@sentry/junior 0.234.0 → 0.236.0

package/dist/{config-DuCzUoCo.js → config-JR9wke1W.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { S as toOptionalTrimmed, o as resolveGatewayModel } from "./client-BX5lJRqW.js";
-import { p as logWarn } from "./logging-Cox1Mgcv.js";
+import { S as toOptionalTrimmed, o as resolveGatewayModel } from "./client-Ch9Hg9NU.js";
+import { p as logWarn } from "./logging-B4sKwmCG.js";
 import { l as TURN_REASONING_LEVELS, s as modelProfileSchema, t as DEFAULT_MODEL_PROFILES, u as parseTurnReasoningLevel } from "./model-profile-BwU8mqwD.js";
 //#region src/chat/slack/emoji.ts
 const SLACK_EMOJI_NAME_RE = /^(?:[a-z0-9_+-]+)(?:::(?:skin-tone-[2-6]))?$/;
@@ -17,18 +17,21 @@ var config_exports = /* @__PURE__ */ __exportAll({
 	DEFAULT_SQL_STATEMENT_TIMEOUT_MS: () => DEFAULT_SQL_STATEMENT_TIMEOUT_MS,
 	FUNCTION_TIMEOUT_BUFFER_SECONDS: () => 20,
 	botConfig: () => botConfig,
-	configureFunctionMaxDurationSeconds: () => configureFunctionMaxDurationSeconds,
 	getChatConfig: () => getChatConfig,
 	getRuntimeMetadata: () => getRuntimeMetadata,
 	getSlackBotToken: () => getSlackBotToken,
 	getSlackClientId: () => getSlackClientId,
 	getSlackClientSecret: () => getSlackClientSecret,
-	getSlackReactionConfig: () => getSlackReactionConfig,
 	getSlackSigningSecret: () => getSlackSigningSecret,
 	readChatConfig: () => readChatConfig,
+	resetRuntimeConfig: () => resetRuntimeConfig,
+	restoreRuntimeConfig: () => restoreRuntimeConfig,
 	setBotModelConfig: () => setBotModelConfig,
+	setCrossActorMidRunMode: () => setCrossActorMidRunMode,
 	setProfiles: () => setProfiles,
-	setSlackReactionConfig: () => setSlackReactionConfig
+	setRuntimeLimits: () => setRuntimeLimits,
+	setSlackReactionConfig: () => setSlackReactionConfig,
+	snapshotRuntimeConfig: () => snapshotRuntimeConfig
 });
 const MIN_AGENT_TURN_TIMEOUT_MS = 1e4;
 const DEFAULT_AGENT_TURN_TIMEOUT_MS = 72e4;
@@ -231,7 +234,6 @@ function warnDeprecatedProfileEnv(env) {
 	});
 }
 function readBotConfig(env, functionMaxDurationSeconds) {
-	warnDeprecatedProfileEnv(env);
 	const maxTurnTimeoutMs = resolveMaxTurnTimeoutMs(functionMaxDurationSeconds);
 	const modelId = validateGatewayModelId(env.AI_MODEL) ?? DEFAULT_MODEL_ID;
 	const reasoningLevel = toOptionalTrimmed(env.AI_REASONING_LEVEL);
@@ -290,6 +292,7 @@ function readSqlStatementTimeoutMs(env) {
 /** Parse all chat configuration from environment variables. */
 function readChatConfig(env = process.env, functionMaxDurationSeconds = DEFAULT_FUNCTION_MAX_DURATION_SECONDS) {
 	const databaseUrl = readDatabaseUrl(env);
+	warnDeprecatedProfileEnv(env);
 	const resolvedFunctionMaxDurationSeconds = resolveFunctionMaxDurationSeconds(functionMaxDurationSeconds);
 	return {
 		bot: readBotConfig(env, resolvedFunctionMaxDurationSeconds),
@@ -319,12 +322,56 @@ function readChatConfig(env = process.env, functionMaxDurationSeconds = DEFAULT_
 }
 /** Chat configuration parsed once at module load from the process environment. */
 const chatConfig = readChatConfig(process.env);
-/** Apply the host execution budget injected by juniorNitro(). */
-function configureFunctionMaxDurationSeconds(functionMaxDurationSeconds) {
+/** Copy the runtime config so a failed app setup can restore it. */
+function snapshotRuntimeConfig() {
+	return {
+		bot: { ...chatConfig.bot },
+		completedReactionEmoji: chatConfig.slack.completedReactionEmoji,
+		conversationWorkSoftYieldAfterMs: chatConfig.conversationWorkSoftYieldAfterMs,
+		functionMaxDurationSeconds: chatConfig.functionMaxDurationSeconds,
+		processingReactionEmoji: chatConfig.slack.processingReactionEmoji
+	};
+}
+/** Replace the runtime config with a snapshot. */
+function restoreRuntimeConfig(snapshot) {
+	replaceBotConfig(snapshot.bot);
+	chatConfig.functionMaxDurationSeconds = snapshot.functionMaxDurationSeconds;
+	chatConfig.conversationWorkSoftYieldAfterMs = snapshot.conversationWorkSoftYieldAfterMs;
+	chatConfig.slack.completedReactionEmoji = snapshot.completedReactionEmoji;
+	chatConfig.slack.processingReactionEmoji = snapshot.processingReactionEmoji;
+}
+/**
+* Reset bot, limit, and Slack settings to the environment defaults and apply
+* the host execution budget. Each app calls this before it applies options.
+*/
+function resetRuntimeConfig(functionMaxDurationSeconds) {
 	const resolved = resolveFunctionMaxDurationSeconds(functionMaxDurationSeconds);
 	chatConfig.functionMaxDurationSeconds = resolved;
 	chatConfig.conversationWorkSoftYieldAfterMs = resolveConversationWorkSoftYieldAfterMs(resolved);
-	chatConfig.bot.turnTimeoutMs = parseAgentTurnTimeoutMs(process.env.AGENT_TURN_TIMEOUT_MS, resolveMaxTurnTimeoutMs(resolved));
+	replaceBotConfig(readBotConfig(process.env, resolved));
+	chatConfig.slack.completedReactionEmoji = DEFAULT_COMPLETED_REACTION_EMOJI;
+	chatConfig.slack.processingReactionEmoji = DEFAULT_PROCESSING_REACTION_EMOJI;
+}
+function replaceBotConfig(next) {
+	for (const key of Object.keys(chatConfig.bot)) delete chatConfig.bot[key];
+	Object.assign(chatConfig.bot, next);
+}
+function requirePositiveLimit(name, value) {
+	if (!Number.isSafeInteger(value) || value <= 0) throw new Error(`limits.${name} must be a positive integer`);
+	return value;
+}
+/** Apply limits from createApp(). Unset limits keep their defaults. */
+function setRuntimeLimits(limits) {
+	const bot = chatConfig.bot;
+	if (limits?.contextWindowTokens !== void 0) bot.contextWindowTokens = requirePositiveLimit("contextWindowTokens", limits.contextWindowTokens);
+	if (limits?.maxConsecutiveAutomatedTurns !== void 0) bot.maxConsecutiveAutomatedTurns = requirePositiveLimit("maxConsecutiveAutomatedTurns", limits.maxConsecutiveAutomatedTurns);
+	if (limits?.maxSlicesPerTurn !== void 0) bot.maxSlicesPerTurn = requirePositiveLimit("maxSlicesPerTurn", limits.maxSlicesPerTurn);
+	if (limits?.maxToolCallsPerTurn !== void 0) bot.maxToolCallsPerTurn = requirePositiveLimit("maxToolCallsPerTurn", limits.maxToolCallsPerTurn);
+	if (limits?.turnTimeoutMs !== void 0) bot.turnTimeoutMs = Math.min(requirePositiveLimit("turnTimeoutMs", limits.turnTimeoutMs), resolveMaxTurnTimeoutMs(chatConfig.functionMaxDurationSeconds));
+}
+/** Apply the Slack cross-actor steering mode from createApp(). */
+function setCrossActorMidRunMode(mode) {
+	chatConfig.bot.crossActorMidRunMode = parseCrossActorMidRunMode(mode);
 }
 /** Return the chat configuration (parsed once at startup). */
 function getChatConfig() {
@@ -367,17 +414,10 @@ function setProfiles(profiles, defaultProfile) {
 	botConfig.profiles = configuredProfiles;
 	botConfig.defaultProfile = selectedDefault;
 }
-/** Return the current Slack reaction emoji config. */
-function getSlackReactionConfig() {
-	return {
-		completedReactionEmoji: chatConfig.slack.completedReactionEmoji,
-		processingReactionEmoji: chatConfig.slack.processingReactionEmoji
-	};
-}
 /** Apply Slack reaction emoji overrides from createApp() options, validating names. */
 function setSlackReactionConfig(overrides) {
 	if (overrides.processingReactionEmoji !== void 0) chatConfig.slack.processingReactionEmoji = parseReactionEmoji("processingReactionEmoji", overrides.processingReactionEmoji, chatConfig.slack.processingReactionEmoji);
 	if (overrides.completedReactionEmoji !== void 0) chatConfig.slack.completedReactionEmoji = parseReactionEmoji("completedReactionEmoji", overrides.completedReactionEmoji, chatConfig.slack.completedReactionEmoji);
 }
 //#endregion
-export { getChatConfig as a, getSlackClientId as c, getSlackSigningSecret as d, setBotModelConfig as f, normalizeSlackEmojiName as h, configureFunctionMaxDurationSeconds as i, getSlackClientSecret as l, setSlackReactionConfig as m, botConfig as n, getRuntimeMetadata as o, setProfiles as p, config_exports as r, getSlackBotToken as s, DEFAULT_SQL_STATEMENT_TIMEOUT_MS as t, getSlackReactionConfig as u };
+export { snapshotRuntimeConfig as _, getRuntimeMetadata as a, getSlackClientSecret as c, restoreRuntimeConfig as d, setBotModelConfig as f, setSlackReactionConfig as g, setRuntimeLimits as h, getChatConfig as i, getSlackSigningSecret as l, setProfiles as m, botConfig as n, getSlackBotToken as o, setCrossActorMidRunMode as p, config_exports as r, getSlackClientId as s, DEFAULT_SQL_STATEMENT_TIMEOUT_MS as t, resetRuntimeConfig as u, normalizeSlackEmojiName as v };

package/dist/{conversation-CPjHYOV5.js → conversation-9Fxa1Zbq.js}

@@ -786,6 +786,7 @@ const conversationEventsQuerySchema = z.object({
 }).strict();
 const conversationFeedQuerySchema = z.object({
 	actorEmail: z.string().trim().email().transform((value) => value.toLowerCase()).optional(),
+	codeRepositoryId: z.string().uuid().optional(),
 	q: z.string().trim().max(200).optional(),
 	status: z.enum(["active", "archived"]).default("active")
 }).strict();
@@ -1269,7 +1270,19 @@ function validateConversationEvents(report, context) {
 		});
 	}
 }
+const forkConversationBodySchema = z.object({
+	/** Assistant reply that ends the copied history. */
+	messageId: z.string().min(1).max(500),
+	idempotencyKey: z.string().trim().min(1).max(200)
+}).strict();
+const forkConversationResponseSchema = z.object({ conversationId: z.string() }).strict();
 const conversationDetailReportSchema = conversationSummaryReportSchema.extend({
+	/** The viewer can fork this conversation from an assistant reply. */
+	canFork: z.boolean().optional(),
+	forkedFromConversationId: z.string().optional(),
+	/** Title of the fork source, when the viewer can open it. */
+	forkedFromTitle: z.string().optional(),
+	forks: z.array(z.string()).optional(),
 	brief: z.object({
 		content: conversationBriefSchema,
 		updatedAt: z.string().datetime(),
@@ -1355,4 +1368,4 @@ const conversationStatsReportSchema = z.object({
 	windowStart: z.string()
 }).strict();
 //#endregion
-export { encodeHistoryPayload as $, MAX_INPUT_IMAGE_BYTES as A, messageCardRef as B, conversationReportEventSchema as C, createConversationBodySchema as D, conversationSummaryReportSchema as E, briefLinkSchema as F, KNOWN_CONVERSATION_EVENT_TYPES as G, readMessageCardRefs as H, briefOutcomeStatusSchema as I, conversationTurnFailureCodeSchema as J, agentHistoryItemSchema as K, conversationBriefSchema as L, INPUT_IMAGE_TYPES as M, isVisionImageMediaType as N, createConversationMessageBodySchema as O, briefCodeChangeSchema as P, newConversationEventSchema as Q, parseBriefInput as R, conversationReportEventDataSchema as S, conversationStatsReportSchema as T, removedCardSchema as U, messageCardText as V, resolveMessageCards as W, decodeStoredConversationEvent as X, conversationTurnFailureReasonSchema as Y, historyReplacementSchema as Z, conversationParamsSchema as _, cancelConversationPendingMessagesBodySchema as a, conversationPendingMessageSchema as b, conversationAttachmentParamsSchema as c, conversationDetailReportSchema as d, contextProvenance as et, conversationEventHistorySchema as f, conversationFeedSchema as g, conversationFeedQuerySchema as h, archiveConversationResponseSchema as i, usageSchema as it, readMessageAttachments as j, MAX_INPUT_IMAGES as k, conversationAuxiliaryCostsSchema as l, conversationEventsQuerySchema as m, actorIdentitySchema as n, instructionProvenanceFor as nt, cancelConversationPendingMessagesResponseSchema as o, conversationEventPageSchema as p, conversationEventDataSchema as q, archiveConversationBodySchema as r, sameActorIdentity as rt, conversationActivityPreviewSchema as s, acceptedConversationMessageSchema as t, instructionActors as tt, conversationDetailQuerySchema as u, conversationPendingAuthorizationSchema as v, conversationStatsItemSchema as w, conversationPendingMessagesReportSchema as x, conversationPendingMessageDeliverySchema as y, annotationCard as z };
+export { historyReplacementSchema as $, forkConversationResponseSchema as A, parseBriefInput as B, conversationReportEventSchema as C, createConversationBodySchema as D, conversationSummaryReportSchema as E, isVisionImageMediaType as F, removedCardSchema as G, messageCardRef as H, briefCodeChangeSchema as I, agentHistoryItemSchema as J, resolveMessageCards as K, briefLinkSchema as L, MAX_INPUT_IMAGE_BYTES as M, readMessageAttachments as N, createConversationMessageBodySchema as O, INPUT_IMAGE_TYPES as P, decodeStoredConversationEvent as Q, briefOutcomeStatusSchema as R, conversationReportEventDataSchema as S, conversationStatsReportSchema as T, messageCardText as U, annotationCard as V, readMessageCardRefs as W, conversationTurnFailureCodeSchema as X, conversationEventDataSchema as Y, conversationTurnFailureReasonSchema as Z, conversationParamsSchema as _, cancelConversationPendingMessagesBodySchema as a, sameActorIdentity as at, conversationPendingMessageSchema as b, conversationAttachmentParamsSchema as c, conversationDetailReportSchema as d, newConversationEventSchema as et, conversationEventHistorySchema as f, conversationFeedSchema as g, conversationFeedQuerySchema as h, archiveConversationResponseSchema as i, instructionProvenanceFor as it, MAX_INPUT_IMAGES as j, forkConversationBodySchema as k, conversationAuxiliaryCostsSchema as l, conversationEventsQuerySchema as m, actorIdentitySchema as n, contextProvenance as nt, cancelConversationPendingMessagesResponseSchema as o, usageSchema as ot, conversationEventPageSchema as p, KNOWN_CONVERSATION_EVENT_TYPES as q, archiveConversationBodySchema as r, instructionActors as rt, conversationActivityPreviewSchema as s, acceptedConversationMessageSchema as t, encodeHistoryPayload as tt, conversationDetailQuerySchema as u, conversationPendingAuthorizationSchema as v, conversationStatsItemSchema as w, conversationPendingMessagesReportSchema as x, conversationPendingMessageDeliverySchema as y, conversationBriefSchema as z };

package/dist/{conversation-privacy-CSxvdSoV.js → conversation-privacy-au02dyZK.js}

@@ -1,4 +1,4 @@
-import { p as logWarn } from "./logging-Cox1Mgcv.js";
+import { p as logWarn } from "./logging-B4sKwmCG.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/chat/conversation-privacy.ts
 const SAFE_METADATA_KEY_LIMIT = 20;

package/dist/{credential-sync-BO4DfH9a.js → credential-sync-BWTA3LnL.js}

@@ -1,18 +1,18 @@
-import { Cn as postSlackMessage, Dn as createUserTokenStore, T as lookupSlackUserProfile, _ as putMcpStoredOAuthCredentials, d as deleteMcpAuthSession, g as getMcpStoredOAuthCredentials, h as getMcpAuthSession, hn as resolveBaseUrl, ht as getMcpProviderErrorAttributes, mn as parseOAuthStatePayload, pn as formatProviderLabel, u as finalizeMcpAuthorization, x as resolvePluginOAuthAccount } from "./agent-runner-DUkGlK89.js";
-import { f as escapeXml } from "./client-BX5lJRqW.js";
-import { d as logException, h as runBestEffort, p as logWarn } from "./logging-Cox1Mgcv.js";
-import { n as botConfig, o as getRuntimeMetadata } from "./config-DuCzUoCo.js";
+import { An as postSlackMessage, Pn as createUserTokenStore, T as lookupSlackUserProfile, _ as resolvePluginOAuthAccount, bn as parseOAuthStatePayload, d as getMcpAuthSession, f as getMcpStoredOAuthCredentials, o as finalizeMcpAuthorization, p as putMcpStoredOAuthCredentials, s as deleteMcpAuthSession, xn as resolveBaseUrl, xt as getMcpProviderErrorAttributes, yn as formatProviderLabel } from "./agent-runner-uP7QRc4c.js";
+import { f as escapeXml } from "./client-Ch9Hg9NU.js";
+import { d as logException, h as runBestEffort, p as logWarn } from "./logging-B4sKwmCG.js";
+import { a as getRuntimeMetadata, n as botConfig } from "./config-JR9wke1W.js";
 import { g as parseSlackUserId } from "./context-0Et9iVSB.js";
-import { U as getSlackClient, gn as upsertLinkedIdentity, hn as upsertIdentity, tn as getSqlExecutor } from "./agent-hooks-BcH6E48y.js";
-import { i as homeDir } from "./package-discovery-7a9YqLhE.js";
-import { n as buildOAuthTokenRequest, r as parseOAuthTokenResponse, u as hasRequiredOAuthScope } from "./registry-DiY6B8CN.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BSgsPVnr.js";
-import { t as discoverSkills } from "./skills-WttpPJUy.js";
-import { B as recordAuthorizationCompleted, s as getTurnRecord, z as recordAuthenticationLinked } from "./checkpoint-BNfXlq_1.js";
-import { E as acquireActiveLock, w as getStateAdapter } from "./profile-BdApelHS.js";
-import { i as getConversationPendingAuth } from "./pending-auth-DQhC3eSR.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-8tXZhu0y.js";
-import { n as deleteWebAuthorization, o as wakeAuthorizedTurn, s as wakePausedTurn } from "./web-authorization-BJggXofy.js";
+import { W as getSlackClient, _n as upsertLinkedIdentity, gn as upsertIdentity, nn as getSqlExecutor } from "./agent-hooks-Da_H0jHv.js";
+import { i as homeDir } from "./package-discovery-BVvSnQBB.js";
+import { n as buildOAuthTokenRequest, r as parseOAuthTokenResponse, u as hasRequiredOAuthScope } from "./registry-CXNv9fDX.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-C7339Cfm.js";
+import { t as discoverSkills } from "./skills-Dd8O9Aav.js";
+import { B as recordAuthenticationLinked, V as recordAuthorizationCompleted, s as getTurnRecord } from "./checkpoint-DaD7_Gsb.js";
+import { E as acquireActiveLock, w as getStateAdapter } from "./profile-BamYnmhO.js";
+import { i as getConversationPendingAuth } from "./pending-auth-WqF4Gh8Z.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-D3E29wZk.js";
+import { n as deleteWebAuthorization, o as wakeAuthorizedTurn, s as wakePausedTurn } from "./web-authorization-PPaoj2ns.js";
 import { n as relayLocalOAuthCallback } from "./oauth-relay-CdCnu80W.js";
 import path from "node:path";
 import { z } from "zod";

package/dist/{executor--jWf-Nnm.js → executor-BW9XWgUQ.js}

@@ -1,5 +1,6 @@
+import { d as logException } from "./logging-B4sKwmCG.js";
 import { g as startSpanManual } from "./sentry-CgWZM_kV.js";
-import "./config-DuCzUoCo.js";
+import "./config-JR9wke1W.js";
 import { n as juniorDestinations, r as timestamptz } from "./destinations-BeBiJeEM.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { getTableColumns, sql } from "drizzle-orm";
@@ -95,6 +96,7 @@ const juniorConversations = pgTable("junior_conversations", {
 	lastCheckpointAt: timestamptz("last_checkpoint_at"),
 	lastEnqueuedAt: timestamptz("last_enqueued_at"),
 	parentConversationId: text("parent_conversation_id").references(() => juniorConversations.conversationId),
+	forkedFromConversationId: text("forked_from_conversation_id").references(() => juniorConversations.conversationId, { onDelete: "set null" }),
 	rootConversationId: text("root_conversation_id").references(() => juniorConversations.conversationId),
 	transcriptPurgedAt: timestamptz("transcript_purged_at"),
 	durationMs: integer("duration_ms").notNull().default(0),
@@ -110,6 +112,7 @@ const juniorConversations = pgTable("junior_conversations", {
 	index("junior_conversations_actor_activity_idx").on(table.actorIdentityId, table.lastActivityAt.desc()),
 	index("junior_conversations_origin_idx").on(table.originType, table.originId, table.lastActivityAt.desc()),
 	index("junior_conversations_parent_idx").on(table.parentConversationId),
+	index("junior_conversations_forked_from_idx").on(table.forkedFromConversationId),
 	index("junior_conversations_root_idx").on(table.rootConversationId)
 ]);
 /** Select runtime conversation fields without reading the legacy archive column. */
@@ -458,6 +461,26 @@ const juniorAutomationExecutions = pgTable("junior_task_executions", {
 	index("junior_task_executions_conversation_time_idx").on(table.conversationId, table.executedAtMs)
 ]);
 //#endregion
+//#region src/db/schema/automation-versions.ts
+/** One saved Automation definition. Lifecycle and scheduler state are not versioned. */
+const juniorAutomationVersions = pgTable("junior_automation_versions", {
+	kind: text("kind").$type().notNull(),
+	automationId: text("automation_id").notNull(),
+	/** Starts at 1 and increases by 1 for each saved definition change. */
+	version: integer("version").notNull(),
+	createdAtMs: bigint("created_at_ms", { mode: "number" }).notNull(),
+	/** Slack principal that saved this definition. Null when unknown. */
+	editedBy: jsonb("edited_by"),
+	definition: jsonb("definition").notNull()
+}, (table) => [check("junior_automation_versions_kind_check", sql`${table.kind} in ('scheduled', 'event')`), primaryKey({
+	name: "junior_automation_versions_pk",
+	columns: [
+		table.kind,
+		table.automationId,
+		table.version
+	]
+})]);
+//#endregion
 //#region src/db/schema/scheduled-automations.ts
 const juniorSchedulerTasks = pgTable("junior_scheduler_tasks", {
 	id: text("id").primaryKey(),
@@ -564,6 +587,7 @@ const juniorSqlSchema = {
 	juniorSnapshots,
 	juniorStats,
 	juniorAutomationExecutions,
+	juniorAutomationVersions,
 	juniorSchedulerRuns,
 	juniorSchedulerTasks,
 	juniorUsers,
@@ -850,6 +874,7 @@ var NeonExecutor = class {
 	connectionString;
 	transactionClient = new AsyncLocalStorage();
 	savepointId = 0;
+	isolatedQueryId = 0;
 	constructor(pool, connectionString) {
 		this.pool = pool;
 		this.connectionString = connectionString;
@@ -863,6 +888,21 @@ var NeonExecutor = class {
 	async query(statement, params = []) {
 		return (await this.queryClient().query(statement, [...params])).rows;
 	}
+	async queryIsolated(statement, params = []) {
+		const client = traceQueries(await this.pool.connect(), {
+			connectionString: this.connectionString,
+			driver: "neon"
+		});
+		try {
+			return (await client.query({
+				name: `junior_isolated_${++this.isolatedQueryId}`,
+				text: statement,
+				values: [...params]
+			})).rows;
+		} finally {
+			client.release(true);
+		}
+	}
 	async migrate(config) {
 		await migrate(drizzle(this.queryClient(), { schema: juniorSqlSchema }), config);
 	}
@@ -941,11 +981,15 @@ var NeonExecutor = class {
 };
 /** Create the shared Neon-backed Junior SQL executor. */
 function createNeonJuniorSqlExecutor(args) {
-	return new NeonExecutor(new Pool({
+	const pool = new Pool({
 		connectionString: args.connectionString,
 		max: 3,
 		statement_timeout: args.statementTimeoutMs
-	}), args.connectionString);
+	});
+	pool.on("error", (error) => {
+		logException(error, "db.pool.client.failed", { "app.db.driver": "neon" });
+	});
+	return new NeonExecutor(pool, args.connectionString);
 }
 //#endregion
 //#region src/db/postgres.ts
@@ -955,6 +999,7 @@ var PostgresExecutor = class {
 	connectionString;
 	transactionClient = new AsyncLocalStorage();
 	savepointId = 0;
+	isolatedQueryId = 0;
 	constructor(pool, connectionString) {
 		this.pool = pool;
 		this.connectionString = connectionString;
@@ -968,6 +1013,21 @@ var PostgresExecutor = class {
 	async query(statement, params = []) {
 		return (await this.queryClient().query(statement, [...params])).rows;
 	}
+	async queryIsolated(statement, params = []) {
+		const client = traceQueries(await this.pool.connect(), {
+			connectionString: this.connectionString,
+			driver: "postgres"
+		});
+		try {
+			return (await client.query({
+				name: `junior_isolated_${++this.isolatedQueryId}`,
+				text: statement,
+				values: [...params]
+			})).rows;
+		} finally {
+			client.release(true);
+		}
+	}
 	async migrate(config) {
 		await migrate$1(drizzle$1(this.queryClient(), { schema: juniorSqlSchema }), config);
 	}
@@ -1046,12 +1106,16 @@ var PostgresExecutor = class {
 };
 /** Create the shared Node Postgres-backed Junior SQL executor. */
 function createPostgresJuniorSqlExecutor(args) {
-	return new PostgresExecutor(new Pool$1({
+	const pool = new Pool$1({
 		application_name: args.applicationName,
 		connectionString: args.connectionString,
 		max: 3,
 		statement_timeout: args.statementTimeoutMs
-	}), args.connectionString);
+	});
+	pool.on("error", (error) => {
+		logException(error, "db.pool.client.failed", { "app.db.driver": "postgres" });
+	});
+	return new PostgresExecutor(pool, args.connectionString);
 }
 //#endregion
 //#region src/db/executor.ts
@@ -1068,4 +1132,4 @@ function createJuniorSqlExecutor(args) {
 	});
 }
 //#endregion
-export { juniorCodeRepositories as C, juniorIdentities as D, juniorConversations as E, juniorUsers as O, juniorCodeChanges as S, conversationReadColumns as T, CONVERSATION_METRICS as _, juniorSchedulerRuns as a, juniorApiTokens as b, juniorStats as c, AGENT_INVOCATION_MAILBOX_STATUSES as d, juniorAgentBindings as f, juniorConversationBriefs as g, juniorConversationBindings as h, juniorWorkspaces as i, juniorArtifacts as k, juniorEventAutomations as l, juniorConversationParticipants as m, juniorSnapshots as n, juniorSchedulerTasks as o, juniorAgentInvocations as p, juniorWorkspaceRepos as r, juniorAutomationExecutions as s, createJuniorSqlExecutor as t, juniorLocationConfigurations as u, juniorConversationMetrics as v, juniorAttachments as w, juniorConversationAnnotations as x, juniorConversationEvents as y };
+export { juniorArtifacts as A, juniorCodeChanges as C, juniorConversations as D, conversationReadColumns as E, juniorIdentities as O, juniorConversationAnnotations as S, juniorAttachments as T, juniorConversationBriefs as _, juniorSchedulerRuns as a, juniorConversationEvents as b, juniorAutomationExecutions as c, juniorLocationConfigurations as d, AGENT_INVOCATION_MAILBOX_STATUSES as f, juniorConversationBindings as g, juniorConversationParticipants as h, juniorWorkspaces as i, juniorUsers as k, juniorStats as l, juniorAgentInvocations as m, juniorSnapshots as n, juniorSchedulerTasks as o, juniorAgentBindings as p, juniorWorkspaceRepos as r, juniorAutomationVersions as s, createJuniorSqlExecutor as t, juniorEventAutomations as u, CONVERSATION_METRICS as v, juniorCodeRepositories as w, juniorApiTokens as x, juniorConversationMetrics as y };

package/dist/{images-BaL19wFC.js → images-BdG7zcNf.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { j as storeAttachment, k as readLiveAttachment } from "./agent-runner-DUkGlK89.js";
-import { tn as getSqlExecutor } from "./agent-hooks-BcH6E48y.js";
-import "./conversation-CPjHYOV5.js";
+import { j as storeAttachment, k as readLiveAttachment } from "./agent-runner-uP7QRc4c.js";
+import { nn as getSqlExecutor } from "./agent-hooks-Da_H0jHv.js";
+import "./conversation-9Fxa1Zbq.js";
 //#region src/chat/attachments/images.ts
 var images_exports = /* @__PURE__ */ __exportAll({
 	decodeInputImages: () => decodeInputImages,

package/dist/instrumentation.js

@@ -1,6 +1,6 @@
-import { N as getDeploymentServiceVersion, P as getDeploymentTelemetryAttributes } from "./logging-Cox1Mgcv.js";
+import { N as getDeploymentServiceVersion, P as getDeploymentTelemetryAttributes } from "./logging-B4sKwmCG.js";
 import { _ as vercelAIIntegration, a as getClient, b as withStreamedSpan, c as init, o as getGlobalScope } from "./sentry-CgWZM_kV.js";
-import { n as getCurrentConversationPrivacy } from "./conversation-privacy-CSxvdSoV.js";
+import { n as getCurrentConversationPrivacy } from "./conversation-privacy-au02dyZK.js";
 import { t as consumePrivateTraceResultMarker } from "./private-trace-result-BLvBjy_e.js";
 //#region src/chat/sentry-payload-filter.ts
 const PAYLOAD_ATTRIBUTE_KEYS = /* @__PURE__ */ new Set([

package/dist/{job-queue-cwHVOwVZ.js → job-queue-BqXd0ZPV.js}

@@ -1,4 +1,4 @@
-import { a as getChatConfig } from "./config-DuCzUoCo.js";
+import { i as getChatConfig } from "./config-JR9wke1W.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";

package/dist/{logging-Cox1Mgcv.js → logging-B4sKwmCG.js}

@@ -1,5 +1,5 @@
 import { d as setTag, f as setUser, h as startSpan, i as getActiveSpan, l as logger, n as captureMessage, p as spanToJSON, s as getTraceData, t as captureException, y as withScope } from "./sentry-CgWZM_kV.js";
-import { t as JUNIOR_VERSION } from "./version-A7-RRBOE.js";
+import { t as JUNIOR_VERSION } from "./version-CWkIGcLU.js";
 import path from "node:path";
 import { styleText } from "node:util";
 import { ConfigError, configureSync, getConfig, getLogger } from "@logtape/logtape";

package/dist/nitro.d.ts

@@ -1,5 +1,5 @@
-import { n as JuniorDashboardOptions } from "./app-xk2-Id1T.js";
-import { n as JuniorPluginSet } from "./plugins-BT2l4We3.js";
+import { r as JuniorDashboardOptions } from "./app-MEd7wbF0.js";
+import { n as JuniorPluginSet } from "./plugins-CjfUP5gJ.js";
 //#region src/nitro.d.ts
 export type JuniorNitroDashboardOptions = JuniorDashboardOptions;
 export interface JuniorPluginModuleReference {

package/dist/nitro.js

@@ -1,9 +1,9 @@
-import { A as JUNIOR_RETENTION_ROUTE, D as JUNIOR_HEARTBEAT_ROUTE, E as JUNIOR_HEARTBEAT_CRON_SCHEDULE, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, k as JUNIOR_RETENTION_CRON_SCHEDULE } from "./logging-Cox1Mgcv.js";
-import { d as resolvePackageDir, t as discoverInstalledPluginPackageContent, u as isValidPackageName } from "./package-discovery-7a9YqLhE.js";
-import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-cwHVOwVZ.js";
+import { A as JUNIOR_RETENTION_ROUTE, D as JUNIOR_HEARTBEAT_ROUTE, E as JUNIOR_HEARTBEAT_CRON_SCHEDULE, O as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, T as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, j as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, k as JUNIOR_RETENTION_CRON_SCHEDULE } from "./logging-B4sKwmCG.js";
+import { d as resolvePackageDir, t as discoverInstalledPluginPackageContent, u as isValidPackageName } from "./package-discovery-BVvSnQBB.js";
+import { o as resolveConversationWorkQueueTopic, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-BqXd0ZPV.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "./plugins-egKWjgue.js";
-import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-CZqUNJD0.js";
-import { n as loadPluginSetFromModule, r as resolvePluginModule } from "./plugin-module-BKGOXca2.js";
+import { t as PLUGIN_TASK_QUEUE_TOPIC } from "./task-queue-DGQEOk1A.js";
+import { n as loadPluginSetFromModule, r as resolvePluginModule } from "./plugin-module-CVvEUSMH.js";
 import path from "node:path";
 import { cpSync, existsSync, mkdirSync, readdirSync, statSync } from "node:fs";
 //#region src/build/rolldown-workarounds.ts

package/dist/{oauth-authorization-CC8a1JKP.js → oauth-authorization-BjRN99dc.js}

@@ -1,4 +1,4 @@
-import { h as extractAssistantText } from "./checkpoint-BNfXlq_1.js";
+import { h as extractAssistantText } from "./checkpoint-DaD7_Gsb.js";
 //#region src/chat/runtime/turn.ts
 /** Classified Slack turn failure carrying the owning Sentry capture outward. */
 var ConversationTurnBoundaryError = class extends Error {

package/dist/{oauth-callback-server-Z7QSt416.js → oauth-callback-server-B_1p98Mb.js}

@@ -1,5 +1,5 @@
-import { Dn as createUserTokenStore } from "./agent-runner-DUkGlK89.js";
-import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-BO4DfH9a.js";
+import { Pn as createUserTokenStore } from "./agent-runner-uP7QRc4c.js";
+import { a as GET, n as syncLocalOAuthCredential, r as GET$1 } from "./credential-sync-BWTA3LnL.js";
 import { createServer } from "node:http";
 //#region src/chat/local/oauth-callback-server.ts
 const LOCAL_OAUTH_TIMEOUT_MS = 6e5;

package/dist/{pending-auth-DQhC3eSR.js → pending-auth-WqF4Gh8Z.js}

@@ -1,4 +1,4 @@
-import { i as abandonTurnRecord } from "./checkpoint-BNfXlq_1.js";
+import { i as abandonTurnRecord } from "./checkpoint-DaD7_Gsb.js";
 //#region src/chat/state/turn-id.ts
 /** Build a stable turn identifier from a message ID. */
 function buildDeterministicTurnId(messageId) {

package/dist/{plugins-BT2l4We3.d.ts → plugins-CjfUP5gJ.d.ts}

@@ -64,6 +64,7 @@ interface PluginManifestConfig {
     url?: string;
     headers?: Record<string, string | null> | null;
     auth?: PluginMcpConfig["auth"];
+    oauthClient?: PluginMcpConfig["oauthClient"];
     allowedTools?: string[] | null;
     wrappedTools?: string[] | null;
   } | null;

package/dist/{profile-BdApelHS.js → profile-BamYnmhO.js}

@@ -1,7 +1,7 @@
-import { S as toOptionalTrimmed } from "./client-BX5lJRqW.js";
-import { v as setSpanAttributes, y as setSpanStatus } from "./logging-Cox1Mgcv.js";
-import { a as getChatConfig } from "./config-DuCzUoCo.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BSgsPVnr.js";
+import { S as toOptionalTrimmed } from "./client-Ch9Hg9NU.js";
+import { v as setSpanAttributes, y as setSpanStatus } from "./logging-B4sKwmCG.js";
+import { i as getChatConfig } from "./config-JR9wke1W.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-C7339Cfm.js";
 import { createHash } from "node:crypto";
 import { createMemoryState } from "@chat-adapter/state-memory";
 import { createRedisState } from "@chat-adapter/state-redis";

package/dist/{prompt-3D0sSbTC.js → prompt-Ctwy6hSI.js}

@@ -1,4 +1,4 @@
-import { I as briefOutcomeStatusSchema, L as conversationBriefSchema, R as parseBriefInput } from "./conversation-CPjHYOV5.js";
+import { B as parseBriefInput, R as briefOutcomeStatusSchema, z as conversationBriefSchema } from "./conversation-9Fxa1Zbq.js";
 import { z } from "zod";
 //#region src/chat/briefs/generate.ts
 const MAX_INPUT_CHARS = 6e4;

package/dist/queue-B5SnqRln.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+//#region src/chat/task-execution/queue.d.ts
+/** Validate the v2 conversation work hint sent through Vercel Queue. */
+declare const conversationQueueMessageSchema: z.ZodObject<{
+  schemaVersion: z.ZodLiteral<2>;
+  conversationId: z.ZodString;
+}, z.core.$strict>;
+/** Conversation work hint accepted by the queue callback and worker. */
+type ConversationQueueMessage = z.output<typeof conversationQueueMessageSchema>;
+interface ConversationQueueSendOptions {
+  delayMs?: number;
+  idempotencyKey?: string;
+}
+interface ConversationQueueSendResult {
+  messageId?: string;
+}
+/**
+ * External transport for wake-up hints. Durable work stays in the mailbox;
+ * transports only need to accept one hint and may return a provider message id.
+ */
+interface ConversationWorkQueue {
+  send(message: ConversationQueueMessage, options?: ConversationQueueSendOptions): Promise<ConversationQueueSendResult | void>;
+}
+//#endregion
+export { ConversationWorkQueue as n, ConversationQueueMessage as t };

package/dist/{registry-DiY6B8CN.js → registry-CXNv9fDX.js}

@@ -1,6 +1,6 @@
-import { f as logInfo, p as logWarn, v as setSpanAttributes } from "./logging-Cox1Mgcv.js";
+import { f as logInfo, p as logWarn, v as setSpanAttributes } from "./logging-B4sKwmCG.js";
 import { i as credentialUserSubjectId } from "./context-0Et9iVSB.js";
-import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-7a9YqLhE.js";
+import { n as normalizePluginPackageNames, o as pluginRoots, t as discoverInstalledPluginPackageContent } from "./package-discovery-BVvSnQBB.js";
 import path from "node:path";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
@@ -39,6 +39,16 @@ function mcpAuthSource(auth) {
 		"private-key-env": auth.privateKeyEnv
 	};
 }
+/** Convert a camelCase `mcp.oauthClient` block to its plugin.yaml source keys. */
+function mcpOauthClientSource(oauthClient) {
+	const result = {
+		"client-id-env": oauthClient.clientIdEnv,
+		"client-secret-env": oauthClient.clientSecretEnv
+	};
+	setDefined$1(result, "scope", oauthClient.scope);
+	setDefined$1(result, "authorize-params", oauthClient.authorizeParams);
+	return result;
+}
 function inlineMcpSource(mcp) {
 	if (mcp === void 0 || !isRecord(mcp)) return mcp;
 	const result = {};
@@ -46,6 +56,7 @@ function inlineMcpSource(mcp) {
 	setDefined$1(result, "url", mcp.url);
 	setDefined$1(result, "headers", mcp.headers);
 	setDefined$1(result, "auth", mcp.auth && mcpAuthSource(mcp.auth));
+	setDefined$1(result, "oauth-client", mcp.oauthClient && mcpOauthClientSource(mcp.oauthClient));
 	setDefined$1(result, "allowed-tools", mcp.allowedTools);
 	setDefined$1(result, "wrapped-tools", mcp.wrappedTools);
 	return result;
@@ -233,11 +244,18 @@ const mcpAuthSourceSchema = z.object({
 	"key-id": nonEmptyTrimmedString,
 	"private-key-env": envVarString
 }).passthrough();
+const mcpOauthClientSourceSchema = z.object({
+	"client-id-env": envVarString,
+	"client-secret-env": envVarString,
+	scope: nonEmptyTrimmedString.optional(),
+	"authorize-params": stringMapSchema.optional()
+}).passthrough();
 const mcpSourceSchema = z.object({
 	transport: nonEmptyTrimmedString.refine((value) => value === "http", { error: "must be \"http\"" }).optional(),
 	url: httpsUrlString,
 	auth: mcpAuthSourceSchema.optional(),
 	headers: stringMapSchema.optional(),
+	"oauth-client": mcpOauthClientSourceSchema.optional(),
 	"allowed-tools": nonEmptyStringArraySchema("allowed-tools").optional(),
 	"wrapped-tools": nonEmptyStringArraySchema("wrapped-tools").optional()
 }).passthrough();
@@ -296,6 +314,7 @@ function manifestConfigPatch(config) {
 			setDefined(mcp, "url", config.mcp.url);
 			setDefined(mcp, "headers", config.mcp.headers);
 			setDefined(mcp, "auth", config.mcp.auth && mcpAuthSource(config.mcp.auth));
+			setDefined(mcp, "oauth-client", config.mcp.oauthClient && mcpOauthClientSource(config.mcp.oauthClient));
 			setDefined(mcp, "allowed-tools", config.mcp.allowedTools);
 			setDefined(mcp, "wrapped-tools", config.mcp.wrappedTools);
 			result.mcp = mcp;
@@ -422,6 +441,10 @@ function normalizeCommandEnv(value, prefix, envVars) {
 function hostOnlyEnvNames(manifest) {
 	const names = /* @__PURE__ */ new Set();
 	if (manifest.mcp?.auth) names.add(manifest.mcp.auth.privateKeyEnv);
+	if (manifest.mcp?.oauthClient) {
+		names.add(manifest.mcp.oauthClient.clientIdEnv);
+		names.add(manifest.mcp.oauthClient.clientSecretEnv);
+	}
 	for (const value of [...Object.values(manifest.apiHeaders ?? {}), ...Object.values(manifest.mcp?.headers ?? {})]) for (const name of envReferences(value)) names.add(name);
 	if (manifest.credentials?.authTokenEnv) names.add(manifest.credentials.authTokenEnv);
 	if (manifest.oauth) {
@@ -572,6 +595,13 @@ function normalizeMcp(data, envVars, name) {
 	const headers = result.data.headers ? normalizeStringMap(result.data.headers, `Plugin ${name} mcp.headers`, { forbiddenKeys: FORBIDDEN_API_HEADER_NAMES }) : void 0;
 	assertDeclaredHeaderEnvReferences(headers, envVars, `Plugin ${name} mcp.headers`);
 	if (result.data.auth) assertDeclaredHostSecretEnv(result.data.auth["private-key-env"], envVars, `Plugin ${name} mcp.auth.private-key-env`);
+	const oauthClient = result.data["oauth-client"];
+	if (oauthClient) {
+		if (result.data.auth) throw new Error(`Plugin ${name} mcp must not declare both auth and oauth-client`);
+		assertDeclaredHostSecretEnv(oauthClient["client-id-env"], envVars, `Plugin ${name} mcp.oauth-client.client-id-env`);
+		assertDeclaredHostSecretEnv(oauthClient["client-secret-env"], envVars, `Plugin ${name} mcp.oauth-client.client-secret-env`);
+	}
+	const oauthClientAuthorizeParams = oauthClient?.["authorize-params"] ? normalizeStringMap(oauthClient["authorize-params"], `Plugin ${name} mcp.oauth-client.authorize-params`, { reservedKeys: RESERVED_AUTHORIZE_PARAM_KEYS }) : void 0;
 	return {
 		transport: "http",
 		url: result.data.url,
@@ -581,6 +611,12 @@ function normalizeMcp(data, envVars, name) {
 			privateKeyEnv: result.data.auth["private-key-env"]
 		} } : void 0,
 		...headers ? { headers } : void 0,
+		...oauthClient ? { oauthClient: {
+			clientIdEnv: oauthClient["client-id-env"],
+			clientSecretEnv: oauthClient["client-secret-env"],
+			...oauthClient.scope ? { scope: oauthClient.scope } : void 0,
+			...oauthClientAuthorizeParams ? { authorizeParams: oauthClientAuthorizeParams } : void 0
+		} } : void 0,
 		...result.data["allowed-tools"] ? { allowedTools: result.data["allowed-tools"] } : void 0,
 		...result.data["wrapped-tools"] ? { wrappedTools: result.data["wrapped-tools"] } : void 0
 	};

package/dist/{resolve-VpJoiDpc.js → resolve-C9ETkt4T.js}

@@ -1,5 +1,5 @@
-import { v as setSpanAttributes, w as withSpan } from "./logging-Cox1Mgcv.js";
-import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-BdApelHS.js";
+import { v as setSpanAttributes, w as withSpan } from "./logging-B4sKwmCG.js";
+import { N as SANDBOX_WORKSPACE_ROOT, k as sleep, r as isStale, t as create, u as isSandboxUnavailableError, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-BamYnmhO.js";
 import { z } from "zod";
 import { FileSystem, Sandbox } from "@vercel/sandbox";
 //#region src/chat/sandbox/resources.ts