@sentry/junior 0.162.0 → 0.164.0

package/dist/api.js

@@ -23,6 +23,7 @@ import {
   createConversationMessageBodySchema,
   createPersonalTokenBodySchema,
   createdPersonalTokenSchema,
+  deleteWorkspaceResponseSchema,
   locationDetailReportSchema,
   locationDirectoryReportSchema,
   locationParamsSchema,
@@ -35,26 +36,38 @@ import {
   taskExecutionListSchema,
   taskListSchema,
   taskParamsSchema,
-  taskRunListSchema
-} from "./chunk-SA6BEEAB.js";
+  taskRunListSchema,
+  workspaceBodySchema,
+  workspaceListSchema,
+  workspaceParamsSchema,
+  workspaceSchema
+} from "./chunk-PU45BSBS.js";
 import {
   appendAndEnqueueApiConversationMessage,
+  authenticatePersonalToken,
+  conversationHasParticipantEmail,
+  conversationHasParticipantUser,
   createAndEnqueueApiConversation,
+  createPersonalToken,
   createVercelAttachmentStorage,
   formatSlackConversationRedactedLabel,
+  listPersonalTokens,
   lookupSlackUser,
+  readConversationAccessFromSql,
   readHealthReport,
   resolveSlackConversationContextFromThreadId,
+  revokePersonalToken,
+  viewerConversationMembership,
   webActorFromEmail
-} from "./chunk-JRVURR3H.js";
+} from "./chunk-FKDY7NTC.js";
 import {
   buildSentryConversationUrl,
   getWebAuthorization
-} from "./chunk-RDV4BQRZ.js";
+} from "./chunk-5FWQ73UZ.js";
 import {
   cancelHumanFacingPendingMessages,
   getConversation
-} from "./chunk-5NEBOHRG.js";
+} from "./chunk-NAGI2XH3.js";
 import {
   readTaskExecutionByConversationId,
   readTaskExecutionDays,
@@ -62,8 +75,8 @@ import {
   readTaskExecutionSummaries,
   readTaskExecutions,
   readTaskRuns
-} from "./chunk-KQSO4DJ4.js";
-import "./chunk-OPNJRQDP.js";
+} from "./chunk-ZUTAGCPH.js";
+import "./chunk-2K25MRZK.js";
 import {
   healthReportSchema,
   pluginOperationalReportFeedSchema,
@@ -88,30 +101,37 @@ import {
   listPublicScheduledTasksForTeams,
   readLiveAttachment,
   readStats
-} from "./chunk-4WYGQ47U.js";
+} from "./chunk-6ENAACWN.js";
 import {
   parseSlackThreadId
-} from "./chunk-WHAJ3QVY.js";
+} from "./chunk-WJUKESU2.js";
 import {
   agentTurnUsageSchema,
   fallbackShortTitle,
   hasAgentTurnUsage,
   renderJuniorNativeConversationEvent
-} from "./chunk-V7QL4QMW.js";
+} from "./chunk-HHW6ZVIZ.js";
 import "./chunk-3Y47VMHV.js";
 import "./chunk-PDO5BLNM.js";
 import {
+  WorkspaceValidationError,
   createPluginLogger,
+  createWorkspace,
+  deleteWorkspace,
   findUserByEmail,
   getPlugins,
   getSlackClient,
+  getWorkspace,
   listConversationAnnotations,
   listConversationAnnotationsById,
+  listWorkspaces,
   renderPluginConversationEvent,
   resolveViewerUser,
   updateViewerDisplayName,
-  withSlackRetries
-} from "./chunk-QHCIZLIX.js";
+  updateWorkspace,
+  withSlackRetries,
+  workspaceRepoCheckoutPath
+} from "./chunk-YHCTPDXS.js";
 import {
   decodeStoredConversationEvent,
   getConversationStore,
@@ -119,24 +139,20 @@ import {
   getSqlExecutor,
   locationFromRow,
   parseSessionSource
-} from "./chunk-DDQ43S5Q.js";
+} from "./chunk-LPLVNMVN.js";
 import {
-  juniorApiTokens,
   juniorConversationEvents,
-  juniorConversationParticipants,
   juniorConversations,
   juniorIdentities,
   juniorUsers
-} from "./chunk-CZ6EHOU5.js";
-import "./chunk-EM225ITJ.js";
-import "./chunk-DZC3F2UI.js";
-import "./chunk-MNCEGXEH.js";
+} from "./chunk-ZSNABC2E.js";
+import "./chunk-BVREIWBD.js";
+import "./chunk-BXBZDV3C.js";
+import "./chunk-FX4PX3SA.js";
 import {
   juniorDestinations
 } from "./chunk-VFUK3X5B.js";
-import {
-  canExposeConversationPayload
-} from "./chunk-7DTPFFQX.js";
+import "./chunk-RBV4JHCP.js";
 import "./chunk-BDUENQD3.js";
 import {
   parseSlackChannelId,
@@ -146,14 +162,14 @@ import {
 import {
   logException,
   logWarn
-} from "./chunk-Y75ZDQB5.js";
+} from "./chunk-VHSEMJTS.js";
 import "./chunk-6GWA276C.js";
-import "./chunk-THXMSSFZ.js";
-import "./chunk-BPZQWAZJ.js";
+import "./chunk-26JYGL2L.js";
+import "./chunk-5GLGQHO3.js";
 import "./chunk-MLKGABMK.js";
 
 // src/api.ts
-import { Hono as Hono7 } from "hono";
+import { Hono as Hono8 } from "hono";
 import { HTTPException as HTTPException2 } from "hono/http-exception";
 
 // src/api/conversations/routes.ts
@@ -233,132 +249,6 @@ async function archiveConversation(conversationId, body) {
   return { archived: body.archived };
 }
 
-// src/api/conversations/access.ts
-import { eq as eq3, inArray as inArray2 } from "drizzle-orm";
-import { alias } from "drizzle-orm/pg-core";
-
-// src/api/conversations/membership.ts
-import { and as and2, eq as eq2, exists, inArray, or } from "drizzle-orm";
-function conversationHasParticipantUser(userId) {
-  const participant = getDb().select({
-    rootConversationId: juniorConversationParticipants.rootConversationId
-  }).from(juniorConversationParticipants).where(
-    and2(
-      eq2(
-        juniorConversationParticipants.rootConversationId,
-        juniorConversations.conversationId
-      ),
-      eq2(juniorConversationParticipants.userId, userId)
-    )
-  );
-  return exists(participant);
-}
-function conversationHasParticipantEmail(email) {
-  const participant = getDb().select({
-    rootConversationId: juniorConversationParticipants.rootConversationId
-  }).from(juniorConversationParticipants).innerJoin(
-    juniorUsers,
-    eq2(juniorUsers.id, juniorConversationParticipants.userId)
-  ).where(
-    and2(
-      eq2(
-        juniorConversationParticipants.rootConversationId,
-        juniorConversations.conversationId
-      ),
-      eq2(juniorUsers.primaryEmailNormalized, email)
-    )
-  );
-  return exists(participant);
-}
-function viewerConversationMembership(args) {
-  if (args.actorMatch && args.participantMatch) {
-    return or(args.actorMatch, args.participantMatch);
-  }
-  return args.actorMatch ?? args.participantMatch;
-}
-async function conversationIdsWithParticipantUser(db, conversationIds, userId) {
-  if (conversationIds.length === 0) {
-    return /* @__PURE__ */ new Set();
-  }
-  const rows = await db.select({
-    rootConversationId: juniorConversationParticipants.rootConversationId
-  }).from(juniorConversationParticipants).where(
-    and2(
-      eq2(juniorConversationParticipants.userId, userId),
-      inArray(juniorConversationParticipants.rootConversationId, [
-        ...conversationIds
-      ])
-    )
-  );
-  return new Set(rows.map((row) => row.rootConversationId));
-}
-
-// src/api/conversations/access.ts
-var rootConversation = alias(juniorConversations, "access_root_conversation");
-var rootDestination = alias(juniorDestinations, "access_root_destination");
-var rootIdentity = alias(juniorIdentities, "access_root_identity");
-async function readConversationAccessFromSql(db, conversationIds, viewer) {
-  if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
-  const normalizedViewerEmail = viewer?.email.trim().toLowerCase() || void 0;
-  const rows = await db.select({
-    conversationId: juniorConversations.conversationId,
-    parentConversationId: juniorConversations.parentConversationId,
-    storedRootConversationId: juniorConversations.rootConversationId,
-    rootConversationId: rootConversation.conversationId,
-    rootParentConversationId: rootConversation.parentConversationId,
-    rootRootConversationId: rootConversation.rootConversationId,
-    visibility: rootDestination.visibility,
-    rootEmailNormalized: rootIdentity.emailNormalized,
-    rootEmailVerified: rootIdentity.emailVerified,
-    rootUserId: rootIdentity.userId
-  }).from(juniorConversations).leftJoin(
-    rootConversation,
-    eq3(
-      rootConversation.conversationId,
-      juniorConversations.rootConversationId
-    )
-  ).leftJoin(
-    rootDestination,
-    eq3(rootDestination.id, rootConversation.destinationId)
-  ).leftJoin(
-    rootIdentity,
-    eq3(rootIdentity.id, rootConversation.actorIdentityId)
-  ).where(inArray2(juniorConversations.conversationId, [...conversationIds]));
-  const membershipConversationIds = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    membershipConversationIds.add(row.conversationId);
-    if (row.storedRootConversationId) {
-      membershipConversationIds.add(row.storedRootConversationId);
-    }
-  }
-  const participantRootIds = viewer !== void 0 ? await conversationIdsWithParticipantUser(
-    db,
-    [...membershipConversationIds],
-    viewer.id
-  ) : /* @__PURE__ */ new Set();
-  return new Map(
-    rows.map((row) => {
-      const hasValidRoot = row.rootConversationId !== null && row.rootConversationId === row.storedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && (row.parentConversationId !== null || row.storedRootConversationId === row.conversationId);
-      const validRootConversationId = hasValidRoot ? row.rootConversationId ?? void 0 : void 0;
-      const visibility = validRootConversationId === void 0 ? null : row.visibility;
-      const isRootActor = validRootConversationId !== void 0 && viewer !== void 0 && (row.rootUserId === viewer.id || normalizedViewerEmail !== void 0 && row.rootEmailVerified === true && row.rootEmailNormalized === normalizedViewerEmail);
-      const isMaterializedParticipant = participantRootIds.has(row.conversationId) || validRootConversationId !== void 0 && participantRootIds.has(validRootConversationId);
-      const isParticipant = isRootActor || isMaterializedParticipant;
-      const canViewPrivateContent = isParticipant || validRootConversationId !== void 0 && canExposeConversationPayload({
-        visibility: visibility ?? void 0
-      });
-      return [
-        row.conversationId,
-        {
-          canViewPrivateContent,
-          isParticipant,
-          visibility
-        }
-      ];
-    })
-  );
-}
-
 // src/api/conversations/attachments.ts
 function mayDisplayInline(contentType) {
   return contentType === "image/gif" || contentType === "image/jpeg" || contentType === "image/png" || contentType === "image/webp";
@@ -579,7 +469,7 @@ async function resolveSlackTeamDomains(teamIds) {
 }
 
 // src/chat/pi/sql-model-usage.ts
-import { and as and3, eq as eq4, sql } from "drizzle-orm";
+import { and as and2, eq as eq2, sql } from "drizzle-orm";
 var message = sql`${juniorConversationEvents.payload}`;
 var usage = sql`${message}->'usage'`;
 var cost = sql`${usage}->'cost'`;
@@ -677,14 +567,14 @@ async function readConversationModelUsageFromSql(executor, options) {
     costTotal: summedCost(nonnegativeNumber(cost, "total"))
   }).from(juniorConversationEvents).innerJoin(
     juniorConversations,
-    eq4(
+    eq2(
       juniorConversations.conversationId,
       juniorConversationEvents.conversationId
     )
   ).where(
-    and3(
-      options.includeDescendants ? eq4(juniorConversations.rootConversationId, options.conversationId) : eq4(juniorConversationEvents.conversationId, options.conversationId),
-      eq4(juniorConversationEvents.type, "assistant_message"),
+    and2(
+      options.includeDescendants ? eq2(juniorConversations.rootConversationId, options.conversationId) : eq2(juniorConversationEvents.conversationId, options.conversationId),
+      eq2(juniorConversationEvents.type, "assistant_message"),
       sql`jsonb_typeof(${message}->'provider') = 'string'`,
       sql`jsonb_typeof(${message}->'model') = 'string'`,
       sql`coalesce(${message}->>'provider', '') <> ''`,
@@ -746,12 +636,12 @@ function decodeConversationCursor(args) {
 
 // src/api/conversations/event-page.ts
 import {
-  and as and4,
+  and as and3,
   asc,
   desc,
-  eq as eq5,
+  eq as eq3,
   getTableColumns,
-  inArray as inArray3,
+  inArray,
   lt,
   sql as sql2
 } from "drizzle-orm";
@@ -1174,18 +1064,18 @@ async function readConversationEventRows(executor, args) {
         else ${juniorConversationEvents.payload}
       end`
   }).from(juniorConversationEvents).where(
-    and4(
-      eq5(juniorConversationEvents.conversationId, args.conversationId),
+    and3(
+      eq3(juniorConversationEvents.conversationId, args.conversationId),
       args.beforeSeq === void 0 ? void 0 : lt(juniorConversationEvents.seq, args.beforeSeq),
-      inArray3(
+      inArray(
         juniorConversationEvents.type,
         args.types ?? [...conversationReportSourceEventTypes]
       ),
-      args.subagentInvocationIds === void 0 ? void 0 : inArray3(
+      args.subagentInvocationIds === void 0 ? void 0 : inArray(
         sql2`${juniorConversationEvents.payload}->>'subagentInvocationId'`,
         args.subagentInvocationIds
       ),
-      args.toolCallIds === void 0 ? void 0 : inArray3(
+      args.toolCallIds === void 0 ? void 0 : inArray(
         sql2`${juniorConversationEvents.payload}->>'toolCallId'`,
         args.toolCallIds
       )
@@ -1266,7 +1156,7 @@ async function readConversationEventPage(executor, args) {
 }
 
 // src/api/conversations/list.ts
-import { and as and8, asc as asc2, desc as desc2, eq as eq9, isNull as isNull3 } from "drizzle-orm";
+import { and as and7, asc as asc2, desc as desc2, eq as eq7, isNull as isNull3 } from "drizzle-orm";
 
 // src/api/conversations/shared.ts
 function slackStatsLocationLabel(input) {
@@ -1449,10 +1339,10 @@ function conversationSummaryFromStoredConversation(args) {
 }
 
 // src/api/conversations/usage.ts
-import { and as and5, eq as eq6, inArray as inArray4, isNull, sql as sql3 } from "drizzle-orm";
-import { alias as alias2 } from "drizzle-orm/pg-core";
+import { and as and4, eq as eq4, inArray as inArray2, isNull, sql as sql3 } from "drizzle-orm";
+import { alias } from "drizzle-orm/pg-core";
 var usage2 = juniorConversations.usage;
-var metricRootConversation = alias2(
+var metricRootConversation = alias(
   juniorConversations,
   "metric_root_conversation"
 );
@@ -1523,19 +1413,19 @@ async function readRootConversationMetricsFromSql(db, rootConversationIds) {
     costTotal: summedCostNumber("total")
   }).from(juniorConversations).innerJoin(
     metricRootConversation,
-    and5(
-      eq6(
+    and4(
+      eq4(
         metricRootConversation.conversationId,
         juniorConversations.rootConversationId
       ),
       isNull(metricRootConversation.parentConversationId),
-      eq6(
+      eq4(
         metricRootConversation.rootConversationId,
         metricRootConversation.conversationId
       )
     )
   ).where(
-    inArray4(juniorConversations.rootConversationId, [...rootConversationIds])
+    inArray2(juniorConversations.rootConversationId, [...rootConversationIds])
   ).groupBy(juniorConversations.rootConversationId);
   return new Map(
     rows.flatMap((row) => {
@@ -1553,16 +1443,16 @@ async function readRootConversationMetricsFromSql(db, rootConversationIds) {
 
 // src/api/conversations/auxiliary-costs.ts
 import {
-  and as and6,
-  eq as eq7,
-  inArray as inArray5,
+  and as and5,
+  eq as eq5,
+  inArray as inArray3,
   isNotNull as isNotNull2,
   isNull as isNull2,
-  or as or2,
+  or,
   sql as sql4
 } from "drizzle-orm";
-import { alias as alias3 } from "drizzle-orm/pg-core";
-var auxiliaryRootConversation = alias3(
+import { alias as alias2 } from "drizzle-orm/pg-core";
+var auxiliaryRootConversation = alias2(
   juniorConversations,
   "auxiliary_root_conversation"
 );
@@ -1595,13 +1485,13 @@ async function readConversationAuxiliaryCostsFromSql(db, conversationIds, option
     ELSE ${juniorConversationEvents.type}
   END`;
   const cost2 = eventCost();
-  const selectedConversation = options.includeDescendants ? or2(
-    and6(
-      inArray5(juniorConversations.rootConversationId, selectedIds),
+  const selectedConversation = options.includeDescendants ? or(
+    and5(
+      inArray3(juniorConversations.rootConversationId, selectedIds),
       isNotNull2(auxiliaryRootConversation.conversationId)
     ),
-    inArray5(juniorConversations.conversationId, selectedIds)
-  ) : inArray5(juniorConversations.conversationId, selectedIds);
+    inArray3(juniorConversations.conversationId, selectedIds)
+  ) : inArray3(juniorConversations.conversationId, selectedIds);
   const rows = await db.select({
     conversationId,
     costUsd: sql4`round(sum(${cost2}), 12)::double precision`.mapWith(
@@ -1612,29 +1502,29 @@ async function readConversationAuxiliaryCostsFromSql(db, conversationIds, option
     namespace
   }).from(juniorConversationEvents).innerJoin(
     juniorConversations,
-    eq7(
+    eq5(
       juniorConversations.conversationId,
       juniorConversationEvents.conversationId
     )
   ).leftJoin(
     auxiliaryRootConversation,
-    and6(
-      eq7(
+    and5(
+      eq5(
         auxiliaryRootConversation.conversationId,
         juniorConversations.rootConversationId
       ),
       isNull2(auxiliaryRootConversation.parentConversationId),
-      eq7(
+      eq5(
         auxiliaryRootConversation.rootConversationId,
         auxiliaryRootConversation.conversationId
       )
     )
   ).where(
-    and6(
+    and5(
       selectedConversation,
-      or2(
-        eq7(juniorConversationEvents.type, "structured_event"),
-        inArray5(juniorConversationEvents.type, [
+      or(
+        eq5(juniorConversationEvents.type, "structured_event"),
+        inArray3(juniorConversationEvents.type, [
           "guardian_action_reviewed",
           "turn_routed"
         ])
@@ -1786,7 +1676,7 @@ function isConversationPriority(conversation, nowMs) {
 }
 
 // src/api/conversations/user-message-activity.ts
-import { and as and7, eq as eq8, inArray as inArray6, isNotNull as isNotNull3, or as or3, sql as sql5 } from "drizzle-orm";
+import { and as and6, eq as eq6, inArray as inArray4, isNotNull as isNotNull3, or as or2, sql as sql5 } from "drizzle-orm";
 async function readLastUserMessageAtByConversation(db, conversationIds) {
   if (conversationIds.length === 0) return /* @__PURE__ */ new Map();
   const authority = sql5`${juniorConversationEvents.payload}->'provenance'->>'authority'`;
@@ -1796,17 +1686,17 @@ async function readLastUserMessageAtByConversation(db, conversationIds) {
     conversationId: juniorConversationEvents.conversationId,
     lastUserMessageAt: sql5`max(${juniorConversationEvents.createdAt})`
   }).from(juniorConversationEvents).where(
-    and7(
-      inArray6(juniorConversationEvents.conversationId, conversationIds),
-      or3(
-        and7(
-          eq8(juniorConversationEvents.type, "user_message"),
-          eq8(authority, "instruction"),
+    and6(
+      inArray4(juniorConversationEvents.conversationId, conversationIds),
+      or2(
+        and6(
+          eq6(juniorConversationEvents.type, "user_message"),
+          eq6(authority, "instruction"),
           sql5`${actorPlatform} in ('slack', 'local', 'web')`
         ),
-        and7(
-          eq8(juniorConversationEvents.type, "message"),
-          eq8(role, "user"),
+        and6(
+          eq6(juniorConversationEvents.type, "message"),
+          eq6(role, "user"),
           isNotNull3(juniorConversationEvents.actorIdentityId)
         )
       )
@@ -1826,12 +1716,12 @@ function conversationFeedMembershipFilter(filter) {
   if (!filter) return void 0;
   if (filter.kind === "viewer") {
     return viewerConversationMembership({
-      actorMatch: eq9(juniorIdentities.userId, filter.userId),
+      actorMatch: eq7(juniorIdentities.userId, filter.userId),
       participantMatch: conversationHasParticipantUser(filter.userId)
     });
   }
   return viewerConversationMembership({
-    actorMatch: eq9(juniorUsers.primaryEmailNormalized, filter.email),
+    actorMatch: eq7(juniorUsers.primaryEmailNormalized, filter.email),
     participantMatch: conversationHasParticipantEmail(filter.email)
   });
 }
@@ -1848,12 +1738,12 @@ async function conversationRows(db, limit, filter) {
     userDisplayName: juniorUsers.displayName
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq9(juniorDestinations.id, juniorConversations.destinationId)
+    eq7(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq9(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(
-    and8(
+    eq7(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq7(juniorUsers.id, juniorIdentities.userId)).where(
+    and7(
       isNull3(juniorConversations.parentConversationId),
       isNull3(juniorConversations.archivedAt),
       conversationFeedMembershipFilter(filter)
@@ -1914,11 +1804,11 @@ async function readConversationRecordFromSql(conversationId) {
     userDisplayName: juniorUsers.displayName
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq9(juniorDestinations.id, juniorConversations.destinationId)
+    eq7(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq9(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(eq9(juniorConversations.conversationId, conversationId)).limit(1);
+    eq7(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq7(juniorUsers.id, juniorIdentities.userId)).where(eq7(juniorConversations.conversationId, conversationId)).limit(1);
   const row = rows[0];
   return row ? {
     conversation: conversationFromRow(row),
@@ -2042,7 +1932,7 @@ async function readConversationFeed(options = {}) {
 }
 
 // src/chat/tasks/read.ts
-import { and as and9, eq as eq10, or as or4 } from "drizzle-orm";
+import { and as and8, eq as eq8, or as or3 } from "drizzle-orm";
 
 // src/chat/scheduled-tasks/personal.ts
 import { z as z3 } from "zod";
@@ -2152,16 +2042,16 @@ async function creatorProfileEmails(candidates) {
     email: juniorUsers.primaryEmailNormalized,
     slackUserId: juniorIdentities.providerSubjectId,
     teamId: juniorIdentities.providerTenantId
-  }).from(juniorIdentities).innerJoin(juniorUsers, eq10(juniorUsers.id, juniorIdentities.userId)).where(
-    and9(
-      eq10(juniorIdentities.kind, "user"),
-      eq10(juniorIdentities.provider, "slack"),
-      eq10(juniorIdentities.emailVerified, true),
-      or4(
+  }).from(juniorIdentities).innerJoin(juniorUsers, eq8(juniorUsers.id, juniorIdentities.userId)).where(
+    and8(
+      eq8(juniorIdentities.kind, "user"),
+      eq8(juniorIdentities.provider, "slack"),
+      eq8(juniorIdentities.emailVerified, true),
+      or3(
         ...[...selectors.values()].map(
-          (selector) => and9(
-            eq10(juniorIdentities.providerTenantId, selector.teamId),
-            eq10(juniorIdentities.providerSubjectId, selector.slackUserId)
+          (selector) => and8(
+            eq8(juniorIdentities.providerTenantId, selector.teamId),
+            eq8(juniorIdentities.providerSubjectId, selector.slackUserId)
           )
         )
       )
@@ -2197,12 +2087,12 @@ async function destinationDetails(destinations) {
     providerTenantId: juniorDestinations.providerTenantId,
     visibility: juniorDestinations.visibility
   }).from(juniorDestinations).where(
-    or4(
+    or3(
       ...[...selectors.values()].map(
-        (destination) => and9(
-          eq10(juniorDestinations.provider, "slack"),
-          eq10(juniorDestinations.providerTenantId, destination.teamId),
-          eq10(juniorDestinations.providerDestinationId, destination.channelId)
+        (destination) => and8(
+          eq8(juniorDestinations.provider, "slack"),
+          eq8(juniorDestinations.providerTenantId, destination.teamId),
+          eq8(juniorDestinations.providerDestinationId, destination.channelId)
         )
       )
     )
@@ -2767,19 +2657,19 @@ var slackMailboxMetadataSchema = z4.object({
 function isoFromMs(value) {
   return new Date(value).toISOString();
 }
-function actorIdentityFromApiMetadata(metadata2) {
+function actorIdentityFromApiMetadata(metadata) {
   return {
-    email: metadata2.authorEmail.trim().toLowerCase(),
-    ...metadata2.authorFullName ? { fullName: metadata2.authorFullName } : {}
+    email: metadata.authorEmail.trim().toLowerCase(),
+    ...metadata.authorFullName ? { fullName: metadata.authorFullName } : {}
   };
 }
-async function actorIdentityFromSlackMetadata(metadata2, teamId) {
-  if (metadata2.message.author.isMe === true) return void 0;
-  const slackUserId = metadata2.message.author.userId.trim();
+async function actorIdentityFromSlackMetadata(metadata, teamId) {
+  if (metadata.message.author.isMe === true) return void 0;
+  const slackUserId = metadata.message.author.userId.trim();
   if (!slackUserId) return void 0;
   const profile = teamId ? await lookupSlackUser(teamId, slackUserId) : null;
-  const slackUserName = profile?.userName?.trim() || metadata2.message.author.userName?.trim();
-  const fullName = profile?.fullName?.trim() || metadata2.message.author.fullName?.trim();
+  const slackUserName = profile?.userName?.trim() || metadata.message.author.userName?.trim();
+  const fullName = profile?.fullName?.trim() || metadata.message.author.fullName?.trim();
   const email = profile?.email?.trim().toLowerCase();
   return {
     slackUserId,
@@ -2790,32 +2680,32 @@ async function actorIdentityFromSlackMetadata(metadata2, teamId) {
 }
 async function projectPendingMessage(message2, canExposePayload) {
   if (message2.source === "web") {
-    const metadata2 = apiTurnMailboxMetadataSchema.safeParse(
+    const metadata = apiTurnMailboxMetadataSchema.safeParse(
       message2.input.metadata
     );
-    if (!metadata2.success) return void 0;
+    if (!metadata.success) return void 0;
     const text = message2.input.text.trim();
     if (!text) return void 0;
     return {
       createdAt: isoFromMs(message2.createdAtMs),
       delivery: message2.delivery,
       inboundMessageId: message2.inboundMessageId,
-      messageId: metadata2.data.messageId,
+      messageId: metadata.data.messageId,
       receivedAt: isoFromMs(message2.receivedAtMs),
       role: "user",
       source: "web",
       ...canExposePayload ? {
-        actorIdentity: actorIdentityFromApiMetadata(metadata2.data),
+        actorIdentity: actorIdentityFromApiMetadata(metadata.data),
         text
       } : { redacted: true }
     };
   }
   if (message2.source === "slack") {
-    const metadata2 = slackMailboxMetadataSchema.safeParse(
+    const metadata = slackMailboxMetadataSchema.safeParse(
       message2.input.metadata
     );
-    if (!metadata2.success) return void 0;
-    if (metadata2.data.message.author.isMe === true) return void 0;
+    if (!metadata.success) return void 0;
+    if (metadata.data.message.author.isMe === true) return void 0;
     const text = message2.input.text.trim();
     if (!text) return void 0;
     if (!canExposePayload) {
@@ -2823,7 +2713,7 @@ async function projectPendingMessage(message2, canExposePayload) {
         createdAt: isoFromMs(message2.createdAtMs),
         delivery: message2.delivery,
         inboundMessageId: message2.inboundMessageId,
-        messageId: metadata2.data.message.id,
+        messageId: metadata.data.message.id,
         receivedAt: isoFromMs(message2.receivedAtMs),
         redacted: true,
         role: "user",
@@ -2831,14 +2721,14 @@ async function projectPendingMessage(message2, canExposePayload) {
       };
     }
     const actorIdentity = await actorIdentityFromSlackMetadata(
-      metadata2.data,
+      metadata.data,
       message2.destination?.platform === "slack" ? message2.destination.teamId : void 0
     );
     return {
       createdAt: isoFromMs(message2.createdAtMs),
       delivery: message2.delivery,
       inboundMessageId: message2.inboundMessageId,
-      messageId: metadata2.data.message.id,
+      messageId: metadata.data.message.id,
       receivedAt: isoFromMs(message2.receivedAtMs),
       role: "user",
       source: "slack",
@@ -2889,8 +2779,8 @@ async function requireConversationPendingMessages(conversationId, options = {})
 }
 
 // src/api/conversations/stats.query.ts
-import { and as and10, eq as eq11, gte, isNull as isNull4, lte, sql as sql7 } from "drizzle-orm";
-import { alias as alias4 } from "drizzle-orm/pg-core";
+import { and as and9, eq as eq9, gte, isNull as isNull4, lte, sql as sql7 } from "drizzle-orm";
+import { alias as alias3 } from "drizzle-orm/pg-core";
 
 // src/api/conversations/aggregate.ts
 import { sql as sql6 } from "drizzle-orm";
@@ -2974,7 +2864,7 @@ function conversationActiveDaysColumn() {
 
 // src/api/conversations/stats.query.ts
 var WINDOW_DAYS = 90;
-var treeConversation = alias4(juniorConversations, "stats_tree_conversation");
+var treeConversation = alias3(juniorConversations, "stats_tree_conversation");
 var treeAggregateColumns = conversationAggregateColumns({
   metrics: treeConversation,
   roots: juniorConversations
@@ -3033,7 +2923,7 @@ function statsItems(map) {
   );
 }
 function statsWhere(start, end) {
-  return and10(
+  return and9(
     isNull4(juniorConversations.parentConversationId),
     gte(juniorConversations.lastActivityAt, start),
     lte(juniorConversations.lastActivityAt, end)
@@ -3117,7 +3007,7 @@ async function aggregateStats(db, start, end) {
   const [totalsRows, actorRows, locationRows, metricRows] = await Promise.all([
     db.select(treeAggregateColumns).from(juniorConversations).innerJoin(
       treeConversation,
-      eq11(
+      eq9(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
@@ -3132,14 +3022,14 @@ async function aggregateStats(db, start, end) {
       ...treeAggregateColumns
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq11(
+      eq9(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
     ).leftJoin(
       juniorIdentities,
-      eq11(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).leftJoin(juniorUsers, eq11(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
+      eq9(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).leftJoin(juniorUsers, eq9(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
       juniorIdentities.displayName,
       juniorIdentities.emailNormalized,
       juniorIdentities.handle,
@@ -3157,13 +3047,13 @@ async function aggregateStats(db, start, end) {
       ...treeAggregateColumns
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq11(
+      eq9(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
     ).leftJoin(
       juniorDestinations,
-      eq11(juniorDestinations.id, juniorConversations.destinationId)
+      eq9(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(
       juniorConversations.channelName,
       juniorConversations.source,
@@ -3182,7 +3072,7 @@ async function aggregateStats(db, start, end) {
       tokens: treeAggregateColumns.tokens
     }).from(juniorConversations).innerJoin(
       treeConversation,
-      eq11(
+      eq9(
         treeConversation.rootConversationId,
         juniorConversations.conversationId
       )
@@ -3209,8 +3099,8 @@ async function aggregateGuardianStats(db, start, end) {
     deny: sql7`COUNT(*) FILTER (WHERE ${decision} = 'deny')::integer`,
     requests: sql7`COUNT(*)::integer`
   }).from(juniorConversationEvents).where(
-    and10(
-      eq11(juniorConversationEvents.type, "guardian_action_reviewed"),
+    and9(
+      eq9(juniorConversationEvents.type, "guardian_action_reviewed"),
       gte(juniorConversationEvents.createdAt, start),
       lte(juniorConversationEvents.createdAt, end)
     )
@@ -3471,8 +3361,8 @@ function createConversationRoutes(options) {
 import { Hono as Hono2 } from "hono";
 
 // src/api/locations/query.ts
-import { and as and11, asc as asc3, desc as desc3, eq as eq12, gte as gte2, isNull as isNull5, sql as sql8 } from "drizzle-orm";
-import { alias as alias5 } from "drizzle-orm/pg-core";
+import { and as and10, asc as asc3, desc as desc3, eq as eq10, gte as gte2, isNull as isNull5, sql as sql8 } from "drizzle-orm";
+import { alias as alias4 } from "drizzle-orm/pg-core";
 
 // src/api/conversations/reporting.ts
 function surfaceLabel2(surface) {
@@ -3533,7 +3423,7 @@ function summaryFromRow(row, options = {}) {
 // src/api/locations/query.ts
 var RECENT_LIMIT = 25;
 var ACTIVITY_DAYS = 90;
-var treeConversation2 = alias5(
+var treeConversation2 = alias4(
   juniorConversations,
   "location_tree_conversation"
 );
@@ -3579,10 +3469,10 @@ function topLevelWhere() {
   return isNull5(juniorConversations.parentConversationId);
 }
 function publicLocationWhere(destinationId) {
-  return and11(
+  return and10(
     topLevelWhere(),
-    eq12(juniorDestinations.id, destinationId),
-    eq12(juniorDestinations.visibility, "public")
+    eq10(juniorDestinations.id, destinationId),
+    eq10(juniorDestinations.visibility, "public")
   );
 }
 function locationColumns() {
@@ -3633,13 +3523,13 @@ async function directoryRows(db) {
     ...conversationRangeColumns()
   }).from(juniorConversations).innerJoin(
     treeConversation2,
-    eq12(
+    eq10(
       treeConversation2.rootConversationId,
       juniorConversations.conversationId
     )
   ).leftJoin(
     juniorDestinations,
-    eq12(juniorDestinations.id, juniorConversations.destinationId)
+    eq10(juniorDestinations.id, juniorConversations.destinationId)
   ).where(topLevelWhere()).groupBy(...locationGroupBy());
 }
 async function directoryActivityRows(db, start) {
@@ -3653,8 +3543,8 @@ async function directoryActivityRows(db, start) {
     visibility: juniorDestinations.visibility
   }).from(juniorConversations).leftJoin(
     juniorDestinations,
-    eq12(juniorDestinations.id, juniorConversations.destinationId)
-  ).where(and11(topLevelWhere(), gte2(juniorConversations.lastActivityAt, start))).groupBy(date, juniorDestinations.visibility);
+    eq10(juniorDestinations.id, juniorConversations.destinationId)
+  ).where(and10(topLevelWhere(), gte2(juniorConversations.lastActivityAt, start))).groupBy(date, juniorDestinations.visibility);
 }
 function directoryActivityDays(rows, nowMs) {
   const days = /* @__PURE__ */ new Map();
@@ -3747,12 +3637,12 @@ async function recentLocationRows(db, locationId) {
     usage: juniorConversations.usage
   }).from(juniorConversations).innerJoin(
     juniorDestinations,
-    eq12(juniorDestinations.id, juniorConversations.destinationId)
+    eq10(juniorDestinations.id, juniorConversations.destinationId)
   ).leftJoin(
     juniorIdentities,
-    eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).leftJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).where(
-    and11(
+    eq10(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).leftJoin(juniorUsers, eq10(juniorUsers.id, juniorIdentities.userId)).where(
+    and10(
       publicLocationWhere(locationId),
       isNull5(juniorConversations.archivedAt)
     )
@@ -3779,27 +3669,27 @@ async function readLocationDetailFromSql(locationId, options = {}) {
       ...conversationRangeColumns()
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq12(
+      eq10(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq12(juniorDestinations.id, juniorConversations.destinationId)
+      eq10(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(...locationGroupBy()),
     getDb().select({
       date: activityDate,
       ...treeAggregateColumns2
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq12(
+      eq10(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq12(juniorDestinations.id, juniorConversations.destinationId)
-    ).where(and11(where, gte2(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
+      eq10(juniorDestinations.id, juniorConversations.destinationId)
+    ).where(and10(where, gte2(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
     getDb().select({
       actorIdentityId: juniorConversations.actorIdentityId,
       email: juniorUsers.primaryEmailNormalized,
@@ -3811,17 +3701,17 @@ async function readLocationDetailFromSql(locationId, options = {}) {
       ...treeAggregateColumns2
     }).from(juniorConversations).innerJoin(
       treeConversation2,
-      eq12(
+      eq10(
         treeConversation2.rootConversationId,
         juniorConversations.conversationId
       )
     ).innerJoin(
       juniorDestinations,
-      eq12(juniorDestinations.id, juniorConversations.destinationId)
+      eq10(juniorDestinations.id, juniorConversations.destinationId)
     ).leftJoin(
       juniorIdentities,
-      eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).leftJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
+      eq10(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).leftJoin(juniorUsers, eq10(juniorUsers.id, juniorIdentities.userId)).where(where).groupBy(
       juniorConversations.actorIdentityId,
       juniorUsers.primaryEmailNormalized,
       juniorUsers.displayName,
@@ -3934,22 +3824,22 @@ function createLocationRoutes() {
 import { Hono as Hono3 } from "hono";
 
 // src/api/people/list.query.ts
-import { and as and13, eq as eq14, gte as gte3, sql as sql10 } from "drizzle-orm";
+import { and as and12, eq as eq12, gte as gte3, sql as sql10 } from "drizzle-orm";
 
 // src/api/people/shared.ts
-import { and as and12, asc as asc4, desc as desc4, eq as eq13, isNull as isNull6, notExists, or as or5, sql as sql9 } from "drizzle-orm";
-import { alias as alias6 } from "drizzle-orm/pg-core";
+import { and as and11, asc as asc4, desc as desc4, eq as eq11, isNull as isNull6, notExists, or as or4, sql as sql9 } from "drizzle-orm";
+import { alias as alias5 } from "drizzle-orm/pg-core";
 var RECENT_LIMIT2 = 25;
 var ACTIVITY_DAYS2 = 365;
-var peopleTreeConversation = alias6(
+var peopleTreeConversation = alias5(
   juniorConversations,
   "people_tree_conversation"
 );
-var peopleRootConversation = alias6(
+var peopleRootConversation = alias5(
   juniorConversations,
   "people_root_conversation"
 );
-var peopleRootIdentity = alias6(juniorIdentities, "people_root_identity");
+var peopleRootIdentity = alias5(juniorIdentities, "people_root_identity");
 var peopleTreeAggregateColumns = conversationAggregateColumns({
   metrics: peopleTreeConversation,
   roots: juniorConversations
@@ -3957,37 +3847,37 @@ var peopleTreeAggregateColumns = conversationAggregateColumns({
 function peopleTreeMetricsJoin() {
   const rootOwnedByActor = getDb().select({ conversationId: peopleRootConversation.conversationId }).from(peopleRootConversation).innerJoin(
     peopleRootIdentity,
-    eq13(peopleRootIdentity.id, peopleRootConversation.actorIdentityId)
+    eq11(peopleRootIdentity.id, peopleRootConversation.actorIdentityId)
   ).where(
-    and12(
-      eq13(
+    and11(
+      eq11(
         peopleRootConversation.conversationId,
         juniorConversations.rootConversationId
       ),
       isNull6(peopleRootConversation.parentConversationId),
-      eq13(
+      eq11(
         peopleRootConversation.rootConversationId,
         peopleRootConversation.conversationId
       ),
-      eq13(
+      eq11(
         peopleRootIdentity.emailNormalized,
         juniorUsers.primaryEmailNormalized
       ),
-      eq13(peopleRootIdentity.emailVerified, true)
+      eq11(peopleRootIdentity.emailVerified, true)
     )
   );
-  return and12(
-    eq13(
+  return and11(
+    eq11(
       peopleTreeConversation.rootConversationId,
       juniorConversations.rootConversationId
     ),
-    or5(
-      eq13(
+    or4(
+      eq11(
         juniorConversations.rootConversationId,
         juniorConversations.conversationId
       ),
-      and12(
-        eq13(
+      and11(
+        eq11(
           peopleTreeConversation.conversationId,
           juniorConversations.conversationId
         ),
@@ -4037,11 +3927,11 @@ function statsItems2(map) {
 }
 function verifiedActorWhere(email) {
   const normalizedEmail = normalizeEmail(email);
-  return and12(
-    eq13(juniorIdentities.provider, "slack"),
-    eq13(juniorIdentities.emailVerified, true),
+  return and11(
+    eq11(juniorIdentities.provider, "slack"),
+    eq11(juniorIdentities.emailVerified, true),
     sql9`${juniorUsers.primaryEmailNormalized} IS NOT NULL`,
-    normalizedEmail ? eq13(juniorUsers.primaryEmailNormalized, normalizedEmail) : void 0
+    normalizedEmail ? eq11(juniorUsers.primaryEmailNormalized, normalizedEmail) : void 0
   );
 }
 async function recentActorRows(email) {
@@ -4064,12 +3954,12 @@ async function recentActorRows(email) {
     usage: juniorConversations.usage
   }).from(juniorConversations).innerJoin(
     juniorIdentities,
-    eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(
+    eq11(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).innerJoin(juniorUsers, eq11(juniorUsers.id, juniorIdentities.userId)).leftJoin(
     juniorDestinations,
-    eq13(juniorDestinations.id, juniorConversations.destinationId)
+    eq11(juniorDestinations.id, juniorConversations.destinationId)
   ).where(
-    and12(verifiedActorWhere(email), isNull6(juniorConversations.archivedAt))
+    and11(verifiedActorWhere(email), isNull6(juniorConversations.archivedAt))
   ).orderBy(
     desc4(juniorConversations.lastActivityAt),
     asc4(juniorConversations.conversationId)
@@ -4113,17 +4003,17 @@ async function readPeopleListFromSql() {
       ...conversationRangeColumns()
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, peopleTreeMetricsJoin()).where(verifiedActorWhere()).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
+      eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, peopleTreeMetricsJoin()).where(verifiedActorWhere()).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
     getDb().select({
       activePeople: sql10`COUNT(DISTINCT ${juniorUsers.id})::int`,
       conversations: sql10`COUNT(*)::int`,
       date: activityDate
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).where(
-      and13(
+      eq12(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq12(juniorUsers.id, juniorIdentities.userId)).where(
+      and12(
         verifiedActorWhere(),
         gte3(juniorConversations.lastActivityAt, start)
       )
@@ -4176,7 +4066,7 @@ async function readPeoplePluginReports(args) {
       source: "plugins"
     });
   }
-  const { getPluginProfileReports } = await import("./agent-hooks-TL2SGC5W.js");
+  const { getPluginProfileReports } = await import("./agent-hooks-WTBPNRTC.js");
   return pluginOperationalReportFeedSchema.parse({
     generatedAt: new Date(nowMs).toISOString(),
     reports: await getPluginProfileReports({
@@ -4189,7 +4079,7 @@ async function readPeoplePluginReports(args) {
 }
 
 // src/api/people/profile.query.ts
-import { and as and14, eq as eq15, gte as gte4, sql as sql11 } from "drizzle-orm";
+import { and as and13, eq as eq13, gte as gte4, sql as sql11 } from "drizzle-orm";
 function emptyProfile(email, nowMs) {
   const end = new Date(nowMs);
   end.setUTCHours(0, 0, 0, 0);
@@ -4268,15 +4158,15 @@ async function readPeopleProfileFromSql(email, options = {}) {
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
+      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(juniorUsers.primaryEmailNormalized, juniorUsers.displayName),
     getDb().select({
       date: activityDate,
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(and14(where, gte4(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
+      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(and13(where, gte4(juniorConversations.lastActivityAt, start))).groupBy(activityDate),
     getDb().select({
       channel,
       channelName: juniorConversations.channelName,
@@ -4285,10 +4175,10 @@ async function readPeopleProfileFromSql(email, options = {}) {
       ...peopleTreeAggregateColumns
     }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).leftJoin(
+      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).leftJoin(
       juniorDestinations,
-      eq15(juniorDestinations.id, juniorConversations.destinationId)
+      eq13(juniorDestinations.id, juniorConversations.destinationId)
     ).where(where).groupBy(
       channel,
       juniorConversations.channelName,
@@ -4297,8 +4187,8 @@ async function readPeopleProfileFromSql(email, options = {}) {
     ),
     getDb().select({ surface, ...peopleTreeAggregateColumns }).from(juniorConversations).innerJoin(
       juniorIdentities,
-      eq15(juniorIdentities.id, juniorConversations.actorIdentityId)
-    ).innerJoin(juniorUsers, eq15(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(surface),
+      eq13(juniorIdentities.id, juniorConversations.actorIdentityId)
+    ).innerJoin(juniorUsers, eq13(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(where).groupBy(surface),
     recentActorRows(normalizedEmail)
   ]);
   const totalsRow = totalsRows[0];
@@ -4376,7 +4266,7 @@ async function readPeopleProfile(email, options = {}) {
 }
 
 // src/api/people/spend.query.ts
-import { and as and15, eq as eq16, gte as gte5, lte as lte2, sql as sql12 } from "drizzle-orm";
+import { and as and14, eq as eq14, gte as gte5, lte as lte2, sql as sql12 } from "drizzle-orm";
 var SEVEN_DAY_OFFSET = 6;
 var THIRTY_DAY_OFFSET = 29;
 function addUsd2(current, next) {
@@ -4405,9 +4295,9 @@ async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
     date: activityDate
   }).from(juniorConversations).innerJoin(
     juniorIdentities,
-    eq16(juniorIdentities.id, juniorConversations.actorIdentityId)
-  ).innerJoin(juniorUsers, eq16(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(
-    and15(
+    eq14(juniorIdentities.id, juniorConversations.actorIdentityId)
+  ).innerJoin(juniorUsers, eq14(juniorUsers.id, juniorIdentities.userId)).leftJoin(peopleTreeConversation, metricsJoin).where(
+    and14(
       verifiedActorWhere(normalizedEmail),
       gte5(juniorConversations.lastActivityAt, thirtyDayStart),
       lte2(juniorConversations.lastActivityAt, end)
@@ -4505,83 +4395,6 @@ function createPeopleRoutes() {
 
 // src/api/personal-tokens/routes.ts
 import { Hono as Hono4 } from "hono";
-
-// src/personal-tokens/store.ts
-import { createHash, randomBytes, randomUUID } from "crypto";
-import { and as and16, desc as desc5, eq as eq17, gt, isNull as isNull7 } from "drizzle-orm";
-var TOKEN_PREFIX = "jr_pat_";
-var TOKEN_SUFFIX_LENGTH = 8;
-var DEFAULT_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1e3;
-function normalizeEmail2(email) {
-  return email.trim().toLowerCase();
-}
-function hashToken(token2) {
-  return createHash("sha256").update(token2, "utf8").digest("hex");
-}
-function metadata(row) {
-  return {
-    id: row.id,
-    name: row.name,
-    tokenSuffix: row.tokenSuffix,
-    createdAt: row.createdAt.toISOString(),
-    expiresAt: row.expiresAt.toISOString(),
-    lastUsedAt: row.lastUsedAt?.toISOString() ?? null
-  };
-}
-async function createPersonalToken(args) {
-  const now = args.now ?? /* @__PURE__ */ new Date();
-  const token2 = `${TOKEN_PREFIX}${randomBytes(32).toString("base64url")}`;
-  const row = {
-    id: randomUUID(),
-    ownerEmailNormalized: normalizeEmail2(args.email),
-    name: args.name.trim(),
-    tokenHash: hashToken(token2),
-    tokenSuffix: token2.slice(-TOKEN_SUFFIX_LENGTH),
-    createdAt: now,
-    expiresAt: new Date(now.getTime() + DEFAULT_TOKEN_LIFETIME_MS)
-  };
-  await getDb().insert(juniorApiTokens).values(row);
-  return { ...metadata({ ...row, lastUsedAt: null, revokedAt: null }), token: token2 };
-}
-async function listPersonalTokens(email, now = /* @__PURE__ */ new Date()) {
-  const rows = await getDb().select().from(juniorApiTokens).where(
-    and16(
-      eq17(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(email)),
-      isNull7(juniorApiTokens.revokedAt),
-      gt(juniorApiTokens.expiresAt, now)
-    )
-  ).orderBy(desc5(juniorApiTokens.createdAt));
-  return rows.map(metadata);
-}
-async function revokePersonalToken(args) {
-  const rows = await getDb().update(juniorApiTokens).set({ revokedAt: args.now ?? /* @__PURE__ */ new Date() }).where(
-    and16(
-      eq17(juniorApiTokens.id, args.id),
-      eq17(juniorApiTokens.ownerEmailNormalized, normalizeEmail2(args.email)),
-      isNull7(juniorApiTokens.revokedAt)
-    )
-  ).returning({ id: juniorApiTokens.id });
-  return rows.length > 0;
-}
-async function authenticatePersonalToken(token2, now = /* @__PURE__ */ new Date()) {
-  if (!token2.startsWith(TOKEN_PREFIX)) return void 0;
-  const rows = await getDb().select({
-    id: juniorApiTokens.id,
-    ownerEmailNormalized: juniorApiTokens.ownerEmailNormalized
-  }).from(juniorApiTokens).where(
-    and16(
-      eq17(juniorApiTokens.tokenHash, hashToken(token2)),
-      isNull7(juniorApiTokens.revokedAt),
-      gt(juniorApiTokens.expiresAt, now)
-    )
-  ).limit(1);
-  const match = rows[0];
-  if (!match) return void 0;
-  await getDb().update(juniorApiTokens).set({ lastUsedAt: now }).where(eq17(juniorApiTokens.id, match.id));
-  return match.ownerEmailNormalized;
-}
-
-// src/api/personal-tokens/routes.ts
 function createPersonalTokenRoutes() {
   const app = new Hono4();
   app.get("/", requireViewer, async (context) => {
@@ -4805,6 +4618,105 @@ function createTaskRoutes() {
   return app;
 }
 
+// src/api/workspaces/routes.ts
+import { Hono as Hono7 } from "hono";
+function view(workspace) {
+  return {
+    id: workspace.id,
+    name: workspace.name,
+    setupScript: workspace.setupScript,
+    repos: workspace.repos.map((repo) => ({
+      provider: repo.provider,
+      repo: repo.repo,
+      checkoutPath: workspaceRepoCheckoutPath(repo.repo),
+      isPrimary: repo.isPrimary
+    }))
+  };
+}
+function handleValidationError(error) {
+  if (error instanceof WorkspaceValidationError) {
+    throwApiError(400, error.message);
+  }
+  throw error;
+}
+function createWorkspaceRoutes() {
+  const app = new Hono7();
+  app.get("/", requireViewer, async () => {
+    return jsonResponse(workspaceListSchema, {
+      workspaces: (await listWorkspaces(getDb())).map(view)
+    });
+  });
+  app.post(
+    "/",
+    requireViewer,
+    validateRequest("json", workspaceBodySchema, "Invalid request body."),
+    async (context) => {
+      const body = context.req.valid("json");
+      try {
+        const workspace = await createWorkspace(body);
+        return jsonResponse(workspaceSchema, view(workspace), { status: 201 });
+      } catch (error) {
+        handleValidationError(error);
+      }
+    }
+  );
+  app.get(
+    "/:id",
+    requireViewer,
+    validateRequest(
+      "param",
+      workspaceParamsSchema,
+      "Invalid route parameters."
+    ),
+    async (context) => {
+      const { id } = context.req.valid("param");
+      const workspace = await getWorkspace(getDb(), id);
+      if (!workspace) throwApiError(404, "Workspace not found.");
+      return jsonResponse(workspaceSchema, view(workspace));
+    }
+  );
+  app.put(
+    "/:id",
+    requireViewer,
+    validateRequest(
+      "param",
+      workspaceParamsSchema,
+      "Invalid route parameters."
+    ),
+    validateRequest("json", workspaceBodySchema, "Invalid request body."),
+    async (context) => {
+      const { id } = context.req.valid("param");
+      const body = context.req.valid("json");
+      try {
+        const workspace = await updateWorkspace(id, body);
+        if (!workspace) throwApiError(404, "Workspace not found.");
+        return jsonResponse(workspaceSchema, view(workspace));
+      } catch (error) {
+        handleValidationError(error);
+      }
+    }
+  );
+  app.delete(
+    "/:id",
+    requireViewer,
+    validateRequest(
+      "param",
+      workspaceParamsSchema,
+      "Invalid route parameters."
+    ),
+    async (context) => {
+      const { id } = context.req.valid("param");
+      if (!await deleteWorkspace(id)) {
+        throwApiError(404, "Workspace not found.");
+      }
+      return jsonResponse(deleteWorkspaceResponseSchema, {
+        deleted: true
+      });
+    }
+  );
+  return app;
+}
+
 // src/api/stats.ts
 var WINDOW_DAYS2 = 90;
 async function readStatsReport() {
@@ -4834,7 +4746,7 @@ function readDescriptionText(home) {
   }
 }
 async function readSkillReports() {
-  const { discoverSkills } = await import("./skills-3UDJJXSO.js");
+  const { discoverSkills } = await import("./skills-KYPSHSQR.js");
   const skills = await discoverSkills();
   return skillReportsSchema.parse(
     skills.map((skill) => ({
@@ -4844,7 +4756,7 @@ async function readSkillReports() {
   );
 }
 async function readPlugins() {
-  const { pluginCatalogRuntime } = await import("./catalog-runtime-IGSMIADJ.js");
+  const { pluginCatalogRuntime } = await import("./catalog-runtime-CZ2SQINY.js");
   return pluginsSchema.parse(
     pluginCatalogRuntime.getProviders().map((plugin) => ({
       configKeys: plugin.manifest.configKeys ?? [],
@@ -4857,7 +4769,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
   const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
     import("./discovery-GUFTFBTL.js"),
-    import("./catalog-runtime-IGSMIADJ.js"),
+    import("./catalog-runtime-CZ2SQINY.js"),
     readPlugins(),
     readSkillReports()
   ]);
@@ -4873,7 +4785,7 @@ async function readRuntimeInfoReport() {
 }
 async function readPluginOperationalReportFeed() {
   const nowMs = Date.now();
-  const { getPluginOperationalReports } = await import("./agent-hooks-TL2SGC5W.js");
+  const { getPluginOperationalReports } = await import("./agent-hooks-WTBPNRTC.js");
   return pluginOperationalReportFeedSchema.parse({
     source: "plugins",
     generatedAt: new Date(nowMs).toISOString(),
@@ -4883,7 +4795,7 @@ async function readPluginOperationalReportFeed() {
 
 // src/api.ts
 function createJuniorApi() {
-  const app = new Hono7();
+  const app = new Hono8();
   app.get(
     "/api/health",
     async () => jsonResponse(healthReportSchema, readHealthReport())
@@ -4922,6 +4834,7 @@ function createJuniorApi() {
   app.route("/api/locations", createLocationRoutes());
   app.route("/api/user-pages", createUserPageRoutes());
   app.route("/api/tasks", createTaskRoutes());
+  app.route("/api/workspaces", createWorkspaceRoutes());
   app.notFound(
     () => jsonResponse(
       apiErrorSchema,