ function createJuniorApi() {
     "/api/stats",
     async () => jsonResponse(statsReportSchema, await readStatsReport())
   );
-  app.route("/api/conversations", createConversationRoutes());
+  app.route(
+    "/api/conversations",
+    createConversationRoutes({
+      attachmentStorage: createVercelAttachmentStorage()
+    })
+  );
   app.route("/api/personal-tokens", createPersonalTokenRoutes());
   app.route("/api/people", createPeopleRoutes());
   app.route("/api/locations", createLocationRoutes());