@sentry/junior 0.200.0 → 0.202.0

package/dist/{chunk-X2Q4H6JQ.js → chunk-LOOU2DUR.js}

@@ -7,7 +7,7 @@ import {
   PluginCredentialFailureError,
   agentNameSchema,
   createPluginAuthOrchestration
-} from "./chunk-VLBLCJXK.js";
+} from "./chunk-QB54UQUS.js";
 import {
   parseSandboxEgressAuthRequiredSignal,
   parseSandboxEgressPermissionDeniedSignal,
@@ -38,7 +38,7 @@ import {
   searchSlackUsers,
   selectPluginGrant,
   toMcpProviderError
-} from "./chunk-22Y5SBDM.js";
+} from "./chunk-WQSHDTTI.js";
 import {
   RetryableDeliveryError,
   actorFromRun,
@@ -53,7 +53,7 @@ import {
   surfaceFromRun,
   toolInvocationDestination,
   uploadFilesToConversation
-} from "./chunk-PIHLVU7T.js";
+} from "./chunk-DL2KLKVH.js";
 import {
   CooperativeTurnYieldError,
   NO_REPLY_MARKER,
@@ -65,7 +65,7 @@ import {
   isNoReplyMarker,
   isTurnInputCommitLostError,
   sanitizeAssistantText
-} from "./chunk-3WUBDFFL.js";
+} from "./chunk-ELWOYVOY.js";
 import {
   AGENTS_REMOVAL_NOTICE,
   AGENTS_REPLACEMENT_NOTICE,
@@ -121,7 +121,7 @@ import {
   stripRuntimeTurnContext,
   trimTrailingAssistantMessages,
   truncateText
-} from "./chunk-JLUCKXGI.js";
+} from "./chunk-5PKWYPFT.js";
 import {
   SCHEDULED_TASK_SYSTEM_ACTOR,
   WORKSPACE_SNAPSHOT_FAILED_EVENT,
@@ -147,6 +147,7 @@ import {
   makeStructuredToolOutput,
   normalizeEventIdentifier,
   pluginSupportsEvent,
+  readLiveAttachment,
   readScheduledTask,
   registeredEventTaskTriggerSchema,
   registeredEventTypeSchema,
@@ -162,13 +163,13 @@ import {
   workspaceSnapshotFinishedEvent,
   workspaceSnapshotWatch,
   writableEventTask
-} from "./chunk-IAZBUDVU.js";
+} from "./chunk-TXJSXBV5.js";
 import {
   parseSlackThreadId
-} from "./chunk-RG74Q34N.js";
+} from "./chunk-A76OIMYN.js";
 import {
   appendAndEnqueueInboundMessage
-} from "./chunk-UR43NMUR.js";
+} from "./chunk-OWMPFXJA.js";
 import {
   SHORT_TITLE_MAX_LENGTH,
   ToolInputError,
@@ -176,7 +177,7 @@ import {
   generateShortTitle,
   hasAgentTurnUsage,
   resolveTaskTitle
-} from "./chunk-RDWWCDA4.js";
+} from "./chunk-7DHZP5KJ.js";
 import {
   bindSandboxFileSystem,
   createSandboxSession,
@@ -187,7 +188,7 @@ import {
   resolve,
   setSnapshotSpanAttributes,
   stopSession
-} from "./chunk-OIILBD56.js";
+} from "./chunk-LA6R4A7Q.js";
 import {
   privateTraceResultAttributes
 } from "./chunk-UIE3R5XU.js";
@@ -197,7 +198,7 @@ import {
 } from "./chunk-X6GDDWQH.js";
 import {
   getTurnRequestDeadline
-} from "./chunk-4Q5IR5GA.js";
+} from "./chunk-BD2KT3OB.js";
 import {
   getVercelConversationWorkQueue
 } from "./chunk-DKIJ2RP5.js";
@@ -244,7 +245,7 @@ import {
   updateWorkspace,
   withSlackRetries,
   workspaceRepoCheckoutPath
-} from "./chunk-N5VHBUXF.js";
+} from "./chunk-U2GPUYAL.js";
 import {
   JUNIOR_THREAD_STATE_TTL_MS
 } from "./chunk-3Y47VMHV.js";
@@ -254,12 +255,13 @@ import {
   getConversationStore,
   getDb,
   getSqlExecutor
-} from "./chunk-JMRHEW6B.js";
+} from "./chunk-M76HMB7M.js";
 import {
   juniorArtifacts,
+  juniorAttachments,
   juniorIdentities,
   juniorSchedulerRuns
-} from "./chunk-K2QYWZ7F.js";
+} from "./chunk-PW4P4JYF.js";
 import {
   SANDBOX_DATA_ROOT,
   SANDBOX_REPOS_ROOT,
@@ -290,12 +292,12 @@ import {
   throwSandboxOperationError,
   workspaceSnapshotNotReadyUserMessage,
   wrapSandboxSetupError
-} from "./chunk-OVHO76WN.js";
+} from "./chunk-NSXKRGRT.js";
 import {
   fenceLock,
   getStateAdapter,
   withLock
-} from "./chunk-PMSENMWY.js";
+} from "./chunk-2MK3QBGA.js";
 import {
   KNOWN_CONVERSATION_EVENT_TYPES,
   contextProvenance,
@@ -328,7 +330,7 @@ import {
   resolveGatewayCredential,
   resolveGatewayModel,
   unwrapCurrentInstruction
-} from "./chunk-GFXDMDHR.js";
+} from "./chunk-63NKKFJL.js";
 import {
   ModelProfileNotConfiguredError,
   TURN_REASONING_LEVELS,
@@ -347,16 +349,16 @@ import {
   toGenAiMessagesTraceAttributes,
   toGenAiPayloadMetadata,
   toGenAiPayloadTraceAttributes
-} from "./chunk-SY2RQ77O.js";
+} from "./chunk-5NOPO64K.js";
 import {
   discoverSkills,
   findSkillByName,
   loadSkillsByName,
   parseSkillInvocation
-} from "./chunk-T6263C3N.js";
+} from "./chunk-KHKKHDLD.js";
 import {
   pluginCatalogRuntime
-} from "./chunk-5VRPXF4T.js";
+} from "./chunk-YDUR3ZYW.js";
 import {
   CredentialUnavailableError,
   OAuthProviderError,
@@ -364,7 +366,7 @@ import {
   getOAuthProviderErrorAttributes,
   resolveAuthTokenPlaceholder,
   resolvePluginCommandEnv
-} from "./chunk-5Q6KP6LH.js";
+} from "./chunk-BXCX5QKA.js";
 import {
   credentialContextForActor,
   credentialUserSubjectId
@@ -400,7 +402,7 @@ import {
   summarizeMessageText,
   withLogContext,
   withSpan
-} from "./chunk-7DO36XLF.js";
+} from "./chunk-MAGNK5J4.js";
 import {
   startInactiveSpan,
   withActiveSpan
@@ -2052,6 +2054,18 @@ function buildTurnContextPrompt(params) {
   return sections.join("\n\n");
 }
 
+// src/chat/attachments/media.ts
+var VISION_IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
+  "image/gif",
+  "image/jpeg",
+  "image/png",
+  "image/webp"
+]);
+function isVisionImageMediaType(mediaType) {
+  const normalized = mediaType.split(";", 1)[0]?.trim().toLowerCase();
+  return normalized ? VISION_IMAGE_MEDIA_TYPES.has(normalized) : false;
+}
+
 // src/chat/agent/prompt.ts
 var MAX_INLINE_ATTACHMENT_BASE64_CHARS = 12e4;
 var MAX_ROUTER_ATTACHMENT_PREVIEW_CHARS = 2e3;
@@ -2178,7 +2192,7 @@ function buildUserTurnInput(args) {
       });
       continue;
     }
-    if (attachment.mediaType.startsWith("image/")) {
+    if (isVisionImageMediaType(attachment.mediaType)) {
       if (!attachment.data) {
         throw new Error("Image attachment is missing image data");
       }
@@ -2966,8 +2980,8 @@ function sandboxProxyUrl(credentialToken) {
       "Cannot determine base URL for sandbox credential egress (set JUNIOR_BASE_URL or deploy to Vercel)"
     );
   }
-  const path8 = credentialToken ? `${SANDBOX_EGRESS_PROXY_PATH}/${credentialToken}` : SANDBOX_EGRESS_PROXY_PATH;
-  return new URL(path8, baseUrl).toString();
+  const path9 = credentialToken ? `${SANDBOX_EGRESS_PROXY_PATH}/${credentialToken}` : SANDBOX_EGRESS_PROXY_PATH;
+  return new URL(path9, baseUrl).toString();
 }
 function buildSandboxEgressNetworkPolicy(input) {
   const allow = {
@@ -5291,8 +5305,8 @@ function parseToolContent(content) {
   }
   return content;
 }
-function formatZodPath(path8) {
-  return path8.length > 0 ? path8.map(String).join(".") : "root";
+function formatZodPath(path9) {
+  return path9.length > 0 ? path9.map(String).join(".") : "root";
 }
 function formatToolInputError(error) {
   const details = error.issues.slice(0, 5).map((issue) => `${formatZodPath(issue.path)}: ${issue.message}`).join("; ");
@@ -6193,8 +6207,8 @@ function sliceFileContent(params) {
     } : void 0
   });
 }
-function missingFileResult(path8) {
-  throw new ToolInputError(`File not found: ${path8}`);
+function missingFileResult(path9) {
+  throw new ToolInputError(`File not found: ${path9}`);
 }
 
 // src/chat/tools/sandbox/read-file.ts
@@ -6845,9 +6859,9 @@ var MIME_BY_EXTENSION = {
   ".log": "text/plain"
 };
 var SandboxFileNotFoundError = class extends ToolInputError {
-  constructor(path8) {
-    super(`failed to read file: ${path8}`);
-    this.path = path8;
+  constructor(path9) {
+    super(`failed to read file: ${path9}`);
+    this.path = path9;
   }
   path;
 };
@@ -8688,13 +8702,13 @@ function createViewImageTool(sandbox, supportsImageInput, deps = {}) {
     description: "View an image file from the sandbox workspace when visual inspection is needed. Supports PNG, JPEG, GIF, and WebP images up to 5 MB.",
     exposure: "direct",
     inputSchema: viewImageInputSchema,
-    async execute({ path: path8 }) {
+    async execute({ path: path9 }) {
       if (!supportsImageInput()) {
         throw new ToolInputError(
           "viewImage is unavailable because the current model does not support image inputs"
         );
       }
-      const targetPath = normalizeSandboxPath(path8);
+      const targetPath = normalizeSandboxPath(path9);
       const data = deps.readFile ? await deps.readFile(targetPath) : await sandbox.readFileToBuffer({ path: targetPath });
       if (!data) {
         throw new SandboxFileNotFoundError(targetPath);
@@ -13113,9 +13127,45 @@ function renderAttachmentText(input) {
   return rendered.slice(0, MAX_ATTACHMENT_TEXT_CHARS);
 }
 
+// src/chat/slack/attachments.ts
+import { and as and2, eq as eq2, inArray as inArray2, isNull } from "drizzle-orm";
+async function recordSlackAttachment(args) {
+  await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(
+    and2(
+      eq2(juniorAttachments.id, args.attachmentId),
+      eq2(juniorAttachments.conversationId, args.conversationId),
+      isNull(juniorAttachments.deleteRequestedAt)
+    )
+  );
+}
+async function readAttachmentVisionSummary(args) {
+  const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(
+    and2(
+      eq2(juniorAttachments.id, args.attachmentId),
+      eq2(juniorAttachments.conversationId, args.conversationId),
+      isNull(juniorAttachments.deleteRequestedAt)
+    )
+  );
+  return row?.visionSummary;
+}
+async function matchSlackAttachments(args) {
+  if (args.providerIds.length === 0) return [];
+  return await args.db.db().select({
+    id: juniorAttachments.id,
+    providerId: juniorAttachments.providerId
+  }).from(juniorAttachments).where(
+    and2(
+      eq2(juniorAttachments.conversationId, args.conversationId),
+      eq2(juniorAttachments.provider, "slack"),
+      inArray2(juniorAttachments.providerId, args.providerIds),
+      isNull(juniorAttachments.deleteRequestedAt)
+    )
+  );
+}
+
 // src/chat/slack/tools/thread-read.ts
 var MAX_THREAD_READ_CHARS = 4e4;
-function sanitizeMessage(msg) {
+function sanitizeMessage(msg, attachmentIdsBySlackFileId) {
   const attachmentText = renderAttachmentText(msg.attachments);
   return {
     ts: msg.ts,
@@ -13131,7 +13181,8 @@ function sanitizeMessage(msg) {
         id: f.id,
         name: f.name,
         mimetype: f.mimetype,
-        size: f.size
+        size: f.size,
+        ...f.id && attachmentIdsBySlackFileId.get(f.id) ? { attachment_id: attachmentIdsBySlackFileId.get(f.id) } : void 0
       }))
     } : void 0
   };
@@ -13149,7 +13200,7 @@ function truncateMessages(messages, maxChars) {
   }
   return { messages: kept, omitted: messages.length - kept.length };
 }
-function createSlackThreadReadTool(context) {
+function createSlackThreadReadTool(context, attachmentDeps) {
   return zodTool({
     description: "Read a Slack thread from a shared archive URL or explicit channel + timestamp. Works for the current conversation and public channels.",
     annotations: {
@@ -13268,7 +13319,22 @@ function createSlackThreadReadTool(context) {
       }
       const root = replies[0];
       const resolvedThreadTs = threadTs ?? root?.thread_ts ?? root?.ts ?? lookupTs;
-      const sanitized = replies.map(sanitizeMessage);
+      const slackFileIds = replies.flatMap(
+        (reply) => (reply.files ?? []).map((file) => file.id).filter((fileId) => Boolean(fileId))
+      );
+      const storedAttachments = attachmentDeps ? await matchSlackAttachments({
+        conversationId: attachmentDeps.conversationId,
+        db: attachmentDeps.db,
+        providerIds: slackFileIds
+      }) : [];
+      const attachmentIdsBySlackFileId = new Map(
+        storedAttachments.flatMap(
+          (attachment) => attachment.providerId ? [[attachment.providerId, attachment.id]] : []
+        )
+      );
+      const sanitized = replies.map(
+        (reply) => sanitizeMessage(reply, attachmentIdsBySlackFileId)
+      );
       const { messages, omitted } = truncateMessages(
         sanitized,
         MAX_THREAD_READ_CHARS
@@ -13290,7 +13356,7 @@ function createSlackThreadReadTool(context) {
 }
 
 // src/chat/tools/user-lookup.ts
-import { and as and2, eq as eq2, or, sql } from "drizzle-orm";
+import { and as and3, eq as eq3, or, sql } from "drizzle-orm";
 import { alias } from "drizzle-orm/pg-core";
 import { z as z54 } from "zod";
 var linkedSlackIdentity = alias(juniorIdentities, "user_lookup_slack_identity");
@@ -13356,12 +13422,12 @@ async function storedSlackUserByEmail(teamId, email) {
   const emailNormalized = normalizeIdentityEmail(email);
   if (!emailNormalized) return void 0;
   const identities = await getSqlExecutor().db().select().from(juniorIdentities).where(
-    and2(
-      eq2(juniorIdentities.provider, "slack"),
-      eq2(juniorIdentities.providerTenantId, teamId),
-      eq2(juniorIdentities.kind, "user"),
-      eq2(juniorIdentities.emailVerified, true),
-      eq2(juniorIdentities.emailNormalized, emailNormalized)
+    and3(
+      eq3(juniorIdentities.provider, "slack"),
+      eq3(juniorIdentities.providerTenantId, teamId),
+      eq3(juniorIdentities.kind, "user"),
+      eq3(juniorIdentities.emailVerified, true),
+      eq3(juniorIdentities.emailNormalized, emailNormalized)
     )
   ).limit(2);
   if (identities.length > 1) {
@@ -13413,18 +13479,18 @@ async function resolveSlack(teamId, query) {
 async function resolveStoredProvider(teamId, provider, query) {
   const rows = await getSqlExecutor().db().select({ slack: linkedSlackIdentity }).from(juniorIdentities).innerJoin(
     linkedSlackIdentity,
-    and2(
-      eq2(linkedSlackIdentity.userId, juniorIdentities.userId),
-      eq2(linkedSlackIdentity.kind, "user"),
-      eq2(linkedSlackIdentity.provider, "slack"),
-      eq2(linkedSlackIdentity.providerTenantId, teamId)
+    and3(
+      eq3(linkedSlackIdentity.userId, juniorIdentities.userId),
+      eq3(linkedSlackIdentity.kind, "user"),
+      eq3(linkedSlackIdentity.provider, "slack"),
+      eq3(linkedSlackIdentity.providerTenantId, teamId)
     )
   ).where(
-    and2(
-      eq2(juniorIdentities.kind, "user"),
-      eq2(juniorIdentities.provider, provider),
+    and3(
+      eq3(juniorIdentities.kind, "user"),
+      eq3(juniorIdentities.provider, provider),
       or(
-        eq2(juniorIdentities.providerSubjectId, query),
+        eq3(juniorIdentities.providerSubjectId, query),
         sql`lower(${juniorIdentities.handle}) = lower(${query})`
       )
     )
@@ -13558,7 +13624,7 @@ import { z as z56 } from "zod";
 
 // src/chat/artifacts/store.ts
 import { createHash as createHash4, randomUUID as randomUUID4 } from "crypto";
-import { and as and3, eq as eq3, isNull } from "drizzle-orm";
+import { and as and4, eq as eq4, isNull as isNull2 } from "drizzle-orm";
 var MAX_IMAGE_BYTES = 10 * 1024 * 1024;
 var IMAGE_TYPES = {
   gif: "image/gif",
@@ -13645,9 +13711,9 @@ async function publishImage(args) {
   const [existing] = await args.db.db().select({
     id: juniorArtifacts.id
   }).from(juniorArtifacts).where(
-    and3(
-      eq3(juniorArtifacts.conversationId, args.conversationId),
-      eq3(juniorArtifacts.sha256, sha256)
+    and4(
+      eq4(juniorArtifacts.conversationId, args.conversationId),
+      eq4(juniorArtifacts.sha256, sha256)
     )
   );
   const id = existing?.id ?? randomUUID4();
@@ -13708,9 +13774,9 @@ async function unpublishArtifact(args) {
   }
   const now = args.now ?? /* @__PURE__ */ new Date();
   const updated = await args.db.db().update(juniorArtifacts).set({ deleteRequestedAt: now }).where(
-    and3(
-      eq3(juniorArtifacts.id, parsed.id),
-      eq3(juniorArtifacts.conversationId, args.conversationId)
+    and4(
+      eq4(juniorArtifacts.id, parsed.id),
+      eq4(juniorArtifacts.conversationId, args.conversationId)
     )
   ).returning({ id: juniorArtifacts.id });
   if (updated.length === 0) {
@@ -13727,10 +13793,10 @@ async function readPublicArtifact(args) {
     contentType: juniorArtifacts.contentType,
     storageKey: juniorArtifacts.storageKey
   }).from(juniorArtifacts).where(
-    and3(
-      eq3(juniorArtifacts.id, parsed.id),
-      eq3(juniorArtifacts.public, true),
-      isNull(juniorArtifacts.deleteRequestedAt)
+    and4(
+      eq4(juniorArtifacts.id, parsed.id),
+      eq4(juniorArtifacts.public, true),
+      isNull2(juniorArtifacts.deleteRequestedAt)
     )
   );
   if (!row) return null;
@@ -13770,20 +13836,20 @@ function createPublishImageTool(args) {
     },
     approvalMode: "review",
     description: "Publish one sandbox image to a durable public HTTPS URL. Anyone on the internet with the URL can view the image. Use only when an external destination needs a public image URL. Do not use for private file sharing or private conversation storage. Supports PNG, JPEG, GIF, and WebP up to 10 MB.",
-    describeProposal: ({ path: path8 }) => `Publish sandbox image ${path8} to a public internet URL.`,
+    describeProposal: ({ path: path9 }) => `Publish sandbox image ${path9} to a public internet URL.`,
     executionMode: "sequential",
     inputSchema: z56.object({
       path: z56.string().min(1).describe("Exact sandbox path of an existing image file.")
     }).strict(),
     outputSchema: outputSchema5,
-    async execute({ path: path8 }) {
+    async execute({ path: path9 }) {
       const publicBaseUrl = (args.publicBaseUrl ?? resolveBaseUrl)()?.trim();
       if (!publicBaseUrl) {
         throw new Error(
           "publishImage requires JUNIOR_BASE_URL or a Vercel deployment URL."
         );
       }
-      const targetPath = normalizeSandboxPath(path8);
+      const targetPath = normalizeSandboxPath(path9);
       const body = await args.workspace.readFileToBuffer({ path: targetPath });
       if (!body) {
         throw new SandboxFileNotFoundError(targetPath);
@@ -13843,28 +13909,99 @@ function createUnpublishImageTool(args) {
   });
 }
 
-// src/chat/tools/search-conversation-events.ts
+// src/chat/tools/load-attachment.ts
+import path8 from "path";
 import { z as z58 } from "zod";
+var ATTACHMENT_DIR = ".junior/attachments";
+async function readStream(stream) {
+  const chunks = [];
+  const reader = stream.getReader();
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    chunks.push(value);
+  }
+  return Buffer.concat(chunks);
+}
+function createLoadAttachmentTool(args) {
+  return zodTool({
+    description: "Load a stored attachment for this conversation into the sandbox. Use the attachment_id shown in attachment context or Slack read results.",
+    annotations: {
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false,
+      readOnlyHint: false
+    },
+    inputSchema: z58.object({
+      attachment_id: z58.string().min(1).describe("Stored attachment ID.")
+    }),
+    outputSchema: juniorToolOutputSchema,
+    execute: async ({ attachment_id }) => {
+      const attachment = await readLiveAttachment({
+        attachmentId: attachment_id,
+        conversationId: args.conversationId,
+        db: args.db
+      });
+      if (!attachment || attachment.storageProvider !== args.storage.provider) {
+        throw new ToolInputError("Attachment not found in this conversation.");
+      }
+      const body = await args.storage.get(attachment.storageKey);
+      if (!body) {
+        throw new ToolInputError("Stored attachment contents are unavailable.");
+      }
+      const data = await readStream(body);
+      if (data.byteLength !== attachment.bytes) {
+        throw new Error(
+          `Attachment ${attachment.id} read ${data.byteLength} bytes, expected ${attachment.bytes}.`
+        );
+      }
+      const attachmentDir = path8.posix.join(ATTACHMENT_DIR, attachment.id);
+      const sandboxPath = path8.posix.join(
+        attachmentDir,
+        path8.posix.basename(attachment.filename)
+      );
+      const mkdir = await args.workspace.runCommand({
+        cmd: "mkdir",
+        args: ["-p", attachmentDir]
+      });
+      if (mkdir.exitCode !== 0) {
+        throw new Error(
+          `Failed to create attachment directory: ${mkdir.stderr}`
+        );
+      }
+      await args.workspace.writeFiles([{ content: data, path: sandboxPath }]);
+      return {
+        path: sandboxPath,
+        filename: attachment.filename,
+        mime_type: attachment.contentType,
+        bytes: attachment.bytes
+      };
+    }
+  });
+}
+
+// src/chat/tools/search-conversation-events.ts
+import { z as z59 } from "zod";
 var DEFAULT_LIMIT3 = 25;
 var MAX_LIMIT2 = 100;
 var MAX_EVENT_DATA_BYTES = 4e3;
 var MAX_EVENTS_JSON_BYTES = 2e4;
 var MAX_IDENTITY_CHARS = 256;
 var textEncoder = new TextEncoder();
-var knownEventTypeSchema = z58.enum(KNOWN_CONVERSATION_EVENT_TYPES);
-var projectedEventSchema = z58.object({
-  seq: z58.number().int().nonnegative().describe("Stable event position for pagination."),
-  history_version: z58.number().int().nonnegative().describe("Agent history generation after replacement."),
-  created_at: z58.iso.datetime().describe("When the event was recorded."),
-  idempotency_key: z58.string().min(1).optional().describe("Retry-stable event identity, when assigned."),
-  data: z58.record(z58.string(), z58.unknown()).describe("Bounded event data.")
+var knownEventTypeSchema = z59.enum(KNOWN_CONVERSATION_EVENT_TYPES);
+var projectedEventSchema = z59.object({
+  seq: z59.number().int().nonnegative().describe("Stable event position for pagination."),
+  history_version: z59.number().int().nonnegative().describe("Agent history generation after replacement."),
+  created_at: z59.iso.datetime().describe("When the event was recorded."),
+  idempotency_key: z59.string().min(1).optional().describe("Retry-stable event identity, when assigned."),
+  data: z59.record(z59.string(), z59.unknown()).describe("Bounded event data.")
 }).strict();
 var searchConversationEventsOutputSchema = juniorToolOutputSchema.extend({
-  conversation_id: z58.string().min(1),
-  events: z58.array(projectedEventSchema),
-  has_older: z58.boolean().describe("Whether matching older events exist."),
-  has_newer: z58.boolean().describe("Whether matching newer events exist."),
-  omitted_event_count: z58.number().int().nonnegative().optional().describe("Events omitted by the response byte limit.")
+  conversation_id: z59.string().min(1),
+  events: z59.array(projectedEventSchema),
+  has_older: z59.boolean().describe("Whether matching older events exist."),
+  has_newer: z59.boolean().describe("Whether matching newer events exist."),
+  omitted_event_count: z59.number().int().nonnegative().optional().describe("Events omitted by the response byte limit.")
 });
 function createSearchConversationEventsTool(context) {
   return zodTool({
@@ -13877,16 +14014,16 @@ function createSearchConversationEventsTool(context) {
       openWorldHint: false,
       readOnlyHint: true
     },
-    inputSchema: z58.object({
-      conversation_id: z58.string().trim().min(1).nullable().describe(
+    inputSchema: z59.object({
+      conversation_id: z59.string().trim().min(1).nullable().describe(
         "Conversation ID to search. Omit or null for the current conversation."
       ).optional(),
-      after_seq: z58.number().int().nonnegative().nullable().describe("Exclusive event sequence lower bound; returns ascending.").optional(),
-      before_seq: z58.number().int().nonnegative().nullable().describe("Exclusive event sequence upper bound.").optional(),
-      limit: z58.number().int().min(1).max(MAX_LIMIT2).nullable().describe(
+      after_seq: z59.number().int().nonnegative().nullable().describe("Exclusive event sequence lower bound; returns ascending.").optional(),
+      before_seq: z59.number().int().nonnegative().nullable().describe("Exclusive event sequence upper bound.").optional(),
+      limit: z59.number().int().min(1).max(MAX_LIMIT2).nullable().describe(
         `Maximum events. Default ${DEFAULT_LIMIT3}; max ${MAX_LIMIT2}.`
       ).optional(),
-      types: z58.array(knownEventTypeSchema).min(1).nullable().describe("Event types to include; omit for all types.").optional()
+      types: z59.array(knownEventTypeSchema).min(1).nullable().describe("Event types to include; omit for all types.").optional()
     }).strict(),
     outputSchema: searchConversationEventsOutputSchema,
     execute: async (input) => {
@@ -14135,7 +14272,7 @@ function stripReplacementHistoryField(value) {
 }
 
 // src/chat/tools/handoff/tool.ts
-import { z as z59 } from "zod";
+import { z as z60 } from "zod";
 var HANDOFF_TOOL_NAME = "handoff";
 function formatHandoffProfiles(handoff) {
   return handoff.profiles.map(
@@ -14143,7 +14280,7 @@ function formatHandoffProfiles(handoff) {
   ).join("\n");
 }
 function createHandoffTool(handoff) {
-  const profileSchema = z59.enum(
+  const profileSchema = z60.enum(
     handoff.profiles.map((profile) => profile.name)
   );
   const handoffResultSchema = juniorToolOutputSchema.extend({
@@ -14168,7 +14305,7 @@ function createHandoffTool(handoff) {
 ${profileList}`
     ].join(" "),
     executionMode: "sequential",
-    inputSchema: z59.object({
+    inputSchema: z60.object({
       profile: profileSchema.describe(
         "Exact configured profile name. Choose the profile whose description best fits the remaining task. If none clearly fits better, do not call handoff."
       )
@@ -14191,7 +14328,7 @@ ${profileList}`
 }
 
 // src/chat/tools/web/fetch-tool.ts
-import { z as z60 } from "zod";
+import { z as z61 } from "zod";
 
 // src/chat/tools/web/constants.ts
 var USER_AGENT = "junior-bot/0.1";
@@ -14640,9 +14777,9 @@ function createWebFetchTool(hooks, options = {}) {
       openWorldHint: true,
       readOnlyHint: true
     },
-    inputSchema: z60.object({
-      url: z60.string().min(1).describe("HTTP(S) URL to fetch."),
-      max_chars: z60.coerce.number().int().min(500).max(MAX_FETCH_CHARS).describe("Optional maximum number of extracted characters to return.").optional()
+    inputSchema: z61.object({
+      url: z61.string().min(1).describe("HTTP(S) URL to fetch."),
+      max_chars: z61.coerce.number().int().min(500).max(MAX_FETCH_CHARS).describe("Optional maximum number of extracted characters to return.").optional()
     }),
     outputSchema: juniorToolOutputSchema,
     execute: async ({ url, max_chars }) => {
@@ -14687,7 +14824,7 @@ function createWebFetchTool(hooks, options = {}) {
 }
 
 // src/chat/tools/web/search.ts
-import { z as z61 } from "zod";
+import { z as z62 } from "zod";
 import { generateText } from "ai";
 import { createGatewayProvider } from "@ai-sdk/gateway";
 var SEARCH_TIMEOUT_MS = 6e4;
@@ -14729,9 +14866,9 @@ function createWebSearchTool(modelId, override) {
       openWorldHint: true,
       readOnlyHint: true
     },
-    inputSchema: z61.object({
-      query: z61.string().min(1).max(500).describe("Search query."),
-      max_results: z61.coerce.number().int().min(1).max(MAX_RESULTS2).describe("Max results to return.").optional()
+    inputSchema: z62.object({
+      query: z62.string().min(1).max(500).describe("Search query."),
+      max_results: z62.coerce.number().int().min(1).max(MAX_RESULTS2).describe("Max results to return.").optional()
     }),
     outputSchema: juniorToolOutputSchema,
     execute: async ({ query, max_results }) => {
@@ -14773,7 +14910,7 @@ function createWebSearchTool(modelId, override) {
 }
 
 // src/chat/tools/sandbox/write-file.ts
-import { z as z62 } from "zod";
+import { z as z63 } from "zod";
 function createWriteFileTool() {
   return zodTool({
     annotations: {
@@ -14784,9 +14921,9 @@ function createWriteFileTool() {
     },
     description: "Write UTF-8 content to a file in the sandbox workspace. Use for intentional file creation or deliberate full-file replacement after validation; use editFile instead for targeted changes to existing files. Do not use for exploratory analysis-only turns.",
     executionMode: "sequential",
-    inputSchema: z62.object({
-      path: z62.string().min(1).describe("Path to write in the sandbox workspace."),
-      content: z62.string().describe("UTF-8 file content to write.")
+    inputSchema: z63.object({
+      path: z63.string().min(1).describe("Path to write in the sandbox workspace."),
+      content: z63.string().describe("UTF-8 file content to write.")
     }),
     outputSchema: juniorToolOutputSchema,
     execute: async () => {
@@ -14798,7 +14935,7 @@ function createWriteFileTool() {
 }
 
 // src/chat/workspaces/tools.ts
-import { z as z63 } from "zod";
+import { z as z64 } from "zod";
 import {
   resourceEventSubscriptionResultSchema
 } from "@sentry/junior-plugin-api";
@@ -14830,16 +14967,16 @@ async function stopWorkspaceSnapshotWatch(input) {
     });
   }
 }
-var repoSchema = z63.object({
-  provider: z63.string(),
-  repo: z63.string(),
-  checkout_path: z63.string()
+var repoSchema = z64.object({
+  provider: z64.string(),
+  repo: z64.string(),
+  checkout_path: z64.string()
 });
-var workspaceSchema = z63.object({
-  id: z63.string(),
-  name: z63.string(),
-  setup_script: z63.string(),
-  repos: z63.array(repoSchema)
+var workspaceSchema = z64.object({
+  id: z64.string(),
+  name: z64.string(),
+  setup_script: z64.string(),
+  repos: z64.array(repoSchema)
 });
 function view(workspace) {
   return {
@@ -14872,18 +15009,18 @@ function workspaceProviderNames() {
 }
 function workspaceWriteSchemas(providers) {
   const providerNames = providers.map((provider) => `\`${provider}\``).join(", ");
-  const repoInputSchema = z63.object({
-    provider: z63.enum(providers).describe(`Repository provider. Supported: ${providerNames}.`),
-    repo: z63.string().trim().min(1).describe("Repository in owner/name format.")
+  const repoInputSchema = z64.object({
+    provider: z64.enum(providers).describe(`Repository provider. Supported: ${providerNames}.`),
+    repo: z64.string().trim().min(1).describe("Repository in owner/name format.")
   }).strict();
-  const workspaceInputSchema = z63.object({
-    name: z63.string().trim().min(1).describe(
+  const workspaceInputSchema = z64.object({
+    name: z64.string().trim().min(1).describe(
       "Workspace name. Use lowercase letters, digits, underscores, or hyphens."
     ),
-    setup_script: z63.string().nullable().describe(
+    setup_script: z64.string().nullable().describe(
       "Optional shell script to run after repository checkout whenever this Workspace starts. Omit or use null for no setup script."
     ).optional(),
-    repos: z63.array(repoInputSchema).max(32).describe("Complete repository list.")
+    repos: z64.array(repoInputSchema).max(32).describe("Complete repository list.")
   }).strict();
   return { providerNames, workspaceInputSchema };
 }
@@ -14958,7 +15095,7 @@ function createWorkspaceWriteTools(providers) {
       },
       description: `Replace an install-wide Workspace recipe. Repository providers: ${providerNames}. Use the Workspace ID returned by listWorkspaces.`,
       inputSchema: workspaceInputSchema.extend({
-        id: z63.string().uuid().describe("Workspace ID from listWorkspaces.")
+        id: z64.string().uuid().describe("Workspace ID from listWorkspaces.")
       }).strict(),
       prepareArguments(args) {
         const input = args;
@@ -14991,11 +15128,11 @@ function createWorkspaceWriteTools(providers) {
         readOnlyHint: false
       },
       description: "Delete one install-wide Workspace recipe. Use the Workspace ID returned by listWorkspaces.",
-      inputSchema: z63.object({
-        id: z63.string().uuid().describe("Workspace ID from listWorkspaces.")
+      inputSchema: z64.object({
+        id: z64.string().uuid().describe("Workspace ID from listWorkspaces.")
       }).strict(),
       outputSchema: juniorToolOutputSchema.extend({
-        deleted: z63.literal(true)
+        deleted: z64.literal(true)
       }),
       async execute({ id }) {
         const deleted = await workspaceWrite(() => deleteWorkspace(id));
@@ -15020,10 +15157,10 @@ function createWorkspaceTools(context) {
         readOnlyHint: true
       },
       description: "List named repository workspaces that can replace the current sandbox.",
-      inputSchema: z63.object({}).strict(),
+      inputSchema: z64.object({}).strict(),
       outputSchema: juniorToolOutputSchema.extend({
-        active_workspace_id: z63.string().nullable(),
-        workspaces: z63.array(workspaceSchema)
+        active_workspace_id: z64.string().nullable(),
+        workspaces: z64.array(workspaceSchema)
       }),
       async execute() {
         return {
@@ -15041,12 +15178,12 @@ function createWorkspaceTools(context) {
         readOnlyHint: false
       },
       description: "Replace the current sandbox with a named repository Workspace. Files in the old sandbox do not carry over. Returns ready after the switch, or building with a temporary subscription when the snapshot is still being prepared. When building, wait for the ready event and call switchWorkspace again with the same name.",
-      inputSchema: z63.object({
-        name: z63.string().trim().min(1).describe("Exact workspace name.")
+      inputSchema: z64.object({
+        name: z64.string().trim().min(1).describe("Exact workspace name.")
       }).strict(),
       outputSchema: juniorToolOutputSchema.extend({
         workspace: workspaceSchema,
-        status: z63.enum(["ready", "building"]),
+        status: z64.enum(["ready", "building"]),
         subscription: resourceEventSubscriptionResultSchema.optional().describe(
           "Present when the snapshot ready and failed events are already watched for this conversation."
         )
@@ -15178,6 +15315,12 @@ function createTools(availableSkills, hooks = {}, context, options = {}) {
     );
   }
   if (context.attachmentStorage) {
+    tools.loadAttachment = createLoadAttachmentTool({
+      conversationId: context.conversationId,
+      db: getSqlExecutor(),
+      storage: context.attachmentStorage,
+      workspace: context.workspace
+    });
     tools.publishImage = createPublishImageTool({
       conversationId: context.conversationId,
       db: getSqlExecutor(),
@@ -15203,7 +15346,10 @@ function createTools(availableSkills, hooks = {}, context, options = {}) {
     tools.slackCanvasRead = createSlackCanvasReadTool();
     tools.slackCanvasEdit = createSlackCanvasEditTool(state);
     tools.slackCanvasWrite = createSlackCanvasWriteTool(state);
-    tools.slackThreadRead = createSlackThreadReadTool(slackContext);
+    tools.slackThreadRead = createSlackThreadReadTool(slackContext, {
+      conversationId: context.conversationId,
+      db: getSqlExecutor()
+    });
     tools.slackChannelJoin = createSlackChannelJoinTool(slackContext);
     if (context.conversationPrivacy === "public") {
       tools.searchConversationMessages = createSlackConversationMessageSearchTool(
@@ -15832,7 +15978,7 @@ function handleToolExecutionError(error, toolName, toolCallId, shouldTrace, conv
 }
 
 // src/chat/tools/execute-tool.ts
-import { z as z64 } from "zod";
+import { z as z65 } from "zod";
 var EXECUTE_TOOL_NAME = "executeTool";
 function createExecuteToolTool() {
   return zodTool({
@@ -15844,11 +15990,11 @@ function createExecuteToolTool() {
     },
     description: "Execute any catalog tool by exact tool_name from searchTools or a tool-result execution hint. Put tool-specific parameters inside arguments.",
     executionMode: "sequential",
-    inputSchema: z64.object({
-      tool_name: z64.string().min(1).describe(
+    inputSchema: z65.object({
+      tool_name: z65.string().min(1).describe(
         "Exact catalog tool_name returned by searchTools or a tool-result execution hint."
       ),
-      arguments: z64.record(z64.string(), z64.unknown()).describe(
+      arguments: z65.record(z65.string(), z65.unknown()).describe(
         'Arguments matching the selected catalog tool schema, for example { "query": "..." }.'
       ).optional()
     }).strict(),
@@ -15888,7 +16034,7 @@ function planToolExposure(tools) {
 }
 
 // src/chat/tools/search-tools.ts
-import { z as z65 } from "zod";
+import { z as z66 } from "zod";
 var SEARCH_TOOLS_NAME = "searchTools";
 var DEFAULT_MAX_RESULTS2 = 5;
 var MAX_RESULTS3 = 20;
@@ -15933,29 +16079,29 @@ var SEARCH_STOP_WORDS = /* @__PURE__ */ new Set([
   "you",
   "your"
 ]);
-var searchToolsSourceSchema = z65.object({
-  id: z65.string(),
-  description: z65.string()
+var searchToolsSourceSchema = z66.object({
+  id: z66.string(),
+  description: z66.string()
 }).strict();
-var searchToolsToolSchema = z65.object({
-  tool_name: z65.string(),
-  description: z65.string(),
-  exposure: z65.enum(["direct", "deferred", "modelOnly", "hidden"]),
-  source: z65.string().optional(),
-  input_schema: z65.unknown(),
-  call_notes: z65.array(z65.string()),
-  annotations: z65.record(z65.string(), z65.unknown())
+var searchToolsToolSchema = z66.object({
+  tool_name: z66.string(),
+  description: z66.string(),
+  exposure: z66.enum(["direct", "deferred", "modelOnly", "hidden"]),
+  source: z66.string().optional(),
+  input_schema: z66.unknown(),
+  call_notes: z66.array(z66.string()),
+  annotations: z66.record(z66.string(), z66.unknown())
 }).strict();
 var searchToolsOutputSchema = juniorToolOutputSchema.extend({
-  query: z65.string().nullable(),
-  source: z65.string().nullable(),
-  sources: z65.array(searchToolsSourceSchema),
-  total_catalog_tools: z65.number().int().nonnegative(),
-  total_eligible_tools: z65.number().int().nonnegative(),
-  total_matches: z65.number().int().nonnegative(),
-  returned_tools: z65.number().int().nonnegative(),
-  execution_tool: z65.literal("executeTool"),
-  tools: z65.array(searchToolsToolSchema)
+  query: z66.string().nullable(),
+  source: z66.string().nullable(),
+  sources: z66.array(searchToolsSourceSchema),
+  total_catalog_tools: z66.number().int().nonnegative(),
+  total_eligible_tools: z66.number().int().nonnegative(),
+  total_matches: z66.number().int().nonnegative(),
+  returned_tools: z66.number().int().nonnegative(),
+  execution_tool: z66.literal("executeTool"),
+  tools: z66.array(searchToolsToolSchema)
 }).strict();
 function terms(value) {
   const chunks = value.match(/[\p{L}\p{N}]+/gu) ?? [];
@@ -16166,14 +16312,14 @@ function createSearchToolsTool(catalogTools) {
       openWorldHint: false,
       readOnlyHint: true
     },
-    inputSchema: z65.object({
-      query: z65.string().nullable().describe(
+    inputSchema: z66.object({
+      query: z66.string().nullable().describe(
         "Optional search terms describing the tool, owner, action, or arguments needed. Empty string lists catalog tools."
       ).optional(),
-      source: z65.string().nullable().describe(
+      source: z66.string().nullable().describe(
         "Optional source id to search within, such as a plugin source returned in sources."
       ).optional(),
-      max_results: z65.number().int().min(1).max(MAX_RESULTS3).nullable().describe("Maximum matching catalog tool descriptors to return.").optional()
+      max_results: z66.number().int().min(1).max(MAX_RESULTS3).nullable().describe("Maximum matching catalog tool descriptors to return.").optional()
     }).strict(),
     outputSchema: searchToolsOutputSchema,
     privateTraceResult: (result) => ({
@@ -17471,7 +17617,7 @@ function createPluginEgress(deps) {
 }
 
 // src/chat/services/guardian-action-review.ts
-import { z as z66 } from "zod";
+import { z as z67 } from "zod";
 
 // src/chat/services/guardian-action-policy.ts
 var GUARDIAN_ACTION_POLICY = `You are judging one planned Junior agent action.
@@ -17545,17 +17691,17 @@ Assess the exact action's intrinsic risk and whether the user's intent authorize
 - Keep the reason to one concise, specific sentence grounded in the main risk or authorization fact. For ask, name the exact action, target, and material side effects the user must confirm.`;
 
 // src/chat/services/guardian-action-review.ts
-var guardianDecisionSchema = z66.object({
-  decision: z66.enum(["allow", "ask", "deny"]),
-  reason: z66.string().trim().min(1).max(500),
-  riskLevel: z66.enum(["low", "medium", "high", "critical"]),
-  userAuthorization: z66.enum(["high", "medium", "low", "unknown"])
+var guardianDecisionSchema = z67.object({
+  decision: z67.enum(["allow", "ask", "deny"]),
+  reason: z67.string().trim().min(1).max(500),
+  riskLevel: z67.enum(["low", "medium", "high", "critical"]),
+  userAuthorization: z67.enum(["high", "medium", "low", "unknown"])
 }).strict();
 var GUARDIAN_REVIEW_TIMEOUT_MS = 6e4;
 var GUARDIAN_REVIEW_MAX_TOKENS = 2e3;
 var MAX_PROPOSAL_CHARS = 192e3;
 function guardianPrompt(proposal) {
-  const proposalJson = JSON.stringify(z66.json().parse(proposal), null, 2);
+  const proposalJson = JSON.stringify(z67.json().parse(proposal), null, 2);
   if (proposalJson.length > MAX_PROPOSAL_CHARS) {
     throw new Error(
       `Guardian action proposal exceeds ${MAX_PROPOSAL_CHARS} characters.`
@@ -20245,6 +20391,7 @@ export {
   setConfigDefaults,
   getConfigDefaults,
   shouldEmitDevAgentTrace,
+  isVisionImageMediaType,
   buildSteeringPiMessage,
   SANDBOX_EGRESS_PROXY_PATH,
   parseSandboxEgressCredentialToken,
@@ -20269,6 +20416,8 @@ export {
   listThreadReplies,
   renderBlockText,
   renderAttachmentText,
+  recordSlackAttachment,
+  readAttachmentVisionSummary,
   readPublicArtifact,
   publicArtifactHeaders,
   unpublishedArtifactHeaders,