@sentry/junior 0.225.0 → 0.227.0

package/dist/{agent-runner-Cad1RtWn.js → agent-runner-BGDSjciH.js}

@@ -1,28 +1,26 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { C as resolveGatewayCredential, S as getGatewayApiKey, _ as findProviderError, b as isProviderRetryError, c as COMPACTION_SUMMARY_PREFIX, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeText, l as MODEL_HANDOFF_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, o as resolveGatewayModel, p as unwrapCurrentInstruction, r as completeObject, s as ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as MISSING_GATEWAY_CREDENTIALS_ERROR } from "./client-ihmkx60d.js";
-import { C as withLogContext, F as normalizeIdentityEmail, I as isRecord$2, a as extractGenAiUsageSummary, b as setTags, c as getLogContextAttributesForSpan, d as logException, f as logInfo, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, l as getTracePropagationHeaders, m as normalizeGenAiFinishReason, p as logWarn, s as getLogContextAttributes, u as logError, v as setSpanAttributes, w as withSpan, x as summarizeMessageText, y as setSpanStatus } from "./logging-CcTvYQ8A.js";
+import { C as resolveGatewayCredential, S as getGatewayApiKey, _ as findProviderError, b as isProviderRetryError, c as COMPACTION_SUMMARY_PREFIX, d as isCompactionSummaryText, f as renderCurrentInstruction, g as createProviderError, h as ProviderError, i as completeText, l as MODEL_HANDOFF_SUMMARY_PREFIX, m as escapeXml, n as GEN_AI_SERVER_ADDRESS, o as resolveGatewayModel, p as unwrapCurrentInstruction, r as completeObject, s as ACTIVE_TURN_COMPACTION_SUMMARY_PREFIX, t as GEN_AI_PROVIDER_NAME, u as hasCompactedConversationContext, v as getProviderErrorAttributes, x as MISSING_GATEWAY_CREDENTIALS_ERROR } from "./client-Pcxo3lGn.js";
+import { C as withLogContext, F as normalizeIdentityEmail, I as isRecord$3, L as toOptionalNumber, R as toOptionalString, a as extractGenAiUsageSummary, b as setTags, c as getLogContextAttributesForSpan, d as logException, f as logInfo, g as serializeGenAiAttribute, i as extractGenAiUsageAttributes, l as getTracePropagationHeaders, m as normalizeGenAiFinishReason, p as logWarn, s as getLogContextAttributes, u as logError, v as setSpanAttributes, w as withSpan, x as summarizeMessageText, y as setSpanStatus } from "./logging-BPBx6WF-.js";
 import { m as startInactiveSpan, n as captureMessage, v as withActiveSpan } from "./sentry-CgWZM_kV.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-ZYy05Y3q.js";
-import { h as normalizeSlackEmojiName, n as botConfig } from "./config-DMg679BW.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-hQmyZbOC.js";
+import { a as getChatConfig, h as normalizeSlackEmojiName, n as botConfig } from "./config-CYvEow1F.js";
 import { a as formatModelProfiles, c as profileConfig, i as formatModelProfile, l as TURN_REASONING_LEVELS, n as ModelProfileNotConfiguredError, o as modelIdForProfile, s as modelProfileSchema } from "./model-profile-BwU8mqwD.js";
-import { _ as parseSlackMessageTs, g as parseSlackUserId, h as parseSlackTeamId, i as credentialUserSubjectId, l as isUserActor, m as parseSlackChannelReferenceId, n as credentialContextSchema, p as parseSlackChannelId, t as credentialContextForActor } from "./context-Bplcgypl.js";
-import { A as tryWorkspaceRepoCheckoutPath, B as downloadPrivateSlackFile, C as invalidateReadySnapshot, D as SANDBOX_RUNTIME, E as setWorkspaceSnapshotBuild, Ft as saveObjectAnnotations, G as isDmChannel$1, Gt as getConversationMessageSearchStore, It as createPluginAnnotations, J as withSlackRetries, Jt as getSqlExecutor, K as normalizeSlackConversationId, Kt as getConversationStore, M as resolveChannelCapabilities, O as deleteWorkspaceSnapshotBuilders, Q as readActorIdentity, S as WorkspaceValidationError, T as setWorkspaceSnapshot, U as getSlackClient, V as getFilePermalink, W as isConversationScopedChannel, Wt as getConversationEventStore, _ as deleteWorkspace, at as STOP_WATCHING_TOOL_NAME, b as listWorkspaces, bt as createPluginLogger, c as getPluginTools, dt as findMatchingWatches, fn as parseDestination, ft as listWatches, g as createWorkspace, ht as getDashboardTaskLink, it as RESOURCE_WATCH_TOOL_SOURCE, j as workspaceRepoCheckoutPath, k as getWorkspaceSnapshotBuilder, l as getPluginUserPromptContributions, lt as createWatch, mt as getDashboardConversationLink, n as applyPluginFormatMarkdown, nn as addAgentTurnUsage, nt as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, on as hasAgentTurnUsage, ot as cancelSubscriptions, pt as JUNIOR_THREAD_STATE_TTL_MS, qt as getDb, r as createPluginHookRunner, s as getPluginSystemPromptContributions, st as cancelWatch, tt as getSlackToolContext, u as getPlugins, ut as deliverWatch, v as getWorkspace, w as loadSnapshotsForProfile, x as updateWorkspace, y as getWorkspaceByName, z as SlackActionError } from "./agent-hooks-CRuRcOg9.js";
+import { b as parseSlackMessageTs, d as parseStoredSlackActor, g as parseSlackUserId, h as parseSlackTeamId, i as credentialUserSubjectId, l as isUserActor, m as parseSlackChannelReferenceId, n as credentialContextSchema, p as parseSlackChannelId, t as credentialContextForActor } from "./context-0Et9iVSB.js";
+import { $t as getDb, A as tryWorkspaceRepoCheckoutPath, B as downloadPrivateSlackFile, C as invalidateReadySnapshot, D as SANDBOX_RUNTIME, E as setWorkspaceSnapshotBuild, G as isDmChannel$1, Ht as createPluginAnnotations, J as withSlackRetries, K as normalizeSlackConversationId, Lt as matchSlackAttachments, M as resolveChannelCapabilities, O as deleteWorkspaceSnapshotBuilders, Q as readActorIdentity, Qt as getConversationStore, S as WorkspaceValidationError, St as createPluginLogger, T as setWorkspaceSnapshot, U as getSlackClient, V as getFilePermalink, Vt as saveObjectAnnotations, W as isConversationScopedChannel, Xt as getConversationEventStore, Zt as getConversationMessageSearchStore, _ as deleteWorkspace, _n as parseDestination, _t as getDashboardTaskLink, at as STOP_WATCHING_TOOL_NAME, b as listWorkspaces, c as getPluginTools, dn as hasAgentTurnUsage, dt as deliverWatch, en as getSqlExecutor, ft as findMatchingWatches, g as createWorkspace, gt as getDashboardConversationLink, ht as JUNIOR_THREAD_STATE_TTL_MS, it as RESOURCE_WATCH_TOOL_SOURCE, j as workspaceRepoCheckoutPath, k as getWorkspaceSnapshotBuilder, l as getPluginUserPromptContributions, lt as createTimerWatch, n as applyPluginFormatMarkdown, nt as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, ot as cancelSubscriptions, pt as listWatches, r as createPluginHookRunner, rt as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, s as getPluginSystemPromptContributions, sn as addAgentTurnUsage, st as cancelWatch, tt as getSlackToolContext, u as getPlugins, ut as createWatch, v as getWorkspace, w as loadSnapshotsForProfile, x as updateWorkspace, y as getWorkspaceByName, yn as sameDestination$1, z as SlackActionError } from "./agent-hooks-bEwEJhlg.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { D as juniorIdentities, E as juniorConversations, a as juniorSchedulerRuns, d as AGENT_INVOCATION_MAILBOX_STATUSES, g as juniorConversationBriefs, k as juniorArtifacts, w as juniorAttachments, x as juniorConversationAnnotations } from "./executor-B9R4cHte.js";
-import { F as briefLinkSchema, I as briefOutcomeStatusSchema, J as instructionActors, L as conversationBriefSchema, X as sameActorIdentity, Y as instructionProvenanceFor, j as messageCardRefSchema, q as contextProvenance, z as KNOWN_CONVERSATION_EVENT_TYPES } from "./conversation-Bygi39Xj.js";
+import { D as juniorIdentities, E as juniorConversations, a as juniorSchedulerRuns, c as juniorStats, d as AGENT_INVOCATION_MAILBOX_STATUSES, g as juniorConversationBriefs, k as juniorArtifacts, l as juniorEventAutomations, o as juniorSchedulerTasks, w as juniorAttachments, x as juniorConversationAnnotations } from "./executor-BXMlFrV6.js";
+import { $ as contextProvenance, B as briefLinkSchema, H as conversationBriefSchema, R as isVisionImageMediaType, V as briefOutcomeStatusSchema, W as KNOWN_CONVERSATION_EVENT_TYPES, et as instructionActors, j as messageCardRefSchema, nt as sameActorIdentity, tt as instructionProvenanceFor } from "./conversation-BnhOMfEB.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-7a9YqLhE.js";
-import { a as resolveAuthTokenPlaceholder, c as fetchWithBoundedOAuthErrorBodies, d as CredentialUnavailableError, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, o as resolvePluginCommandEnv, s as OAuthProviderError } from "./registry-C8I4IejN.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-pv4grNNb.js";
-import { a as parseSkillInvocation, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-DUcDEgDI.js";
-import { C as isToolResultError, D as stripRuntimeTurnContext, E as retainRuntimeTurnContext, F as loadTurnRoute, G as recordToolExecutionStarted, H as recordGuardianActionReviewed, I as openConversationProjection, K as recordTurnRoute, L as recordAgentsInstructionsUpdated, M as loadConnectedMcpProviders, N as loadConversationProjection, O as trimTrailingAssistantMessages, R as recordAttachmentsDelivered, S as isContinuablePiBoundary, T as normalizeToolNameFromResult, U as recordMcpProviderConnected, V as recordAuthorizationRequested, _ as getTerminalAssistantMessages, d as TurnSliceLimitExceededError, dt as getAgentContextCompactionTriggerTokens, f as assertTurnToolCallLimit, ft as getAgentContextInputLimitTokens, g as getPiMessageRole, h as extractAssistantText, i as abandonTurnRecord, k as TURN_CONTEXT_TAG, m as isTurnExecutionLimitExceededError, mt as piMessageFromHistoryItem, n as loadTurnCheckpoint, pt as historyItemFromPiMessage, r as saveTurnCheckpoint, t as continuableMessages, ut as estimateTextTokens, v as getUserMessageInstructionText, w as isToolResultMessage, x as isAssistantMessage, y as hasRuntimeTurnContext } from "./checkpoint-6fkAdB3g.js";
-import { n as generateShortTitle, r as resolveTaskTitle, t as fallbackShortTitle } from "./short-title-3wYH3ipl.js";
-import { A as SANDBOX_DATA_ROOT, D as fenceLock, E as acquireActiveLock, F as sandboxSkillFile, I as sandboxSkillPathResolution, M as SANDBOX_SKILLS_ROOT, N as SANDBOX_WORKSPACE_ROOT, O as withLock, P as sandboxSkillDir, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, j as SANDBOX_REPOS_ROOT, k as sleep$1, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-CV97YuiL.js";
-import { $ as workspaceSnapshotFinishedEvent, B as createEventAutomation, C as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as eventAutomationMatchesDestination, E as eventAutomationListToolResultSchema, F as effectiveTaskOutcomes, Gt as makeStructuredToolOutput, I as moveTaskOutcomes, Jt as ToolInputError, L as resolveTaskOutcomes, M as requireEventAutomationSlackContext, N as requireSupportedEventAutomationTrigger, O as eventAutomationToolResult, P as writableEventAutomation, Q as WORKSPACE_SNAPSHOT_READY_EVENT, R as taskOutcomeInputSchema, T as compactEventAutomation, Ut as injectContinuationToolName, V as deleteEventAutomation, W as getEventAutomation, Wt as juniorToolOutputSchema, X as getEventCatalog, Y as saveEventAutomation, Z as WORKSPACE_SNAPSHOT_FAILED_EVENT, at as normalizeCatalogEventIdentifier, c as parseSlackThreadId, ct as registeredEventTypeSchema, et as workspaceSnapshotWatch, f as createScheduledAutomation, g as listScheduledAutomationsForTeam, i as readLiveAttachment, it as hasPluginEventCatalogEntries, j as registeredEventAutomationTriggerSchema, k as eventAutomationToolResultSchema, lt as registeredResourceTypeSchema, nt as eventNamespaceSchema, ot as pluginSupportsEvent, pt as appendAndEnqueueInboundMessage, q as listEventAutomationsForTeam, qt as buildDeterministicTurnId, rt as hasEventCatalogEntries, s as storeAttachments, st as registeredEventMatchSchema, t as incrementStat, tt as eventGuidance, ut as requireSupportedEventMatch, v as readScheduledAutomation, y as saveScheduledAutomation } from "./stats-DawHjcTw.js";
-import { a as NO_REPLY_MARKER, c as CooperativeTurnYieldError, i as sanitizeAssistantText, l as TurnInputCommitLostError, n as decideReply, o as isNoReplyMarker, p as isTurnInputCommitLostError, r as getAssistantReplyText, t as authorizationId } from "./oauth-authorization-BS4vPJmu.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-CL8zxsmm.js";
-import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-DXVAzYa3.js";
-import { t as getVercelConversationWorkQueue } from "./vercel-queue-DIkVcfK4.js";
-import { a as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-D2SiTrnt.js";
+import { a as resolveAuthTokenPlaceholder, c as fetchWithBoundedOAuthErrorBodies, d as CredentialUnavailableError, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, o as resolvePluginCommandEnv, s as OAuthProviderError } from "./registry-DM5aMhjm.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Cw9V2jpn.js";
+import { a as parseSkillInvocation, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-CAI5s___.js";
+import { $ as fallbackShortTitle, C as isToolResultError, D as stripRuntimeTurnContext, E as retainRuntimeTurnContext, F as loadTurnRoute, G as recordToolExecutionStarted, H as recordGuardianActionReviewed, I as openConversationProjection, K as recordTurnRoute, L as recordAgentsInstructionsUpdated, M as loadConnectedMcpProviders, N as loadConversationProjection, O as trimTrailingAssistantMessages, R as recordAttachmentsDelivered, S as isContinuablePiBoundary, T as normalizeToolNameFromResult, U as recordMcpProviderConnected, V as recordAuthorizationRequested, _ as getTerminalAssistantMessages, _t as piMessageFromHistoryItem, d as TurnSliceLimitExceededError, et as generateShortTitle, f as assertTurnToolCallLimit, g as getPiMessageRole, gt as historyItemFromPiMessage, h as extractAssistantText, ht as getAgentContextInputLimitTokens, k as TURN_CONTEXT_TAG, m as isTurnExecutionLimitExceededError, mt as getAgentContextCompactionTriggerTokens, n as loadTurnCheckpoint, pt as estimateTextTokens, r as saveTurnCheckpoint, t as continuableMessages, tt as resolveTaskTitle, v as getUserMessageInstructionText, w as isToolResultMessage, x as isAssistantMessage, y as hasRuntimeTurnContext } from "./checkpoint-oZYD3-Ar.js";
+import { A as SANDBOX_DATA_ROOT, C as getDefaultRedisStateAdapterFor, D as fenceLock, E as acquireActiveLock, F as sandboxSkillFile, I as sandboxSkillPathResolution, M as SANDBOX_SKILLS_ROOT, N as SANDBOX_WORKSPACE_ROOT, O as withLock, P as sandboxSkillDir, _ as workspaceSnapshotNotReadyUserMessage, a as isAbortError, b as buildNonInteractiveShellScript, c as isSandboxCommandStreamInterruptedError, d as isSnapshottingError, f as throwSandboxOperationError, g as isWorkspaceSnapshotNotReadyError, h as getWorkspaceSnapshotNotReadyError, i as ensureDockerDaemon, j as SANDBOX_REPOS_ROOT, k as sleep$2, l as isSandboxMissingError, m as WorkspaceSnapshotNotReadyError, n as hash, o as isAlreadyExistsError, p as wrapSandboxSetupError, r as isStale, s as isSandboxApiTransientError, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand, y as buildCommandScript } from "./profile-upzC-wN1.js";
+import { n as canReusePendingAuthLink, t as abandonReplacedPendingAuth } from "./pending-auth-CHUjr_6d.js";
+import { a as NO_REPLY_MARKER, c as CooperativeTurnYieldError, i as sanitizeAssistantText, l as TurnInputCommitLostError, n as decideReply, o as isNoReplyMarker, p as isTurnInputCommitLostError, r as getAssistantReplyText, t as authorizationId } from "./oauth-authorization-Cq1GaLIP.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-CZIQcPHy.js";
+import { a as createSandboxSession, c as postinstall, d as getSandboxResources, i as bindSandboxFileSystem, l as setSnapshotSpanAttributes, n as isMissingError, o as stopSession, r as resolve$1, s as dependencies } from "./resolve-sF6Lg7Ay.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-AI0_QAgc.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-BLvBjy_e.js";
 import { streamSimple } from "@earendil-works/pi-ai/compat";
 import { createGatewayProvider } from "@ai-sdk/gateway";
@@ -32,8 +30,8 @@ import { isDeepStrictEqual } from "node:util";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import { and, desc, eq, gt, gte, inArray, isNull, lt, ne, notExists, or, sql } from "drizzle-orm";
-import { EgressAuthRequired, EgressPolicyDenied, PluginToolInputError, actorSchema, destinationSchema, eventSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, pluginAuthorizationSchema, pluginCredentialHeaderTransformSchema, pluginCredentialResultSchema, pluginGrantSchema, pluginProviderAccountSchema, pluginStoredTokensSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
+import { and, asc, desc, eq, gt, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, notInArray, or, sql } from "drizzle-orm";
+import { EgressAuthRequired, EgressPolicyDenied, PluginToolInputError, actorSchema, actorUserIdSchema, destinationSchema, destinationVisibilitySchema, eventMatchSchema, eventMatches, eventSchema, eventTypeSchema, missingToolAnnotationKeys, normalizeEventIdentifier, ownedObjectAnnotationSchema, pluginAuthorizationSchema, pluginCredentialHeaderTransformSchema, pluginCredentialResultSchema, pluginGrantSchema, pluginProviderAccountSchema, pluginStoredTokensSchema, slackDestinationSchema, sourceSchema, stableEventMatchKey, taskOutcomeSchema, watchResultSchema } from "@sentry/junior-plugin-api";
 import { alias } from "drizzle-orm/pg-core";
 import { Agent, estimateContextTokens } from "@earendil-works/pi-agent-core";
 import fs from "node:fs/promises";
@@ -219,6 +217,15 @@ var SkillSandbox = class {
 	}
 };
 //#endregion
+//#region src/chat/tools/execution/tool-input-error.ts
+/** Thrown when a tool fails due to invalid model/user input, not a system error. */
+var ToolInputError = class extends Error {
+	constructor(message, options) {
+		super(message, options);
+		this.name = "ToolInputError";
+	}
+};
+//#endregion
 //#region src/chat/tools/sandbox/file-utils.ts
 const MAX_TEXT_CHARS = 6e4;
 const RIPGREP_EXCLUDED_GLOBS = ["!**/.git/**", "!**/node_modules/**"];
@@ -255,8 +262,7 @@ function isMissingPathError(error) {
 }
 /** Reject an expected missing search/list path through the tool-error channel. */
 function missingPathSearchResult(params) {
-	const textPath = params.displayPath ?? params.missingPath ?? params.path;
-	throw new ToolInputError(`Path not found: ${textPath}`);
+	throw new ToolInputError(`Path not found: ${params.displayPath ?? params.missingPath ?? params.path}`);
 }
 function escapeRegExp(value) {
 	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -839,6 +845,49 @@ function getDiscardedRetryUsage(messages, retryMessages) {
 	return hasAgentTurnUsage(usage) ? usage : void 0;
 }
 //#endregion
+//#region src/chat/tool-support/structured-result.ts
+const juniorToolContinuationSchema = z.object({
+	arguments: z.record(z.string(), z.unknown()),
+	reason: z.string().min(1).optional()
+}).strict();
+const juniorToolBoundContinuationSchema = juniorToolContinuationSchema.extend({ tool_name: z.string().min(1) });
+/** Shared optional fields for canonical Junior tool outputs. */
+const juniorToolOutputSchema = z.object({
+	target: z.string().min(1).optional(),
+	truncated: z.boolean().optional(),
+	/** True when this attempt did not finish before its time budget. */
+	timed_out: z.boolean().optional(),
+	continuation: juniorToolContinuationSchema.optional()
+}).passthrough();
+function sortJsonValue(value) {
+	if (Array.isArray(value)) return value.map(sortJsonValue);
+	if (!value || typeof value !== "object") return value;
+	return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== void 0).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => [key, sortJsonValue(item)]));
+}
+function isRecord$2(value) {
+	return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+/** Bind continuation metadata to the exposed runtime tool name. */
+function injectContinuationToolName(details, toolName) {
+	if (!isRecord$2(details) || !isRecord$2(details.continuation)) return details;
+	return {
+		...details,
+		continuation: juniorToolBoundContinuationSchema.parse({
+			...details.continuation,
+			tool_name: toolName
+		})
+	};
+}
+function makeStructuredToolOutput(details, options = {}) {
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify(sortJsonValue(details))
+		}, ...options.content ?? []],
+		details
+	};
+}
+//#endregion
 //#region src/chat/tool-support/timed-out-tool-result.ts
 /**
 * Project a host-preempted tool attempt onto the normal tool-result shape.
@@ -1796,19 +1845,6 @@ function buildTurnContextPrompt(params) {
 	].filter((section) => Boolean(section)).join("\n\n");
 }
 //#endregion
-//#region src/chat/attachments/media.ts
-const VISION_IMAGE_MEDIA_TYPES = /* @__PURE__ */ new Set([
-	"image/gif",
-	"image/jpeg",
-	"image/png",
-	"image/webp"
-]);
-/** Report whether a media type is a raster image accepted by vision models. */
-function isVisionImageMediaType(mediaType) {
-	const normalized = mediaType.split(";", 1)[0]?.trim().toLowerCase();
-	return normalized ? VISION_IMAGE_MEDIA_TYPES.has(normalized) : false;
-}
-//#endregion
 //#region src/chat/agent/prompt.ts
 /**
 * Per-run prompt assembly.
@@ -1941,6 +1977,14 @@ function buildUserTurnInput(args) {
 			});
 			continue;
 		}
+		if (attachment.attachmentId) userContentParts.push({
+			type: "text",
+			text: `Stored attachment: ${JSON.stringify({
+				attachment_id: attachment.attachmentId,
+				filename: attachment.filename,
+				media_type: attachment.mediaType
+			})}. Use loadAttachment to access the original file.`
+		});
 		if (isVisionImageMediaType(attachment.mediaType)) {
 			if (!attachment.data) throw new Error("Image attachment is missing image data");
 			userContentParts.push({
@@ -2208,7 +2252,7 @@ var StateAdapterTokenStore = class {
 				await this.state.releaseLock(lock);
 			}
 			if (Date.now() >= deadline) throw new Error(`Could not acquire OAuth token refresh lock`);
-			await sleep$1(REFRESH_LOCK_RETRY_MS);
+			await sleep$2(REFRESH_LOCK_RETRY_MS);
 		}
 	}
 };
@@ -2641,7 +2685,8 @@ const payload = z.strictObject({
 		display_type: z.string().optional(),
 		product_name: z.string().optional()
 	}),
-	custom_fields: z.array(customField).optional()
+	custom_fields: z.array(customField).optional(),
+	display_order: z.array(z.string()).optional()
 });
 /** Limit IDs to Junior's safe subset; Slack silently rejects JSON punctuation. */
 const slackExternalRefIdSchema = z.string().min(1).regex(/^[A-Za-z0-9_-]+$/, "Unsupported Slack external reference ID");
@@ -2800,11 +2845,11 @@ async function addReactionToMessage(input) {
 	const emoji = normalizeSlackEmojiName(input.emoji);
 	if (!emoji) throw new Error("Slack reaction requires a valid emoji alias name");
 	try {
-		await withSlackRetries(() => getSlackClient().reactions.add({
+		await withSlackRetries(() => getSlackClient(input.timeoutMs === void 0 ? void 0 : { timeoutMs: input.timeoutMs }).reactions.add({
 			channel: channelId,
 			timestamp,
 			name: emoji
-		}), 3, {
+		}), input.timeoutMs === void 0 ? 3 : 1, {
 			action: "reactions.add",
 			idempotent: true,
 			spanAttributes: {
@@ -3077,7 +3122,7 @@ function optionalString(value) {
 }
 /** Parse OAuth callback state that was persisted before a provider redirect. */
 function parseOAuthStatePayload(value) {
-	if (!isRecord$2(value)) return;
+	if (!isRecord$3(value)) return;
 	if (typeof value.userId !== "string" || typeof value.provider !== "string") return;
 	const actor = value.actor === void 0 ? void 0 : actorSchema.safeParse(value.actor);
 	if (value.actor !== void 0 && (!actor || !actor.success)) return;
@@ -3699,12 +3744,12 @@ const automatedTurnLimitStateSchema = z.object({
 	paused: z.boolean(),
 	updatedAtMs: z.number().finite().nonnegative()
 }).strict();
-function sleep(ms) {
+function sleep$1(ms) {
 	return new Promise((resolve) => {
 		setTimeout(resolve, ms).unref?.();
 	});
 }
-function conversationKey(conversationId) {
+function conversationKey$1(conversationId) {
 	return `${AUTOMATED_TURN_LIMIT_PREFIX}:conversation:${conversationId}`;
 }
 function lockKey(key) {
@@ -3719,7 +3764,7 @@ async function acquireConversationLock(state, key, waitDeadlineMs = Date.now() +
 		const lock = await state.acquireLock(lockKey(key), AUTOMATED_TURN_LIMIT_LOCK_TTL_MS);
 		if (lock) return lock;
 		if (Date.now() >= waitDeadlineMs) throw new Error(`Could not acquire automated turn limit lock for ${key}`);
-		await sleep(AUTOMATED_TURN_LIMIT_LOCK_RETRY_MS);
+		await sleep$1(AUTOMATED_TURN_LIMIT_LOCK_RETRY_MS);
 	}
 }
 async function withConversationLock(state, key, callback) {
@@ -3756,7 +3801,7 @@ async function admitAutomatedTurn(args) {
 	const state = args.state ?? getStateAdapter();
 	await state.connect();
 	const nowMs = args.nowMs ?? Date.now();
-	const key = conversationKey(args.conversationId);
+	const key = conversationKey$1(args.conversationId);
 	return await withConversationLock(state, key, async () => {
 		const current = parseState(await state.get(key)) ?? emptyState(nowMs);
 		if (current.paused || current.consecutiveAutomatedTurns >= args.maxTurns) {
@@ -3786,7 +3831,7 @@ async function countAutomatedTurn(args) {
 	const state = args.state ?? getStateAdapter();
 	await state.connect();
 	const nowMs = args.nowMs ?? Date.now();
-	const key = conversationKey(args.conversationId);
+	const key = conversationKey$1(args.conversationId);
 	return await withConversationLock(state, key, async () => {
 		const current = parseState(await state.get(key)) ?? emptyState(nowMs);
 		const consecutiveAutomatedTurns = current.consecutiveAutomatedTurns + 1;
@@ -3814,7 +3859,7 @@ async function clearAutomatedTurnLimitNoticeClaim(args) {
 	const state = args.state ?? getStateAdapter();
 	await state.connect();
 	const nowMs = args.nowMs ?? Date.now();
-	const key = conversationKey(args.conversationId);
+	const key = conversationKey$1(args.conversationId);
 	await withConversationLock(state, key, async () => {
 		const current = parseState(await state.get(key));
 		if (!current || current.noticePostedAtMs === void 0) return;
@@ -3829,7 +3874,7 @@ async function clearAutomatedTurnLimitNoticeClaim(args) {
 async function resetAutomatedTurnLimit(args) {
 	const state = args.state ?? getStateAdapter();
 	await state.connect();
-	const key = conversationKey(args.conversationId);
+	const key = conversationKey$1(args.conversationId);
 	await withConversationLock(state, key, async () => {
 		await state.delete(key);
 	});
@@ -3952,6 +3997,1577 @@ function renderTaskInput(args) {
 	return lines.join("\n");
 }
 //#endregion
+//#region src/chat/task-execution/state.ts
+/**
+* Expiring conversation mailbox and execution index store.
+*
+* The conversation record owns pending inbound work, execution status, and the
+* lease. `conversation:active` feeds heartbeat recovery and contains every
+* non-idle conversation until the lease/status path makes it idle.
+* `conversation:by-activity` supports legacy SQL import only; SQL owns durable
+* conversation metadata in configured runtime.
+*/
+const CONVERSATION_PREFIX = "junior:conversation:v2";
+const CONVERSATION_SCHEMA_VERSION = 2;
+const CONVERSATION_ACTIVITY_INDEX_MAX_LENGTH = 1e4;
+const CONVERSATION_INDEX_LOCK_TTL_MS = 1e4;
+const CONVERSATION_INDEX_LOCK_WAIT_MS = 2e3;
+const CONVERSATION_INDEX_LOCK_RETRY_MS = 25;
+const CONVERSATION_MUTATION_LOCK_TTL_MS = 1e4;
+const CONVERSATION_MUTATION_WAIT_MS = 1e4;
+const CONVERSATION_MUTATION_RETRY_MS = 25;
+var InvalidConversationRecordError = class extends Error {
+	constructor(conversationId) {
+		super(`Conversation record is invalid for ${conversationId}`);
+		this.name = "InvalidConversationRecordError";
+	}
+};
+/** Return whether an error means a stored conversation record failed validation. */
+function isInvalidConversationRecordError(error) {
+	return error instanceof InvalidConversationRecordError;
+}
+var ConversationMutationFencedError = class extends Error {
+	constructor(conversationId) {
+		super(`Conversation mutation lock was lost before write for ${conversationId}`);
+		this.name = "ConversationMutationFencedError";
+	}
+};
+const CONVERSATION_BY_ACTIVITY_INDEX_KEY = `${CONVERSATION_PREFIX}:by-activity`;
+const CONVERSATION_ACTIVE_INDEX_KEY = `${CONVERSATION_PREFIX}:active`;
+const CONVERSATION_WORK_LEASE_TTL_MS = 9e4;
+const CONVERSATION_WORK_CHECK_IN_INTERVAL_MS = 15e3;
+const CONVERSATION_WORK_STALE_ENQUEUE_MS = 6e4;
+const inboundMessageSourceSchema = z.enum([
+	"api",
+	"internal",
+	"local",
+	"plugin",
+	"event",
+	"scheduler",
+	"slack",
+	"web"
+]);
+const agentInputSchema = z.object({
+	attachments: z.array(z.unknown()).optional(),
+	authorId: z.string().min(1).optional(),
+	metadata: z.record(z.string(), z.unknown()).optional(),
+	text: z.string()
+}).strict().refine((input) => input.text.trim() || input.attachments?.length, { message: "agent input requires text or attachments" });
+/** Durable delivery modes for pending inbound mailbox work. */
+const inboundMessageDeliverySchema = z.enum(["defer", "interrupt"]);
+/** Redis mailbox shape kept for deployed workers that still require this field. */
+const storedInboundMessageSchema = z.object({
+	attemptCount: z.number().finite().optional(),
+	conversationId: z.string().refine((value) => value.trim().length > 0),
+	createdAtMs: z.number().finite(),
+	delivery: inboundMessageDeliverySchema,
+	destination: destinationSchema.optional(),
+	inboundMessageId: z.string().refine((value) => value.trim().length > 0),
+	injectedAtMs: z.number().finite().optional(),
+	input: agentInputSchema,
+	receivedAtMs: z.number().finite(),
+	source: inboundMessageSourceSchema
+}).strict().extend({ publishExternally: z.boolean() });
+function conversationKey(conversationId) {
+	return `${CONVERSATION_PREFIX}:${conversationId}`;
+}
+function conversationStopKey(conversationId) {
+	return `${CONVERSATION_PREFIX}:stop:${conversationId}`;
+}
+function indexLockKey(indexKey) {
+	return `${indexKey}:lock`;
+}
+function mutationLockKey(conversationId) {
+	return `${CONVERSATION_PREFIX}:mutation:${conversationId}`;
+}
+function now$1() {
+	return Date.now();
+}
+function compareMessages(left, right) {
+	return left.createdAtMs - right.createdAtMs || left.receivedAtMs - right.receivedAtMs || left.inboundMessageId.localeCompare(right.inboundMessageId);
+}
+function inputHasAttachments(input) {
+	return Array.isArray(input.attachments) && input.attachments.length > 0;
+}
+/**
+* Upgrade a still-pending payload when a duplicate source event carries file
+* attachments the stored copy lacks (Slack `app_mention`/`message` twins),
+* keeping the stored ordering timestamps and delivery attempts.
+*/
+function upgradedPendingMessage(stored, duplicate) {
+	const promotesInterrupt = stored.delivery === "defer" && duplicate.delivery === "interrupt";
+	const delivery = promotesInterrupt ? "interrupt" : stored.delivery;
+	const input = promotesInterrupt ? {
+		...duplicate.input,
+		...inputHasAttachments(duplicate.input) || !inputHasAttachments(stored.input) ? void 0 : { attachments: stored.input.attachments }
+	} : inputHasAttachments(duplicate.input) && !inputHasAttachments(stored.input) ? duplicate.input : stored.input;
+	if (input === stored.input && delivery === stored.delivery) return stored;
+	return {
+		...stored,
+		delivery,
+		input
+	};
+}
+function compareIndexDescending(left, right) {
+	return right.score - left.score || right.conversationId.localeCompare(left.conversationId);
+}
+function compareIndexAscending(left, right) {
+	return left.score - right.score || left.conversationId.localeCompare(right.conversationId);
+}
+function uniqueStrings(values) {
+	return [...new Set(values)];
+}
+function normalizeSource(value) {
+	const parsed = inboundMessageSourceSchema.safeParse(value);
+	return parsed.success ? parsed.data : void 0;
+}
+function normalizeExecutionStatus(value) {
+	if (value === "paused") return value;
+	if (value === "failed" || value === "idle" || value === "pending" || value === "running") return value;
+}
+function normalizeMessage(value) {
+	const parsed = storedInboundMessageSchema.safeParse(value);
+	if (!parsed.success) return;
+	const { publishExternally: _publishExternally, ...message } = parsed.data;
+	return message;
+}
+function storeMessage(message, publishExternally) {
+	return {
+		...message,
+		publishExternally
+	};
+}
+/** Whether this is the final attempt before an unacked message is dead-lettered. */
+function isFinalAttempt(message) {
+	return (message.attemptCount ?? 0) >= 4;
+}
+function normalizeActor(value) {
+	return parseStoredSlackActor(value);
+}
+function normalizeLease(value) {
+	if (!isRecord$3(value)) return;
+	const token = toOptionalString(value.token);
+	const acquiredAtMs = toOptionalNumber(value.acquiredAtMs);
+	const lastCheckInAtMs = toOptionalNumber(value.lastCheckInAtMs);
+	const expiresAtMs = toOptionalNumber(value.expiresAtMs);
+	if (!token || typeof acquiredAtMs !== "number" || typeof lastCheckInAtMs !== "number" || typeof expiresAtMs !== "number") return;
+	return {
+		token,
+		acquiredAtMs,
+		lastCheckInAtMs,
+		expiresAtMs
+	};
+}
+function normalizeStop(value) {
+	if (!isRecord$3(value)) return;
+	const inboundMessageIds = Array.isArray(value.inboundMessageIds) ? uniqueStrings(value.inboundMessageIds.filter((id) => typeof id === "string")) : [];
+	const runId = toOptionalString(value.runId);
+	return runId ? {
+		inboundMessageIds,
+		runId
+	} : void 0;
+}
+/** Decode execution state and repair idle records that still own work. */
+function normalizeExecution(conversationId, value) {
+	if (!isRecord$3(value)) return;
+	const status = normalizeExecutionStatus(value.status);
+	if (!status) return;
+	const pendingMessages = [];
+	if (Array.isArray(value.pendingMessages)) {
+		for (const rawMessage of value.pendingMessages) {
+			const message = normalizeMessage(rawMessage);
+			if (!message || message.conversationId !== conversationId) return;
+			if (message.injectedAtMs !== void 0) continue;
+			pendingMessages.push(message);
+		}
+		pendingMessages.sort(compareMessages);
+	}
+	const inboundMessageIds = Array.isArray(value.inboundMessageIds) ? uniqueStrings(value.inboundMessageIds.map((id) => typeof id === "string" ? id : void 0).filter((id) => Boolean(id))) : [];
+	const lease = normalizeLease(value.lease);
+	const runId = toOptionalString(value.runId);
+	return {
+		status: status === "idle" && lease ? "running" : status === "idle" && pendingMessages.length > 0 ? "pending" : status,
+		inboundMessageIds: uniqueStrings([...inboundMessageIds, ...pendingMessages.map((message) => message.inboundMessageId)]),
+		pendingCount: pendingMessages.length,
+		pendingMessages,
+		lease,
+		lastCheckpointAtMs: toOptionalNumber(value.lastCheckpointAtMs),
+		lastEnqueuedAtMs: toOptionalNumber(value.lastEnqueuedAtMs),
+		lastProgressAtMs: toOptionalNumber(value.lastProgressAtMs),
+		retryCount: toOptionalNumber(value.retryCount),
+		runId,
+		updatedAtMs: toOptionalNumber(value.updatedAtMs)
+	};
+}
+/** Decode current conversation records. */
+function normalizeConversation(conversationId, value) {
+	if (!isRecord$3(value) || value.schemaVersion !== CONVERSATION_SCHEMA_VERSION) return;
+	const storedConversationId = toOptionalString(value.conversationId);
+	const createdAtMs = toOptionalNumber(value.createdAtMs);
+	const lastActivityAtMs = toOptionalNumber(value.lastActivityAtMs);
+	const updatedAtMs = toOptionalNumber(value.updatedAtMs);
+	const execution = normalizeExecution(conversationId, value.execution);
+	const destination = value.destination === void 0 ? void 0 : parseDestination(value.destination);
+	if (storedConversationId !== conversationId || typeof createdAtMs !== "number" || typeof lastActivityAtMs !== "number" || typeof updatedAtMs !== "number" || !execution || value.destination !== void 0 && !destination) return;
+	if (execution.pendingMessages.length > 0 && execution.pendingMessages.some((message) => {
+		if (!message.destination) return false;
+		return !destination || !sameDestination$1(message.destination, destination);
+	})) return;
+	return {
+		schemaVersion: CONVERSATION_SCHEMA_VERSION,
+		conversationId,
+		createdAtMs,
+		lastActivityAtMs,
+		updatedAtMs,
+		execution,
+		...destination ? { destination } : void 0,
+		...toOptionalString(value.title) ? { title: toOptionalString(value.title) } : void 0,
+		...toOptionalString(value.channelName) ? { channelName: toOptionalString(value.channelName) } : void 0,
+		...normalizeActor(value.actor) ? { actor: normalizeActor(value.actor) } : void 0,
+		...normalizeSource(value.source) ? { source: normalizeSource(value.source) } : void 0
+	};
+}
+function emptyConversation(args) {
+	return {
+		schemaVersion: CONVERSATION_SCHEMA_VERSION,
+		conversationId: args.conversationId,
+		createdAtMs: args.nowMs,
+		lastActivityAtMs: args.nowMs,
+		updatedAtMs: args.nowMs,
+		...args.destination ? { destination: args.destination } : void 0,
+		...args.source ? { source: args.source } : void 0,
+		execution: {
+			status: "idle",
+			inboundMessageIds: [],
+			pendingCount: 0,
+			pendingMessages: [],
+			updatedAtMs: args.nowMs
+		}
+	};
+}
+function isLeaseActive(lease, nowMs) {
+	return Boolean(lease && lease.expiresAtMs > nowMs);
+}
+function pendingMessages(conversation) {
+	return [...conversation.execution.pendingMessages].sort(compareMessages);
+}
+function isRunnableStatus(status) {
+	return status !== "failed" && status !== "idle";
+}
+function hasRunnableWork(conversation) {
+	return isRunnableStatus(conversation.execution.status) || pendingMessages(conversation).length > 0;
+}
+function executionWithPendingMessages(execution, pending) {
+	const pendingMessages = [...pending].sort(compareMessages);
+	const status = execution.status === "idle" && execution.lease ? "running" : execution.status === "idle" && pendingMessages.length > 0 ? "pending" : execution.status;
+	return {
+		...execution,
+		status,
+		inboundMessageIds: uniqueStrings([...execution.inboundMessageIds, ...pendingMessages.map((message) => message.inboundMessageId)]),
+		pendingMessages,
+		pendingCount: pendingMessages.length
+	};
+}
+function withExecutionUpdate(conversation, execution, nowMs) {
+	return {
+		...conversation,
+		updatedAtMs: nowMs,
+		execution: {
+			...executionWithPendingMessages(execution, execution.pendingMessages),
+			updatedAtMs: nowMs
+		}
+	};
+}
+async function getConnectedState(stateAdapter) {
+	const state = stateAdapter ?? getStateAdapter();
+	await state.connect();
+	return state;
+}
+async function sleep(ms) {
+	await new Promise((resolve) => {
+		setTimeout(resolve, ms).unref?.();
+	});
+}
+async function withIndexLock(state, indexKey, callback) {
+	const startedAtMs = now$1();
+	let lock;
+	while (true) {
+		lock = await state.acquireLock(indexLockKey(indexKey), CONVERSATION_INDEX_LOCK_TTL_MS);
+		if (lock) break;
+		if (now$1() - startedAtMs >= CONVERSATION_INDEX_LOCK_WAIT_MS) throw new Error(`Could not acquire conversation index lock for ${indexKey}`);
+		await sleep(CONVERSATION_INDEX_LOCK_RETRY_MS);
+	}
+	try {
+		return await callback();
+	} finally {
+		await state.releaseLock(lock);
+	}
+}
+function normalizeIndexEntry(value) {
+	if (!isRecord$3(value)) return;
+	const conversationId = toOptionalString(value.conversationId);
+	const score = toOptionalNumber(value.score);
+	if (!conversationId || typeof score !== "number") return;
+	return {
+		conversationId,
+		score
+	};
+}
+function uniqueIndexEntries(value) {
+	if (!Array.isArray(value)) return [];
+	const entries = /* @__PURE__ */ new Map();
+	for (const item of value) {
+		const entry = normalizeIndexEntry(item);
+		if (!entry) continue;
+		const existing = entries.get(entry.conversationId);
+		if (!existing || entry.score > existing.score) entries.set(entry.conversationId, entry);
+	}
+	return [...entries.values()];
+}
+function retainedIndexEntries(indexKey, entries) {
+	if (indexKey === CONVERSATION_BY_ACTIVITY_INDEX_KEY) return entries.sort(compareIndexDescending).slice(0, CONVERSATION_ACTIVITY_INDEX_MAX_LENGTH);
+	if (indexKey === CONVERSATION_ACTIVE_INDEX_KEY) return entries.sort(compareIndexAscending);
+	throw new Error(`Unknown conversation index ${indexKey}`);
+}
+function redisIndexKey(indexKey) {
+	const prefix = getChatConfig().state.keyPrefix;
+	return [...prefix ? [prefix] : [], indexKey].join(":");
+}
+function parseRedisIndexEntries(values) {
+	if (!Array.isArray(values)) return [];
+	const entries = [];
+	for (let index = 0; index < values.length; index += 2) {
+		const conversationId = toOptionalString(values[index]);
+		const score = typeof values[index + 1] === "number" ? values[index + 1] : Number(values[index + 1]);
+		if (!conversationId || !Number.isFinite(score)) continue;
+		entries.push({
+			conversationId,
+			score
+		});
+	}
+	return entries;
+}
+function redisConversationIndexStore(client) {
+	const upsertBoundedActivityScript = `
+    redis.call("ZADD", KEYS[1], ARGV[1], ARGV[2])
+    redis.call("PEXPIRE", KEYS[1], ARGV[3])
+    local extra = redis.call("ZCARD", KEYS[1]) - tonumber(ARGV[4])
+    if extra > 0 then
+      redis.call("ZREMRANGEBYRANK", KEYS[1], 0, extra - 1)
+    end
+    return 1
+  `;
+	return {
+		async list(args) {
+			const key = redisIndexKey(args.indexKey);
+			const limit = args.limit;
+			const offset = Math.max(0, args.offset ?? 0);
+			if (limit === 0) return [];
+			return parseRedisIndexEntries(args.scoreMax !== void 0 ? await client.sendCommand([
+				"ZRANGEBYSCORE",
+				key,
+				"-inf",
+				String(args.scoreMax),
+				"WITHSCORES",
+				...limit !== void 0 || offset > 0 ? [
+					"LIMIT",
+					String(offset),
+					String(limit ?? 1e9)
+				] : []
+			]) : await client.sendCommand([
+				args.order === "asc" ? "ZRANGE" : "ZREVRANGE",
+				key,
+				String(offset),
+				String(limit === void 0 ? -1 : offset + Math.max(0, limit - 1)),
+				"WITHSCORES"
+			]));
+		},
+		async remove(args) {
+			await client.sendCommand([
+				"ZREM",
+				redisIndexKey(args.indexKey),
+				args.conversationId
+			]);
+		},
+		async upsert(args) {
+			const key = redisIndexKey(args.indexKey);
+			if (args.indexKey === CONVERSATION_BY_ACTIVITY_INDEX_KEY) {
+				await client.sendCommand([
+					"EVAL",
+					upsertBoundedActivityScript,
+					"1",
+					key,
+					String(args.score),
+					args.conversationId,
+					String(JUNIOR_THREAD_STATE_TTL_MS),
+					String(CONVERSATION_ACTIVITY_INDEX_MAX_LENGTH)
+				]);
+				return;
+			}
+			if (args.indexKey === CONVERSATION_ACTIVE_INDEX_KEY) {
+				await client.sendCommand([
+					"ZADD",
+					key,
+					String(args.score),
+					args.conversationId
+				]);
+				await client.sendCommand([
+					"PEXPIRE",
+					key,
+					String(JUNIOR_THREAD_STATE_TTL_MS)
+				]);
+				return;
+			}
+			throw new Error(`Unknown conversation index ${args.indexKey}`);
+		}
+	};
+}
+function emulatedConversationIndexStore(state) {
+	const readIndex = async (indexKey) => uniqueIndexEntries(await state.get(indexKey));
+	const writeIndex = async (indexKey, entries) => {
+		await state.set(indexKey, entries, JUNIOR_THREAD_STATE_TTL_MS);
+	};
+	return {
+		async list(args) {
+			const entries = (await readIndex(args.indexKey)).filter((entry) => args.scoreMax === void 0 ? true : entry.score <= args.scoreMax).sort(args.order === "asc" ? compareIndexAscending : compareIndexDescending);
+			const offset = Math.max(0, args.offset ?? 0);
+			return entries.slice(offset, args.limit === void 0 ? entries.length : offset + args.limit);
+		},
+		async remove(args) {
+			await withIndexLock(state, args.indexKey, async () => {
+				const entries = await readIndex(args.indexKey);
+				const next = entries.filter((entry) => entry.conversationId !== args.conversationId);
+				if (next.length === entries.length) return;
+				await writeIndex(args.indexKey, next);
+			});
+		},
+		async upsert(args) {
+			await withIndexLock(state, args.indexKey, async () => {
+				const withoutCurrent = (await readIndex(args.indexKey)).filter((entry) => entry.conversationId !== args.conversationId);
+				const next = retainedIndexEntries(args.indexKey, [...withoutCurrent, {
+					conversationId: args.conversationId,
+					score: args.score
+				}]);
+				await writeIndex(args.indexKey, next);
+			});
+		}
+	};
+}
+async function getConversationIndexStore(state) {
+	const redisStateAdapter = await getDefaultRedisStateAdapterFor(state);
+	if (redisStateAdapter) return redisConversationIndexStore(redisStateAdapter.getClient());
+	return emulatedConversationIndexStore(state);
+}
+async function upsertIndexEntry(args) {
+	await (await getConversationIndexStore(args.state)).upsert({
+		conversationId: args.conversationId,
+		indexKey: args.indexKey,
+		score: args.score
+	});
+}
+async function removeIndexEntry(args) {
+	await (await getConversationIndexStore(args.state)).remove({
+		conversationId: args.conversationId,
+		indexKey: args.indexKey
+	});
+}
+async function acquireMutationLock(state, conversationId) {
+	const startedAtMs = now$1();
+	while (true) {
+		const lock = await state.acquireLock(mutationLockKey(conversationId), CONVERSATION_MUTATION_LOCK_TTL_MS);
+		if (lock) return lock;
+		if (now$1() - startedAtMs >= CONVERSATION_MUTATION_WAIT_MS) throw new Error(`Could not acquire conversation mutation lock for ${conversationId}`);
+		await sleep(CONVERSATION_MUTATION_RETRY_MS);
+	}
+}
+async function withConversationMutation(args, callback) {
+	const state = await getConnectedState(args.state);
+	const lock = await acquireMutationLock(state, args.conversationId);
+	try {
+		return await callback(state, lock);
+	} finally {
+		await state.releaseLock(lock);
+	}
+}
+async function readConversation(state, conversationId) {
+	const raw = await state.get(conversationKey(conversationId));
+	if (raw == null) return;
+	const conversation = normalizeConversation(conversationId, raw);
+	if (!conversation) throw new InvalidConversationRecordError(conversationId);
+	return conversation;
+}
+/**
+* Persist a conversation and refresh its reporting and active-recovery indexes.
+*
+* Conversation writes are lock-serialized blind whole-record writes, so the
+* mutation lock is re-validated (and extended) immediately before the write:
+* a stalled mutator that lost its lock must fail loudly instead of clobbering
+* a newer record with a stale copy.
+*/
+async function writeConversation(state, lock, conversation) {
+	const execution = executionWithPendingMessages(conversation.execution, conversation.execution.pendingMessages);
+	const next = {
+		...conversation,
+		execution
+	};
+	await fenceConversationMutation(state, lock, next.conversationId);
+	const hasSlackDestination = next.destination?.platform === "slack";
+	const stored = {
+		...next,
+		execution: {
+			...next.execution,
+			pendingMessages: next.execution.pendingMessages.map((message) => storeMessage(message, hasSlackDestination && (message.source === "slack" || message.source === "event" || message.source === "plugin" || message.source === "scheduler")))
+		}
+	};
+	await state.set(conversationKey(next.conversationId), stored, JUNIOR_THREAD_STATE_TTL_MS);
+	await upsertIndexEntry({
+		state,
+		indexKey: CONVERSATION_BY_ACTIVITY_INDEX_KEY,
+		conversationId: next.conversationId,
+		score: next.lastActivityAtMs
+	});
+	if (!hasRunnableWork(next)) {
+		await removeIndexEntry({
+			state,
+			indexKey: CONVERSATION_ACTIVE_INDEX_KEY,
+			conversationId: next.conversationId
+		});
+		return;
+	}
+	await upsertIndexEntry({
+		state,
+		indexKey: CONVERSATION_ACTIVE_INDEX_KEY,
+		conversationId: next.conversationId,
+		score: next.execution.updatedAtMs ?? next.updatedAtMs
+	});
+}
+function assertSameOptionalConversationDestination(args) {
+	if (!args.next || !args.current) return;
+	if (sameDestination$1(args.current, args.next)) return;
+	throw new Error(`Conversation destination changed for ${args.conversationId}`);
+}
+function conversationWorkState(conversation) {
+	const lease = conversation.execution.lease;
+	return {
+		...conversation,
+		lastEnqueuedAtMs: conversation.execution.lastEnqueuedAtMs,
+		...lease ? { lease: {
+			acquiredAtMs: lease.acquiredAtMs,
+			lastCheckInAtMs: lease.lastCheckInAtMs,
+			leaseExpiresAtMs: lease.expiresAtMs,
+			leaseToken: lease.token
+		} } : void 0,
+		messages: pendingMessages(conversation),
+		needsRun: hasRunnableWork(conversation)
+	};
+}
+/** Return a persisted conversation record, if one exists. */
+async function getConversation$1(args) {
+	return await readConversation(await getConnectedState(args.state), args.conversationId);
+}
+/** Return a persisted conversation work record, if one exists. */
+async function getConversationWorkState$1(args) {
+	const conversation = await getConversation$1(args);
+	return conversation ? conversationWorkState(conversation) : void 0;
+}
+/** Return whether a conversation has pending or resumable execution work. */
+function hasRunnableConversationWork$1(conversation) {
+	return hasRunnableWork(conversation);
+}
+async function appendInboundMessageWithAdmission(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation({
+		conversationId: args.message.conversationId,
+		state: args.state
+	}, async (state, lock) => {
+		const existing = await readConversation(state, args.message.conversationId);
+		const current = existing ?? emptyConversation({
+			conversationId: args.message.conversationId,
+			destination: args.message.destination,
+			nowMs,
+			source: args.message.source
+		});
+		if (existing) assertSameOptionalConversationDestination({
+			conversationId: args.message.conversationId,
+			current: current.destination,
+			next: args.message.destination
+		});
+		const existingPending = current.execution.pendingMessages.some((message) => message.inboundMessageId === args.message.inboundMessageId);
+		if (current.execution.inboundMessageIds.includes(args.message.inboundMessageId)) {
+			if (!existingPending) return { status: "duplicate" };
+			const nextStatus = current.execution.status === "idle" ? "pending" : current.execution.status;
+			await writeConversation(state, lock, withExecutionUpdate(current, {
+				...current.execution,
+				status: nextStatus,
+				pendingMessages: current.execution.pendingMessages.map((message) => message.inboundMessageId === args.message.inboundMessageId ? upgradedPendingMessage(message, args.message) : message)
+			}, nowMs));
+			return { status: "duplicate" };
+		}
+		if (args.exclusive && hasRunnableWork(current)) return { status: "active" };
+		let status;
+		if (current.execution.lease) status = current.execution.status === "running" ? "running" : "paused";
+		else if (current.execution.status === "paused" && args.message.delivery === "defer") status = "paused";
+		else status = "pending";
+		await writeConversation(state, lock, withExecutionUpdate({
+			...current,
+			destination: current.destination ?? args.message.destination,
+			source: current.source ?? args.message.source,
+			lastActivityAtMs: nowMs
+		}, {
+			...current.execution,
+			status,
+			inboundMessageIds: [...current.execution.inboundMessageIds, args.message.inboundMessageId],
+			pendingMessages: [...current.execution.pendingMessages, args.message].sort(compareMessages)
+		}, nowMs));
+		return { status: "appended" };
+	});
+}
+/** Persist one inbound message idempotently in its conversation mailbox. */
+async function appendInboundMessage(args) {
+	const result = await appendInboundMessageWithAdmission({
+		...args,
+		exclusive: false
+	});
+	if (result.status === "active") throw new Error("Non-exclusive mailbox append returned active");
+	return result;
+}
+/** Append only when the Conversation has no other runnable work. */
+async function appendExclusiveInboundMessage(args) {
+	return await appendInboundMessageWithAdmission({
+		...args,
+		exclusive: true
+	});
+}
+/** Mark a conversation runnable when there is no new mailbox message. */
+async function requestConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const existing = await readConversation(state, args.conversationId);
+		if (existing) assertSameOptionalConversationDestination({
+			conversationId: args.conversationId,
+			current: existing.destination,
+			next: args.destination
+		});
+		const current = existing ?? emptyConversation({
+			conversationId: args.conversationId,
+			destination: args.destination,
+			nowMs
+		});
+		const status = current.execution.lease ? "paused" : "pending";
+		await writeConversation(state, lock, withExecutionUpdate({
+			...current,
+			destination: current.destination ?? args.destination
+		}, {
+			...current.execution,
+			status
+		}, nowMs));
+		return { status: existing === void 0 ? "created" : "updated" };
+	});
+}
+/** Record that a wake-up nudge was accepted for the conversation. */
+async function markConversationWorkEnqueued$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current) return;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: nowMs
+		}, nowMs));
+	});
+}
+/** Clear a wake marker after its queue delivery finds no runnable work. */
+async function clearConsumedConversationWake$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || hasRunnableWork(current) || current.execution.lastEnqueuedAtMs === void 0) return false;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: void 0
+		}, nowMs));
+		return true;
+	});
+}
+/** Try to acquire the durable execution lease for one conversation. */
+async function startConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current) return { status: "no_work" };
+		if (isLeaseActive(current.execution.lease, nowMs)) return {
+			status: "active",
+			leaseExpiresAtMs: current.execution.lease.expiresAtMs
+		};
+		if (!hasRunnableWork(current)) return { status: "no_work" };
+		const lease = {
+			token: randomUUID(),
+			acquiredAtMs: nowMs,
+			lastCheckInAtMs: nowMs,
+			expiresAtMs: nowMs + CONVERSATION_WORK_LEASE_TTL_MS
+		};
+		const startsNewRun = current.execution.runId === void 0;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lease,
+			status: current.execution.status === "paused" ? "paused" : "running",
+			runId: current.execution.runId ?? randomUUID(),
+			lastEnqueuedAtMs: void 0,
+			retryCount: startsNewRun ? 0 : current.execution.retryCount
+		}, nowMs));
+		return {
+			status: "acquired",
+			leaseToken: lease.token,
+			leaseExpiresAtMs: lease.expiresAtMs
+		};
+	});
+}
+/** Extend the durable execution lease when the worker checks in. */
+async function checkInConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return false;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lease: {
+				...current.execution.lease,
+				lastCheckInAtMs: nowMs,
+				expiresAtMs: nowMs + CONVERSATION_WORK_LEASE_TTL_MS
+			}
+		}, nowMs));
+		return true;
+	});
+}
+/**
+* Resolve pending mailbox entries after the caller accepts responsibility.
+*
+* Returning ids acknowledges only that subset; returning nothing acknowledges
+* every pending entry passed to the handler.
+*/
+async function drainConversationMailbox$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	const pending = await withConversationMutation(args, async (state) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) throw new Error(`Conversation lease is not held for ${args.conversationId}`);
+		return pendingMessages(current);
+	});
+	if (pending.length === 0) return {
+		changed: false,
+		messages: []
+	};
+	const result = await args.handle(pending);
+	const pendingIds = new Set(pending.map((message) => message.inboundMessageId));
+	const acknowledgedIds = new Set(result ?? pending.map((message) => message.inboundMessageId));
+	for (const inboundMessageId of acknowledgedIds) if (!pendingIds.has(inboundMessageId)) throw new Error(`Conversation mailbox drain result is not pending for ${args.conversationId}`);
+	if (acknowledgedIds.size === 0) return {
+		changed: false,
+		messages: []
+	};
+	await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) throw new Error(`Conversation lease is not held for ${args.conversationId}`);
+		const pendingMessages = current.execution.pendingMessages.filter((message) => !acknowledgedIds.has(message.inboundMessageId));
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			status: current.execution.status === "pending" && pendingMessages.length === 0 ? "running" : current.execution.status,
+			lastProgressAtMs: nowMs,
+			retryCount: 0,
+			pendingMessages
+		}, nowMs));
+	});
+	return {
+		changed: true,
+		messages: pending.filter((message) => acknowledgedIds.has(message.inboundMessageId))
+	};
+}
+/** Acknowledge leased mailbox entries after the handler accepts responsibility. */
+async function ackMessages$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	const inboundMessageIds = new Set(args.inboundMessageIds);
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return false;
+		if (inboundMessageIds.size === 0) return true;
+		const pendingMessages = current.execution.pendingMessages.filter((message) => !inboundMessageIds.has(message.inboundMessageId));
+		if (pendingMessages.length === current.execution.pendingMessages.length) return true;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastProgressAtMs: nowMs,
+			retryCount: 0,
+			pendingMessages
+		}, nowMs));
+		return true;
+	});
+}
+function isHumanFacingMessage(message) {
+	return message.source === "web" || message.source === "slack";
+}
+async function readConversationStop(state, conversationId) {
+	return normalizeStop(await state.get(conversationStopKey(conversationId)));
+}
+async function fenceConversationMutation(state, lock, conversationId) {
+	if (!await state.extendLock(lock, CONVERSATION_MUTATION_LOCK_TTL_MS)) throw new ConversationMutationFencedError(conversationId);
+}
+/** Return whether one Conversation run has a durable stop request. */
+async function hasConversationStop(args) {
+	return (await readConversationStop(await getConnectedState(args.state), args.conversationId))?.runId === args.runId;
+}
+/** Persist a stop request for the current run without process affinity. */
+async function stopConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || !hasRunnableWork(current)) return { status: "no_work" };
+		const runId = current.execution.runId ?? randomUUID();
+		const pendingMessages = current.execution.pendingMessages.filter(isHumanFacingMessage);
+		const inboundMessageIds = pendingMessages.map((message) => message.inboundMessageId);
+		if (current.execution.runId === void 0) await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			runId
+		}, nowMs));
+		await fenceConversationMutation(state, lock, args.conversationId);
+		await state.set(conversationStopKey(args.conversationId), {
+			inboundMessageIds,
+			runId
+		}, JUNIOR_THREAD_STATE_TTL_MS);
+		return {
+			runId,
+			status: "requested",
+			pendingMessages
+		};
+	});
+}
+/** Clear one observed stop request and discard older human-facing mailbox work. */
+async function completeConversationStop$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return {
+			status: "lost_lease",
+			removedInboundMessageIds: []
+		};
+		const stop = await readConversationStop(state, args.conversationId);
+		if (!stop || stop.runId !== args.runId) return {
+			status: "none",
+			removedInboundMessageIds: []
+		};
+		const stoppedInboundMessageIds = new Set(stop.inboundMessageIds);
+		const removedInboundMessageIds = [];
+		const pendingMessages = current.execution.pendingMessages.filter((message) => {
+			const shouldStop = stoppedInboundMessageIds.has(message.inboundMessageId);
+			if (shouldStop) removedInboundMessageIds.push(message.inboundMessageId);
+			return !shouldStop;
+		});
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: pendingMessages.length === 0 ? void 0 : current.execution.lastEnqueuedAtMs,
+			pendingMessages
+		}, nowMs));
+		await fenceConversationMutation(state, lock, args.conversationId);
+		await state.delete(conversationStopKey(args.conversationId));
+		return {
+			status: "cleared",
+			removedInboundMessageIds
+		};
+	});
+}
+/** Cancel human-facing pending mailbox rows without requiring a worker lease. */
+async function cancelHumanFacingPendingMessages$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	const requestedIds = args.inboundMessageIds === void 0 ? void 0 : new Set(args.inboundMessageIds);
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current) return {
+			cancelledInboundMessageIds: [],
+			cancelledMessages: []
+		};
+		const cancelledInboundMessageIds = [];
+		const cancelledMessages = [];
+		const pendingMessages = [];
+		for (const message of current.execution.pendingMessages) {
+			const isRequested = requestedIds === void 0 || requestedIds.has(message.inboundMessageId);
+			const isInSnapshot = args.receivedBeforeMs === void 0 || message.receivedAtMs <= args.receivedBeforeMs;
+			if (isHumanFacingMessage(message) && isRequested && isInSnapshot) {
+				cancelledInboundMessageIds.push(message.inboundMessageId);
+				cancelledMessages.push(message);
+				continue;
+			}
+			pendingMessages.push(message);
+		}
+		if (cancelledInboundMessageIds.length === 0) return {
+			cancelledInboundMessageIds,
+			cancelledMessages
+		};
+		const becomesIdle = current.execution.status === "pending" && pendingMessages.length === 0;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: pendingMessages.length === 0 ? void 0 : current.execution.lastEnqueuedAtMs,
+			pendingMessages,
+			retryCount: becomesIdle ? 0 : current.execution.retryCount,
+			runId: becomesIdle ? void 0 : current.execution.runId,
+			status: becomesIdle ? "idle" : current.execution.status
+		}, nowMs));
+		return {
+			cancelledInboundMessageIds,
+			cancelledMessages
+		};
+	});
+}
+/** Mark the leased conversation as needing another queue-delivered slice. */
+async function requestAnotherSlice$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return false;
+		assertSameOptionalConversationDestination({
+			conversationId: args.conversationId,
+			current: current.destination,
+			next: args.destination
+		});
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			status: "paused"
+		}, nowMs));
+		return true;
+	});
+}
+/** Begin a requested turn resume under the worker's existing lease. */
+async function beginConversationResume$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken || current.execution.status !== "paused") return false;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			status: "running"
+		}, nowMs));
+		return true;
+	});
+}
+/** Release the durable execution lease without changing completion state. */
+async function releaseConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return false;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lease: void 0,
+			status: current.execution.status === "running" ? "pending" : current.execution.status
+		}, nowMs));
+		return true;
+	});
+}
+/** Count one failed execution attempt and stop the conversation when retries are exhausted. */
+async function recordConversationRetry$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return "lost_lease";
+		const count = (current.execution.retryCount ?? 0) + 1;
+		const stopped = count >= 5;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: void 0,
+			lease: stopped ? void 0 : current.execution.lease,
+			retryCount: count,
+			pendingMessages: stopped ? [] : current.execution.pendingMessages,
+			runId: stopped ? void 0 : current.execution.runId,
+			status: stopped ? "failed" : "paused"
+		}, nowMs));
+		return stopped ? "stopped" : "recorded";
+	});
+}
+/** Finish a leased conversation and report whether runnable work remains. */
+async function completeConversationWork$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return "lost_lease";
+		const hasPending = pendingMessages(current).length > 0;
+		const stopped = args.resumeIfStopped === true && (await readConversationStop(state, args.conversationId))?.runId === current.execution.runId;
+		const needsRun = current.execution.status === "paused" || stopped;
+		const runnable = needsRun || hasPending;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lease: void 0,
+			status: needsRun ? "paused" : hasPending ? "pending" : "idle",
+			lastProgressAtMs: args.madeProgress === false ? current.execution.lastProgressAtMs : nowMs,
+			retryCount: runnable || args.madeProgress === false ? current.execution.retryCount : 0,
+			runId: runnable ? current.execution.runId : void 0
+		}, nowMs));
+		return runnable ? "pending" : "completed";
+	});
+}
+/**
+* Record one failed execution attempt for pending messages, dead-lettering
+* the conversation when its retry budget or the legacy message delivery limit
+* is exhausted.
+*
+* Retries are counted only when the run made no durable progress: if any
+* attempted message left the mailbox, the remaining pending entries may be
+* deliberate deferrals and are left untouched. Consumed message ids stay in
+* `inboundMessageIds` so source retries remain duplicates.
+*/
+async function recordAttemptFailure$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return {
+			status: "lost_lease",
+			pendingCount: 0,
+			deadLetteredMessages: [],
+			retryCount: 0
+		};
+		const pendingIds = new Set(current.execution.pendingMessages.map((message) => message.inboundMessageId));
+		if (args.inboundMessageIds.length === 0 || args.inboundMessageIds.some((id) => !pendingIds.has(id))) return {
+			status: "skipped",
+			pendingCount: current.execution.pendingMessages.length,
+			deadLetteredMessages: [],
+			retryCount: current.execution.retryCount ?? 0
+		};
+		const retryCount = (current.execution.retryCount ?? 0) + 1;
+		const retriesExhausted = retryCount >= 5;
+		const attemptedIds = new Set(args.inboundMessageIds);
+		const deadLetteredMessages = [];
+		const pendingMessages = [];
+		for (const message of current.execution.pendingMessages) {
+			if (!attemptedIds.has(message.inboundMessageId)) {
+				if (retriesExhausted) deadLetteredMessages.push(message);
+				else pendingMessages.push(message);
+				continue;
+			}
+			const attempted = {
+				...message,
+				attemptCount: (message.attemptCount ?? 0) + 1
+			};
+			if (retriesExhausted || attempted.attemptCount >= 5) {
+				deadLetteredMessages.push(attempted);
+				continue;
+			}
+			pendingMessages.push(attempted);
+		}
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			retryCount,
+			pendingMessages
+		}, nowMs));
+		return {
+			status: "recorded",
+			pendingCount: pendingMessages.length,
+			deadLetteredMessages,
+			retryCount
+		};
+	});
+}
+/** Record a terminal failure completion for a leased conversation. */
+async function deadLetterAttempt$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current || current.execution.lease?.token !== args.leaseToken) return "lost_lease";
+		const runnable = pendingMessages(current).length > 0;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lease: void 0,
+			status: runnable ? "pending" : "failed",
+			runId: runnable ? current.execution.runId : void 0
+		}, nowMs));
+		return runnable ? "pending" : "failed";
+	});
+}
+/** Recover an expired lease, consuming the retry budget under the mutation lock. */
+async function clearExpiredConversationLease$1(args) {
+	const nowMs = args.nowMs ?? now$1();
+	return await withConversationMutation(args, async (state, lock) => {
+		const current = await readConversation(state, args.conversationId);
+		if (!current?.execution.lease || current.execution.lease.expiresAtMs > nowMs) return "not_expired";
+		const retryCount = (current.execution.retryCount ?? 0) + 1;
+		const stopped = retryCount >= 5;
+		await writeConversation(state, lock, withExecutionUpdate(current, {
+			...current.execution,
+			lastEnqueuedAtMs: void 0,
+			lease: void 0,
+			retryCount,
+			pendingMessages: stopped ? [] : current.execution.pendingMessages,
+			runId: stopped ? void 0 : current.execution.runId,
+			status: stopped ? "failed" : "paused"
+		}, nowMs));
+		return stopped ? "stopped" : "requeued";
+	});
+}
+/** Remove one conversation from the active index after it is missing or idle. */
+async function removeActiveConversation$1(args) {
+	await removeIndexEntry({
+		state: await getConnectedState(args.state),
+		indexKey: CONVERSATION_ACTIVE_INDEX_KEY,
+		conversationId: args.conversationId
+	});
+}
+/** List active conversation ids by oldest execution update first. */
+async function listActiveConversationIds$1(args = {}) {
+	return (await (await getConversationIndexStore(await getConnectedState(args.state))).list({
+		indexKey: CONVERSATION_ACTIVE_INDEX_KEY,
+		limit: args.limit,
+		order: "asc",
+		scoreMax: args.staleBeforeMs
+	})).map((entry) => entry.conversationId);
+}
+//#endregion
+//#region src/chat/task-execution/store.ts
+function metadataStore(options) {
+	return options.conversationStore ?? getConversationStore();
+}
+function duplicateInboundNudgeIdempotencyKey(message, nowMs) {
+	return `duplicate:${message.conversationId}:${message.inboundMessageId}:${nowMs}`;
+}
+function hasRecentEnqueueMarker(conversation, nowMs) {
+	const lastEnqueuedAtMs = conversation.execution.lastEnqueuedAtMs;
+	return typeof lastEnqueuedAtMs === "number" && lastEnqueuedAtMs + 6e4 > nowMs;
+}
+function now() {
+	return Date.now();
+}
+async function recordExecutionMetadata(args) {
+	const conversation = await getConversation$1({
+		conversationId: args.conversationId,
+		state: args.state
+	});
+	if (!conversation) return;
+	await metadataStore(args).recordExecution({
+		channelName: conversation.channelName,
+		conversationId: conversation.conversationId,
+		createdAtMs: conversation.createdAtMs,
+		destination: conversation.destination,
+		execution: {
+			lastCheckpointAtMs: conversation.execution.lastCheckpointAtMs,
+			lastEnqueuedAtMs: conversation.execution.lastEnqueuedAtMs,
+			runId: conversation.execution.runId,
+			status: conversation.execution.status,
+			updatedAtMs: conversation.execution.updatedAtMs
+		},
+		lastActivityAtMs: conversation.lastActivityAtMs,
+		metrics: null,
+		actor: conversation.actor,
+		source: conversation.source,
+		title: conversation.title,
+		updatedAtMs: conversation.updatedAtMs
+	});
+}
+/** Return a persisted conversation record, if one exists. */
+async function getConversation(args) {
+	return await getConversation$1(args);
+}
+/** Return a persisted conversation work record, if one exists. */
+async function getConversationWorkState(args) {
+	return await getConversationWorkState$1(args);
+}
+/** Count one failed conversation execution and persist its terminal retry state. */
+async function recordConversationRetry(args) {
+	const result = await recordConversationRetry$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Count mailbox messages that have not yet reached the conversation event log. */
+function countPendingConversationMessages(conversation) {
+	return conversation.execution.pendingMessages.length;
+}
+/** Return whether a conversation has pending or resumable execution work. */
+function hasRunnableConversationWork(conversation) {
+	return conversation.execution.status !== "idle" || countPendingConversationMessages(conversation) > 0;
+}
+/**
+* Ensure runnable conversation work has one accepted queue wake-up nudge.
+*
+* Ordinary wakes coalesce on a recent accepted marker. A caller can ignore the
+* marker without replacing an active lease. Replacement is only for consumed
+* or known-stale deliveries where another queue nudge must exist.
+*/
+async function ensureConversationWake(args) {
+	const nowMs = args.nowMs ?? now();
+	const conversation = await getConversation$1({
+		conversationId: args.conversationId,
+		state: args.state
+	});
+	if (!conversation || !hasRunnableConversationWork(conversation)) return { status: "no_work" };
+	if (args.replaceExistingWake !== true && conversation.execution.lease && conversation.execution.lease.expiresAtMs > nowMs) return { status: "lease_active" };
+	if (args.ignoreEnqueueMarker !== true && args.replaceExistingWake !== true && hasRecentEnqueueMarker(conversation, nowMs)) return { status: "already_enqueued" };
+	const queueResult = await args.queue.send({
+		schemaVersion: 2,
+		conversationId: args.conversationId
+	}, {
+		delayMs: args.delayMs,
+		idempotencyKey: args.idempotencyKey
+	});
+	await markConversationWorkEnqueued({
+		conversationId: args.conversationId,
+		conversationStore: args.conversationStore,
+		nowMs,
+		state: args.state
+	});
+	return {
+		status: "enqueued",
+		queueMessageId: queueResult?.messageId
+	};
+}
+async function enqueueAfterAppend(args) {
+	const nowMs = args.nowMs ?? now();
+	const appendResult = args.appendResult;
+	if (appendResult.status === "active") return appendResult;
+	let idempotencyKey = args.message.inboundMessageId;
+	if (appendResult.status === "duplicate") {
+		const conversation = await getConversation$1({
+			conversationId: args.message.conversationId,
+			state: args.state
+		});
+		if (!conversation) return appendResult;
+		if (hasRecentEnqueueMarker(conversation, nowMs)) {
+			await recordExecutionMetadata({
+				conversationId: args.message.conversationId,
+				conversationStore: args.conversationStore,
+				state: args.state
+			});
+			return appendResult;
+		}
+		if (!conversation.execution.pendingMessages.some((message) => message.inboundMessageId === args.message.inboundMessageId)) {
+			await recordExecutionMetadata({
+				conversationId: args.message.conversationId,
+				conversationStore: args.conversationStore,
+				state: args.state
+			});
+			return appendResult;
+		}
+		idempotencyKey = duplicateInboundNudgeIdempotencyKey(args.message, nowMs);
+	}
+	const wake = await ensureConversationWake({
+		conversationId: args.message.conversationId,
+		conversationStore: args.conversationStore,
+		delayMs: args.queueDelayMs,
+		idempotencyKey,
+		ignoreEnqueueMarker: args.message.source === "event" ? void 0 : true,
+		nowMs,
+		queue: args.queue,
+		replaceExistingWake: args.replaceExistingWake,
+		state: args.state
+	});
+	if (wake.status !== "enqueued") await recordExecutionMetadata({
+		conversationId: args.message.conversationId,
+		conversationStore: args.conversationStore,
+		state: args.state
+	});
+	return {
+		...appendResult,
+		...wake.status === "enqueued" ? { queueMessageId: wake.queueMessageId } : void 0
+	};
+}
+/** Persist inbound work and ensure a worker wake-up. */
+async function appendAndEnqueueInboundMessage(args) {
+	const nowMs = args.nowMs ?? now();
+	const result = await enqueueAfterAppend({
+		...args,
+		appendResult: await appendInboundMessage({
+			message: args.message,
+			nowMs,
+			state: args.state
+		}),
+		nowMs
+	});
+	if (result.status === "active") throw new Error("Non-exclusive mailbox enqueue returned active");
+	return result;
+}
+/** Persist exclusive inbound work and wake its worker when admitted. */
+async function appendAndEnqueueExclusiveInboundMessage(args) {
+	const nowMs = args.nowMs ?? now();
+	return await enqueueAfterAppend({
+		...args,
+		appendResult: await appendExclusiveInboundMessage({
+			message: args.message,
+			nowMs,
+			state: args.state
+		}),
+		nowMs
+	});
+}
+/** Persist a stop request for the current Conversation run. */
+async function stopConversationWork(args) {
+	const result = await stopConversationWork$1(args);
+	if (result.status === "requested") await recordExecutionMetadata(args);
+	return result;
+}
+/** Finish an observed stop request under the current worker lease. */
+async function completeConversationStop(args) {
+	const result = await completeConversationStop$1(args);
+	if (result.status === "cleared") await recordExecutionMetadata(args);
+	return result;
+}
+/** Clear an accepted wake marker after its delivery finds no runnable work. */
+async function clearConsumedConversationWake(args) {
+	const result = await clearConsumedConversationWake$1(args);
+	if (result) await recordExecutionMetadata(args);
+	return result;
+}
+/** Mark a conversation runnable when there is no new mailbox message. */
+async function requestConversationWork(args) {
+	const result = await requestConversationWork$1(args);
+	await recordExecutionMetadata({
+		conversationId: args.conversationId,
+		conversationStore: args.conversationStore,
+		state: args.state
+	});
+	return result;
+}
+/** Record that a wake-up nudge was accepted for the conversation. */
+async function markConversationWorkEnqueued(args) {
+	await markConversationWorkEnqueued$1(args);
+	await recordExecutionMetadata(args);
+}
+/** Try to acquire the durable execution lease for one conversation. */
+async function startConversationWork(args) {
+	const result = await startConversationWork$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Extend the durable execution lease when the worker checks in. */
+async function checkInConversationWork(args) {
+	const result = await checkInConversationWork$1(args);
+	if (result) await recordExecutionMetadata(args);
+	return result;
+}
+/** Drain pending mailbox entries after the caller accepts responsibility. */
+async function drainConversationMailbox(args) {
+	const result = await drainConversationMailbox$1(args);
+	if (result.changed) await recordExecutionMetadata(args);
+	return result.messages;
+}
+/** Acknowledge leased mailbox entries after the handler accepts responsibility. */
+async function ackMessages(args) {
+	const result = await ackMessages$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Cancel human-facing pending mailbox rows without requiring a worker lease. */
+async function cancelHumanFacingPendingMessages(args) {
+	const result = await cancelHumanFacingPendingMessages$1(args);
+	if (result.cancelledInboundMessageIds.length > 0) await recordExecutionMetadata(args);
+	return result;
+}
+/** Mark the leased conversation as needing another queue-delivered slice. */
+async function requestAnotherSlice(args) {
+	const result = await requestAnotherSlice$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Begin a requested turn resume without releasing the current lease. */
+async function beginConversationResume(args) {
+	const result = await beginConversationResume$1(args);
+	if (result) await recordExecutionMetadata(args);
+	return result;
+}
+/** Release the durable execution lease without changing completion state. */
+async function releaseConversationWork(args) {
+	const result = await releaseConversationWork$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Finish a leased conversation and report whether runnable work remains. */
+async function completeConversationWork(args) {
+	const result = await completeConversationWork$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Record one failed delivery attempt and dead-letter messages at their limit. */
+async function recordAttemptFailure(args) {
+	const result = await recordAttemptFailure$1(args);
+	if (result.status === "recorded") await recordExecutionMetadata(args);
+	return result;
+}
+/** Record a terminal failure completion for a leased conversation. */
+async function deadLetterAttempt(args) {
+	const result = await deadLetterAttempt$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Recover an expired lease and persist the resulting retry state. */
+async function clearExpiredConversationLease(args) {
+	const result = await clearExpiredConversationLease$1(args);
+	await recordExecutionMetadata(args);
+	return result;
+}
+/** Remove one conversation from the active index after it is missing or idle. */
+async function removeActiveConversation(args) {
+	return await removeActiveConversation$1(args);
+}
+/** List active conversation ids by oldest execution update first. */
+async function listActiveConversationIds(args = {}) {
+	return await listActiveConversationIds$1(args);
+}
+//#endregion
+//#region src/chat/events/catalog.ts
+/** Core-owned event namespace. Not a plugin publisher. */
+const CORE_EVENT_NAMESPACE = "junior";
+/** True when the catalog has any enabled registration. */
+function hasEventCatalogEntries(catalog) {
+	return Object.keys(catalog).length > 0;
+}
+/**
+* True when at least one plugin namespace is enabled.
+*
+* Core Workspace snapshot events stay in the catalog for search and temporary
+* watches. Durable event automations still require a plugin publisher.
+*/
+function hasPluginEventCatalogEntries(catalog) {
+	return Object.keys(pluginEventCatalog(catalog)).length > 0;
+}
+/**
+* Catalog entries that durable event automations may select.
+*
+* Core Workspace snapshot events only wake temporary watches. Snapshot finish
+* does not run event-automation ingest, so those namespaces stay out of create/update
+* schemas and trigger availability.
+*/
+function pluginEventCatalog(catalog) {
+	return Object.fromEntries(Object.entries(catalog).filter(([namespace]) => namespace !== CORE_EVENT_NAMESPACE));
+}
+function enumSchema(values, unavailableMessage) {
+	if (values.length === 0) return z.string().refine(() => false, unavailableMessage);
+	return z.enum(values);
+}
+/** Build the model-facing namespace enum from enabled event plugins. */
+function eventNamespaceSchema(catalog) {
+	return enumSchema(Object.keys(catalog).sort(), "No event namespaces are enabled.");
+}
+/** Build the model-facing event enum from enabled plugin registrations. */
+function registeredEventTypeSchema(catalog) {
+	return enumSchema([...new Set(Object.values(catalog).flatMap((registration) => registration.resourceTypes.flatMap((resourceType) => resourceType.supportedEvents)))].sort(), "No event types are enabled.");
+}
+/** Build the model-facing resource type enum from enabled plugin registrations. */
+function registeredResourceTypeSchema(catalog) {
+	return enumSchema([...new Set(Object.values(catalog).flatMap((registration) => registration.resourceTypes.map((resourceType) => resourceType.type)))].sort(), "No resource types are enabled.");
+}
+/** Return whether one enabled plugin declared an event type. */
+function pluginSupportsEvent(catalog, namespace, resourceType, eventType) {
+	return catalog[namespace]?.resourceTypes.find((candidate) => candidate.type === resourceType)?.supportedEvents.includes(eventType) ?? false;
+}
+/** Return app guidance for one registered resource type and event type. */
+function eventGuidance(catalog, namespace, resourceType, eventType) {
+	return catalog[namespace]?.resourceTypes.find((candidate) => candidate.type === resourceType)?.guidance?.[eventType];
+}
+/** Return declared match keys for one registered resource type. */
+function eventMatchFields(catalog, namespace, resourceType) {
+	return catalog[namespace]?.resourceTypes.find((candidate) => candidate.type === resourceType)?.matchFields;
+}
+/** Build the match object the tools accept for one resource type. */
+function registeredEventMatchSchema() {
+	return eventMatchSchema.optional().describe("Optional exact values from the resource type matchFields. A single value must equal the event data. A list means the event value may be any one entry. Omit a key to ignore it. Unmatched events are dropped with no agent turn.");
+}
+/** Reject match keys the resource type does not list. */
+function requireSupportedEventMatch(catalog, input) {
+	const match = input.match;
+	if (!match || Object.keys(match).length === 0) return void 0;
+	const fields = eventMatchFields(catalog, input.namespace, input.resourceType);
+	if (!fields || Object.keys(fields).length === 0) throw new ToolInputError(`Resource type "${input.namespace}:${input.resourceType}" does not support match.`);
+	const normalized = {};
+	for (const [key, value] of Object.entries(match)) {
+		const field = fields[key];
+		if (!field) throw new ToolInputError(`Resource type "${input.namespace}:${input.resourceType}" does not support match key "${key}".`);
+		if (Array.isArray(value)) {
+			if (field.kind === "boolean") throw new ToolInputError(`Match key "${key}" is boolean and cannot use a list.`);
+			for (const entry of value) {
+				if (typeof entry !== field.kind) throw new ToolInputError(`Match key "${key}" expects ${field.kind} values.`);
+				if (field.enum && typeof entry === "string" && !field.enum.includes(entry)) throw new ToolInputError(`Match key "${key}" does not allow value "${entry}".`);
+			}
+			normalized[key] = [...new Set(value)];
+			continue;
+		}
+		if (typeof value !== field.kind) throw new ToolInputError(`Match key "${key}" expects a ${field.kind} value.`);
+		if (field.enum && typeof value === "string" && !field.enum.includes(value)) throw new ToolInputError(`Match key "${key}" does not allow value "${value}".`);
+		normalized[key] = value;
+	}
+	return Object.keys(normalized).length > 0 ? normalized : void 0;
+}
+/** Normalize one selector with the convention declared by its plugin. */
+function normalizeCatalogEventIdentifier(catalog, namespace, identifier) {
+	return normalizeEventIdentifier(catalog[namespace], identifier);
+}
+//#endregion
+//#region src/chat/sandbox/snapshot/events.ts
+const WORKSPACE_SNAPSHOT_NAMESPACE = CORE_EVENT_NAMESPACE;
+const WORKSPACE_SNAPSHOT_RESOURCE_TYPE = "workspace_snapshot";
+const WORKSPACE_SNAPSHOT_READY_EVENT = "workspace_snapshot.ready";
+const WORKSPACE_SNAPSHOT_FAILED_EVENT = "workspace_snapshot.failed";
+/**
+* Core catalog entry for Workspace snapshot ready and failed events.
+*
+* Uses the same registration shape as plugins so search, guidance, and tool
+* schemas treat these events like any other resource type.
+*/
+function workspaceSnapshotEvents() {
+	return { resourceTypes: [{
+		type: WORKSPACE_SNAPSHOT_RESOURCE_TYPE,
+		supportedEvents: [WORKSPACE_SNAPSHOT_READY_EVENT, WORKSPACE_SNAPSHOT_FAILED_EVENT],
+		suggestedEvents: [],
+		guidance: {
+			[WORKSPACE_SNAPSHOT_READY_EVENT]: "Call switchWorkspace again with the same Workspace name. Do not create another watch when switchWorkspace already returned a subscription.",
+			[WORKSPACE_SNAPSHOT_FAILED_EVENT]: "Report the snapshot failure. Do not keep waiting for this Workspace unless the user asks to retry."
+		}
+	}] };
+}
+/** Describe the events that report when a snapshot build ends. */
+function workspaceSnapshotWatch(input) {
+	return {
+		identifier: input.workspaceId,
+		label: `Workspace ${input.workspaceName} snapshot`,
+		namespace: WORKSPACE_SNAPSHOT_NAMESPACE,
+		supportedEvents: [WORKSPACE_SNAPSHOT_READY_EVENT, WORKSPACE_SNAPSHOT_FAILED_EVENT],
+		suggestedEvents: [],
+		type: WORKSPACE_SNAPSHOT_RESOURCE_TYPE
+	};
+}
+/** Report that a Workspace snapshot build is ready or failed. */
+function workspaceSnapshotFinishedEvent(input) {
+	const occurredAtMs = input.occurredAtMs ?? Date.now();
+	const eventType = input.status === "ready" ? WORKSPACE_SNAPSHOT_READY_EVENT : WORKSPACE_SNAPSHOT_FAILED_EVENT;
+	const trustedSummary = input.status === "ready" ? "Workspace snapshot is ready." : "Workspace snapshot build failed.";
+	const event = {
+		eventKey: `${WORKSPACE_SNAPSHOT_NAMESPACE}:${input.workspaceId}:${input.resultId}:${input.status}`,
+		eventType,
+		identifier: input.workspaceId,
+		namespace: WORKSPACE_SNAPSHOT_NAMESPACE,
+		occurredAtMs,
+		terminal: true,
+		trustedSummary,
+		data: {
+			workspaceId: input.workspaceId,
+			status: input.status
+		}
+	};
+	if (input.status === "failed" && input.error) event.untrustedText = input.error;
+	return event;
+}
+//#endregion
+//#region src/chat/events/runtime-catalog.ts
+/**
+* Enabled event registrations for search, guidance, and tool schemas.
+*
+* Includes core Workspace snapshot events under the `junior` namespace, plus
+* every enabled plugin registration. Plugins may not use the `junior` namespace.
+*/
+function getEventCatalog() {
+	const catalog = { [CORE_EVENT_NAMESPACE]: { resourceTypes: [...workspaceSnapshotEvents().resourceTypes, {
+		type: "timer",
+		supportedEvents: ["timer.fired"],
+		suggestedEvents: []
+	}] } };
+	for (const plugin of getPlugins()) {
+		const registration = plugin.events;
+		if (!registration || registration.isEnabled?.() === false) continue;
+		if (plugin.manifest.name === "junior") throw new Error(`Plugin "${CORE_EVENT_NAMESPACE}" cannot register events; that namespace is reserved for core events`);
+		catalog[plugin.manifest.name] = registration;
+	}
+	return catalog;
+}
+//#endregion
 //#region src/chat/events/notification.ts
 const EVENT_WAIT_MS = 3e4;
 /**
@@ -4470,13 +6086,13 @@ async function resolveWorkspaceSnapshot(params) {
 			if (!isSandboxApiTransientError(error)) throw error;
 			advanced = true;
 			if (shouldStopForTimeLimit(current.shouldStop)) throw new WorkspaceSnapshotNotReadyError(workspace.name);
-			await sleep$1(TRANSIENT_API_RETRY_MS, params.signal);
+			await sleep$2(TRANSIENT_API_RETRY_MS, params.signal);
 			continue;
 		}
 		advanced = true;
 		if (snapshot) return snapshot;
 		if (shouldStopForTimeLimit(current.shouldStop)) throw new WorkspaceSnapshotNotReadyError(workspace.name);
-		await sleep$1(WAIT_POLL_MS, params.signal);
+		await sleep$2(WAIT_POLL_MS, params.signal);
 	}
 }
 //#endregion
@@ -4894,7 +6510,7 @@ function createSandboxRuntime(options) {
 				}));
 			} catch (error) {
 				if (!isSnapshottingError(error) || attempt === 2) throw error;
-				await sleep$1(SNAPSHOT_BOOT_RETRY_DELAY_MS, signal);
+				await sleep$2(SNAPSHOT_BOOT_RETRY_DELAY_MS, signal);
 			}
 		}
 		throw new Error(`Failed to boot sandbox from snapshot ${snapshotId}`);
@@ -8328,7 +9944,8 @@ const listedResourceWatchSchema = z.object({
 	events: z.array(z.string().min(1)).min(1),
 	match: z.record(z.string(), z.unknown()).optional(),
 	intent: z.string().min(1),
-	expiresAtMs: z.number().finite()
+	expiresAtMs: z.number().finite(),
+	firesAtMs: z.number().finite().optional()
 }).strict();
 const resultDataSchema$2 = z.object({ subscriptions: z.array(listedResourceWatchSchema) }).strict();
 const outputSchema$5 = juniorToolOutputSchema.merge(resultDataSchema$2);
@@ -8356,7 +9973,8 @@ function createListWatchesTool(context) {
 				events: subscription.events,
 				...subscription.match ? { match: subscription.match } : void 0,
 				intent: subscription.intent,
-				expiresAtMs: subscription.expiresAtMs
+				expiresAtMs: subscription.expiresAtMs,
+				firesAtMs: subscription.firesAtMs
 			})) };
 		}
 	});
@@ -8466,6 +10084,7 @@ function createStopWatchingResourcesTool(context) {
 					id
 				});
 				if (!stopped) throw new ToolInputError("Watch was not found in the current conversation.");
+				if (stopped.status === "completed") throw new ToolInputError("Watch already completed; delivered input cannot be recalled.");
 				stoppedIds = [stopped.id];
 			} else {
 				const subscriptions = await listWatches({ conversationId: context.conversationId });
@@ -8480,6 +10099,40 @@ function createStopWatchingResourcesTool(context) {
 	});
 }
 //#endregion
+//#region src/chat/tools/watch-timer.ts
+/** Create one heartbeat-backed Watch in the current Conversation. */
+function createWatchTimerTool(context) {
+	return zodTool({
+		annotations: {
+			destructiveHint: false,
+			idempotentHint: true,
+			openWorldHint: false,
+			readOnlyHint: false
+		},
+		description: "Wake this conversation once after a delay so you can check back later. Returns immediately. Timing is approximate. Use watchEvents instead when you can watch for the event.",
+		inputSchema: z.object({
+			afterMs: z.number().int().positive().max(RESOURCE_SUBSCRIPTION_MAX_TTL_MS - 864e5).describe("Delay in milliseconds, up to 29 days."),
+			intent: z.string().trim().min(1).max(1e3).describe("What to do when the timer fires.")
+		}).strict(),
+		outputSchema: z.object({
+			id: z.string(),
+			firesAtMs: z.number()
+		}).strict(),
+		async execute(input, options) {
+			if (!options.toolCallId) throw new Error("Timer creation requires a tool-call identity");
+			const watch = await createTimerWatch({
+				...input,
+				conversationId: context.conversationId,
+				toolCallId: options.toolCallId
+			});
+			return {
+				id: watch.id,
+				firesAtMs: watch.firesAtMs
+			};
+		}
+	});
+}
+//#endregion
 //#region src/chat/tools/watch-events.ts
 function inputSchema(catalog) {
 	return z.object({
@@ -8544,6 +10197,7 @@ function createWatchEventsTool(context, catalog) {
 		inputSchema: inputSchema(catalog),
 		outputSchema: outputSchema$2,
 		async execute(input) {
+			if (input.namespace === "junior" && input.resourceType === "timer") throw new ToolInputError("Use watchTimer to create a timer Watch.");
 			const events = cleanStrings(input.events);
 			for (const eventType of events) if (!pluginSupportsEvent(catalog, input.namespace, input.resourceType, eventType)) throw new ToolInputError(`Resource type "${input.namespace}:${input.resourceType}" does not support event "${eventType}".`);
 			const intent = input.intent.trim();
@@ -8583,17 +10237,445 @@ function createWatchEventsTool(context, catalog) {
 		}
 	});
 }
-//#endregion
-//#region src/chat/tools/events.ts
-/** Build the complete resource-watch tool set for this runtime context. */
-function createEventTools(context, catalog) {
+//#endregion
+//#region src/chat/tools/events.ts
+/** Build the complete resource-watch tool set for this runtime context. */
+function createEventTools(context, catalog) {
+	const enabled = hasEventCatalogEntries(catalog);
+	return {
+		watchTimer: createWatchTimerTool(context),
+		...enabled ? {
+			searchEventTypes: createSearchEventTypesTool(catalog),
+			watchEvents: createWatchEventsTool(context, catalog)
+		} : void 0,
+		listWatches: createListWatchesTool(context),
+		stopWatchingResources: createStopWatchingResourcesTool(context)
+	};
+}
+/** Validate the persisted Slack creator identity for an event automation. */
+const eventAutomationPrincipalSchema = z.object({
+	slackUserId: actorUserIdSchema,
+	fullName: z.string().optional(),
+	userName: z.string().optional()
+}).strict();
+/** Validate one persisted event-automation selector and its presentation metadata. */
+const eventAutomationTriggerSchema = z.object({
+	events: z.array(eventTypeSchema).min(1),
+	label: z.string().min(1),
+	match: eventMatchSchema.optional(),
+	namespace: z.string().min(1),
+	identifier: z.string().min(1).max(300),
+	resourceType: z.string().min(1)
+}).strict();
+/** Event automations target a Slack channel or DM, never a message thread. */
+const eventAutomationDestinationSchema = slackDestinationSchema.omit({ threadTs: true });
+const eventAutomationOutcomeSchema = taskOutcomeSchema.extend({ destination: eventAutomationDestinationSchema });
+/** Validate one persisted event automation. */
+const eventAutomationSchema = z.object({
+	id: z.string().min(1),
+	createdAtMs: z.number().finite(),
+	createdBy: eventAutomationPrincipalSchema,
+	credentialMode: z.enum(["system", "creator"]),
+	destination: eventAutomationDestinationSchema,
+	destinationVisibility: destinationVisibilitySchema,
+	/** Explicit visible effects after successful work. An empty list is silent. */
+	outcomes: z.array(eventAutomationOutcomeSchema).max(5),
+	task: z.object({ text: z.string().min(1) }).strict(),
+	trigger: eventAutomationTriggerSchema
+}).strict();
+//#endregion
+//#region src/chat/event-automations/store.ts
+const retainedEventAutomationSchema = eventAutomationSchema.extend({
+	destination: slackDestinationSchema,
+	outcomes: z.array(taskOutcomeSchema).max(5)
+});
+/** JSON task payload must not carry SQL-backed columns. */
+function eventAutomationJsonPayload(task) {
+	const { status: _status, title: _title, ...payload } = task;
+	return payload;
+}
+function parseTask(row) {
+	const raw = row.task && typeof row.task === "object" ? { ...row.task } : row.task;
+	if (raw && typeof raw === "object" && "title" in raw) delete raw.title;
+	if (raw && typeof raw === "object" && !("outcomes" in raw) && "destination" in raw) raw.outcomes = [{
+		action: "send_message",
+		destination: raw.destination
+	}];
+	const retained = retainedEventAutomationSchema.parse(raw);
+	const { threadTs: _threadTs, ...destination } = retained.destination;
+	const title = row.title?.trim();
+	return {
+		...retained,
+		destination,
+		outcomes: retained.outcomes.map((outcome) => {
+			const { threadTs: _threadTs, ...destination } = outcome.destination;
+			return {
+				...outcome,
+				destination
+			};
+		}),
+		status: row.status === "deleted" ? "deleted" : "active",
+		...title ? { title } : void 0
+	};
+}
+function activeEventAutomationWhere() {
+	return ne(juniorEventAutomations.status, "deleted");
+}
+/** Read one event automation by id, including deleted rows when present. */
+async function getEventAutomation(db, id) {
+	const rows = await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(eq(juniorEventAutomations.id, id)).limit(1);
+	return rows[0] ? parseTask(rows[0]) : void 0;
+}
+/** Create one retry-stable event automation, or revive a deleted row with the new payload. */
+async function createEventAutomation(db, task) {
+	const parsed = eventAutomationSchema.parse(eventAutomationJsonPayload(task));
+	const title = task.title?.trim() || null;
+	await db.insert(juniorEventAutomations).values({
+		id: parsed.id,
+		teamId: parsed.destination.teamId,
+		namespace: parsed.trigger.namespace,
+		identifier: parsed.trigger.identifier,
+		createdAtMs: parsed.createdAtMs,
+		status: "active",
+		title,
+		task: parsed
+	}).onConflictDoNothing();
+	const existing = await getEventAutomation(db, parsed.id);
+	if (!existing) return {
+		...parsed,
+		status: "active",
+		...title ? { title } : void 0
+	};
+	if (existing.status !== "deleted") return existing;
+	const rows = await db.update(juniorEventAutomations).set({
+		teamId: parsed.destination.teamId,
+		namespace: parsed.trigger.namespace,
+		identifier: parsed.trigger.identifier,
+		status: "active",
+		title,
+		task: parsed
+	}).where(and(eq(juniorEventAutomations.id, parsed.id), eq(juniorEventAutomations.status, "deleted"))).returning({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	});
+	return rows[0] ? parseTask(rows[0]) : await getEventAutomation(db, parsed.id) ?? {
+		...parsed,
+		status: "active",
+		...title ? { title } : void 0
+	};
+}
+/** Replace an existing non-deleted event automation. */
+async function saveEventAutomation(db, task) {
+	const parsed = eventAutomationSchema.parse(eventAutomationJsonPayload(task));
+	const title = task.title?.trim() || null;
+	const rows = await db.update(juniorEventAutomations).set({
+		namespace: parsed.trigger.namespace,
+		identifier: parsed.trigger.identifier,
+		title,
+		task: parsed
+	}).where(and(eq(juniorEventAutomations.id, parsed.id), activeEventAutomationWhere())).returning({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	});
+	return rows[0] ? parseTask(rows[0]) : void 0;
+}
+/** Mark one existing event automation deleted while retaining the row for history. */
+async function deleteEventAutomation(db, id) {
+	const rows = await db.update(juniorEventAutomations).set({ status: "deleted" }).where(and(eq(juniorEventAutomations.id, id), activeEventAutomationWhere())).returning({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	});
+	return rows[0] ? parseTask(rows[0]) : void 0;
+}
+/** List live event automations in one Slack workspace. */
+async function listEventAutomationsForTeam(db, teamId) {
+	return (await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(and(eq(juniorEventAutomations.teamId, teamId), activeEventAutomationWhere())).orderBy(asc(juniorEventAutomations.createdAtMs), asc(juniorEventAutomations.id))).map(parseTask);
+}
+function viewerSlackIdentities(user) {
+	return user.identities.filter((identity) => identity.provider === "slack" && Boolean(identity.providerTenantId) && Boolean(identity.providerSubjectId));
+}
+/** Return whether one event automation was created by a viewer-linked Slack identity. */
+function eventAutomationBelongsToUser(task, user) {
+	return viewerSlackIdentities(user).some((identity) => identity.providerTenantId === task.destination.teamId && identity.providerSubjectId === task.createdBy.slackUserId);
+}
+/** List a bounded newest-first page of live event automations created by one user. */
+async function listEventAutomationsCreatedBy(db, user, limit, query) {
+	const identities = viewerSlackIdentities(user);
+	const ownership = or(...identities.map((identity) => and(eq(juniorEventAutomations.teamId, identity.providerTenantId), sql`${juniorEventAutomations.task}->'createdBy'->>'slackUserId' = ${identity.providerSubjectId}`)));
+	if (!ownership) return [];
+	return (await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(and(ownership, activeEventAutomationWhere(), query ? sql`strpos(lower(coalesce(${juniorEventAutomations.title}, ${juniorEventAutomations.task}->'task'->>'text')), ${query}) > 0` : void 0)).orderBy(desc(juniorEventAutomations.createdAtMs), desc(juniorEventAutomations.id)).limit(limit)).map(parseTask);
+}
+/**
+* List deleted event automations created by one user, newest first.
+* Used only to keep historical runs after the live automation list drops the row.
+*/
+async function listDeletedEventAutomationsCreatedBy(db, user, limit) {
+	const identities = viewerSlackIdentities(user);
+	const ownership = or(...identities.map((identity) => and(eq(juniorEventAutomations.teamId, identity.providerTenantId), sql`${juniorEventAutomations.task}->'createdBy'->>'slackUserId' = ${identity.providerSubjectId}`)));
+	if (!ownership) return [];
+	return (await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(and(ownership, eq(juniorEventAutomations.status, "deleted"))).orderBy(desc(juniorEventAutomations.createdAtMs), desc(juniorEventAutomations.id)).limit(limit)).map(parseTask);
+}
+/** List live event automations whose current Slack destination is public. */
+async function listPublicEventAutomationsForTeams(db, teamIds, limit, query) {
+	if (teamIds.length === 0) return [];
+	return (await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).innerJoin(juniorDestinations, and(eq(juniorDestinations.provider, "slack"), eq(juniorDestinations.providerTenantId, juniorEventAutomations.teamId), sql`${juniorDestinations.providerDestinationId} = ${juniorEventAutomations.task}->'destination'->>'channelId'`)).where(and(inArray(juniorEventAutomations.teamId, teamIds), activeEventAutomationWhere(), query ? sql`strpos(lower(coalesce(${juniorEventAutomations.title}, ${juniorEventAutomations.task}->'task'->>'text')), ${query}) > 0` : void 0, eq(juniorDestinations.visibility, "public"))).orderBy(desc(juniorEventAutomations.createdAtMs), desc(juniorEventAutomations.id)).limit(limit)).map(parseTask);
+}
+/**
+* Collect match keys from live event automations for these identifiers and event types.
+* Does not evaluate match values — only reports keys that filters use.
+*/
+async function collectEventAutomationMatchKeys(db, input) {
+	const eventTypes = new Set(input.eventTypes.map((eventType) => eventType.trim()).filter(Boolean));
+	const identifiers = [...new Set(input.identifiers.map((value) => value.trim()).filter(Boolean))];
+	if (eventTypes.size === 0 || identifiers.length === 0) return [];
+	const rows = await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(and(eq(juniorEventAutomations.teamId, input.teamId), eq(juniorEventAutomations.namespace, input.namespace), inArray(juniorEventAutomations.identifier, identifiers), activeEventAutomationWhere())).orderBy(asc(juniorEventAutomations.createdAtMs), asc(juniorEventAutomations.id));
+	const keys = /* @__PURE__ */ new Set();
+	for (const row of rows) {
+		const task = parseTask(row);
+		if (!task.trigger.events.some((eventType) => eventTypes.has(eventType))) continue;
+		for (const key of Object.keys(task.trigger.match ?? {})) keys.add(key);
+	}
+	return [...keys].sort();
+}
+/** Find every live task matching one normalized event. */
+async function findMatchingEventAutomations(db, event, teamId) {
+	return (await db.select({
+		status: juniorEventAutomations.status,
+		task: juniorEventAutomations.task,
+		title: juniorEventAutomations.title
+	}).from(juniorEventAutomations).where(and(eq(juniorEventAutomations.teamId, teamId), eq(juniorEventAutomations.namespace, event.namespace), eq(juniorEventAutomations.identifier, event.identifier), activeEventAutomationWhere())).orderBy(asc(juniorEventAutomations.createdAtMs), asc(juniorEventAutomations.id))).map(parseTask).filter((task) => task.trigger.events.includes(event.eventType) && eventMatches(task.trigger.match, event.data));
+}
+//#endregion
+//#region src/chat/task-outcomes.ts
+const taskMessageDestinationInputSchema = z.enum(["current_conversation", "task_creator"]).describe("Where to send the message. Use current_conversation for posts, digests, summaries, and channel reminders. Use task_creator only when the user asks for a direct reminder or notification.");
+/** Input accepted by task authoring tools before a user becomes a DM Destination. */
+const taskOutcomeInputSchema = z.object({
+	action: z.literal("send_message"),
+	destination: taskMessageDestinationInputSchema
+}).strict();
+/** Resolve explicit message outcomes to the Slack Destinations stored on an Automation. */
+async function resolveTaskOutcomes(outcomes, currentDestination, creatorSlackUserId) {
+	if (outcomes === void 0) return [];
+	const resolved = [];
+	for (const outcome of outcomes) {
+		if (outcome.destination === "current_conversation") {
+			resolved.push({
+				action: "send_message",
+				destination: currentDestination
+			});
+			continue;
+		}
+		const userId = creatorSlackUserId;
+		const channelId = (await withSlackRetries(() => getSlackClient().conversations.open({ users: userId }), 3, { action: "conversations.open" })).channel?.id;
+		if (!channelId) throw new Error("Slack did not return a direct message destination.");
+		resolved.push({
+			action: "send_message",
+			destination: {
+				platform: "slack",
+				teamId: currentDestination.teamId,
+				channelId
+			}
+		});
+	}
+	return resolved;
+}
+function outcomeTargetsDestination(outcome, destination) {
+	return outcome.destination.teamId === destination.teamId && outcome.destination.channelId === destination.channelId && (!outcome.destination.threadTs || outcome.destination.threadTs === destination.threadTs);
+}
+/** Bind same-channel message outcomes to the Automation Destination. */
+function effectiveTaskOutcomes(outcomes, destination) {
+	return outcomes.map((outcome) => destination.threadTs && outcomeTargetsDestination(outcome, destination) ? {
+		...outcome,
+		destination
+	} : outcome);
+}
+/** Move outcomes that target the task Destination and keep other outcomes unchanged. */
+function moveTaskOutcomes(outcomes, currentDestination, nextDestination) {
+	return effectiveTaskOutcomes(outcomes, currentDestination).map((outcome) => outcomeTargetsDestination(outcome, currentDestination) ? {
+		...outcome,
+		destination: nextDestination
+	} : outcome);
+}
+//#endregion
+//#region src/chat/event-automations/tool-support.ts
+const compactEventAutomationResultSchema = z.object({
+	id: z.string().min(1),
+	title: z.string().min(1).nullable(),
+	dashboardUrl: z.string().url().nullable(),
+	instruction: z.string().min(1),
+	trigger: z.object({
+		namespace: z.string().min(1),
+		identifier: z.string().min(1),
+		resourceType: z.string().min(1),
+		label: z.string().min(1),
+		events: z.array(z.string().min(1)).min(1),
+		match: z.record(z.string(), z.unknown()).optional(),
+		available: z.boolean()
+	}).strict(),
+	credentialMode: z.enum(["system", "creator"]),
+	isCreator: z.boolean(),
+	outcomes: z.array(z.object({
+		action: z.literal("send_message"),
+		destination: z.object({
+			channel: z.string().min(1),
+			thread: z.string().min(1).nullable()
+		}).strict()
+	}).strict()).max(5),
+	createdBy: z.object({
+		name: z.string().min(1).nullable(),
+		username: z.string().min(1).nullable()
+	}).strict()
+}).strict();
+/** Validate one successful event-automation mutation result. */
+const eventAutomationToolResultSchema = juniorToolOutputSchema.extend({
+	automation: compactEventAutomationResultSchema,
+	objectCards: z.array(ownedObjectAnnotationSchema)
+}).strict();
+/** Validate one successful event-automation list result. */
+const eventAutomationListToolResultSchema = juniorToolOutputSchema.extend({
+	automations: z.array(compactEventAutomationResultSchema),
+	truncated: z.boolean()
+}).strict();
+/** Build the validated event trigger accepted by event-automation tools. */
+function registeredEventAutomationTriggerSchema(catalog) {
+	const plugins = pluginEventCatalog(catalog);
+	return z.object({
+		namespace: eventNamespaceSchema(plugins),
+		identifier: z.string().trim().min(1).max(300),
+		resourceType: registeredResourceTypeSchema(plugins),
+		label: z.string().trim().min(1).max(500),
+		events: z.array(registeredEventTypeSchema(plugins)).min(1),
+		match: registeredEventMatchSchema()
+	}).strict();
+}
+/** Reject an event-automation trigger that is no longer supported by the catalog. */
+function requireSupportedEventAutomationTrigger(catalog, trigger) {
+	const plugins = pluginEventCatalog(catalog);
+	for (const eventType of trigger.events) if (!pluginSupportsEvent(plugins, trigger.namespace, trigger.resourceType, eventType)) throw new ToolInputError(`Resource type "${trigger.namespace}:${trigger.resourceType}" does not support event "${eventType}".`);
+	return requireSupportedEventMatch(plugins, {
+		match: trigger.match,
+		namespace: trigger.namespace,
+		resourceType: trigger.resourceType
+	});
+}
+/** Require the active Slack authority used for event-automation management. */
+function requireEventAutomationSlackContext(context) {
+	if (context.source.kind !== "slack" || context.destination.platform !== "slack" || context.actor?.platform !== "slack" || context.actor.teamId !== context.source.teamId) throw new ToolInputError("Event automations require an active Slack channel or DM and actor.");
+	return {
+		actor: context.actor,
+		destination: {
+			platform: "slack",
+			teamId: context.source.teamId,
+			channelId: context.source.channelId
+		},
+		source: context.source
+	};
+}
+/** Return whether an event automation belongs to the active Slack destination. */
+function eventAutomationMatchesDestination(task, destination) {
+	return task.destination.teamId === destination.teamId && task.destination.channelId === destination.channelId;
+}
+/**
+* Return whether the active destination may update or delete this automation.
+* Same-destination automations stay local. Public automations may be managed by id from
+* another destination in the same workspace.
+*/
+function eventAutomationIsWritableFrom(task, destination) {
+	if (task.destination.teamId !== destination.teamId) return false;
+	return task.destination.channelId === destination.channelId || task.destinationVisibility === "public";
+}
+/** Load one automation the active destination may update or delete. */
+async function writableEventAutomation(context, id) {
+	const { destination } = requireEventAutomationSlackContext(context);
+	const task = await getEventAutomation(getDb(), id);
+	if (!task || task.status === "deleted" || !eventAutomationIsWritableFrom(task, destination)) throw new ToolInputError("Event automation was not found.");
+	return task;
+}
+function eventAutomationTriggerAvailable(task, catalog) {
+	const registration = pluginEventCatalog(catalog)[task.trigger.namespace];
+	return Boolean(registration && task.trigger.events.every((eventType) => registration.resourceTypes.some((resourceType) => resourceType.supportedEvents.includes(eventType))));
+}
+/** Project an event automation into the bounded tool-result shape. */
+function compactEventAutomation(task, catalog, requesterSlackUserId) {
+	return compactEventAutomationResultSchema.parse({
+		id: task.id,
+		title: task.title?.trim() || null,
+		dashboardUrl: getDashboardTaskLink(task.id) ?? null,
+		instruction: task.task.text,
+		trigger: {
+			namespace: task.trigger.namespace,
+			identifier: task.trigger.identifier,
+			resourceType: task.trigger.resourceType,
+			label: task.trigger.label,
+			events: task.trigger.events,
+			...task.trigger.match ? { match: task.trigger.match } : void 0,
+			available: eventAutomationTriggerAvailable(task, catalog)
+		},
+		credentialMode: task.credentialMode,
+		isCreator: task.createdBy.slackUserId === requesterSlackUserId,
+		outcomes: effectiveTaskOutcomes(task.outcomes, task.destination).map((outcome) => ({
+			action: outcome.action,
+			destination: {
+				channel: outcome.destination.channelId,
+				thread: outcome.destination.threadTs ?? null
+			}
+		})),
+		createdBy: {
+			name: task.createdBy.fullName ?? null,
+			username: task.createdBy.userName ?? null
+		}
+	});
+}
+/** Return the standard successful event-automation tool result. */
+async function eventAutomationToolResult(conversationId, task, catalog, requesterSlackUserId) {
+	const automation = compactEventAutomation(task, catalog, requesterSlackUserId);
+	const filters = Object.entries(task.trigger.match ?? {}).map(([key, value]) => `${key} = ${JSON.stringify(value)}`);
+	const title = automation.title ?? fallbackShortTitle(task.task.text, "Event automation");
 	return {
-		...hasEventCatalogEntries(catalog) ? {
-			searchEventTypes: createSearchEventTypesTool(catalog),
-			watchEvents: createWatchEventsTool(context, catalog)
-		} : void 0,
-		listWatches: createListWatchesTool(context),
-		stopWatchingResources: createStopWatchingResourcesTool(context)
+		automation,
+		objectCards: await saveObjectAnnotations(conversationId, "junior", [{
+			kind: "object",
+			objectType: "automation",
+			label: title,
+			key: task.id,
+			title,
+			url: automation.dashboardUrl,
+			description: task.task.text,
+			status: automation.trigger.available ? "ready" : "unavailable",
+			trigger: [
+				task.trigger.label,
+				task.trigger.events.join(", "),
+				...filters
+			].join(" · "),
+			warning: !automation.trigger.available ? "Trigger unavailable. This automation cannot receive events." : void 0
+		}])
 	};
 }
 //#endregion
@@ -8839,6 +10921,324 @@ function createEventAutomationTools(context, catalog) {
 	};
 }
 //#endregion
+//#region src/chat/scheduled-automations/types.ts
+/** Durable scheduled-automation domain types owned by Junior core. */
+const scheduledAutomationStatusSchema = z.enum([
+	"active",
+	"blocked",
+	"completed",
+	"deleted"
+]);
+const scheduledAutomationCredentialModeSchema = z.enum(["system", "creator"]);
+const scheduledRunStatusSchema = z.enum([
+	"pending",
+	"running",
+	"completed",
+	"failed",
+	"blocked",
+	"skipped"
+]);
+const scheduledAutomationPrincipalSchema = z.object({
+	slackUserId: actorUserIdSchema,
+	fullName: z.string().optional(),
+	userName: z.string().optional()
+}).strict();
+const scheduledAutomationRecurrenceSchema = z.object({
+	dayOfMonth: z.number().optional(),
+	frequency: z.enum([
+		"daily",
+		"weekly",
+		"monthly",
+		"yearly"
+	]),
+	interval: z.number(),
+	month: z.number().optional(),
+	startDate: z.string(),
+	time: z.object({
+		hour: z.number(),
+		minute: z.number()
+	}).strict(),
+	weekdays: z.array(z.number()).optional()
+}).strict();
+const scheduledAutomationScheduleSchema = z.object({
+	description: z.string(),
+	kind: z.enum(["one_off", "recurring"]),
+	recurrence: scheduledAutomationRecurrenceSchema.optional(),
+	timezone: z.string()
+}).strict();
+const scheduledAutomationExecutionActorSchema = z.object({
+	platform: z.literal("system"),
+	name: z.string()
+}).strict();
+/** Scheduled automations target a Slack conversation, never one message thread. */
+const scheduledAutomationDestinationSchema = slackDestinationSchema.omit({ threadTs: true });
+const scheduledAutomationOutcomeSchema = z.object({
+	action: z.literal("send_message"),
+	destination: scheduledAutomationDestinationSchema
+}).strict();
+/** Validate the current scheduled-automation domain shape. */
+const scheduledAutomationSchema = z.object({
+	id: z.string(),
+	conversationAccess: z.object({
+		audience: z.enum([
+			"direct",
+			"group",
+			"channel"
+		]),
+		visibility: z.enum(["private", "public"])
+	}).strict(),
+	createdAtMs: z.number(),
+	createdBy: scheduledAutomationPrincipalSchema,
+	/** Authoritative provider identity that created the task. */
+	creatorIdentityId: z.string(),
+	/** Selects system credentials or task-bound creator credential delegation. */
+	credentialMode: scheduledAutomationCredentialModeSchema,
+	destination: scheduledAutomationDestinationSchema,
+	executionActor: scheduledAutomationExecutionActorSchema.optional(),
+	lastRunAtMs: z.number().optional(),
+	nextRunAtMs: z.number().optional(),
+	originalRequest: z.string().optional(),
+	runNowAtMs: z.number().optional(),
+	schedule: scheduledAutomationScheduleSchema,
+	status: scheduledAutomationStatusSchema,
+	statusReason: z.string().optional(),
+	/** Explicit visible effects after successful work. An empty list is silent. */
+	outcomes: z.array(scheduledAutomationOutcomeSchema).max(5),
+	task: z.object({ text: z.string() }).strict(),
+	/** SQL-backed short display title generated from the task instruction. */
+	title: z.string().optional(),
+	updatedAtMs: z.number()
+}).strict();
+/** Validate the current scheduled-run domain shape. */
+const scheduledRunSchema = z.object({
+	id: z.string(),
+	attempt: z.number(),
+	claimedAtMs: z.number(),
+	completedAtMs: z.number().optional(),
+	dispatchId: z.string().optional(),
+	errorMessage: z.string().optional(),
+	resultMessageTs: z.string().optional(),
+	scheduledForMs: z.number(),
+	startedAtMs: z.number().optional(),
+	status: scheduledRunStatusSchema,
+	taskId: z.string()
+}).strict();
+const SCHEDULED_AUTOMATION_SYSTEM_ACTOR = Object.freeze({
+	platform: "system",
+	name: "scheduled-automation"
+});
+//#endregion
+//#region src/chat/scheduled-automations/tasks.ts
+const SCHEDULER_KEY_PREFIX = "junior:scheduler";
+const retainedScheduledAutomationSchema = scheduledAutomationSchema.omit({
+	creatorIdentityId: true,
+	title: true
+}).extend({
+	destination: slackDestinationSchema,
+	outcomes: z.array(taskOutcomeSchema).max(5),
+	status: z.enum([
+		"active",
+		"blocked",
+		"completed",
+		"deleted",
+		"paused"
+	]),
+	version: z.number().optional()
+}).strict();
+/** Decode a retained scheduler task row and reject invalid routing context. */
+function parseScheduledAutomationRow(row) {
+	const record = z.record(z.string(), z.unknown()).safeParse(row.record);
+	if (!record.success) return void 0;
+	const { creatorIdentityId: legacyCreatorIdentityId, title: legacyTitle, ...retained } = record.data;
+	const current = retained.outcomes === void 0 && retained.destination !== void 0 ? {
+		...retained,
+		outcomes: [{
+			action: "send_message",
+			destination: retained.destination
+		}]
+	} : retained;
+	const parsed = retainedScheduledAutomationSchema.safeParse(current);
+	if (!parsed.success) return void 0;
+	const { status, version: _version, ...retainedTask } = parsed.data;
+	const destination = {
+		platform: "slack",
+		teamId: retainedTask.destination.teamId,
+		channelId: retainedTask.destination.channelId
+	};
+	const task = {
+		...retainedTask,
+		destination,
+		outcomes: retainedTask.outcomes.map((outcome) => ({
+			...outcome,
+			destination: {
+				platform: "slack",
+				teamId: outcome.destination.teamId,
+				channelId: outcome.destination.channelId
+			}
+		}))
+	};
+	const fallbackIdentity = row.creatorIdentityId === null ? z.string().safeParse(legacyCreatorIdentityId) : void 0;
+	const creatorIdentityId = row.creatorIdentityId ?? (fallbackIdentity?.success ? fallbackIdentity.data : void 0);
+	if (creatorIdentityId === void 0) return void 0;
+	const fallbackTitle = row.title === null ? z.string().safeParse(legacyTitle) : void 0;
+	const title = (row.title !== null ? row.title : fallbackTitle?.success ? fallbackTitle.data : void 0)?.trim() || void 0;
+	if (status === "paused") {
+		const { nextRunAtMs: _nextRunAtMs, runNowAtMs: _runNowAtMs, ...retained } = task;
+		return {
+			...retained,
+			creatorIdentityId,
+			status: "deleted",
+			...title ? { title } : void 0
+		};
+	}
+	return {
+		...task,
+		creatorIdentityId,
+		status,
+		...title ? { title } : void 0
+	};
+}
+/** Keep scan paths from returning current or legacy tombstones. */
+function isListedScheduledAutomation(task) {
+	return task !== void 0 && task.status !== "deleted";
+}
+/** Build the stable run id for one task occurrence. */
+function scheduledRunId(taskId, scheduledForMs) {
+	return `${taskId}:${scheduledForMs}`;
+}
+/** Acquire the deployed advisory lock for one scheduled automation. */
+function withScheduledAutomationLock(db, taskId, callback) {
+	return db.transaction(async (tx) => {
+		await tx.execute(sql`SELECT pg_advisory_xact_lock(hashtext(${`${SCHEDULER_KEY_PREFIX}:task:${taskId}:lock`}))`);
+		return await callback(tx);
+	});
+}
+function requireStoredTask(task) {
+	const parsed = scheduledAutomationSchema.safeParse(task);
+	if (!parsed.success) throw new Error("Scheduled automation routing context is invalid.");
+	const { title, ...current } = parsed.data;
+	const normalizedTitle = title?.trim() || void 0;
+	return {
+		...current,
+		...normalizedTitle ? { title: normalizedTitle } : void 0
+	};
+}
+function scheduledAutomationJsonRecord(task) {
+	const { title: _title, ...record } = task;
+	return record;
+}
+async function upsertScheduledAutomation(db, task) {
+	const title = task.title?.trim() || null;
+	await db.insert(juniorSchedulerTasks).values({
+		createdAtMs: task.createdAtMs,
+		creatorIdentityId: task.creatorIdentityId,
+		creatorSlackUserId: task.createdBy.slackUserId,
+		id: task.id,
+		nextRunAtMs: task.nextRunAtMs,
+		record: scheduledAutomationJsonRecord(task),
+		runNowAtMs: task.runNowAtMs,
+		status: task.status,
+		teamId: task.destination.teamId,
+		title
+	}).onConflictDoUpdate({
+		target: juniorSchedulerTasks.id,
+		set: {
+			createdAtMs: sql`excluded.created_at_ms`,
+			creatorIdentityId: sql`excluded.creator_identity_id`,
+			creatorSlackUserId: sql`excluded.creator_slack_user_id`,
+			nextRunAtMs: sql`excluded.next_run_at_ms`,
+			record: sql`excluded.record`,
+			runNowAtMs: sql`excluded.run_now_at_ms`,
+			status: sql`excluded.status`,
+			teamId: sql`excluded.team_id`,
+			title: sql`excluded.title`
+		}
+	});
+}
+/** Read and decode one scheduled automation. */
+async function readScheduledAutomation(db, taskId) {
+	const rows = await db.select({
+		creatorIdentityId: juniorSchedulerTasks.creatorIdentityId,
+		record: juniorSchedulerTasks.record,
+		title: juniorSchedulerTasks.title
+	}).from(juniorSchedulerTasks).where(eq(juniorSchedulerTasks.id, taskId)).limit(1);
+	return rows[0] ? parseScheduledAutomationRow(rows[0]) : void 0;
+}
+async function readListedScheduledAutomations(db, teamId) {
+	return (await db.select({
+		creatorIdentityId: juniorSchedulerTasks.creatorIdentityId,
+		record: juniorSchedulerTasks.record,
+		title: juniorSchedulerTasks.title
+	}).from(juniorSchedulerTasks).where(and(notInArray(juniorSchedulerTasks.status, ["deleted", "paused"]), teamId === void 0 ? void 0 : eq(juniorSchedulerTasks.teamId, teamId))).orderBy(asc(juniorSchedulerTasks.createdAtMs), asc(juniorSchedulerTasks.id))).map(parseScheduledAutomationRow).filter(isListedScheduledAutomation);
+}
+/** List decoded scheduled automations in stable creation order. */
+async function listScheduledAutomations(db) {
+	return await readListedScheduledAutomations(db);
+}
+/** List decoded scheduled automations for one team in stable creation order. */
+async function listScheduledAutomationsForTeam(db, teamId) {
+	return await readListedScheduledAutomations(db, teamId);
+}
+async function writeScheduledAutomation(db, task, current) {
+	if (current?.status === "blocked" && task.status === "active" && typeof task.nextRunAtMs === "number" && Number.isFinite(task.nextRunAtMs)) await db.delete(juniorSchedulerRuns).where(and(eq(juniorSchedulerRuns.id, scheduledRunId(task.id, task.nextRunAtMs)), eq(juniorSchedulerRuns.status, "blocked")));
+	if (task.status === "deleted" && current?.status !== "deleted") await skipPendingRunsForDeletedTask(db, task);
+	await upsertScheduledAutomation(db, task);
+}
+async function skipPendingRunsForDeletedTask(db, task) {
+	const errorMessage = `Scheduled automation ${task.id} was deleted before the run started.`;
+	const rows = await db.select({ record: juniorSchedulerRuns.record }).from(juniorSchedulerRuns).where(and(eq(juniorSchedulerRuns.taskId, task.id), eq(juniorSchedulerRuns.status, "pending")));
+	for (const row of rows) {
+		const parsed = scheduledRunSchema.safeParse(row.record);
+		if (!parsed.success || parsed.data.status !== "pending") continue;
+		const next = scheduledRunSchema.parse({
+			...parsed.data,
+			completedAtMs: task.updatedAtMs,
+			errorMessage,
+			status: "skipped"
+		});
+		await db.update(juniorSchedulerRuns).set({
+			record: next,
+			status: next.status
+		}).where(and(eq(juniorSchedulerRuns.id, next.id), eq(juniorSchedulerRuns.status, "pending")));
+	}
+}
+/** Create a scheduled automation once under its retry-stable task lock. */
+async function createScheduledAutomation(db, task) {
+	const next = requireStoredTask(task);
+	return await withScheduledAutomationLock(db, task.id, async (tx) => {
+		const current = await readScheduledAutomation(tx, task.id);
+		if (current) return current;
+		await writeScheduledAutomation(tx, next, void 0);
+		return next;
+	});
+}
+/** Save a scheduled automation and clear its blocked occurrence on reactivation. */
+async function saveScheduledAutomation(db, task) {
+	const next = requireStoredTask(task);
+	await withScheduledAutomationLock(db, task.id, async (tx) => {
+		const current = await readScheduledAutomation(tx, task.id);
+		await writeScheduledAutomation(tx, next, current);
+	});
+	return next;
+}
+/** Save a scheduled automation inside a task lock already held by the caller. */
+async function saveScheduledAutomationInLock(db, task, current) {
+	await writeScheduledAutomation(db, requireStoredTask(task), current);
+}
+/** List scheduled automations whose current Slack destination is public. */
+async function listPublicScheduledAutomationsForTeams(db, teamIds, input) {
+	if (teamIds.length === 0) return [];
+	return (await db.select({
+		creatorIdentityId: juniorSchedulerTasks.creatorIdentityId,
+		record: juniorSchedulerTasks.record,
+		title: juniorSchedulerTasks.title
+	}).from(juniorSchedulerTasks).innerJoin(juniorDestinations, and(eq(juniorDestinations.provider, "slack"), eq(juniorDestinations.providerTenantId, juniorSchedulerTasks.teamId), sql`${juniorDestinations.providerDestinationId} = ${juniorSchedulerTasks.record}->'destination'->>'channelId'`)).where(and(inArray(juniorSchedulerTasks.teamId, teamIds), notInArray(juniorSchedulerTasks.status, [
+		"completed",
+		"deleted",
+		"paused"
+	]), input.query ? sql`strpos(lower(coalesce(${juniorSchedulerTasks.title}, ${juniorSchedulerTasks.record}->'task'->>'text')), ${input.query}) > 0` : void 0, eq(juniorDestinations.visibility, "public"))).orderBy(desc(juniorSchedulerTasks.createdAtMs), desc(juniorSchedulerTasks.id)).limit(input.limit)).map(parseScheduledAutomationRow).filter(isListedScheduledAutomation);
+}
+//#endregion
 //#region src/chat/scheduled-automations/cadence.ts
 const FORMATTERS = /* @__PURE__ */ new Map();
 function getFormatter(timezone) {
@@ -9537,6 +11937,7 @@ async function scheduleAutomationToolResult(conversationId, task, requesterSlack
 		title,
 		url: automation.dashboardUrl,
 		description: automation.instruction,
+		status: automation.status,
 		trigger: task.schedule.kind === "one_off" && task.nextRunAtMs !== void 0 ? `${new Intl.DateTimeFormat("en-US", {
 			dateStyle: "medium",
 			timeStyle: "short",
@@ -9640,7 +12041,7 @@ function createSlackScheduleCreateAutomationTool(context) {
 				instruction: input.instruction,
 				title: input.title
 			});
-			const task = {
+			const committed = await createScheduledAutomation(db, {
 				id,
 				createdAtMs: nowMs,
 				updatedAtMs: nowMs,
@@ -9657,8 +12058,7 @@ function createSlackScheduleCreateAutomationTool(context) {
 				outcomes: await resolveTaskOutcomes(input.outcomes, destination, actor.slackUserId),
 				task: { text: input.instruction },
 				...title ? { title } : void 0
-			};
-			const committed = await createScheduledAutomation(db, task);
+			});
 			if (!sameDestination(committed, destination) || committed.createdBy.slackUserId !== actor.slackUserId) throwToolInputError("Scheduled automation operation identity is invalid.");
 			logInfo("scheduled_automation.create.completed", scheduledAutomationAttributes(committed));
 			return scheduleAutomationToolResult(context.conversationId, committed, actor.slackUserId);
@@ -9954,6 +12354,7 @@ function createScheduledAutomationTools(context) {
 }
 //#endregion
 //#region src/chat/slack/channel.ts
+const replySubtypeSchema = z.object({ subtype: z.string().optional() });
 /** List channel history using Slack-native, pre-validated timestamp bounds. */
 async function listChannelMessages(input) {
 	const client = getSlackClient();
@@ -10005,7 +12406,10 @@ async function listThreadReplies(input) {
 			cursor
 		}), 3, { action: "conversations.replies" });
 		const batch = response.messages ?? [];
-		replies.push(...batch);
+		replies.push(...batch.map((reply) => ({
+			...reply,
+			...replySubtypeSchema.parse(reply)
+		})));
 		for (const reply of batch) if (typeof reply.ts === "string" && pendingTargets.size > 0) pendingTargets.delete(reply.ts);
 		cursor = response.response_metadata?.next_cursor || void 0;
 		if (!cursor || hasTargetMessages && pendingTargets.size === 0) break;
@@ -10020,15 +12424,14 @@ async function getConversationInfo(channelId) {
 		idempotent: true
 	})).channel;
 	if (!channel || typeof channel !== "object") throw new Error(`Slack conversations.info returned no channel for ${channelId}`);
-	const record = channel;
 	return {
 		id: channelId,
-		...typeof record.name === "string" && record.name ? { name: record.name } : void 0,
-		isChannel: record.is_channel === true,
-		isPrivate: record.is_private === true,
-		isIm: record.is_im === true,
-		isMpim: record.is_mpim === true,
-		...typeof record.is_member === "boolean" ? { isMember: record.is_member } : void 0
+		...typeof channel.name === "string" && channel.name ? { name: channel.name } : void 0,
+		isChannel: channel.is_channel === true,
+		isPrivate: channel.is_private === true,
+		isIm: channel.is_im === true,
+		isMpim: channel.is_mpim === true,
+		...typeof channel.is_member === "boolean" ? { isMember: channel.is_member } : void 0
 	};
 }
 /** Join a public channel so the bot can read history and threads there. */
@@ -10214,6 +12617,73 @@ function createSlackChannelJoinTool(context) {
 	});
 }
 //#endregion
+//#region src/chat/slack/context.ts
+function toTrimmedSlackString(value) {
+	return toOptionalString(value)?.trim() || void 0;
+}
+const slackMessageEnvelopeSchema = z.object({ raw: z.unknown().optional() });
+const rawSlackMessageSchema = z.object({
+	channel: z.unknown().optional(),
+	message: z.unknown().optional(),
+	team: z.unknown().optional(),
+	team_id: z.unknown().optional(),
+	thread_ts: z.unknown().optional(),
+	ts: z.unknown().optional(),
+	user_team: z.unknown().optional()
+});
+const nestedRawSlackMessageSchema = z.object({ ts: z.unknown().optional() });
+/** Project only the Slack raw fields consumed by runtime thread context. */
+function readSlackRawMessageContext(message) {
+	const envelope = slackMessageEnvelopeSchema.safeParse(message);
+	if (!envelope.success) return;
+	const raw = rawSlackMessageSchema.safeParse(envelope.data.raw);
+	if (!raw.success) return;
+	const nestedMessage = nestedRawSlackMessageSchema.safeParse(raw.data.message);
+	const channelId = parseSlackChannelId(raw.data.channel);
+	const threadTs = parseSlackMessageTs(raw.data.thread_ts);
+	const messageTs = parseSlackMessageTs(raw.data.ts);
+	const nestedMessageTs = nestedMessage.success && parseSlackMessageTs(nestedMessage.data.ts);
+	const teamId = parseSlackTeamId(raw.data.team_id) ?? parseSlackTeamId(raw.data.team);
+	const authorTeamId = parseSlackTeamId(raw.data.user_team);
+	return {
+		...channelId ? { channelId } : void 0,
+		...threadTs ? { threadTs } : void 0,
+		...messageTs ? { messageTs } : void 0,
+		...nestedMessageTs ? { nestedMessageTs } : void 0,
+		...teamId ? { teamId } : void 0,
+		...authorTeamId ? { authorTeamId } : void 0
+	};
+}
+/** Extract a channel ID and validated Slack timestamp from `slack:<channel>:<ts>`. */
+function parseSlackThreadId(threadId) {
+	const normalizedThreadId = toTrimmedSlackString(threadId);
+	if (!normalizedThreadId) return;
+	const parts = normalizedThreadId.split(":");
+	if (parts.length !== 3 || parts[0] !== "slack") return;
+	const channelId = parseSlackChannelId(parts[1]);
+	const threadTs = parseSlackMessageTs(parts[2]);
+	if (!channelId || !threadTs) return;
+	return {
+		channelId,
+		threadTs
+	};
+}
+/** Resolve the Slack channel ID from a `slack:<channel>:<ts>` thread identifier. */
+function resolveSlackChannelIdFromThreadId(threadId) {
+	return parseSlackThreadId(threadId)?.channelId;
+}
+/** Best-effort channel ID extraction from a raw Slack message payload. */
+function resolveSlackChannelIdFromMessage(message) {
+	const messageChannelId = parseSlackChannelId(message.channelId);
+	if (messageChannelId) return messageChannelId;
+	const raw = message.raw;
+	if (raw && typeof raw === "object") {
+		const rawChannel = parseSlackChannelId(raw.channel);
+		if (rawChannel) return rawChannel;
+	}
+	return resolveSlackChannelIdFromThreadId(toTrimmedSlackString(message.threadId));
+}
+//#endregion
 //#region src/chat/slack/timestamp-param.ts
 /** Define a model-facing Slack timestamp, normalizing numeric model args to strings. */
 function slackTimestampParam(description) {
@@ -10869,6 +13339,298 @@ function createSlackMessageAddReactionTool(context, state) {
 	});
 }
 //#endregion
+//#region src/chat/attachments/store.ts
+const DAY_MS = 864e5;
+const ATTACHMENT_GC_BATCH_LIMIT = 200;
+/** Time that Junior keeps attachment bytes after the file is stored. */
+const ATTACHMENT_RETENTION_MS = 30 * DAY_MS;
+function attachmentDigest(file) {
+	return createHash("sha256").update(file.data).digest("hex");
+}
+/** Stable conversation-owned id for one file body and presentation metadata. */
+function attachmentId(args) {
+	const identity = [
+		args.conversationId,
+		args.storageProvider,
+		args.sha256,
+		args.filename,
+		args.contentType
+	];
+	if (args.source) identity.push(args.source.provider, args.source.id);
+	return createHash("sha256").update(identity.join("\0")).digest("hex");
+}
+/**
+* Object key for one write attempt.
+*
+* Attachment ids are content-stable. Object keys are not: each put gets a fresh
+* key so a failed-write cleanup or GC delete cannot remove another writer's
+* durable blob.
+*/
+function attachmentKey(args) {
+	return `conversations/${args.conversationId}/attachments/${args.attachmentId}/${args.writeId}/${args.filename}`;
+}
+async function bestEffortDelete(storage, key) {
+	try {
+		await storage.delete([key]);
+	} catch {}
+}
+async function isConversationPurged(db, conversationId) {
+	const [row] = await db.db().select({ transcriptPurgedAt: juniorConversations.transcriptPurgedAt }).from(juniorConversations).where(eq(juniorConversations.conversationId, conversationId));
+	return row?.transcriptPurgedAt != null;
+}
+function purgedConversationError(conversationId) {
+	return /* @__PURE__ */ new Error(`Cannot store attachment for purged conversation ${conversationId}`);
+}
+async function assertConversationNotPurged(db, conversationId) {
+	if (await isConversationPurged(db, conversationId)) throw purgedConversationError(conversationId);
+}
+/** Mark a just-written row for deletion and drop its unused object. */
+async function rejectPurgedAttachmentWrite(args) {
+	await args.db.db().update(juniorAttachments).set({ deleteRequestedAt: args.now }).where(eq(juniorAttachments.id, args.id));
+	await bestEffortDelete(args.storage, args.storageKey);
+	throw purgedConversationError(args.conversationId);
+}
+/**
+* Return another writer's live row only when the conversation is still active.
+*
+* The caller already wrote a unique object for this attempt. Delete that unused
+* object either way. If the conversation is purged, do not report success for a
+* row that purge/GC is about to remove.
+*/
+async function reuseLiveAttachment(args) {
+	await bestEffortDelete(args.storage, args.storageKey);
+	await assertConversationNotPurged(args.db, args.conversationId);
+	return { id: args.id };
+}
+/**
+* Persist one conversation-owned file.
+*
+* Identity is content-stable under the conversation. Object storage is written
+* first under a unique key; the SQL row is created only after that write
+* succeeds. A row means the attachment is durable. Retries reuse an existing
+* live row. A purge-marked row is revived by writing a new object and pointing
+* the row at it, unless the conversation is still purged. If the SQL write
+* fails after object storage accepts the bytes, this path deletes that unique
+* object. A process crash between those steps can leave an unreferenced unique
+* object with no SQL row.
+*/
+async function storeAttachment(args) {
+	const now = new Date(args.nowMs ?? Date.now());
+	const sha256 = attachmentDigest(args.file);
+	const id = attachmentId({
+		conversationId: args.conversationId,
+		contentType: args.file.mimeType,
+		filename: args.file.filename,
+		source: args.source,
+		storageProvider: args.storage.provider,
+		sha256
+	});
+	const [existing] = await args.db.db().select({
+		contentType: juniorAttachments.contentType,
+		conversationId: juniorAttachments.conversationId,
+		deleteRequestedAt: juniorAttachments.deleteRequestedAt,
+		filename: juniorAttachments.filename,
+		id: juniorAttachments.id,
+		provider: juniorAttachments.provider,
+		providerId: juniorAttachments.providerId,
+		storageProvider: juniorAttachments.storageProvider,
+		sha256: juniorAttachments.sha256,
+		storageKey: juniorAttachments.storageKey
+	}).from(juniorAttachments).where(eq(juniorAttachments.id, id));
+	if (existing) {
+		if (existing.contentType !== args.file.mimeType || existing.conversationId !== args.conversationId || existing.filename !== args.file.filename || existing.provider !== (args.source?.provider ?? null) || existing.providerId !== (args.source?.id ?? null) || existing.storageProvider !== args.storage.provider || existing.sha256 !== sha256) throw new Error(`Attachment write conflicts with ${existing.id}`);
+		if (existing.deleteRequestedAt === null) {
+			await assertConversationNotPurged(args.db, args.conversationId);
+			return { id: existing.id };
+		}
+	}
+	await assertConversationNotPurged(args.db, args.conversationId);
+	const storageKey = attachmentKey({
+		attachmentId: id,
+		conversationId: args.conversationId,
+		filename: args.file.filename,
+		writeId: randomUUID()
+	});
+	await args.storage.put({
+		body: args.file.data,
+		contentType: args.file.mimeType,
+		key: storageKey
+	});
+	if (existing?.deleteRequestedAt != null) {
+		if (await isConversationPurged(args.db, args.conversationId)) {
+			await bestEffortDelete(args.storage, storageKey);
+			throw purgedConversationError(args.conversationId);
+		}
+		const oldStorageKey = existing.storageKey;
+		if ((await args.db.db().update(juniorAttachments).set({
+			deleteRequestedAt: null,
+			storageKey
+		}).where(and(eq(juniorAttachments.id, id), isNotNull(juniorAttachments.deleteRequestedAt))).returning({ id: juniorAttachments.id })).length > 0) {
+			if (await isConversationPurged(args.db, args.conversationId)) await rejectPurgedAttachmentWrite({
+				conversationId: args.conversationId,
+				db: args.db,
+				id,
+				now,
+				storage: args.storage,
+				storageKey
+			});
+			if (oldStorageKey !== storageKey) await bestEffortDelete(args.storage, oldStorageKey);
+			return { id };
+		}
+		const [afterRace] = await args.db.db().select({
+			deleteRequestedAt: juniorAttachments.deleteRequestedAt,
+			id: juniorAttachments.id,
+			storageKey: juniorAttachments.storageKey
+		}).from(juniorAttachments).where(eq(juniorAttachments.id, id));
+		if (afterRace?.deleteRequestedAt === null) return reuseLiveAttachment({
+			conversationId: args.conversationId,
+			db: args.db,
+			id: afterRace.id,
+			storage: args.storage,
+			storageKey
+		});
+	}
+	let inserted = [];
+	try {
+		inserted = await args.db.db().insert(juniorAttachments).values({
+			id,
+			conversationId: args.conversationId,
+			storageProvider: args.storage.provider,
+			storageKey,
+			provider: args.source?.provider,
+			providerId: args.source?.id,
+			filename: args.file.filename,
+			contentType: args.file.mimeType,
+			bytes: args.file.bytes,
+			sha256,
+			createdAt: now
+		}).onConflictDoNothing({ target: juniorAttachments.id }).returning({ id: juniorAttachments.id });
+	} catch (error) {
+		await bestEffortDelete(args.storage, storageKey);
+		throw error;
+	}
+	if (inserted.length > 0) {
+		if (await isConversationPurged(args.db, args.conversationId)) await rejectPurgedAttachmentWrite({
+			conversationId: args.conversationId,
+			db: args.db,
+			id,
+			now,
+			storage: args.storage,
+			storageKey
+		});
+		return { id };
+	}
+	const [row] = await args.db.db().select({
+		deleteRequestedAt: juniorAttachments.deleteRequestedAt,
+		id: juniorAttachments.id,
+		storageKey: juniorAttachments.storageKey
+	}).from(juniorAttachments).where(eq(juniorAttachments.id, id));
+	if (!row) {
+		await bestEffortDelete(args.storage, storageKey);
+		throw new Error(`Attachment row missing after write for ${id}`);
+	}
+	if (row.deleteRequestedAt === null) return reuseLiveAttachment({
+		conversationId: args.conversationId,
+		db: args.db,
+		id: row.id,
+		storage: args.storage,
+		storageKey
+	});
+	if (await isConversationPurged(args.db, args.conversationId)) {
+		await bestEffortDelete(args.storage, storageKey);
+		throw purgedConversationError(args.conversationId);
+	}
+	if ((await args.db.db().update(juniorAttachments).set({
+		deleteRequestedAt: null,
+		storageKey
+	}).where(and(eq(juniorAttachments.id, id), isNotNull(juniorAttachments.deleteRequestedAt))).returning({ id: juniorAttachments.id })).length > 0) {
+		if (await isConversationPurged(args.db, args.conversationId)) await rejectPurgedAttachmentWrite({
+			conversationId: args.conversationId,
+			db: args.db,
+			id,
+			now,
+			storage: args.storage,
+			storageKey
+		});
+		if (row.storageKey !== storageKey) await bestEffortDelete(args.storage, row.storageKey);
+		return { id };
+	}
+	const [afterRace] = await args.db.db().select({
+		deleteRequestedAt: juniorAttachments.deleteRequestedAt,
+		id: juniorAttachments.id
+	}).from(juniorAttachments).where(eq(juniorAttachments.id, id));
+	if (afterRace?.deleteRequestedAt === null) return reuseLiveAttachment({
+		conversationId: args.conversationId,
+		db: args.db,
+		id: afterRace.id,
+		storage: args.storage,
+		storageKey
+	});
+	await bestEffortDelete(args.storage, storageKey);
+	throw new Error(`Attachment ${id} disappeared while reviving`);
+}
+/** Load one live attachment owned by a conversation. */
+async function readLiveAttachment(args) {
+	const [row] = await args.db.db().select({
+		bytes: juniorAttachments.bytes,
+		contentType: juniorAttachments.contentType,
+		conversationId: juniorAttachments.conversationId,
+		deleteRequestedAt: juniorAttachments.deleteRequestedAt,
+		filename: juniorAttachments.filename,
+		id: juniorAttachments.id,
+		storageProvider: juniorAttachments.storageProvider,
+		storageKey: juniorAttachments.storageKey
+	}).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+	if (!row) return null;
+	if (await isConversationPurged(args.db, args.conversationId)) return null;
+	return {
+		bytes: row.bytes,
+		contentType: row.contentType,
+		conversationId: row.conversationId,
+		filename: row.filename,
+		id: row.id,
+		storageKey: row.storageKey,
+		storageProvider: row.storageProvider
+	};
+}
+/** Persist many conversation-owned files. */
+async function storeAttachments(args) {
+	const stored = [];
+	for (const file of args.files) stored.push(await storeAttachment({
+		conversationId: args.conversationId,
+		db: args.db,
+		file,
+		...args.nowMs !== void 0 ? { nowMs: args.nowMs } : void 0,
+		storage: args.storage
+	}));
+	return stored;
+}
+/** Mark attachments unavailable when their conversation content is purged. */
+async function requestAttachmentDeletion(db, conversationIds, nowMs) {
+	if (conversationIds.length === 0) return;
+	await db.db().update(juniorAttachments).set({ deleteRequestedAt: new Date(nowMs) }).where(and(inArray(juniorAttachments.conversationId, conversationIds), isNull(juniorAttachments.deleteRequestedAt)));
+}
+/**
+* Delete purged attachments in one bounded batch.
+*
+* Eligible rows are 30 days old, explicitly purge-marked, or owned by a
+* conversation whose transcript is already purged. Delete object keys first,
+* then remove rows that are still eligible so a failed blob delete remains
+* retryable.
+*/
+async function collectAttachmentGarbage(args) {
+	const expiresBefore = /* @__PURE__ */ new Date(args.nowMs - ATTACHMENT_RETENTION_MS);
+	const rows = await args.db.db().select({
+		id: juniorAttachments.id,
+		storageKey: juniorAttachments.storageKey
+	}).from(juniorAttachments).innerJoin(juniorConversations, eq(juniorAttachments.conversationId, juniorConversations.conversationId)).where(and(eq(juniorAttachments.storageProvider, args.storage.provider), or(lte(juniorAttachments.createdAt, expiresBefore), isNotNull(juniorAttachments.deleteRequestedAt), isNotNull(juniorConversations.transcriptPurgedAt)))).orderBy(asc(juniorAttachments.createdAt), asc(juniorAttachments.id)).limit(args.limit ?? ATTACHMENT_GC_BATCH_LIMIT);
+	if (rows.length === 0) return { deleted: 0 };
+	await args.storage.delete(rows.map((row) => row.storageKey));
+	const stillEligible = await args.db.db().select({ id: juniorAttachments.id }).from(juniorAttachments).innerJoin(juniorConversations, eq(juniorAttachments.conversationId, juniorConversations.conversationId)).where(and(inArray(juniorAttachments.id, rows.map((row) => row.id)), or(lte(juniorAttachments.createdAt, expiresBefore), isNotNull(juniorAttachments.deleteRequestedAt), isNotNull(juniorConversations.transcriptPurgedAt))));
+	if (stillEligible.length === 0) return { deleted: 0 };
+	return { deleted: (await args.db.db().delete(juniorAttachments).where(inArray(juniorAttachments.id, stillEligible.map((row) => row.id))).returning({ id: juniorAttachments.id })).length };
+}
+//#endregion
 //#region src/chat/slack/tools/send-files.ts
 const sendFilesResultSchema = juniorToolOutputSchema.extend({
 	deduplicated: z.boolean().optional(),
@@ -11505,7 +14267,7 @@ function createSlackCanvasWriteTool(state) {
 //#endregion
 //#region src/chat/slack/tool-support/list/api.ts
 function normalizeKey(value) {
-	return value.toLowerCase().replace(/[^a-z0-9]+/g, "_");
+	return (value ?? "").toLowerCase().replace(/[^a-z0-9]+/g, "_");
 }
 /** Infer well-known column roles (title, completed, assignee, due date) from a list schema. */
 function inferListColumnMap(schema = []) {
@@ -11590,11 +14352,10 @@ async function createTodoList(name) {
 /** Read a Slack list schema and map its standard columns. */
 async function getListColumnMap(listId) {
 	const client = getSlackClient();
-	const file = (await withSlackRetries(() => client.files.info({ file: listId }), 3, {
+	return inferListColumnMap((await withSlackRetries(() => client.files.info({ file: listId }), 3, {
 		action: "files.info",
 		idempotent: true
-	})).file;
-	return inferListColumnMap(file?.list_metadata?.schema ?? []);
+	})).file?.list_metadata?.schema);
 }
 /** Add one or more items to an existing Slack list. */
 async function addListItems(input) {
@@ -12097,25 +14858,6 @@ function renderAttachmentText(input) {
 	return getAttachmentPayload(input).slice(0, MAX_ATTACHMENTS).map(renderAttachment).filter((line) => line.length > 0).map((line) => `[attachment] ${line}`).join("\n").slice(0, MAX_ATTACHMENT_TEXT_CHARS);
 }
 //#endregion
-//#region src/chat/slack/attachments.ts
-/** Save the vision summary for a stored Slack attachment. */
-async function recordSlackAttachment(args) {
-	await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
-}
-/** Read a saved vision summary for one live attachment. */
-async function readAttachmentVisionSummary(args) {
-	const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
-	return row?.visionSummary;
-}
-/** Match live conversation attachments to Slack file ids. */
-async function matchSlackAttachments(args) {
-	if (args.providerIds.length === 0) return [];
-	return await args.db.db().select({
-		id: juniorAttachments.id,
-		providerId: juniorAttachments.providerId
-	}).from(juniorAttachments).where(and(eq(juniorAttachments.conversationId, args.conversationId), eq(juniorAttachments.provider, "slack"), inArray(juniorAttachments.providerId, args.providerIds), isNull(juniorAttachments.deleteRequestedAt)));
-}
-//#endregion
 //#region src/chat/slack/tools/thread-read.ts
 const MAX_THREAD_READ_CHARS = 4e4;
 /**
@@ -12289,10 +15031,15 @@ function createSlackThreadReadTool(context, attachmentDeps) {
 }
 //#endregion
 //#region src/chat/slack/users.ts
+const profileFieldsSchema = z.object({ fields: z.record(z.string(), z.object({
+	value: z.string().optional(),
+	alt: z.string().optional(),
+	label: z.string().optional()
+}).nullable()).nullish() });
 function normalizeUser(raw) {
-	const rawFields = raw.profile?.fields;
+	const rawFields = profileFieldsSchema.parse(raw.profile ?? {}).fields;
 	const profileFields = [];
-	if (rawFields && typeof rawFields === "object") for (const [id, field] of Object.entries(rawFields)) {
+	if (rawFields) for (const [id, field] of Object.entries(rawFields)) {
 		if (!field) continue;
 		profileFields.push({
 			id,
@@ -12341,7 +15088,7 @@ async function lookupSlackUserByEmail(email) {
 	try {
 		result = await withSlackRetries(() => client.users.lookupByEmail({ email }), 3, { action: "users.lookupByEmail" });
 	} catch (error) {
-		if (error.apiError === "users_not_found") return null;
+		if (error instanceof SlackActionError && error.apiError === "users_not_found") return null;
 		throw error;
 	}
 	const user = result.user;
@@ -14002,6 +16749,32 @@ function createWriteFileTool() {
 	});
 }
 //#endregion
+//#region src/stats.ts
+function utcDate(nowMs) {
+	return new Date(nowMs).toISOString().slice(0, 10);
+}
+/** Increment one daily named counter. */
+async function incrementStat(key, options = {}) {
+	const date = utcDate(options.nowMs ?? Date.now());
+	await getDb().insert(juniorStats).values({
+		...key,
+		date,
+		count: 1
+	}).onConflictDoUpdate({
+		target: [
+			juniorStats.date,
+			juniorStats.namespace,
+			juniorStats.metric,
+			juniorStats.name
+		],
+		set: { count: sql`${juniorStats.count} + 1` }
+	});
+}
+/** Read daily counters inside an inclusive UTC date range. */
+async function readStats(start, end) {
+	return await getDb().select().from(juniorStats).where(and(gte(juniorStats.date, start), lte(juniorStats.date, end))).orderBy(asc(juniorStats.date), asc(juniorStats.namespace), asc(juniorStats.metric), asc(juniorStats.name));
+}
+//#endregion
 //#region src/chat/workspaces/tools.ts
 /** Record optional reporting without changing the switchWorkspace outcome. */
 async function tryRecordWorkspaceSwitchStat(workspace) {
@@ -14520,53 +17293,6 @@ function buildSandboxInput(toolName, params) {
 	return params;
 }
 //#endregion
-//#region src/chat/services/pending-auth.ts
-const AUTH_LINK_REUSE_WINDOW_MS = 6e5;
-const NON_REQUEST_SKIPPED_REASON_PREFIXES = ["directed_to_other_party:", "side_conversation:"];
-function isSkippedNonRequest(reason) {
-	return NON_REQUEST_SKIPPED_REASON_PREFIXES.some((prefix) => reason?.startsWith(prefix));
-}
-/** Decide whether the same agent-run session can reuse its fresh auth link. */
-function canReusePendingAuthLink(args) {
-	const { pendingAuth } = args;
-	if (!pendingAuth) return false;
-	return pendingAuth.kind === args.kind && pendingAuth.provider === args.provider && pendingAuth.actorId === args.actorId && pendingAuth.scope === args.scope && pendingAuth.sessionId === args.sessionId && pendingAuth.linkSentAtMs + AUTH_LINK_REUSE_WINDOW_MS > (args.nowMs ?? Date.now());
-}
-function getConversationPendingAuth(args) {
-	const pendingAuth = args.conversation.processing.pendingAuth;
-	if (!pendingAuth) return;
-	if (pendingAuth.kind !== args.kind || pendingAuth.provider !== args.provider || pendingAuth.actorId !== args.actorId || pendingAuth.scope !== args.scope) return;
-	return pendingAuth;
-}
-function clearPendingAuth(conversation, sessionId) {
-	if (!conversation.processing.pendingAuth) return;
-	if (sessionId && conversation.processing.pendingAuth.sessionId !== sessionId) return;
-	conversation.processing.pendingAuth = void 0;
-}
-/** Mark the prior blocked turn abandoned after a new auth attempt replaces it. */
-async function abandonReplacedPendingAuth(args) {
-	if (args.previousPendingAuth && args.previousPendingAuth.sessionId !== args.nextPendingAuth.sessionId && args.conversationId) await abandonTurnRecord({
-		conversationId: args.conversationId,
-		turnId: args.previousPendingAuth.sessionId,
-		errorMessage: "Abandoned by a newer auth-blocked request in the same conversation."
-	});
-}
-/**
-* Decide whether an auth callback still belongs to the latest real human
-* request, ignoring bot-authored and passive bystander rows while treating
-* failed human turns and opt-outs as newer freshness blockers.
-*/
-function isPendingAuthLatestRequest(conversation, pendingAuth) {
-	for (let index = conversation.messages.length - 1; index >= 0; index -= 1) {
-		const message = conversation.messages[index];
-		if (message?.role !== "user") continue;
-		if (message.author?.isBot) continue;
-		if (isSkippedNonRequest(message.meta?.skippedReason)) continue;
-		return buildDeterministicTurnId(message.id) === pendingAuth.sessionId;
-	}
-	return false;
-}
-//#endregion
 //#region src/chat/services/plugin-auth-orchestration.ts
 var PluginAuthorizationPauseError = class extends AuthorizationPauseError {
 	constructor(provider, providerDisplayName, disposition, requestText) {
@@ -15600,7 +18326,7 @@ function parseMcpAuthSession(value) {
 	if (typeof value !== "string") return;
 	try {
 		const parsed = JSON.parse(value);
-		if (!isRecord$2(parsed)) return;
+		if (!isRecord$3(parsed)) return;
 		if (parsed.schemaVersion !== 2 || typeof parsed.authSessionId !== "string" || typeof parsed.provider !== "string" || typeof parsed.userId !== "string" || typeof parsed.conversationId !== "string" || typeof parsed.sessionId !== "string" || typeof parsed.userMessage !== "string" || typeof parsed.createdAtMs !== "number" || typeof parsed.updatedAtMs !== "number") return;
 		const destination = parsed.destination === void 0 ? void 0 : parseDestination(parsed.destination);
 		if (parsed.destination !== void 0 && !destination) return;
@@ -15621,7 +18347,7 @@ function parseMcpAuthSession(value) {
 			...typeof parsed.channelId === "string" ? { channelId: parsed.channelId } : void 0,
 			...typeof parsed.threadTs === "string" ? { threadTs: parsed.threadTs } : void 0,
 			...typeof parsed.toolChannelId === "string" ? { toolChannelId: parsed.toolChannelId } : void 0,
-			...isRecord$2(parsed.configuration) ? { configuration: parsed.configuration } : void 0,
+			...isRecord$3(parsed.configuration) ? { configuration: parsed.configuration } : void 0,
 			...typeof parsed.authorizationUrl === "string" ? { authorizationUrl: parsed.authorizationUrl } : void 0,
 			...typeof parsed.codeVerifier === "string" ? { codeVerifier: parsed.codeVerifier } : void 0
 		};
@@ -15633,7 +18359,7 @@ function parseServerSession(value) {
 	if (typeof value !== "string") return;
 	try {
 		const parsed = JSON.parse(value);
-		if (!isRecord$2(parsed) || typeof parsed.sessionId !== "string" || typeof parsed.updatedAtMs !== "number") return;
+		if (!isRecord$3(parsed) || typeof parsed.sessionId !== "string" || typeof parsed.updatedAtMs !== "number") return;
 		return {
 			sessionId: parsed.sessionId,
 			updatedAtMs: parsed.updatedAtMs
@@ -15646,11 +18372,11 @@ function parseStoredCredentials(value) {
 	if (typeof value !== "string") return;
 	try {
 		const parsed = JSON.parse(value);
-		if (!isRecord$2(parsed)) return;
+		if (!isRecord$3(parsed)) return;
 		return {
-			...isRecord$2(parsed.clientInformation) ? { clientInformation: parsed.clientInformation } : void 0,
-			...isRecord$2(parsed.discoveryState) ? { discoveryState: parsed.discoveryState } : void 0,
-			...isRecord$2(parsed.tokens) ? { tokens: parsed.tokens } : void 0
+			...isRecord$3(parsed.clientInformation) ? { clientInformation: parsed.clientInformation } : void 0,
+			...isRecord$3(parsed.discoveryState) ? { discoveryState: parsed.discoveryState } : void 0,
+			...isRecord$3(parsed.tokens) ? { tokens: parsed.tokens } : void 0
 		};
 	} catch {
 		return;
@@ -19004,7 +21730,7 @@ async function executeAgentRunInPrivacyContext(run, conversationPrivacy, runLogC
 							...getProviderErrorAttributes(providerRetry.providerError),
 							"app.ai.provider_error.retry_attempt": providerRetryAttempt
 						});
-						await sleep$1(providerRetry.delayMs, signal);
+						await sleep$2(providerRetry.delayMs, signal);
 						run = agent.continue();
 					}
 				} catch (error) {
@@ -19170,7 +21896,7 @@ function createAgentRunner(execute, options) {
 	const canBindSpawn = Boolean(bindSpawnAgent) && isExperimentalFeatureEnabled("subagents");
 	return { run: async (run) => {
 		const spawnAgent = bindSpawnAgent && canBindSpawn && !isAgentRunFeatureDisabled(run.disabledFeatures, "subagents") ? bindSpawnAgent(run) : void 0;
-		return await execute({
+		const nextRun = {
 			...run,
 			environment: {
 				...run.environment,
@@ -19181,7 +21907,21 @@ function createAgentRunner(execute, options) {
 				...run.durability,
 				spawnAgent
 			} } : void 0
-		}, streamFn);
+		};
+		if (run.instruction.storedAttachments?.length) {
+			const { loadInputImages } = await import("./images-8siTAUNW.js").then((n) => n.n);
+			const storage = nextRun.environment?.attachmentStorage;
+			if (!storage) throw new Error("Attachment storage is unavailable.");
+			nextRun.instruction = {
+				...run.instruction,
+				attachments: await loadInputImages({
+					attachments: run.instruction.storedAttachments,
+					conversationId: run.conversationId,
+					storage
+				})
+			};
+		}
+		return await execute(nextRun, streamFn);
 	} };
 }
 async function waitForAgentSettlement(runPromise) {
@@ -19220,4 +21960,4 @@ async function runAgentWithTimeout(agentRunner, run, timeoutMs) {
 	}
 }
 //#endregion
-export { clearSandboxEgressSignals as $, renderAttachmentText as A, AgentInvocationLimitError as B, resolvePluginOAuthAccount as C, toolInvocationDestination as Ct, lookupSlackUserProfile as D, setConfigDefaults as Dt, unpublishedArtifactHeaders as E, getConfigDefaults as Et, getNextRunAtMs as F, isEventMailboxMetadata as G, processWorkspaceSnapshotJob as H, agentBindingSchema as I, recordFinishedTurnForAutomatedLimit as J, renderTaskInput as K, agentInvocationSchema as L, listThreadReplies as M, logScheduledAutomationRunSkipped as N, readAttachmentVisionSummary as O, scheduledAutomationRunAttributes as P, SANDBOX_EGRESS_PROXY_PATH as Q, createAgentInvocationSchema as R, latestProgressStatus as S, actorFromRun as St, readPublicArtifact as T, shouldEmitDevAgentTrace as Tt, ingestEvent as U, getMcpProviderErrorAttributes as V, EVENT_WAIT_MS as W, normalizeSandboxEgressTracePropagationDomains as X, resolveSandboxEgressProviderForHost as Y, shouldPropagateSandboxEgressTrace as Z, putMcpStoredOAuthCredentials as _, slackExternalRefIdSchema as _t, isExperimentalFeatureEnabled as a, parseOAuthStatePayload as at, getConversationPendingAuth as b, isVisionImageMediaType as bt, createContextCompactor as c, escapeSlackMrkdwnText as ct, deleteMcpAuthSession as d, normalizeSlackStatusText as dt, consumeSandboxEgressAuthRequiredSignal as et, deleteMcpAuthSessionsForUserProvider as f, truncateStatusText as ft, getMcpStoredOAuthCredentials as g, slackEntitySchema as gt, getMcpAuthSession as h, removeReactionFromMessage as ht, getExperimentalFeatures as i, formatProviderLabel as it, renderBlockText as j, recordSlackAttachment as k, executeCredentialedEgressRequest as l, formatSlackLink as lt, deleteMcpStoredOAuthCredentials as m, postSlackMessage as mt, runAgentWithTimeout as n, parseSandboxEgressCredentialToken as nt, setExperimentalFeatures as o, resolveBaseUrl as ot, deleteMcpServerSessionId as p, addReactionToMessage as pt, maybePostAutomatedTurnLimitNotice as q, experimental_exports as r, sandboxEgressSignalsResponseSchema as rt, executeAgentRun as s, startOAuthFlow as st, createAgentRunner as t, consumeSandboxEgressPermissionDeniedSignal as tt, finalizeMcpAuthorization as u, normalizeSlackReplyMarkdown as ut, PluginCredentialFailureError as v, createUserTokenStore as vt, publicArtifactHeaders as w, AuthorizationFlowDisabledError as wt, isPendingAuthLatestRequest as x, RetryableDeliveryError as xt, clearPendingAuth as y, buildSteeringPiMessage as yt, AgentInvocationBusyError as z };
+export { collectEventAutomationMatchKeys as $, recordFinishedTurnForAutomatedLimit as $t, requestAttachmentDeletion as A, getConfigDefaults as An, deadLetterAttempt as At, isListedScheduledAutomation as B, removeActiveConversation as Bt, readPublicArtifact as C, createUserTokenStore as Cn, cancelHumanFacingPendingMessages as Ct, renderBlockText as D, toolInvocationDestination as Dn, completeConversationStop as Dt, renderAttachmentText as E, actorFromRun as En, clearExpiredConversationLease as Et, resolveSlackChannelIdFromThreadId as F, hasRunnableConversationWork as Ft, readScheduledAutomation as G, CONVERSATION_WORK_CHECK_IN_INTERVAL_MS as Gt, listScheduledAutomations as H, requestConversationWork as Ht, listThreadReplies as I, listActiveConversationIds as It, scheduledRunId as J, hasRunnableConversationWork$1 as Jt, saveScheduledAutomation as K, CONVERSATION_WORK_STALE_ENQUEUE_MS as Kt, logScheduledAutomationRunSkipped as L, recordAttemptFailure as Lt, parseSlackThreadId as M, ensureConversationWake as Mt, readSlackRawMessageContext as N, getConversation as Nt, collectAttachmentGarbage as O, AuthorizationFlowDisabledError as On, completeConversationWork as Ot, resolveSlackChannelIdFromMessage as P, getConversationWorkState as Pt, effectiveTaskOutcomes as Q, maybePostAutomatedTurnLimitNotice as Qt, scheduledAutomationRunAttributes as R, recordConversationRetry as Rt, publicArtifactHeaders as S, slackExternalRefIdSchema as Sn, beginConversationResume as St, lookupSlackUserProfile as T, RetryableDeliveryError as Tn, clearConsumedConversationWake as Tt, listScheduledAutomationsForTeam as U, startConversationWork as Ut, listPublicScheduledAutomationsForTeams as V, requestAnotherSlice as Vt, parseScheduledAutomationRow as W, stopConversationWork as Wt, scheduledRunSchema as X, isInvalidConversationRecordError as Xt, withScheduledAutomationLock as Y, isFinalAttempt as Yt, eventAutomationTriggerAvailable as Z, renderTaskInput as Zt, putMcpStoredOAuthCredentials as _, truncateStatusText as _n, getEventCatalog as _t, isExperimentalFeatureEnabled as a, consumeSandboxEgressAuthRequiredSignal as an, listEventAutomationsCreatedBy as at, readStats as b, removeReactionFromMessage as bn, appendAndEnqueueExclusiveInboundMessage as bt, createContextCompactor as c, sandboxEgressSignalsResponseSchema as cn, agentInvocationSchema as ct, deleteMcpAuthSession as d, resolveBaseUrl as dn, AgentInvocationLimitError as dt, resolveSandboxEgressProviderForHost as en, deleteEventAutomation as et, deleteMcpAuthSessionsForUserProvider as f, startOAuthFlow as fn, getMcpProviderErrorAttributes as ft, getMcpStoredOAuthCredentials as g, normalizeSlackStatusText as gn, isEventMailboxMetadata as gt, getMcpAuthSession as h, normalizeSlackReplyMarkdown as hn, EVENT_WAIT_MS as ht, getExperimentalFeatures as i, clearSandboxEgressSignals as in, listDeletedEventAutomationsCreatedBy as it, storeAttachment as j, setConfigDefaults as jn, drainConversationMailbox as jt, readLiveAttachment as k, shouldEmitDevAgentTrace as kn, countPendingConversationMessages as kt, executeCredentialedEgressRequest as l, formatProviderLabel as ln, createAgentInvocationSchema as lt, deleteMcpStoredOAuthCredentials as m, formatSlackLink as mn, ingestEvent as mt, runAgentWithTimeout as n, shouldPropagateSandboxEgressTrace as nn, findMatchingEventAutomations as nt, setExperimentalFeatures as o, consumeSandboxEgressPermissionDeniedSignal as on, listPublicEventAutomationsForTeams as ot, deleteMcpServerSessionId as p, escapeSlackMrkdwnText as pn, processWorkspaceSnapshotJob as pt, saveScheduledAutomationInLock as q, hasConversationStop as qt, experimental_exports as r, SANDBOX_EGRESS_PROXY_PATH as rn, getEventAutomation as rt, executeAgentRun as s, parseSandboxEgressCredentialToken as sn, agentBindingSchema as st, createAgentRunner as t, normalizeSandboxEgressTracePropagationDomains as tn, eventAutomationBelongsToUser as tt, finalizeMcpAuthorization as u, parseOAuthStatePayload as un, AgentInvocationBusyError as ut, PluginCredentialFailureError as v, addReactionToMessage as vn, eventGuidance as vt, unpublishedArtifactHeaders as w, buildSteeringPiMessage as wn, checkInConversationWork as wt, resolvePluginOAuthAccount as x, slackEntitySchema as xn, appendAndEnqueueInboundMessage as xt, latestProgressStatus as y, postSlackMessage as yn, ackMessages as yt, getNextRunAtMs as z, releaseConversationWork as zt };