@sentry/junior 0.158.0 → 0.160.0

package/dist/{chunk-EXITAVHO.js → chunk-M5HCOMDR.js}

@@ -7,7 +7,7 @@ import {
   PluginCredentialFailureError,
   agentNameSchema,
   createPluginAuthOrchestration
-} from "./chunk-FA32YRZ3.js";
+} from "./chunk-756F567I.js";
 import {
   authorizationId
 } from "./chunk-DIB4GX3G.js";
@@ -32,7 +32,7 @@ import {
   searchSlackUsers,
   selectPluginGrant,
   toMcpProviderError
-} from "./chunk-3A7VXSPJ.js";
+} from "./chunk-PVIM2RWO.js";
 import {
   RetryableDeliveryError,
   actorFromRun,
@@ -48,7 +48,7 @@ import {
   getSlackMessagePermalink,
   resolveBaseUrl,
   uploadFilesToConversation
-} from "./chunk-4JAOLUDB.js";
+} from "./chunk-P7W3ZL5J.js";
 import {
   parseSandboxEgressAuthRequiredSignal,
   parseSandboxEgressPermissionDeniedSignal,
@@ -74,7 +74,7 @@ import {
   runNonInteractiveCommand,
   throwSandboxOperationError,
   wrapSandboxSetupError
-} from "./chunk-UJ6N32ZM.js";
+} from "./chunk-BGVQGEKB.js";
 import {
   SCHEDULED_TASK_SYSTEM_ACTOR,
   compactEventTask,
@@ -107,10 +107,10 @@ import {
   scheduledTaskAttributes,
   storeAttachments,
   writableEventTask
-} from "./chunk-4Q6QVTKA.js";
+} from "./chunk-RJGRXDA7.js";
 import {
   parseSlackThreadId
-} from "./chunk-DTVTBZNP.js";
+} from "./chunk-56TFPTZU.js";
 import {
   AGENTS_REMOVAL_NOTICE,
   AGENTS_REPLACEMENT_NOTICE,
@@ -165,6 +165,7 @@ import {
   piMessageFromHistoryItem,
   positiveInteger,
   recordAgentsInstructionsUpdated,
+  recordAttachmentsDelivered,
   recordAuthorizationRequested,
   recordGuardianActionReviewed,
   recordMcpProviderConnected,
@@ -180,7 +181,7 @@ import {
   stripRuntimeTurnContext,
   trimTrailingAssistantMessages,
   truncateText
-} from "./chunk-C3FYJZSA.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
@@ -196,7 +197,7 @@ import {
   getSlackToolContext,
   readActorIdentity,
   resolveChannelCapabilities
-} from "./chunk-NOEERHHR.js";
+} from "./chunk-U26KRMYX.js";
 import {
   SlackActionError,
   downloadPrivateSlackFile,
@@ -205,7 +206,7 @@ import {
   isConversationScopedChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-ROOTB7J7.js";
+} from "./chunk-OUAZDZTZ.js";
 import {
   KNOWN_CONVERSATION_EVENT_TYPES,
   contextProvenance,
@@ -217,10 +218,10 @@ import {
   instructionActors,
   instructionProvenanceFor,
   sameActorIdentity
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   juniorIdentities
-} from "./chunk-VURJ2NSF.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   SANDBOX_DATA_ROOT,
   SANDBOX_SKILLS_ROOT,
@@ -232,7 +233,7 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getStateAdapter
-} from "./chunk-PHQDXC27.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX,
   COMPACTION_SUMMARY_PREFIX,
@@ -265,7 +266,7 @@ import {
   resolveGatewayCredential,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-FAJ6SMEE.js";
+} from "./chunk-J77DLAPE.js";
 import {
   canExposeConversationPayload,
   resolveConversationPrivacy,
@@ -275,16 +276,16 @@ import {
   toGenAiMessagesTraceAttributes,
   toGenAiPayloadMetadata,
   toGenAiPayloadTraceAttributes
-} from "./chunk-UPPU3FQU.js";
+} from "./chunk-TBRJGMTO.js";
 import {
   discoverSkills,
   findSkillByName,
   loadSkillsByName,
   parseSkillInvocation
-} from "./chunk-LUSAAJJA.js";
+} from "./chunk-XPX3DYG7.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-YEZS4TEY.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   CredentialUnavailableError,
   OAuthProviderError,
@@ -292,7 +293,7 @@ import {
   getOAuthProviderErrorAttributes,
   resolveAuthTokenPlaceholder,
   resolvePluginCommandEnv
-} from "./chunk-EQ6Y37MD.js";
+} from "./chunk-42E7432W.js";
 import {
   credentialUserSubjectId
 } from "./chunk-BDUENQD3.js";
@@ -320,7 +321,7 @@ import {
   summarizeMessageText,
   withLogContext,
   withSpan
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 import {
   startInactiveSpan,
   withActiveSpan
@@ -1731,6 +1732,7 @@ function buildOutputSection(platform) {
       `<output format="markdown">`,
       "- Start with the answer or result, not internal process narration.",
       "- Use concise Markdown suitable for terminal output: short paragraphs, bullets, links, and fenced code blocks when helpful.",
+      "- When you mention a pull request, include a direct link. Prefer the full PR URL or a Markdown link; do not leave bare `PR #123` text without a URL or repo.",
       "- End every turn with a final user-facing response.",
       "</output>"
     ].join("\n");
@@ -1740,6 +1742,7 @@ function buildOutputSection(platform) {
     "- Default to the shortest complete reply\u2014usually 1\u20135 sentences and under 800 characters. Include only the outcome, decisive evidence, and any blocker or required next action. If useful detail would exceed that, put it in a Slack canvas and reply with the link. An explicit user request for detail overrides this target.",
     "- Start with the answer or result, not internal process narration.",
     "- Use Slack-flavored Markdown: **bold** section labels, `code`, [text](url) links, bullet lists, and fenced code blocks. No hash-prefixed headings and no tables. When the answer primarily lists several URLs, show each URL bare instead of as a labeled link.",
+    "- When you mention a pull request, include a direct link. Prefer the full PR URL or a Markdown link; `owner/repo#number` is also accepted and is linkified on delivery. Do not leave bare `PR #123` text without a URL or repo.",
     "- End every turn with a final user-facing markdown response unless the Slack action rules allow a no-reply completion.",
     "</output>"
   ].join("\n");
@@ -10543,7 +10546,8 @@ var sendFilesResultSchema = juniorToolOutputSchema.extend({
   attachment_refs: z42.array(
     z42.object({
       id: z42.string().min(1),
-      name: z42.string().min(1)
+      // Same noun as storage, delivery events, and the report API.
+      filename: z42.string().min(1)
     })
   )
 });
@@ -10581,7 +10585,7 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
       )
     }),
     outputSchema: sendFilesResultSchema,
-    execute: async ({ files }) => {
+    execute: async ({ files }, options) => {
       const filesToSend = normalizeFiles(files);
       const activeChannelId = context.sourceChannelId;
       if (!activeChannelId) {
@@ -10603,8 +10607,15 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
       });
       const cached = state.getOperationResult(operationKey);
       if (cached) {
+        if (attachments && cached.delivered.length > 0) {
+          await recordAttachmentsDelivered({
+            attachments: cached.delivered,
+            conversationId: attachments.conversationId,
+            ...cached.toolCallId ? { toolCallId: cached.toolCallId } : {}
+          });
+        }
         return sendFilesResultSchema.parse({
-          ...cached,
+          ...cached.result,
           deduplicated: true
         });
       }
@@ -10623,13 +10634,36 @@ function createSendFilesTool(context, state, materializeFile, attachments) {
         files: uploads,
         threadTs
       });
+      const delivered = stored.map(
+        (attachment, index) => {
+          const file = materializedFiles[index];
+          return {
+            id: attachment.id,
+            filename: file.filename,
+            contentType: file.mimeType,
+            bytes: file.bytes
+          };
+        }
+      );
       const response = {
-        attachment_refs: stored.map((attachment, index) => ({
+        // Tool result stays minimal; transcript/report carries full metadata.
+        attachment_refs: delivered.map((attachment) => ({
           id: attachment.id,
-          name: materializedFiles[index].filename
+          filename: attachment.filename
         }))
       };
-      state.setOperationResult(operationKey, response);
+      state.setOperationResult(operationKey, {
+        delivered,
+        result: response,
+        ...options.toolCallId ? { toolCallId: options.toolCallId } : {}
+      });
+      if (attachments && delivered.length > 0) {
+        await recordAttachmentsDelivered({
+          attachments: delivered,
+          conversationId: attachments.conversationId,
+          ...options.toolCallId ? { toolCallId: options.toolCallId } : {}
+        });
+      }
       return response;
     }
   });
@@ -13517,6 +13551,9 @@ function buildSandboxInput(toolName, params) {
 import { PluginToolInputError } from "@sentry/junior-plugin-api";
 
 // src/chat/tool-support/action-review.ts
+import {
+  missingToolAnnotationKeys as missingToolAnnotationKeys2
+} from "@sentry/junior-plugin-api";
 var ACTION_CONFIRMATION_INSTRUCTIONS = [
   "The action was not executed because explicit user confirmation is required.",
   "Stop tool use for this turn and respond to the user now with a direct, concise confirmation question that names the exact action, target, and material side effects.",
@@ -13529,6 +13566,13 @@ var ACTION_DENIAL_INSTRUCTIONS = [
   "If the reason is missing or withheld authorization and exact confirmation could make the action allowable, stop tool use for this turn and respond to the user now with a direct, concise confirmation question that names the exact action, target, and material side effects.",
   "Proceed only with a materially safer alternative. Otherwise, stop and explain the specific risk to the user without mentioning Guardian or internal review mechanics."
 ].join("\n");
+var ACTION_REVIEW_LIMIT_INSTRUCTIONS = [
+  "This action was rejected due to unacceptable risk.",
+  "Action review rejected three consecutive tool execution attempts.",
+  "Do not retry this action or an equivalent write this turn.",
+  "Stop tool use for this turn and respond to the user now with a direct, concise explanation of the risk.",
+  "Do not mention Guardian, the runtime, policy, or internal review mechanics."
+].join("\n");
 var ToolActionRejectedError = class extends Error {
   decision;
   reason;
@@ -13536,11 +13580,9 @@ var ToolActionRejectedError = class extends Error {
   riskLevel;
   userAuthorization;
   constructor(decision, reason, assessment = {}) {
-    super(
-      decision === "ask" ? `${ACTION_CONFIRMATION_INSTRUCTIONS}
-Reason: ${reason}` : `${ACTION_DENIAL_INSTRUCTIONS}
-Reason: ${reason}`
-    );
+    const instructions = assessment.instructions ?? (decision === "ask" ? ACTION_CONFIRMATION_INSTRUCTIONS : ACTION_DENIAL_INSTRUCTIONS);
+    super(`${instructions}
+Reason: ${reason}`);
     this.name = "ToolActionRejectedError";
     this.decision = decision;
     this.reason = reason;
@@ -13563,7 +13605,7 @@ var ToolActionReviewUnavailableError = class extends Error {
 var ToolActionReviewLimitError = class extends Error {
   constructor() {
     super(
-      "Action review rejected three consecutive tool execution attempts; the run was interrupted."
+      "Action review rejected three consecutive tool execution attempts."
     );
     this.name = "ToolActionReviewLimitError";
   }
@@ -13580,6 +13622,9 @@ function effectiveApprovalMode(tool, resolved) {
     return "review";
   }
   const annotations = resolved?.annotations ?? tool.annotations;
+  if (missingToolAnnotationKeys2(annotations).length > 0) {
+    return "review";
+  }
   if (annotations?.destructiveHint === true || annotations?.openWorldHint === true || annotations?.readOnlyHint === false) {
     return "review";
   }
@@ -13780,10 +13825,19 @@ function createToolActionReview(options) {
       const reviewedAction = projectedRejection(proposal, decision);
       appendVisibleRejection(priorRejections, reviewedAction);
       consecutiveRejections += 1;
-      if (consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS) {
-        const limitError = new ToolActionReviewLimitError();
-        options.onFatal(limitError);
-        throw limitError;
+      const exhausted = consecutiveRejections >= MAX_CONSECUTIVE_REJECTIONS;
+      if (exhausted) {
+        logException(
+          new ToolActionReviewLimitError(),
+          "guardian.action_review.exhausted",
+          {
+            "app.guardian.decision": decision.decision,
+            "app.guardian.risk_level": decision.riskLevel,
+            "app.guardian.user_authorization": decision.userAuthorization,
+            "gen_ai.tool.name": proposal.tool.name,
+            "gen_ai.tool.call.id": toolCallId
+          }
+        );
       }
       pendingRejections.set(toolCallId, {
         decision: decision.decision,
@@ -13796,7 +13850,8 @@ function createToolActionReview(options) {
       throw new ToolActionRejectedError(decision.decision, decision.reason, {
         riskLevel: decision.riskLevel,
         reviewedAction,
-        userAuthorization: decision.userAuthorization
+        userAuthorization: decision.userAuthorization,
+        ...exhausted ? { instructions: ACTION_REVIEW_LIMIT_INSTRUCTIONS } : {}
       });
     },
     projectToolResult(toolCallId, result) {

package/dist/{chunk-KAFYW3O6.js → chunk-MBDWMEO6.js}

@@ -1,10 +1,10 @@
 import {
   createWebAuthorization,
   deleteWebAuthorization
-} from "./chunk-SSU65ZTZ.js";
+} from "./chunk-472VVYYV.js";
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-A7EDLNGU.js";
+} from "./chunk-FKMWPA4A.js";
 import {
   buildDeliveredTurnStatePatch,
   completeAuthPauseTurn,
@@ -12,20 +12,20 @@ import {
   getTurnUserMessage,
   processPluginTask,
   scheduleSessionCompletedPluginTasks
-} from "./chunk-IEM3GFXL.js";
+} from "./chunk-URPLKXLG.js";
 import {
   ConversationTurnLifecycleService,
   coerceThreadConversationState,
   getPersistedSandboxState,
   getPersistedThreadState,
   persistThreadStateById
-} from "./chunk-4XJ2WSTI.js";
+} from "./chunk-3AHIB66R.js";
 import {
   healthReportSchema
 } from "./chunk-UTL3MHPC.js";
 import {
   parseSlackThreadId
-} from "./chunk-DTVTBZNP.js";
+} from "./chunk-56TFPTZU.js";
 import {
   TurnInputCommitLostError,
   abandonTurnRecord,
@@ -48,17 +48,17 @@ import {
   saveTurnCheckpoint,
   startActiveTurn,
   upsertConversationMessage
-} from "./chunk-C3FYJZSA.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   normalizeSlackConversationId
-} from "./chunk-ROOTB7J7.js";
+} from "./chunk-OUAZDZTZ.js";
 import {
   getConversationEventStore,
   getConversationStore
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   getSlackBotToken
-} from "./chunk-FAJ6SMEE.js";
+} from "./chunk-J77DLAPE.js";
 import {
   credentialContextForActor
 } from "./chunk-BDUENQD3.js";
@@ -67,7 +67,7 @@ import {
   logWarn,
   setTags,
   withLogContext
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/handlers/health.ts
 function readHealthReport() {

package/dist/{chunk-ROOTB7J7.js → chunk-OUAZDZTZ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-EM225ITJ.js";
 import {
   getSlackBotToken
-} from "./chunk-FAJ6SMEE.js";
+} from "./chunk-J77DLAPE.js";
 import {
   parseSlackChannelReferenceId
 } from "./chunk-V7YE4WCP.js";
@@ -12,7 +12,7 @@ import {
   setSpanAttributes,
   setSpanStatus,
   withSpan
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/slack/client.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";

package/dist/{chunk-4JAOLUDB.js → chunk-P7W3ZL5J.js}

@@ -4,19 +4,19 @@ import {
   isDmChannel,
   normalizeSlackConversationId,
   withSlackRetries
-} from "./chunk-ROOTB7J7.js";
+} from "./chunk-OUAZDZTZ.js";
 import {
   parseDestination
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   getStateAdapter
-} from "./chunk-PHQDXC27.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   normalizeSlackEmojiName
-} from "./chunk-FAJ6SMEE.js";
+} from "./chunk-J77DLAPE.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-YEZS4TEY.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   parseSlackMessageTs,
   parseSlackUserId
@@ -25,7 +25,7 @@ import {
   isRecord,
   logInfo,
   logWarn
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/slack/outbound.ts
 var MAX_SLACK_MESSAGE_TEXT_CHARS = 4e4;
@@ -379,6 +379,29 @@ function hasUnmatchedClosingParen(text) {
   }
   return balance < 0;
 }
+var GITHUB_OWNER_PATTERN = "[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?";
+var GITHUB_REPO_PATTERN = "[A-Za-z0-9._-]+";
+var GITHUB_REPO_ISSUE_REF_PATTERN = new RegExp(
+  `^(${GITHUB_OWNER_PATTERN})\\/(${GITHUB_REPO_PATTERN})#(\\d+)\\b`
+);
+function isGitHubRefBoundary(char) {
+  return char === void 0 || !/[A-Za-z0-9._-]/.test(char);
+}
+function readGitHubRepoIssueRef(line, start) {
+  if (!isGitHubRefBoundary(start === 0 ? void 0 : line[start - 1])) {
+    return void 0;
+  }
+  const match = GITHUB_REPO_ISSUE_REF_PATTERN.exec(line.slice(start));
+  if (!match) {
+    return void 0;
+  }
+  const [text, owner, repo, number] = match;
+  return {
+    text,
+    end: start + text.length,
+    url: `https://github.com/${owner}/${repo}/issues/${number}`
+  };
+}
 function readBareUrl(line, start) {
   let end = start;
   while (end < line.length) {
@@ -436,6 +459,12 @@ function wrapBareUrlsOnLine(line) {
         continue;
       }
     }
+    const repoIssueRef = readGitHubRepoIssueRef(line, i);
+    if (repoIssueRef) {
+      result += `[${repoIssueRef.text}](${repoIssueRef.url})`;
+      i = repoIssueRef.end;
+      continue;
+    }
     result += line[i];
     i++;
   }

package/dist/{chunk-3A7VXSPJ.js → chunk-PVIM2RWO.js}

@@ -3,38 +3,38 @@ import {
 } from "./chunk-RF6J3DIO.js";
 import {
   resolveBaseUrl
-} from "./chunk-4JAOLUDB.js";
+} from "./chunk-P7W3ZL5J.js";
 import {
   isExperimentalFeatureEnabled
 } from "./chunk-5IDFPCON.js";
 import {
   createPluginLogger,
   getPlugins
-} from "./chunk-NOEERHHR.js";
+} from "./chunk-U26KRMYX.js";
 import {
   getSlackClient,
   withSlackRetries
-} from "./chunk-ROOTB7J7.js";
+} from "./chunk-OUAZDZTZ.js";
 import {
   getDb,
   parseDestination
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   sleep
 } from "./chunk-EM225ITJ.js";
 import {
   acquireActiveLock,
   getStateAdapter
-} from "./chunk-PHQDXC27.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-YEZS4TEY.js";
+} from "./chunk-2SFMRMDV.js";
 import {
   fetchWithBoundedOAuthErrorBodies
-} from "./chunk-EQ6Y37MD.js";
+} from "./chunk-42E7432W.js";
 import {
   isRecord
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/capabilities/router.ts
 var ProviderCredentialRouter = class {

package/dist/{chunk-SAJPQLTY.js → chunk-PZUJPPON.js}

@@ -1,6 +1,6 @@
 import {
   pluginCatalogRuntime
-} from "./chunk-YEZS4TEY.js";
+} from "./chunk-2SFMRMDV.js";
 
 // src/chat/plugins/validation.ts
 import { isDeepStrictEqual } from "util";

package/dist/{chunk-4Q6QVTKA.js → chunk-RJGRXDA7.js}

@@ -1,13 +1,13 @@
 import {
   ToolInputError
-} from "./chunk-C3FYJZSA.js";
+} from "./chunk-RLOXMHLA.js";
 import {
   canRouteResourceEvents,
   getPlugins
-} from "./chunk-NOEERHHR.js";
+} from "./chunk-U26KRMYX.js";
 import {
   getDb
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   juniorAttachments,
   juniorConversations,
@@ -15,13 +15,13 @@ import {
   juniorSchedulerRuns,
   juniorSchedulerTasks,
   juniorStats
-} from "./chunk-VURJ2NSF.js";
+} from "./chunk-4UO3UAW7.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
 import {
   logInfo
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/event-tasks/store.ts
 import { and, asc, desc, eq, inArray, or, sql } from "drizzle-orm";

package/dist/{chunk-C3FYJZSA.js → chunk-RLOXMHLA.js}

@@ -13,7 +13,7 @@ import {
   instructionProvenanceFor,
   sanitizePostgresJson,
   withConversationEventLock
-} from "./chunk-AF4PHIP6.js";
+} from "./chunk-JQZIUESN.js";
 import {
   SANDBOX_WORKSPACE_ROOT,
   sleep
@@ -23,14 +23,14 @@ import {
   fenceLock,
   getStateAdapter,
   withLock
-} from "./chunk-PHQDXC27.js";
+} from "./chunk-UNDTW2PY.js";
 import {
   botConfig,
   completeText,
   escapeXml,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-FAJ6SMEE.js";
+} from "./chunk-J77DLAPE.js";
 import {
   parseSlackMessageTs,
   toStoredSlackActor
@@ -40,7 +40,7 @@ import {
   logException,
   logWarn,
   setSpanAttributes
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/turn-context-tag.ts
 var TURN_CONTEXT_TAG = "runtime-turn-context";
@@ -1615,6 +1615,41 @@ async function recordToolExecutionStarted(args) {
     }
   ]);
 }
+function attachmentsDeliveredIdempotencyKey(args) {
+  if (args.toolCallId) {
+    return `attachments_delivered:tool:${args.toolCallId}`;
+  }
+  if (args.turnId) {
+    return `attachments_delivered:turn:${args.turnId}:` + args.attachments.map((attachment) => attachment.id).sort().join(",");
+  }
+  return `attachments_delivered:${args.conversationId}:` + args.attachments.map((attachment) => attachment.id).sort().join(",");
+}
+async function recordAttachmentsDelivered(args) {
+  if (args.attachments.length === 0) return;
+  await getConversationEventStore().append(args.conversationId, [
+    {
+      // Retries after a successful Slack upload must not create duplicate rows.
+      idempotencyKey: attachmentsDeliveredIdempotencyKey({
+        attachments: args.attachments,
+        conversationId: args.conversationId,
+        ...args.toolCallId ? { toolCallId: args.toolCallId } : {},
+        ...args.turnId ? { turnId: args.turnId } : {}
+      }),
+      data: {
+        type: "attachments_delivered",
+        attachments: args.attachments.map((attachment) => ({
+          id: attachment.id,
+          filename: attachment.filename,
+          contentType: attachment.contentType,
+          bytes: attachment.bytes
+        })),
+        ...args.toolCallId ? { toolCallId: args.toolCallId } : {},
+        ...args.turnId ? { turnId: args.turnId } : {}
+      },
+      createdAtMs: args.createdAtMs ?? Date.now()
+    }
+  ]);
+}
 async function recordGuardianActionReviewed(args) {
   await getConversationEventStore().append(args.conversationId, [
     {
@@ -3175,6 +3210,7 @@ export {
   loadTurnRoute,
   recordTurnRoute,
   recordToolExecutionStarted,
+  recordAttachmentsDelivered,
   recordGuardianActionReviewed,
   ToolInputError,
   MAX_TEXT_CHARS,

package/dist/{chunk-UPPU3FQU.js → chunk-TBRJGMTO.js}

@@ -1,6 +1,6 @@
 import {
   logWarn
-} from "./chunk-KSZXVR5G.js";
+} from "./chunk-ZNBGWMVQ.js";
 
 // src/chat/conversation-privacy.ts
 import { AsyncLocalStorage } from "async_hooks";