@sentry/junior 0.236.0 → 0.238.0

package/dist/{agent-hooks-Da_H0jHv.js → agent-hooks-CxdSqU2u.js}

@@ -1,2134 +1,632 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { a as embedTexts, r as completeObject } from "./client-Ch9Hg9NU.js";
-import { F as normalizeIdentityEmail, I as isRecord$2, a as extractGenAiUsageSummary, d as logException, f as logInfo, p as logWarn, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-B4sKwmCG.js";
+import { a as embedTexts, r as completeObject } from "./client-CKs0rj3A.js";
+import { I as isRecord$1, a as extractGenAiUsageSummary, d as logException, f as logInfo, p as logWarn, v as setSpanAttributes, w as withSpan, y as setSpanStatus } from "./logging-BNi_jyHb.js";
 import { a as getClient$1 } from "./sentry-CgWZM_kV.js";
-import { t as canExposeConversationPayload } from "./conversation-privacy-au02dyZK.js";
-import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-JR9wke1W.js";
+import { t as canExposeConversationPayload } from "./conversation-privacy-DAYxHp74.js";
+import { i as getChatConfig, n as botConfig, o as getSlackBotToken } from "./config-DRw358bB.js";
 import { r as defaultModelId } from "./model-profile-BwU8mqwD.js";
-import { b as parseSlackMessageTs, c as isActorUserId, h as parseSlackTeamId, m as parseSlackChannelReferenceId, u as parseActorUserId } from "./context-0Et9iVSB.js";
+import { d as parseSlackTeamId, g as parseSlackMessageTs, i as isActorUserId, o as parseActorUserId, u as parseSlackChannelReferenceId } from "./actor-BTtLaeWy.js";
+import { c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as createSqlStore, i as resolveViewerUser, r as readActorIdentity, w as hasAgentTurnUsage } from "./viewer-DsyM9kb9.js";
 import { n as juniorDestinations } from "./destinations-BeBiJeEM.js";
-import { C as juniorCodeChanges, D as juniorConversations, E as conversationReadColumns, O as juniorIdentities, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, b as juniorConversationEvents, g as juniorConversationBindings, h as juniorConversationParticipants, i as juniorWorkspaces, k as juniorUsers, n as juniorSnapshots, r as juniorWorkspaceRepos, t as createJuniorSqlExecutor, v as CONVERSATION_METRICS, w as juniorCodeRepositories, y as juniorConversationMetrics } from "./executor-BW9XWgUQ.js";
-import { $ as historyReplacementSchema, B as parseBriefInput, C as conversationReportEventSchema, N as readMessageAttachments, Q as decodeStoredConversationEvent, W as readMessageCardRefs, Y as conversationEventDataSchema, et as newConversationEventSchema, ot as usageSchema, tt as encodeHistoryPayload, z as conversationBriefSchema } from "./conversation-9Fxa1Zbq.js";
-import { C as getDefaultRedisStateAdapterFor, N as SANDBOX_WORKSPACE_ROOT, k as sleep$1, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-BamYnmhO.js";
-import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-Ctwy6hSI.js";
+import { C as juniorCodeChanges, D as juniorConversations, O as juniorIdentities, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, b as juniorConversationEvents, h as juniorConversationParticipants, i as juniorWorkspaces, k as juniorUsers, n as juniorSnapshots, r as juniorWorkspaceRepos, w as juniorCodeRepositories } from "./executor-DgPk8Lsx.js";
+import { o as decodeStoredConversationEvent } from "./history-BLTUgFYO.js";
+import { p as credentialSubjectSchema } from "./registry-D1RsbgDb.js";
+import { B as parseBriefInput, C as conversationReportEventSchema, N as readMessageAttachments, W as readMessageCardRefs, z as conversationBriefSchema } from "./conversation-DwD-vquD.js";
+import { C as getDefaultRedisStateAdapterFor, N as SANDBOX_WORKSPACE_ROOT, k as sleep$1, l as isSandboxMissingError, n as hash, v as getVercelSandboxCredentials, w as getStateAdapter, x as runNonInteractiveCommand } from "./profile-C2TScny6.js";
+import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-CMU-B4FA.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { z } from "zod";
 import { createHash, createHmac, randomUUID, timingSafeEqual } from "node:crypto";
-import { and, arrayContains, asc, desc, eq, exists, getTableColumns, gt, gte, inArray, isNotNull, isNull, lt, lte, max, ne, notExists, or, sql } from "drizzle-orm";
-import { codeChangeInputSchema, conversationAnnotationInputSchema, conversationEventPresentationSchema, defineConversationEvent, destinationSchema, eventInputSchema, eventMatchSchema, eventMatches, eventTypeSchema, identitySchema, locationSchema, missingToolAnnotationKeys, normalizeEventIdentifier, objectAnnotationSchema, objectIconPath, objectTypeSchema, pluginEventsSchema, promptContextSchema, promptMessageSchema, sourceSchema, stableEventMatchKey, userSchema } from "@sentry/junior-plugin-api";
+import { and, arrayContains, asc, desc, eq, exists, getTableColumns, gte, inArray, isNotNull, isNull, lt, lte, max, ne, notExists, or, sql } from "drizzle-orm";
+import { codeChangeInputSchema, conversationAnnotationInputSchema, conversationEventPresentationSchema, defineConversationEvent, eventInputSchema, eventMatchSchema, eventMatches, eventTypeSchema, missingToolAnnotationKeys, normalizeEventIdentifier, objectAnnotationSchema, objectIconPath, objectTypeSchema, pluginEventsSchema, promptContextSchema, promptMessageSchema, stableEventMatchKey } from "@sentry/junior-plugin-api";
 import { alias } from "drizzle-orm/pg-core";
 import { WebClient } from "@slack/web-api";
 import { Sandbox } from "@vercel/sandbox";
-//#region src/chat/destination.ts
-/** Build Junior's canonical destination from Slack workspace and channel ids. */
-function createSlackDestination(input) {
-	const channelId = parseSlackChannelReferenceId(input.channelId);
-	const teamId = parseSlackTeamId(input.teamId);
-	if (!channelId || !teamId) return;
-	return {
-		platform: "slack",
-		teamId,
-		channelId
-	};
-}
-/** Parse and validate a serialized destination that crossed a runtime boundary. */
-function parseDestination(value) {
-	const parsed = destinationSchema.safeParse(value);
-	return parsed.success ? parsed.data : void 0;
-}
-/** Require a Slack destination at a Slack-only runtime boundary. */
-function requireSlackDestination(destination, action) {
-	if (destination?.platform === "slack") return destination;
-	throw new Error(`${action} requires a Slack destination`);
-}
-/** Compare two destinations without relying on object identity. */
-function sameDestination(left, right) {
-	if (left.platform !== right.platform) return false;
-	if (left.platform === "local" && right.platform === "local") return left.conversationId === right.conversationId;
-	if (left.platform === "slack" && right.platform === "slack") return left.teamId === right.teamId && left.channelId === right.channelId;
-	return false;
-}
-//#endregion
-//#region src/chat/identities/sql.ts
-function dateFromMs$1(ms) {
-	return new Date(ms);
-}
-function tenantId$1(value) {
-	return value ?? "";
-}
-async function upsertUser(executor, args) {
-	const id = (await executor.db().insert(juniorUsers).values({
-		id: randomUUID(),
-		primaryEmail: args.email,
-		primaryEmailNormalized: args.emailNormalized,
-		displayName: args.displayName ?? null,
-		createdAt: dateFromMs$1(args.nowMs),
-		updatedAt: dateFromMs$1(args.nowMs)
-	}).onConflictDoUpdate({
-		target: juniorUsers.primaryEmailNormalized,
-		set: {
-			displayName: sql`coalesce(${juniorUsers.displayName}, excluded.display_name)`,
-			updatedAt: sql`excluded.updated_at`
-		}
-	}).returning({ id: juniorUsers.id }))[0]?.id;
-	if (!id) throw new Error("User identity upsert returned no row");
-	return id;
-}
-async function existingIdentity(executor, identity) {
-	return (await executor.db().select().from(juniorIdentities).where(and(eq(juniorIdentities.provider, identity.provider), eq(juniorIdentities.providerTenantId, tenantId$1(identity.providerTenantId)), eq(juniorIdentities.providerSubjectId, identity.providerSubjectId))))[0];
-}
-async function upsertIdentityRecord(executor, identity, linkedUserId, nowMs) {
-	const emailNormalized = normalizeIdentityEmail(identity.email);
-	const email = emailNormalized ? identity.email?.trim() || emailNormalized : void 0;
-	const existing = await existingIdentity(executor, identity);
-	const userEmailNormalized = existing?.emailVerified && existing.emailNormalized ? existing.emailNormalized : identity.emailVerified ? emailNormalized : void 0;
-	const userEmail = existing?.emailVerified && existing.email ? existing.email : email ?? userEmailNormalized;
-	const verifiedUserId = identity.kind === "user" && userEmailNormalized ? await upsertUser(executor, {
-		email: userEmail ?? userEmailNormalized,
-		emailNormalized: userEmailNormalized,
-		nowMs,
-		...existing?.displayName || identity.displayName ? { displayName: existing?.displayName ?? identity.displayName } : void 0
-	}) : void 0;
-	if (existing?.userId && verifiedUserId && existing.userId !== verifiedUserId) throw new Error("Identity verified email conflicts with linked user");
-	if (linkedUserId && verifiedUserId && linkedUserId !== verifiedUserId) throw new Error("Linked identity conflicts with verified email user");
-	if (existing?.userId && linkedUserId && existing.userId !== linkedUserId) throw new Error("Identity conflicts with linked user");
-	const userId = existing?.userId ?? linkedUserId ?? verifiedUserId;
-	const row = (await executor.db().insert(juniorIdentities).values({
-		id: randomUUID(),
-		userId: userId ?? null,
-		kind: identity.kind,
-		provider: identity.provider,
-		providerTenantId: tenantId$1(identity.providerTenantId),
-		providerSubjectId: identity.providerSubjectId,
-		displayName: identity.displayName ?? null,
-		handle: identity.handle ?? null,
-		email: email ?? null,
-		emailNormalized: emailNormalized ?? null,
-		emailVerified: Boolean(identity.emailVerified && emailNormalized),
-		avatarUrl: null,
-		metadata: identity.metadata ?? null,
-		createdAt: dateFromMs$1(nowMs),
-		updatedAt: dateFromMs$1(nowMs)
-	}).onConflictDoUpdate({
-		target: [
-			juniorIdentities.provider,
-			juniorIdentities.providerTenantId,
-			juniorIdentities.providerSubjectId
-		],
-		set: {
-			kind: sql`excluded.kind`,
-			userId: sql`coalesce(${juniorIdentities.userId}, excluded.user_id)`,
-			displayName: linkedUserId ? sql`coalesce(excluded.display_name, ${juniorIdentities.displayName})` : sql`coalesce(${juniorIdentities.displayName}, excluded.display_name)`,
-			handle: linkedUserId ? sql`coalesce(excluded.handle, ${juniorIdentities.handle})` : sql`coalesce(${juniorIdentities.handle}, excluded.handle)`,
-			email: sql`case when ${juniorIdentities.emailVerified} then coalesce(${juniorIdentities.email}, excluded.email) when excluded.email_verified then excluded.email else coalesce(${juniorIdentities.email}, excluded.email) end`,
-			emailNormalized: sql`case when ${juniorIdentities.emailVerified} then coalesce(${juniorIdentities.emailNormalized}, excluded.email_normalized) when excluded.email_verified then excluded.email_normalized else coalesce(${juniorIdentities.emailNormalized}, excluded.email_normalized) end`,
-			emailVerified: sql`${juniorIdentities.emailVerified} OR excluded.email_verified`,
-			avatarUrl: sql`coalesce(${juniorIdentities.avatarUrl}, excluded.avatar_url)`,
-			metadata: sql`coalesce(${juniorIdentities.metadata}, excluded.metadata_json)`,
-			updatedAt: sql`excluded.updated_at`
-		},
-		...linkedUserId ? { setWhere: sql`${juniorIdentities.userId} IS NULL OR ${juniorIdentities.userId} = excluded.user_id` } : void 0
-	}).returning({
-		id: juniorIdentities.id,
-		userId: juniorIdentities.userId
-	}))[0];
-	if (!row) {
-		if (linkedUserId) throw new Error("Identity conflicts with linked user");
-		throw new Error("Identity upsert returned no row");
-	}
-	return {
-		id: row.id,
-		...row.userId ? { userId: row.userId } : void 0
-	};
-}
-/** Persist one provider identity observation and link verified emails to users. */
-async function upsertIdentity(executor, identity, nowMs = Date.now()) {
-	return await upsertIdentityRecord(executor, identity, void 0, nowMs);
-}
-/**
-* Persist one provider identity after a trusted account-linking flow.
-* Callers must use provider-verified account data, such as GitHub's authenticated
-* user response, never identity claims inferred from content such as Git commits.
-*/
-async function upsertLinkedIdentity(executor, userId, identity, nowMs = Date.now()) {
-	return await upsertIdentityRecord(executor, identity, userId, nowMs);
-}
-/** Remove one exact provider identity owned by a workspace Slack user. */
-async function deleteProviderIdentityForSlackUser(executor, slackTeamId, slackUserId, provider, providerSubjectId) {
-	const userId = (await executor.db().select({ userId: juniorIdentities.userId }).from(juniorIdentities).where(and(eq(juniorIdentities.kind, "user"), eq(juniorIdentities.provider, "slack"), eq(juniorIdentities.providerTenantId, slackTeamId), eq(juniorIdentities.providerSubjectId, slackUserId))).limit(1))[0]?.userId;
-	if (!userId) return;
-	await executor.db().delete(juniorIdentities).where(and(eq(juniorIdentities.userId, userId), eq(juniorIdentities.provider, provider), eq(juniorIdentities.providerTenantId, ""), eq(juniorIdentities.providerSubjectId, providerSubjectId)));
-}
-//#endregion
-//#region src/chat/conversations/sql/participants.ts
-/** Resolve the root conversation id that owns personal-feed membership. */
-async function resolveRootConversationId(executor, conversationId) {
-	const [row] = await executor.db().select({ rootConversationId: juniorConversations.rootConversationId }).from(juniorConversations).where(eq(juniorConversations.conversationId, conversationId)).limit(1);
-	return row?.rootConversationId ?? conversationId;
-}
-/**
-* Upsert one linked user as a participant on a root conversation.
-* No-ops when the identity is missing, unlinked, or not a user.
-*/
-async function recordConversationParticipant(executor, args) {
-	const [identity] = await executor.db().select({
-		kind: juniorIdentities.kind,
-		userId: juniorIdentities.userId
-	}).from(juniorIdentities).where(eq(juniorIdentities.id, args.actorIdentityId)).limit(1);
-	if (!identity?.userId || identity.kind !== "user") return;
-	const rootConversationId = await resolveRootConversationId(executor, args.conversationId);
-	const at = new Date(args.atMs);
-	await executor.db().insert(juniorConversationParticipants).values({
-		userId: identity.userId,
-		rootConversationId,
-		lastMessageAt: at
-	}).onConflictDoUpdate({
-		target: [juniorConversationParticipants.userId, juniorConversationParticipants.rootConversationId],
-		set: {
-			lastMessageAt: sql`greatest(${juniorConversationParticipants.lastMessageAt}, excluded.last_message_at)`,
-			...args.restoreArchive ? { archivedAt: null } : void 0
-		}
-	});
+//#region src/chat/conversations/structured-events.ts
+/** Reserved namespace for Junior-owned conversation metadata events. */
+const JUNIOR_NATIVE_EVENT_NAMESPACE = "junior";
+const authenticationEventContentSchema = z.object({
+	accountLabel: z.string().trim().min(1).max(120).optional(),
+	actorId: z.string().min(1),
+	authorizationId: z.string().min(1).optional(),
+	provider: z.string().regex(/^[a-z][a-z0-9-]*$/),
+	providerLabel: z.string().trim().min(1).max(80).optional()
+}).strict();
+const agentsInstructionsUpdatedContentSchema = z.object({
+	action: z.enum([
+		"loaded",
+		"replaced",
+		"cleared"
+	]),
+	directory: z.string().trim().min(1).max(500).optional(),
+	fingerprint: z.string().trim().min(1).max(128),
+	sources: z.array(z.object({
+		content: z.string().min(1).max(32768),
+		path: z.string().trim().min(1).max(500)
+	}).strict()).max(32),
+	textBytes: z.number().int().nonnegative().optional()
+}).strict();
+function providerTitle(content) {
+	return content.providerLabel?.trim() || content.provider;
 }
-//#endregion
-//#region src/chat/usage.ts
-const agentTurnUsageSchema = usageSchema;
-const COMPONENT_USAGE_FIELDS = [
-	"inputTokens",
-	"outputTokens",
-	"cachedInputTokens",
-	"cacheCreationTokens"
-];
-const COST_COMPONENT_FIELDS = [
-	"input",
-	"output",
-	"cacheRead",
-	"cacheWrite"
-];
-/** Return whether any token counter is present on a usage record. */
-function hasAgentTurnUsage(usage) {
-	return Boolean(usage && (Object.entries(usage).some(([field, value]) => field !== "cost" && typeof value === "number" && Number.isFinite(value)) || Object.values(usage.cost ?? {}).some((value) => typeof value === "number" && Number.isFinite(value))));
+function agentsInstructionsTitle(action) {
+	if (action === "loaded") return "Loaded AGENTS.md";
+	if (action === "replaced") return "Updated AGENTS.md";
+	return "Cleared AGENTS.md";
 }
-function getFiniteCount(value) {
-	return typeof value === "number" && Number.isFinite(value) ? Math.max(0, Math.floor(value)) : void 0;
+function sourceFilename(sourcePath) {
+	return sourcePath.split("/").at(-1) || sourcePath;
 }
-function getFiniteCost(value) {
-	return typeof value === "number" && Number.isFinite(value) ? Math.max(0, value) : void 0;
+function formatBytes(bytes) {
+	if (bytes < 1024) return `${bytes} bytes`;
+	const kilobytes = bytes / 1024;
+	return `${Number.isInteger(kilobytes) ? kilobytes : kilobytes.toFixed(1)} KB`;
 }
-function addCost(left, right) {
-	return Math.round(((left ?? 0) + right) * 0xe8d4a51000) / 0xe8d4a51000;
+function agentsInstructionsPreview(content) {
+	const source = content.sources[0];
+	if (!source) return void 0;
+	const filename = sourceFilename(source.path);
+	const label = content.sources.length === 1 ? filename : `${content.sources.length} AGENTS.md files`;
+	return typeof content.textBytes === "number" ? `${label} · ${formatBytes(content.textBytes)}` : label;
 }
-function getComponentTotal(usage) {
-	let total;
-	for (const field of COMPONENT_USAGE_FIELDS) {
-		const value = getFiniteCount(usage[field]);
-		if (value === void 0) continue;
-		total = (total ?? 0) + value;
+/** Junior-owned account-link transcript event. */
+const authenticationLinkedEvent = defineConversationEvent({
+	name: "authentication_linked",
+	version: 1,
+	schema: authenticationEventContentSchema,
+	renderEvent(event) {
+		const provider = providerTitle(event);
+		return {
+			icon: "link",
+			title: `${provider} connected`,
+			...event.accountLabel ? { preview: `Connected as \`${event.accountLabel}\`` } : void 0,
+			details: [{
+				title: `${provider} connected`,
+				...event.accountLabel ? { description: `Connected as \`${event.accountLabel}\`` } : void 0,
+				metadata: [event.provider]
+			}]
+		};
 	}
-	return total;
-}
-/** Estimated total USD cost from one usage record, when any cost field is present. */
-function agentTurnCostUsd(usage) {
-	if (!usage?.cost) return void 0;
-	const total = getFiniteCost(usage.cost.total);
-	if (total !== void 0) return total;
-	let componentTotal = 0;
-	let hasComponent = false;
-	for (const field of COST_COMPONENT_FIELDS) {
-		const value = getFiniteCost(usage.cost[field]);
-		if (value === void 0) continue;
-		hasComponent = true;
-		componentTotal = addCost(componentTotal, value);
+});
+/** Junior-owned account-unlink transcript event. */
+const authenticationUnlinkedEvent = defineConversationEvent({
+	name: "authentication_unlinked",
+	version: 1,
+	schema: authenticationEventContentSchema,
+	renderEvent(event) {
+		const provider = providerTitle(event);
+		return {
+			icon: "key",
+			title: `${provider} disconnected`,
+			details: [{
+				title: `${provider} disconnected`,
+				metadata: [event.provider]
+			}]
+		};
 	}
-	return hasComponent ? componentTotal : void 0;
-}
-/** Total token count from one usage record, preferring component counters. */
-function agentTurnTotalTokens(usage) {
-	if (!usage) return void 0;
-	const componentTotal = getComponentTotal(usage);
-	if (componentTotal !== void 0) return componentTotal;
-	return getFiniteCount(usage.totalTokens);
-}
-/** Aggregate token usage across slices without double-counting provider totals. */
-function addAgentTurnUsage(...usages) {
-	const components = {};
-	let componentTotal;
-	let totalOnlyTokens;
-	let reasoningTokens;
-	const cost = {};
-	for (const usage of usages) {
-		if (!usage) continue;
-		const reasoning = getFiniteCount(usage.reasoningTokens);
-		if (reasoning !== void 0) reasoningTokens = (reasoningTokens ?? 0) + reasoning;
-		if (usage.cost) for (const field of [...COST_COMPONENT_FIELDS, "total"]) {
-			const value = getFiniteCost(usage.cost[field]);
-			if (value === void 0) continue;
-			cost[field] = addCost(cost[field], value);
-		}
-		const usageComponentTotal = getComponentTotal(usage);
-		if (usageComponentTotal !== void 0) {
-			componentTotal = (componentTotal ?? 0) + usageComponentTotal;
-			for (const field of COMPONENT_USAGE_FIELDS) {
-				const value = getFiniteCount(usage[field]);
-				if (value === void 0) continue;
-				components[field] = (components[field] ?? 0) + value;
-			}
-			continue;
-		}
-		const totalTokens = getFiniteCount(usage.totalTokens);
-		if (totalTokens !== void 0) totalOnlyTokens = (totalOnlyTokens ?? 0) + totalTokens;
+});
+/** Junior-owned AGENTS.md bootstrap transition for the dashboard timeline. */
+const agentsInstructionsUpdatedEvent = defineConversationEvent({
+	name: "agents_instructions_updated",
+	version: 1,
+	schema: agentsInstructionsUpdatedContentSchema,
+	renderEvent(event) {
+		const title = agentsInstructionsTitle(event.action);
+		const preview = agentsInstructionsPreview(event);
+		return {
+			icon: "brain",
+			title,
+			...preview ? { preview } : void 0,
+			...event.sources.length > 0 ? { details: event.sources.map((source) => ({
+				title: sourceFilename(source.path),
+				content: source.content
+			})) } : void 0
+		};
 	}
-	if (totalOnlyTokens !== void 0) return {
-		totalTokens: totalOnlyTokens + (componentTotal ?? 0),
-		...reasoningTokens !== void 0 ? { reasoningTokens } : void 0,
-		...Object.keys(cost).length > 0 ? { cost } : void 0
-	};
-	const result = {
-		...components,
-		...reasoningTokens !== void 0 ? { reasoningTokens } : void 0,
-		...Object.keys(cost).length > 0 ? { cost } : void 0
-	};
-	return hasAgentTurnUsage(result) ? result : void 0;
-}
-//#endregion
-//#region src/chat/conversations/metrics.ts
-function finite(value) {
-	return value !== void 0 && Number.isFinite(value) && value >= 0 ? value : void 0;
-}
-/** Convert one Run summary to metric rows. */
-function conversationMetricValues(args) {
-	const usage = args.usage;
-	return {
-		duration_ms: Math.max(0, args.durationMs),
-		total_tokens: agentTurnTotalTokens(usage),
-		input_tokens: finite(usage?.inputTokens),
-		output_tokens: finite(usage?.outputTokens),
-		cached_input_tokens: finite(usage?.cachedInputTokens),
-		cache_creation_tokens: finite(usage?.cacheCreationTokens),
-		reasoning_tokens: finite(usage?.reasoningTokens),
-		cost_usd: agentTurnCostUsd(usage)
-	};
-}
-/** Replace one Run's metric rows and refresh its Conversation totals. */
-async function replaceConversationMetrics(executor, args) {
-	const [current] = await executor.db().select({ updatedAt: juniorConversationMetrics.updatedAt }).from(juniorConversationMetrics).where(and(eq(juniorConversationMetrics.conversationId, args.conversationId), eq(juniorConversationMetrics.runId, args.runId))).limit(1);
-	if (current && current.updatedAt.getTime() > args.updatedAtMs) return;
-	await executor.db().delete(juniorConversationMetrics).where(and(eq(juniorConversationMetrics.conversationId, args.conversationId), eq(juniorConversationMetrics.runId, args.runId)));
-	const metricValues = conversationMetricValues({
-		durationMs: args.durationMs,
-		usage: args.usage
-	});
-	const values = CONVERSATION_METRICS.flatMap((metric) => {
-		const value = metricValues[metric];
-		return value === void 0 ? [] : [{
-			conversationId: args.conversationId,
-			runId: args.runId,
-			metric,
-			value,
-			occurredAt: new Date(args.occurredAtMs),
-			updatedAt: new Date(args.updatedAtMs)
-		}];
-	});
-	if (values.length > 0) await executor.db().insert(juniorConversationMetrics).values(values);
-	const metric = (name) => sql`(
-    select sum(${juniorConversationMetrics.value})
-    from ${juniorConversationMetrics}
-    where ${juniorConversationMetrics.conversationId} = ${args.conversationId}
-      and ${juniorConversationMetrics.metric} = ${name}
-  )`;
-	const totalTokens = metric("total_tokens");
-	const componentTokens = sql`
-    coalesce(${metric("input_tokens")}, 0)
-      + coalesce(${metric("output_tokens")}, 0)
-      + coalesce(${metric("cached_input_tokens")}, 0)
-      + coalesce(${metric("cache_creation_tokens")}, 0)
-  `;
-	const hasComponents = sql`
-    ${metric("input_tokens")} is not null
-      or ${metric("output_tokens")} is not null
-      or ${metric("cached_input_tokens")} is not null
-      or ${metric("cache_creation_tokens")} is not null
-  `;
-	const cost = sql`case when ${metric("cost_usd")} is null then null
-    else jsonb_build_object('total', ${metric("cost_usd")}) end`;
-	await executor.db().update(juniorConversations).set({
-		durationMs: sql`coalesce(${metric("duration_ms")}, 0)`,
-		usage: sql`case
-        when ${totalTokens} is not null
-          and (${hasComponents})
-          and ${totalTokens} <> ${componentTokens}
-        then jsonb_strip_nulls(jsonb_build_object(
-          'totalTokens', ${totalTokens},
-          'reasoningTokens', ${metric("reasoning_tokens")},
-          'cost', ${cost}
-        ))
-        else jsonb_strip_nulls(jsonb_build_object(
-          'totalTokens', ${totalTokens},
-          'inputTokens', ${metric("input_tokens")},
-          'outputTokens', ${metric("output_tokens")},
-          'cachedInputTokens', ${metric("cached_input_tokens")},
-          'cacheCreationTokens', ${metric("cache_creation_tokens")},
-          'reasoningTokens', ${metric("reasoning_tokens")},
-          'cost', ${cost}
-        ))
-      end`
-	}).where(eq(juniorConversations.conversationId, args.conversationId));
-}
-//#endregion
-//#region src/chat/source.ts
-/**
-* Normalize a Turn Source into legacy provider fields stored on a Conversation.
-* System Sources do not contain a Conversation Location.
-*/
-function normalizeSessionSource(value) {
-	if (!value) return;
-	if (value.kind === "local") return {
-		kind: "local",
-		visibility: value.visibility,
-		conversationId: value.conversationId
-	};
-	if (value.kind === "web") return {
-		kind: "web",
-		visibility: value.visibility,
-		conversationId: value.conversationId
-	};
-	if (value.kind === "event" || value.kind === "scheduled_automation" || value.kind === "event_automation" || value.kind === "plugin_dispatch" || value.kind === "agent_invocation") return;
-	const threadTs = value.threadTs?.trim();
-	return {
-		kind: "slack",
-		visibility: value.visibility,
-		teamId: value.teamId,
-		channelId: value.channelId,
-		...threadTs ? { threadTs } : void 0
-	};
-}
-/** Parse a serialized Source into legacy provider fields stored on a Conversation. */
-function parseSessionSource(value) {
-	const parsed = sourceSchema.safeParse(value);
-	return parsed.success ? normalizeSessionSource(parsed.data) : void 0;
+});
+const NATIVE_EVENT_DEFINITIONS = [
+	authenticationLinkedEvent,
+	authenticationUnlinkedEvent,
+	agentsInstructionsUpdatedEvent
+];
+/** Resolve a registered Junior-native conversation event definition. */
+function getJuniorNativeEventDefinition(args) {
+	return NATIVE_EVENT_DEFINITIONS.find((definition) => definition.eventName === args.name && definition.version === args.version);
 }
-//#endregion
-//#region src/chat/conversations/sql/bindings.ts
-/** Resolve the durable conversation bound to provider-owned coordinates. */
-async function getConversationIdByProviderConversation(executor, args) {
-	return (await executor.db().select({ conversationId: juniorConversationBindings.conversationId }).from(juniorConversationBindings).where(and(eq(juniorConversationBindings.provider, args.provider), eq(juniorConversationBindings.providerTenantId, args.providerTenantId), eq(juniorConversationBindings.providerDestinationId, args.providerDestinationId), eq(juniorConversationBindings.providerConversationId, args.providerConversationId))).limit(1))[0]?.conversationId;
-}
-/** Bind provider coordinates to a durable conversation in the caller's SQL scope. */
-async function bindProviderConversation(executor, args) {
-	if (((await executor.db().insert(juniorConversationBindings).values({
-		...args,
-		createdAt: /* @__PURE__ */ new Date()
-	}).onConflictDoNothing().returning({ conversationId: juniorConversationBindings.conversationId }))[0]?.conversationId ?? await getConversationIdByProviderConversation(executor, args)) !== args.conversationId) throw new Error("Provider conversation is already bound to another conversation");
+/** Render one Junior-native event through its active definition. */
+function renderJuniorNativeConversationEvent(args) {
+	if (args.namespace !== "junior") return void 0;
+	const definition = getJuniorNativeEventDefinition(args);
+	if (!definition) return void 0;
+	const presentation = definition.renderEvent(definition.parse(args.content));
+	return presentation === void 0 ? void 0 : conversationEventPresentationSchema.parse(presentation);
 }
 //#endregion
-//#region src/chat/conversations/sql/actor-identity.ts
-/** Build a durable identity observation from a stored conversation actor. */
-function identityFromActor(actor) {
-	if (actor?.slackUserId) return {
-		kind: "user",
-		provider: "slack",
-		providerTenantId: actor.teamId,
-		providerSubjectId: actor.slackUserId,
-		...actor.fullName ? { displayName: actor.fullName } : void 0,
-		...actor.slackUserName ? { handle: actor.slackUserName } : void 0,
-		...actor.email ? {
-			email: actor.email,
-			emailVerified: true
-		} : void 0,
-		metadata: { platform: "slack" }
-	};
-	const email = actor?.email?.trim().toLowerCase();
-	if (!email) return;
+//#region src/chat/plugins/annotations.ts
+function annotationFromRow(row) {
+	const parsed = conversationAnnotationInputSchema.safeParse(row.annotation);
+	if (!parsed.success) return void 0;
 	return {
-		kind: "user",
-		provider: "junior",
-		providerSubjectId: email,
-		email,
-		emailVerified: true,
-		...actor?.fullName ? { displayName: actor.fullName } : void 0,
-		metadata: { platform: "web" }
-	};
-}
-/** Build a system identity when a conversation has no user actor. */
-function systemIdentityFromSource(source) {
-	if (source === "scheduler") return {
-		kind: "system",
-		provider: "junior",
-		providerSubjectId: "scheduler",
-		displayName: "Junior Scheduler"
-	};
-	if (source === "local") return {
-		kind: "system",
-		provider: "junior",
-		providerSubjectId: "local-cli",
-		displayName: "Local CLI"
-	};
-	if (source === "event") return {
-		kind: "system",
-		provider: "junior",
-		providerSubjectId: "event",
-		displayName: "Event"
-	};
-}
-/** Prefer the user actor identity, else a source-derived system identity. */
-function actorIdentityForConversation(conversation) {
-	return identityFromActor(conversation.actor) ?? systemIdentityFromSource(conversation.source);
-}
-/**
-* Reconstruct a stored actor with the linked user name and identity-scoped
-* provider fields.
-*/
-function actorFromIdentityRow(identity, userDisplayName) {
-	if (!identity) return;
-	const fullName = userDisplayName?.trim() ? userDisplayName : identity.displayName;
-	const email = identity.emailNormalized ?? identity.email ?? void 0;
-	if (identity.provider === "slack") return {
-		...email ? { email } : void 0,
-		...fullName ? { fullName } : void 0,
-		platform: "slack",
-		slackUserId: identity.providerSubjectId,
-		...identity.handle ? { slackUserName: identity.handle } : void 0,
-		...identity.providerTenantId ? { teamId: identity.providerTenantId } : void 0
-	};
-	if (identity.provider === "junior" && email) return {
-		email,
-		...fullName ? { fullName } : void 0
+		...parsed.data,
+		plugin: row.plugin,
+		createdAt: row.createdAt.toISOString(),
+		updatedAt: row.updatedAt.toISOString()
 	};
 }
-/** Merge later actor observations without replacing a durable Slack subject. */
-function mergeActor(current, next) {
-	if (!current) return next;
-	if (!next) return current;
-	if (current.slackUserId && next.slackUserId && current.slackUserId !== next.slackUserId) return current;
+function createPluginAnnotations(args) {
 	return {
-		...current,
-		...current.email ?? next.email ? { email: current.email ?? next.email } : void 0,
-		...current.fullName ?? next.fullName ? { fullName: current.fullName ?? next.fullName } : void 0,
-		...current.platform ?? next.platform ? { platform: current.platform ?? next.platform } : void 0,
-		...current.slackUserId ?? next.slackUserId ? { slackUserId: current.slackUserId ?? next.slackUserId } : void 0,
-		...current.slackUserName ?? next.slackUserName ? { slackUserName: current.slackUserName ?? next.slackUserName } : void 0,
-		...current.teamId ?? next.teamId ? { teamId: current.teamId ?? next.teamId } : void 0
+		async upsert(input) {
+			const annotation = conversationAnnotationInputSchema.parse(input);
+			const now = /* @__PURE__ */ new Date();
+			await args.db.insert(juniorConversationAnnotations).values({
+				annotation,
+				conversationId: args.conversationId,
+				createdAt: now,
+				key: annotation.key,
+				kind: annotation.kind,
+				plugin: args.plugin,
+				updatedAt: now
+			}).onConflictDoUpdate({
+				target: [
+					juniorConversationAnnotations.conversationId,
+					juniorConversationAnnotations.plugin,
+					juniorConversationAnnotations.kind,
+					juniorConversationAnnotations.key
+				],
+				set: {
+					annotation,
+					updatedAt: now
+				}
+			});
+		},
+		async remove(kind, key) {
+			await args.db.delete(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin), eq(juniorConversationAnnotations.kind, kind), eq(juniorConversationAnnotations.key, key)));
+		},
+		async list() {
+			return (await listConversationAnnotations(args.db, args.conversationId)).filter((a) => a.plugin === args.plugin);
+		}
 	};
 }
-//#endregion
-//#region src/chat/conversations/sql/location.ts
-/** Build the complete Location for one Conversation SQL write. */
-function locationForWrite(args) {
-	const location = args.location ? locationSchema.parse(args.location) : void 0;
-	const destination = args.destination?.platform === "slack" ? args.destination : void 0;
-	const source = args.sessionSource?.kind === "slack" ? args.sessionSource : void 0;
-	if (location) {
-		if (destination && (location.id !== args.destinationId || location.teamId !== destination.teamId || location.channelId !== destination.channelId) || source && (location.teamId !== source.teamId || location.channelId !== source.channelId)) throw new Error("Conversation Location changed");
-		const threadTs = location.threadTs ?? destination?.threadTs ?? source?.threadTs;
-		return threadTs === location.threadTs ? location : {
-			...location,
-			threadTs
-		};
-	}
-	if (destination && source && (destination.teamId !== source.teamId || destination.channelId !== source.channelId)) throw new Error("Conversation Location does not match its session Source");
-	if (!destination || !args.destinationId) return;
-	const threadTs = destination.threadTs ?? source?.threadTs;
-	return locationSchema.parse({
-		id: args.destinationId,
-		provider: "slack",
-		teamId: destination.teamId,
-		channelId: destination.channelId,
-		...threadTs ? { threadTs } : void 0
-	});
+/** Load stored annotations for one conversation, newest update first. */
+async function listConversationAnnotations(db, conversationId) {
+	return (await listConversationAnnotationsById(db, [conversationId])).get(conversationId) ?? [];
 }
-/** Read one complete Location from SQL. */
-function locationFromRow(value, row, sessionSource) {
-	if (value !== void 0 && value !== null) {
-		const location = locationSchema.parse(value);
-		const slackSource = !location.threadTs && sessionSource?.kind === "slack" && sessionSource.teamId === location.teamId && sessionSource.channelId === location.channelId ? sessionSource : void 0;
-		return slackSource?.threadTs ? {
-			...location,
-			threadTs: slackSource.threadTs
-		} : location;
+/** Load stored annotations for a bounded set of conversations. */
+async function listConversationAnnotationsById(db, conversationIds) {
+	const byConversation = /* @__PURE__ */ new Map();
+	if (conversationIds.length === 0) return byConversation;
+	const rows = await db.select().from(juniorConversationAnnotations).where(inArray(juniorConversationAnnotations.conversationId, [...conversationIds])).orderBy(desc(juniorConversationAnnotations.updatedAt));
+	for (const row of rows) {
+		const annotation = annotationFromRow(row);
+		if (!annotation) continue;
+		const current = byConversation.get(row.conversationId);
+		if (current) current.push(annotation);
+		else byConversation.set(row.conversationId, [annotation]);
 	}
-	if (!row || row.provider === "local") return;
-	if (row.provider !== "slack") throw new Error("Conversation Location provider is not supported");
-	const slackSource = sessionSource?.kind === "slack" && sessionSource.teamId === row.providerTenantId && sessionSource.channelId === row.providerDestinationId ? sessionSource : void 0;
-	return locationSchema.parse({
-		id: row.id,
-		provider: "slack",
-		teamId: row.providerTenantId,
-		channelId: row.providerDestinationId,
-		...slackSource?.threadTs ? { threadTs: slackSource.threadTs } : void 0
-	});
-}
-/** Read confirmed visibility from one linked Location row. */
-function visibilityFromLocationRow(row) {
-	if (!row) return;
-	if (row.visibility === "public" || row.visibility === "private") return row.visibility;
+	return byConversation;
 }
 //#endregion
-//#region src/chat/conversations/sql/store.ts
-const CONVERSATION_MUTATION_LOCK_PREFIX = "junior_conversation";
-/** Serialize one conversation's durable mutations inside a SQL transaction. */
-async function withConversationMutationLock(executor, conversationId, callback) {
-	return await executor.withLock(`${CONVERSATION_MUTATION_LOCK_PREFIX}:${conversationId}`, async () => await executor.transaction(callback));
-}
-function now() {
-	return Date.now();
-}
-function dateFromMs(ms) {
-	return new Date(ms);
-}
-function msFromDate(value) {
-	if (value === null || value === void 0) return;
-	return (value instanceof Date ? value : new Date(value)).getTime();
-}
-function requiredMsFromDate(value) {
-	const ms = msFromDate(value);
-	if (typeof ms !== "number" || Number.isNaN(ms)) throw new Error("Conversation record timestamp is invalid");
-	return ms;
-}
-function tenantId(value) {
-	return value ?? "";
-}
-function sourceFromValue(value) {
-	if (value === "api" || value === "internal" || value === "local" || value === "plugin" || value === "event" || value === "scheduler" || value === "slack" || value === "web") return value;
-}
-function originTypeFromSource(source) {
-	return source;
-}
-function localWorkspaceFromConversationId(conversationId) {
-	return /^local:([^:]+):/.exec(conversationId)?.[1];
-}
-function destinationUpsertFromDestination(args) {
-	const { destination } = args;
-	if (!destination) return;
-	if (destination.platform === "slack") {
-		const channelId = destination.channelId;
-		return {
-			kind: channelId.startsWith("D") ? "dm" : channelId.startsWith("G") ? "group" : "channel",
-			provider: "slack",
-			providerTenantId: destination.teamId,
-			providerDestinationId: channelId,
-			refreshVisibility: args.visibility !== void 0,
-			visibility: args.visibility ?? "unknown",
-			...args.channelName ? { displayName: args.channelName } : void 0,
-			metadata: { platform: "slack" }
-		};
-	}
-	return {
-		kind: "local_conversation",
-		provider: "local",
-		providerTenantId: localWorkspaceFromConversationId(destination.conversationId) ?? localWorkspaceFromConversationId(args.conversationId ?? ""),
-		providerDestinationId: destination.conversationId,
-		refreshVisibility: args.visibility !== void 0,
-		visibility: args.visibility ?? "direct",
-		metadata: { platform: "local" }
-	};
+//#region src/chat/conversations/annotation-results.ts
+/** Save object annotations and retain returned facts in the tool result. */
+async function saveObjectAnnotations(conversationId, plugin, value) {
+	const annotations = objectAnnotationSchema.array().parse(value);
+	await getDb().transaction(async (db) => {
+		const store = createPluginAnnotations({
+			conversationId,
+			plugin,
+			db
+		});
+		for (const annotation of annotations) {
+			await store.upsert(annotation);
+			await store.remove("resource_link", annotation.key);
+		}
+	});
+	return annotations.map((annotation) => ({
+		...annotation,
+		plugin
+	}));
 }
-function executionStatusFromValue(value) {
-	if (value === "awaiting_resume" || value === "paused") return "paused";
-	if (value === "failed" || value === "idle" || value === "pending" || value === "running") return value;
-	throw new Error("Conversation record execution status is invalid");
-}
-function executionStatusToSql(status) {
-	return status === "paused" ? "awaiting_resume" : status;
-}
-function destinationFromRow(destination) {
-	return parseDestination(destination?.provider === "slack" ? {
-		platform: "slack",
-		teamId: destination.providerTenantId,
-		channelId: destination.providerDestinationId
-	} : destination?.provider === "local" ? {
-		platform: "local",
-		conversationId: destination.providerDestinationId
-	} : void 0);
-}
-/** Decode one SQL row and reject invalid durable conversation records. */
-function conversationFromRow(readRow) {
-	const row = readRow.conversation;
-	const visibility = visibilityFromLocationRow(readRow.destination);
-	if (row.schemaVersion !== 1) throw new Error("Conversation record schema version is invalid");
-	if (row.destination !== null && readRow.destination === null) throw new Error("Conversation legacy destination is not migrated");
-	if (row.actor !== null && readRow.actorIdentity === null) throw new Error("Conversation legacy actor is not migrated");
-	const destination = destinationFromRow(readRow.destination);
-	const actor = actorFromIdentityRow(readRow.actorIdentity, readRow.actorUserDisplayName);
-	if (readRow.destination !== null && !destination) throw new Error("Conversation record destination is invalid");
-	const source = row.source === void 0 || row.source === null ? void 0 : sourceFromValue(row.source);
-	if (row.source !== void 0 && row.source !== null && !source) throw new Error("Conversation record source is invalid");
-	const sessionSource = row.sessionSource === void 0 || row.sessionSource === null ? void 0 : parseSessionSource(row.sessionSource);
-	if (row.sessionSource !== void 0 && row.sessionSource !== null && !sessionSource) throw new Error("Conversation record session source is invalid");
-	const execution = {
-		status: executionStatusFromValue(row.executionStatus),
-		lastCheckpointAtMs: msFromDate(row.lastCheckpointAt),
-		lastEnqueuedAtMs: msFromDate(row.lastEnqueuedAt),
-		...row.runId ? { runId: row.runId } : void 0,
-		updatedAtMs: msFromDate(row.executionUpdatedAt) ?? requiredMsFromDate(row.updatedAt)
+/** Save annotations from a successful plugin tool result and attach their cards. */
+async function annotateToolResult(conversationId, plugin, result) {
+	if (!isRecord$1(result) || result.isError === true) return result;
+	const details = isRecord$1(result.details) ? result.details : result;
+	if (details.timed_out === true || details.isError === true || !Array.isArray(details.objectAnnotations)) return result;
+	const cards = await saveObjectAnnotations(conversationId, plugin, details.objectAnnotations);
+	const { objectAnnotations: _annotations, ...rest } = details;
+	const annotated = {
+		...rest,
+		objectCards: cards
 	};
-	const location = locationFromRow(row.location, readRow.destination, sessionSource);
-	return {
-		schemaVersion: 1,
-		conversationId: row.conversationId,
-		createdAtMs: requiredMsFromDate(row.createdAt),
-		lastActivityAtMs: requiredMsFromDate(row.lastActivityAt),
-		updatedAtMs: requiredMsFromDate(row.updatedAt),
-		execution,
-		executionMetrics: {
-			durationMs: row.executionDurationMs,
-			...row.metricRunId ? { runId: row.metricRunId } : void 0,
-			...row.executionUsage ? { usage: row.executionUsage } : void 0
-		},
-		...row.parentConversationId ? { parentConversationId: row.parentConversationId } : void 0,
-		...destination ? { destination } : void 0,
-		...location ? { location } : void 0,
-		...actor ? { actor } : void 0,
-		...row.channelName ? { channelName: row.channelName } : void 0,
-		...source ? { source } : void 0,
-		...sessionSource ? { sessionSource } : void 0,
-		...row.title ? { title: row.title } : void 0,
-		...msFromDate(row.transcriptPurgedAt) !== void 0 ? { transcriptPurgedAtMs: msFromDate(row.transcriptPurgedAt) } : void 0,
-		...visibility ? { visibility } : void 0
+	if (isRecord$1(result.details)) return {
+		...result,
+		details: annotated
 	};
+	return annotated;
+}
+//#endregion
+//#region src/chat/conversations/sql/privacy.ts
+const privacyRoot = alias(juniorConversations, "privacy_root");
+/** Accept only a structurally valid persisted root as privacy authority. */
+async function readRootCandidate(executor, conversationId) {
+	const row = (await executor.db().select({
+		requestedConversationId: juniorConversations.conversationId,
+		requestedParentConversationId: juniorConversations.parentConversationId,
+		requestedRootConversationId: juniorConversations.rootConversationId,
+		rootConversationId: privacyRoot.conversationId,
+		rootDestinationId: privacyRoot.destinationId,
+		rootParentConversationId: privacyRoot.parentConversationId,
+		rootRootConversationId: privacyRoot.rootConversationId
+	}).from(juniorConversations).leftJoin(privacyRoot, eq(privacyRoot.conversationId, juniorConversations.rootConversationId)).where(eq(juniorConversations.conversationId, conversationId)))[0];
+	return row?.requestedRootConversationId !== null && (row?.requestedParentConversationId !== null || row?.requestedRootConversationId === row?.requestedConversationId) && row?.rootConversationId === row.requestedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && row.rootDestinationId !== null ? {
+		destinationId: row.rootDestinationId,
+		rootConversationId: row.rootConversationId
+	} : void 0;
 }
-function emptyConversation(args) {
+async function readCandidateVisibility(executor, candidate) {
+	const destinations = await executor.db().select({ visibility: juniorDestinations.visibility }).from(juniorDestinations).where(eq(juniorDestinations.id, candidate.destinationId)).for("share");
 	return {
-		schemaVersion: 1,
-		conversationId: args.conversationId,
-		createdAtMs: args.nowMs,
-		lastActivityAtMs: args.nowMs,
-		updatedAtMs: args.nowMs,
-		...args.destination ? { destination: args.destination } : void 0,
-		...args.source ? { source: args.source } : void 0,
-		...args.sessionSource ? { sessionSource: args.sessionSource } : void 0,
-		execution: {
-			status: "idle",
-			updatedAtMs: args.nowMs
-		}
+		rootConversationId: candidate.rootConversationId,
+		visibility: destinations[0]?.visibility ?? null
 	};
 }
-function assertSameConversationDestination(args) {
-	if (!args.current || sameDestination(args.current, args.next)) return;
-	throw new Error(`Conversation destination changed for ${args.conversationId}`);
+/**
+* Resolve a conversation's privacy authority from its persisted root.
+*
+* Missing or structurally invalid root metadata fails closed. The root
+* destination is locked so callers that keep the transaction open receive a
+* stable visibility decision.
+*/
+async function resolveRootVisibility(executor, conversationId) {
+	const candidate = await readRootCandidate(executor, conversationId);
+	if (!candidate) return {
+		rootConversationId: conversationId,
+		visibility: null
+	};
+	return readCandidateVisibility(executor, candidate);
 }
-var SqlStore = class {
-	executor;
-	constructor(executor) {
-		this.executor = executor;
-	}
-	async getConversationIdByProviderConversation(args) {
-		return await getConversationIdByProviderConversation(this.executor, args);
-	}
-	async bindProviderConversation(args) {
-		await bindProviderConversation(this.executor, args);
-	}
-	async createChild(args) {
-		const nowMs = args.nowMs ?? now();
-		await this.withConversationMutation(args.parentConversationId, async () => {
-			await this.withConversationMutation(args.childConversationId, async () => {
-				const existing = await this.get({ conversationId: args.childConversationId });
-				if (existing) {
-					if (existing.parentConversationId !== args.parentConversationId) throw new Error(`Conversation parent changed for ${args.childConversationId}`);
-					return;
-				}
-				const parent = await this.get({ conversationId: args.parentConversationId });
-				if (!parent) throw new Error(`Conversation parent is missing for ${args.childConversationId}`);
-				if (parent.parentConversationId) throw new Error("Recursive agent delegation is not enabled");
-				const child = {
-					...emptyConversation({
-						conversationId: args.childConversationId,
-						nowMs,
-						source: args.source
-					}),
-					parentConversationId: args.parentConversationId
-				};
-				await this.upsertConversation({ conversation: child });
-			});
-		});
-	}
-	async get(args) {
-		const row = await this.readConversationRow(args.conversationId);
-		if (!row) return;
-		return conversationFromRow(row);
-	}
-	async recordActivity(args) {
-		const nowMs = args.nowMs ?? now();
-		const activityAtMs = args.activityAtMs ?? nowMs;
-		const sessionSource = normalizeSessionSource(args.sessionSource);
-		await this.withConversationMutation(args.conversationId, async () => {
-			const existing = await this.get({ conversationId: args.conversationId });
-			if (existing && args.destination) assertSameConversationDestination({
-				conversationId: args.conversationId,
-				current: existing.destination,
-				next: args.destination
-			});
-			const current = existing ?? emptyConversation({
-				conversationId: args.conversationId,
-				destination: args.destination,
-				nowMs,
-				source: args.source,
-				...sessionSource ? { sessionSource } : void 0
-			});
-			const { sessionSource: _persistedSessionSource, visibility: _persistedVisibility, ...currentWithoutPersistedSignals } = current;
-			await this.upsertConversation({ conversation: {
-				...currentWithoutPersistedSignals,
-				destination: current.destination ?? args.destination,
-				source: current.source ?? args.source,
-				...sessionSource ? { sessionSource } : void 0,
-				channelName: current.channelName ?? args.channelName,
-				actor: mergeActor(current.actor, args.actor),
-				title: current.title ?? args.title,
-				lastActivityAtMs: Math.max(current.lastActivityAtMs, activityAtMs),
-				updatedAtMs: nowMs,
-				execution: {
-					...current.execution,
-					updatedAtMs: current.execution.updatedAtMs ?? nowMs
-				},
-				...args.visibility ? { visibility: args.visibility } : void 0
-			} });
-		});
-	}
-	async recordExecution(args) {
-		if (args.metrics && !args.execution.runId) throw new Error("Conversation Run metrics require a Run id");
-		await this.withConversationMutation(args.conversationId, async () => {
-			const existingRow = await this.readConversationRow(args.conversationId);
-			const existing = existingRow ? conversationFromRow(existingRow) : void 0;
-			if (!existing && !args.destination) return;
-			const incomingExecutionAt = args.execution.updatedAtMs ?? args.updatedAtMs;
-			const incomingIsFresh = incomingExecutionAt >= (existing?.execution.updatedAtMs ?? existing?.updatedAtMs ?? 0);
-			const execution = incomingIsFresh ? args.execution : existing?.execution ?? args.execution;
-			await this.upsertConversation({ conversation: {
-				schemaVersion: 1,
-				conversationId: args.conversationId,
-				createdAtMs: args.createdAtMs,
-				lastActivityAtMs: args.lastActivityAtMs,
-				updatedAtMs: args.updatedAtMs,
-				...existing?.parentConversationId ? { parentConversationId: existing.parentConversationId } : void 0,
-				...existing?.location ? { location: existing.location } : void 0,
-				...args.channelName ? { channelName: args.channelName } : void 0,
-				...args.destination ? { destination: args.destination } : void 0,
-				...args.actor ? { actor: args.actor } : void 0,
-				...args.source ? { source: args.source } : void 0,
-				...args.title ? { title: args.title } : void 0,
-				...args.visibility ? { visibility: args.visibility } : void 0,
-				execution
-			} });
-			if (args.metrics && args.execution.runId) {
-				await replaceConversationMetrics(this.executor, {
-					conversationId: args.conversationId,
-					runId: args.execution.runId,
-					occurredAtMs: args.createdAtMs,
-					updatedAtMs: incomingExecutionAt,
-					...args.metrics
-				});
-				if (incomingIsFresh) await this.executor.db().update(juniorConversations).set({
-					metricRunId: args.execution.runId,
-					executionDurationMs: args.metrics.durationMs,
-					executionUsage: args.metrics.usage ?? null
-				}).where(eq(juniorConversations.conversationId, args.conversationId));
-			}
-		});
-	}
-	async listByActivity(args = {}) {
-		const rows = await this.executor.db().select({
-			conversation: conversationReadColumns(),
-			destination: juniorDestinations,
-			actorIdentity: juniorIdentities,
-			actorUserDisplayName: juniorUsers.displayName
-		}).from(juniorConversations).leftJoin(juniorDestinations, eq(juniorDestinations.id, juniorConversations.destinationId)).leftJoin(juniorIdentities, eq(juniorIdentities.id, juniorConversations.actorIdentityId)).leftJoin(juniorUsers, eq(juniorUsers.id, juniorIdentities.userId)).where(isNull(juniorConversations.parentConversationId)).orderBy(desc(juniorConversations.lastActivityAt), asc(juniorConversations.conversationId)).limit(Math.max(0, args.limit ?? 1e4)).offset(Math.max(0, args.offset ?? 0));
-		const conversations = [];
-		for (const row of rows) conversations.push(conversationFromRow(row));
-		return conversations;
-	}
-	async getDestinationVisibility(args) {
-		const row = (await this.executor.db().select({ visibility: juniorDestinations.visibility }).from(juniorDestinations).where(and(eq(juniorDestinations.provider, args.provider), eq(juniorDestinations.providerTenantId, tenantId(args.providerTenantId)), eq(juniorDestinations.providerDestinationId, args.providerDestinationId))))[0];
-		if (!row) return;
-		if (row.visibility === "public" || row.visibility === "private") return row.visibility;
-	}
-	async findSlackDestinationByName(args) {
-		const normalized = args.channelName.trim().replace(/^#/, "").toLowerCase();
-		if (!normalized) return;
-		const rows = await this.executor.db().select({
-			channelId: juniorDestinations.providerDestinationId,
-			channelName: juniorDestinations.displayName
-		}).from(juniorDestinations).where(and(eq(juniorDestinations.provider, "slack"), eq(juniorDestinations.providerTenantId, tenantId(args.teamId)), eq(juniorDestinations.kind, "channel"), sql`lower(ltrim(${juniorDestinations.displayName}, '#')) = ${normalized}`)).limit(2);
-		if (rows.length !== 1) return;
-		const row = rows[0];
-		if (!row?.channelId) return;
+//#endregion
+//#region src/chat/briefs/events.ts
+/** Durable cost and size record for one stored Brief version. */
+const briefUpdatedEvent = defineConversationEvent({
+	name: "brief_updated",
+	version: 1,
+	schema: z.object({
+		version: z.number().int().positive(),
+		modelId: z.string().min(1),
+		costUsd: z.number().finite().nonnegative().optional(),
+		decisions: z.number().int().nonnegative(),
+		openDecisions: z.number().int().nonnegative(),
+		links: z.number().int().nonnegative()
+	}).strict(),
+	renderEvent(event) {
 		return {
-			channelId: row.channelId,
-			...row.channelName ? { channelName: row.channelName } : void 0
+			icon: "activity",
+			title: `Brief updated (v${event.version})`
 		};
 	}
-	/** Serialize all durable mutations for one conversation inside a SQL transaction. */
-	async withConversationMutation(conversationId, callback) {
-		return await withConversationMutationLock(this.executor, conversationId, callback);
-	}
-	async readConversationRow(conversationId) {
-		return (await this.executor.db().select({
-			conversation: conversationReadColumns(),
-			destination: juniorDestinations,
-			actorIdentity: juniorIdentities,
-			actorUserDisplayName: juniorUsers.displayName
-		}).from(juniorConversations).leftJoin(juniorDestinations, eq(juniorDestinations.id, juniorConversations.destinationId)).leftJoin(juniorIdentities, eq(juniorIdentities.id, juniorConversations.actorIdentityId)).leftJoin(juniorUsers, eq(juniorUsers.id, juniorIdentities.userId)).where(eq(juniorConversations.conversationId, conversationId)))[0];
-	}
-	/** Upsert the conversation row while preserving previously discovered nullable metadata fields. */
-	async upsertConversation(args) {
-		const { conversation } = args;
-		if (!conversation.parentConversationId && !conversation.destination) {
-			if (!await this.get({ conversationId: conversation.conversationId })) throw new Error(`Conversation ${conversation.conversationId} requires a destination at create`);
-		}
-		const incomingExecutionVersion = sql`coalesce(excluded.execution_updated_at, excluded.updated_at)`;
-		const currentExecutionVersion = sql`coalesce(${juniorConversations.executionUpdatedAt}, ${juniorConversations.updatedAt})`;
-		const incomingExecutionIsFresh = sql`${incomingExecutionVersion} >= ${currentExecutionVersion}`;
-		const destinationId = await this.upsertDestination(destinationUpsertFromDestination({
-			channelName: conversation.channelName,
-			conversationId: conversation.conversationId,
-			destination: conversation.destination,
-			...conversation.visibility ? { visibility: conversation.visibility } : void 0
-		}), conversation.updatedAtMs);
-		const location = locationForWrite({
-			destination: conversation.destination,
-			destinationId,
-			location: conversation.location,
-			sessionSource: conversation.sessionSource
-		});
-		const actorIdentityObservation = actorIdentityForConversation(conversation);
-		const actorIdentity = actorIdentityObservation ? await upsertIdentity(this.executor, actorIdentityObservation, conversation.updatedAtMs) : void 0;
-		const rootConversationId = conversation.parentConversationId ? sql`(
-          select parent.root_conversation_id
-          from junior_conversations parent
-          where parent.conversation_id = ${conversation.parentConversationId}
-        )` : conversation.conversationId;
-		const row = (await this.executor.db().insert(juniorConversations).values({
-			conversationId: conversation.conversationId,
-			schemaVersion: 1,
-			source: conversation.source ?? null,
-			sessionSource: conversation.sessionSource ?? null,
-			originType: originTypeFromSource(conversation.source) ?? null,
-			originId: null,
-			originRunId: null,
-			location: location ?? null,
-			destinationId: destinationId ?? null,
-			destination: null,
-			actorIdentityId: actorIdentity?.id ?? null,
-			creatorIdentityId: null,
-			credentialSubjectIdentityId: null,
-			actor: null,
-			channelName: conversation.channelName ?? null,
-			title: conversation.title ?? null,
-			createdAt: dateFromMs(conversation.createdAtMs),
-			lastActivityAt: dateFromMs(conversation.lastActivityAtMs),
-			updatedAt: dateFromMs(conversation.updatedAtMs),
-			executionUpdatedAt: conversation.execution.updatedAtMs === void 0 ? null : dateFromMs(conversation.execution.updatedAtMs),
-			executionStatus: executionStatusToSql(conversation.execution.status),
-			runId: conversation.execution.runId ?? null,
-			lastCheckpointAt: conversation.execution.lastCheckpointAtMs === void 0 ? null : dateFromMs(conversation.execution.lastCheckpointAtMs),
-			lastEnqueuedAt: conversation.execution.lastEnqueuedAtMs === void 0 ? null : dateFromMs(conversation.execution.lastEnqueuedAtMs),
-			parentConversationId: conversation.parentConversationId ?? null,
-			rootConversationId
-		}).onConflictDoUpdate({
-			target: juniorConversations.conversationId,
-			set: {
-				source: sql`coalesce(${juniorConversations.source}, excluded.source)`,
-				sessionSource: sql`coalesce(${juniorConversations.sessionSource}, excluded.source_json)`,
-				originType: sql`coalesce(excluded.origin_type, ${juniorConversations.originType})`,
-				originId: sql`coalesce(excluded.origin_id, ${juniorConversations.originId})`,
-				originRunId: sql`coalesce(excluded.origin_run_id, ${juniorConversations.originRunId})`,
-				location: sql`coalesce(excluded.location_json, ${juniorConversations.location})`,
-				destinationId: sql`coalesce(excluded.destination_id, ${juniorConversations.destinationId})`,
-				actorIdentityId: sql`coalesce(excluded.actor_identity_id, ${juniorConversations.actorIdentityId})`,
-				creatorIdentityId: sql`coalesce(excluded.creator_identity_id, ${juniorConversations.creatorIdentityId})`,
-				credentialSubjectIdentityId: sql`coalesce(excluded.credential_subject_identity_id, ${juniorConversations.credentialSubjectIdentityId})`,
-				channelName: sql`coalesce(excluded.channel_name, ${juniorConversations.channelName})`,
-				title: sql`coalesce(excluded.title, ${juniorConversations.title})`,
-				createdAt: sql`least(${juniorConversations.createdAt}, excluded.created_at)`,
-				lastActivityAt: sql`greatest(${juniorConversations.lastActivityAt}, excluded.last_activity_at)`,
-				updatedAt: sql`greatest(${juniorConversations.updatedAt}, excluded.updated_at)`,
-				executionUpdatedAt: sql`case when ${incomingExecutionIsFresh} then excluded.execution_updated_at else ${juniorConversations.executionUpdatedAt} end`,
-				executionStatus: sql`case when ${incomingExecutionIsFresh} then excluded.execution_status else ${juniorConversations.executionStatus} end`,
-				runId: sql`case when ${incomingExecutionIsFresh} then excluded.run_id else ${juniorConversations.runId} end`,
-				lastCheckpointAt: sql`case when ${incomingExecutionIsFresh} then coalesce(excluded.last_checkpoint_at, ${juniorConversations.lastCheckpointAt}) else ${juniorConversations.lastCheckpointAt} end`,
-				lastEnqueuedAt: sql`case when ${incomingExecutionIsFresh} then coalesce(excluded.last_enqueued_at, ${juniorConversations.lastEnqueuedAt}) else ${juniorConversations.lastEnqueuedAt} end`,
-				rootConversationId: sql`coalesce(${juniorConversations.rootConversationId}, excluded.root_conversation_id)`
-			}
-		}).returning({
-			actorIdentityId: juniorConversations.actorIdentityId,
-			parentConversationId: juniorConversations.parentConversationId,
-			rootConversationId: juniorConversations.rootConversationId
-		}))[0];
-		if (!row?.rootConversationId) throw new Error("Conversation parent is missing its persisted root");
-		if (row.actorIdentityId && row.parentConversationId === null) await recordConversationParticipant(this.executor, {
-			actorIdentityId: row.actorIdentityId,
-			conversationId: conversation.conversationId,
-			atMs: conversation.lastActivityAtMs
-		});
-	}
-	async upsertDestination(destination, nowMs) {
-		if (!destination) return;
-		const visibilityUpdate = destination.refreshVisibility ? sql`excluded.visibility` : juniorDestinations.visibility;
-		return (await this.executor.db().insert(juniorDestinations).values({
-			id: randomUUID(),
-			provider: destination.provider,
-			providerTenantId: tenantId(destination.providerTenantId),
-			providerDestinationId: destination.providerDestinationId,
-			kind: destination.kind,
-			parentDestinationId: null,
-			displayName: destination.displayName ?? null,
-			visibility: destination.visibility,
-			metadata: destination.metadata ?? null,
-			createdAt: dateFromMs(nowMs),
-			updatedAt: dateFromMs(nowMs)
-		}).onConflictDoUpdate({
-			target: [
-				juniorDestinations.provider,
-				juniorDestinations.providerTenantId,
-				juniorDestinations.providerDestinationId
-			],
-			set: {
-				kind: sql`excluded.kind`,
-				displayName: sql`coalesce(excluded.display_name, ${juniorDestinations.displayName})`,
-				visibility: visibilityUpdate,
-				metadata: sql`coalesce(excluded.metadata_json, ${juniorDestinations.metadata})`,
-				updatedAt: sql`excluded.updated_at`
-			}
-		}).returning({ id: juniorDestinations.id }))[0]?.id;
-	}
-};
-/** Create a SQL-backed conversation store. */
-function createSqlStore(executor) {
-	return new SqlStore(executor);
+});
+//#endregion
+//#region src/chat/slack/attachments.ts
+/** Save the vision summary for a stored Slack attachment. */
+async function recordSlackAttachment(args) {
+	await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+}
+/** Read a saved vision summary for one live attachment. */
+async function readAttachmentVisionSummary(args) {
+	const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
+	return row?.visionSummary;
+}
+/** Match live conversation attachments to Slack file ids. */
+async function matchSlackAttachments(args) {
+	if (args.providerIds.length === 0) return [];
+	return await args.db.db().select({
+		id: juniorAttachments.id,
+		providerId: juniorAttachments.providerId,
+		bytes: juniorAttachments.bytes,
+		contentType: juniorAttachments.contentType,
+		filename: juniorAttachments.filename
+	}).from(juniorAttachments).where(and(eq(juniorAttachments.conversationId, args.conversationId), eq(juniorAttachments.provider, "slack"), inArray(juniorAttachments.providerId, args.providerIds), isNull(juniorAttachments.deleteRequestedAt)));
+}
+/** Read the Slack file identity retained by the Chat SDK. */
+function getSlackFileId(attachment) {
+	const metadataId = attachment.fetchMetadata?.fileId;
+	if (metadataId) return metadataId;
+	return (attachment.url ?? attachment.fetchMetadata?.url ?? "").match(/(?:^|[-/])(F[A-Z0-9]+)(?:[-/]|$)/i)?.[1];
 }
 //#endregion
-//#region src/chat/conversations/sql/conversation-row.ts
-/**
-* Establish the conversation metadata row on first contact for content writes
-* (conversation events, visible transcript) that can land before activity has
-* created the row, and whose tables FK to it.
-*
-* First contact creates the row; every later content write advances the
-* activity clock so retention mirrors append-refresh semantics (each content
-* append refreshes the retention window). Background observations may opt out
-* and leave an existing row unchanged. The timestamp is content-intrinsic (the
-* first item's `createdAtMs`), and `greatest(...)` guarantees a backfilled or
-* imported historical write — which carries an old timestamp — can never
-* regress `last_activity_at`.
-*/
-async function ensureConversationRow(executor, conversationId, atMs, options = {}) {
-	const at = new Date(atMs);
-	const insert = executor.db().insert(juniorConversations).values({
+//#region src/api/conversations/message-attachments.ts
+/** Resolve saved Slack file references without exposing private storage details. */
+async function hydrateMessageAttachments(db, conversationId, events) {
+	const messages = events.flatMap((event) => event.data.type === "message" ? [event.data] : []);
+	const ids = [...new Set(messages.flatMap((message) => slackFileIds(message.meta)))];
+	if (!ids.length) return;
+	const attachments = await matchSlackAttachments({
+		db,
 		conversationId,
-		createdAt: at,
-		lastActivityAt: at,
-		updatedAt: at,
-		executionStatus: "idle"
+		providerIds: ids
 	});
-	if (options.activity === "preserve") {
-		await insert.onConflictDoNothing({ target: juniorConversations.conversationId });
-		return;
+	const byFileId = new Map(attachments.map(({ providerId, ...attachment }) => [providerId, attachment]));
+	for (const message of messages) {
+		const stored = readMessageAttachments(message.meta?.attachments);
+		const matched = slackFileIds(message.meta).flatMap((id) => {
+			const attachment = byFileId.get(id);
+			return attachment ? [attachment] : [];
+		});
+		if (matched.length) message.meta = {
+			...message.meta,
+			attachments: [...stored, ...matched]
+		};
 	}
-	await insert.onConflictDoUpdate({
-		target: juniorConversations.conversationId,
-		set: {
-			lastActivityAt: sql`greatest(${juniorConversations.lastActivityAt}, excluded.last_activity_at)`,
-			updatedAt: sql`greatest(${juniorConversations.updatedAt}, excluded.updated_at)`,
-			transcriptPurgedAt: null
-		}
-	});
+}
+function slackFileIds(meta) {
+	const ids = meta?.slackFileIds ?? meta?.imageFileIds;
+	return Array.isArray(ids) ? ids.filter((id) => typeof id === "string") : [];
 }
 //#endregion
-//#region src/chat/conversations/sql/event-actor.ts
-const SLACK_USER_ID_PATTERN = /^[UW][A-Z0-9]{5,}$/;
-function isRecord$1(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function readAuthor(meta) {
-	if (!isRecord$1(meta) || !isRecord$1(meta.author)) return {};
-	const author = meta.author;
-	return {
-		...typeof author.email === "string" ? { email: author.email } : void 0,
-		...typeof author.fullName === "string" ? { fullName: author.fullName } : void 0,
-		...typeof author.isBot === "boolean" ? { isBot: author.isBot } : void 0,
-		...typeof author.userId === "string" ? { userId: author.userId } : void 0,
-		...typeof author.userName === "string" ? { userName: author.userName } : void 0
-	};
+//#region src/chat/sentry-links.ts
+function getSentryOrgSlug() {
+	return process.env.SENTRY_ORG_SLUG?.trim() || void 0;
 }
-async function loadConversationSlackTenantId(executor, conversationId) {
-	const [row] = await executor.db().select({
-		providerTenantId: juniorDestinations.providerTenantId,
-		sessionSource: juniorConversations.sessionSource
-	}).from(juniorConversations).leftJoin(juniorDestinations, eq(juniorDestinations.id, juniorConversations.destinationId)).where(eq(juniorConversations.conversationId, conversationId)).limit(1);
-	const destinationTenant = row?.providerTenantId?.trim();
-	if (destinationTenant) return destinationTenant;
-	const sessionSource = parseSessionSource(row?.sessionSource);
-	if (sessionSource?.kind === "slack") return sessionSource.teamId;
+function isSentrySaasDsnHost(host) {
+	return host === "sentry.io" || host.endsWith(".sentry.io");
 }
-async function findIdentityIdByProviderSubject(executor, args) {
-	return (await executor.db().select({ id: juniorIdentities.id }).from(juniorIdentities).where(and(eq(juniorIdentities.provider, args.provider), eq(juniorIdentities.providerSubjectId, args.providerSubjectId), args.providerTenantId === void 0 ? void 0 : eq(juniorIdentities.providerTenantId, args.providerTenantId))).limit(1))[0]?.id;
+function buildSentryWebBaseUrl(dsn) {
+	if (isSentrySaasDsnHost(dsn.host)) return "https://sentry.io";
+	const port = dsn.port ? `:${dsn.port}` : "";
+	const path = dsn.path ? `/${dsn.path}` : "";
+	return `${dsn.protocol}://${dsn.host}${port}${path}`;
 }
-async function findJuniorIdentityIdByEmail(executor, email) {
-	const normalized = email.trim().toLowerCase();
-	if (!normalized) return void 0;
-	return (await executor.db().select({ id: juniorIdentities.id }).from(juniorIdentities).where(and(eq(juniorIdentities.provider, "junior"), eq(juniorIdentities.kind, "user"), or(eq(juniorIdentities.providerSubjectId, normalized), and(eq(juniorIdentities.emailNormalized, normalized), eq(juniorIdentities.emailVerified, true))))).limit(1))[0]?.id;
+function buildSentryOrgPath(args) {
+	const dsn = getClient$1()?.getDsn();
+	if (!dsn?.host || !dsn.projectId) return;
+	const orgSlug = getSentryOrgSlug();
+	if (!orgSlug) return;
+	const params = new URLSearchParams();
+	params.set("project", dsn.projectId);
+	if (args.query) for (const [key, value] of Object.entries(args.query)) params.set(key, value);
+	const path = `${args.path}?${params.toString()}`;
+	if (isSentrySaasDsnHost(dsn.host)) return `https://${orgSlug}.sentry.io/${path}`;
+	return `${buildSentryWebBaseUrl(dsn)}/organizations/${orgSlug}/${path}`;
 }
-/**
-* Resolve a dashboard:<hash> author against junior identities keyed by email.
-* Web actors store userId as dashboard:${sha256(email).slice(0,24)} while the
-* durable identity subject remains the verified email.
-*/
-async function findJuniorIdentityIdByDashboardAuthorId(executor, dashboardAuthorId) {
-	if (!dashboardAuthorId.startsWith("dashboard:")) return;
-	return (await executor.db().select({ id: juniorIdentities.id }).from(juniorIdentities).where(and(eq(juniorIdentities.provider, "junior"), eq(juniorIdentities.kind, "user"), eq(juniorIdentities.emailVerified, true), sql`${juniorIdentities.emailNormalized} is not null`, sql`concat(
-          'dashboard:',
-          left(encode(digest(${juniorIdentities.emailNormalized}, 'sha256'), 'hex'), 24)
-        ) = ${dashboardAuthorId}`)).limit(1))[0]?.id;
+/** Build a Sentry conversation URL only when the runtime has enough Sentry config. */
+function buildSentryConversationUrl(conversationId) {
+	return buildSentryOrgPath({ path: `explore/conversations/${encodeURIComponent(conversationId)}/` });
 }
-/**
-* Resolve the durable actor identity for one event payload.
-* Human user messages get an identity when author data is enough; other events
-* keep a null actor.
-*/
-async function resolveEventActorIdentityId(executor, args) {
-	const data = args.data;
-	if (data.type !== "message" && data.type !== "message_updated") return;
-	if (typeof data.authorIdentityId === "string" && data.authorIdentityId) return data.authorIdentityId;
-	if (data.role !== "user") return;
-	const author = readAuthor(data.meta);
-	if (author.isBot === true) return;
-	const userId = parseActorUserId(author.userId);
-	if (!userId) return;
-	if (SLACK_USER_ID_PATTERN.test(userId)) {
-		const tenantId = await loadConversationSlackTenantId(executor, args.conversationId);
-		const observation = {
-			kind: "user",
-			provider: "slack",
-			providerSubjectId: userId,
-			...tenantId ? { providerTenantId: tenantId } : void 0,
-			...author.fullName ? { displayName: author.fullName } : void 0,
-			...author.userName ? { handle: author.userName } : void 0,
-			...author.email ? {
-				email: author.email,
-				emailVerified: true
-			} : void 0
-		};
-		if (tenantId) return (await upsertIdentity(executor, observation, args.nowMs)).id;
-		return await findIdentityIdByProviderSubject(executor, {
-			provider: "slack",
-			providerSubjectId: userId
-		}) ?? void 0;
-	}
-	const email = typeof author.email === "string" && author.email.includes("@") ? author.email.trim().toLowerCase() : userId.includes("@") ? userId.trim().toLowerCase() : void 0;
-	if (email) return (await upsertIdentity(executor, {
-		kind: "user",
-		provider: "junior",
-		providerSubjectId: email,
-		email,
-		emailVerified: true,
-		...author.fullName ? { displayName: author.fullName } : void 0,
-		metadata: { platform: "web" }
-	}, args.nowMs)).id;
-	if (userId.startsWith("dashboard:")) return findJuniorIdentityIdByDashboardAuthorId(executor, userId);
-	return findJuniorIdentityIdByEmail(executor, userId);
-}
-/** Drop payload-only authorIdentityId after lifting it onto the event column. */
-function stripPayloadAuthorIdentityId(data) {
-	if (data.type !== "message" && data.type !== "message_updated" || data.authorIdentityId === void 0) return data;
-	const { authorIdentityId: _authorIdentityId, ...rest } = data;
-	return rest;
+/** Build a Sentry event URL only when the runtime has enough Sentry config. */
+function buildSentryEventUrl(eventId) {
+	return buildSentryOrgPath({
+		path: "issues/",
+		query: { query: eventId }
+	});
 }
 //#endregion
-//#region src/db/postgres-json.ts
-/**
-* Replace actual NUL characters that PostgreSQL cannot store in JSONB.
-* Literal `\\u0000` text is preserved because it contains no NUL character.
-*/
-function sanitizePostgresJson(value) {
-	if (typeof value === "string") return value.replaceAll("\0", " ");
-	if (Array.isArray(value)) return value.map((item) => sanitizePostgresJson(item));
-	if (value === null || typeof value !== "object") return value;
-	const prototype = Object.getPrototypeOf(value);
-	if (prototype !== Object.prototype && prototype !== null) return value;
-	return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, sanitizePostgresJson(item)]));
+//#region src/api/conversations/event-model.ts
+/** Apply recorded model choices without carrying a previous turn's settings forward. */
+function conversationEventModel(data, current) {
+	if (data.type === "turn_started") return void 0;
+	if (data.type === "turn_routed" || data.type === "handoff") return {
+		modelId: data.modelId,
+		modelProfile: data.modelProfile,
+		...data.reasoningLevel ? { reasoningLevel: data.reasoningLevel } : void 0
+	};
+	if (data.type === "assistant_message") {
+		const model = text$1(data.model);
+		const provider = text$1(data.provider);
+		if (model) {
+			const modelId = model.includes("/") || !provider ? model : `${provider}/${model}`;
+			return {
+				...current,
+				modelId
+			};
+		}
+	}
+	return current;
 }
-//#endregion
-//#region src/chat/conversations/sql/event-lock.ts
-/** Serialize event sequence allocation with other conversation writes. */
-async function withConversationEventLock(executor, conversationId, callback) {
-	return executor.withLock(`junior_conversation:${conversationId}`, callback);
+function text$1(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
 }
-//#endregion
-//#region src/chat/conversations/sql/history.ts
-const messageHistoryEventTypes = [
-	"message",
-	"message_updated",
-	"message_handled"
-];
-const HUMAN_INSTRUCTION_PLATFORMS = /* @__PURE__ */ new Set([
-	"slack",
-	"local",
-	"web"
-]);
-/**
-* Whether one event should restore an archived conversation to the feed.
-*
-* Archive hides finished noise until a human comes back. Events,
-* turn lifecycle, compaction, and other system writes may still refresh
-* activity clocks, but they must not unarchive on their own.
-*/
-function eventUnarchivesConversation(data) {
-	if (data.type === "user_message") {
-		const provenance = data.provenance;
-		if (provenance.authority !== "instruction") return false;
-		const platform = provenance.actor?.platform;
-		return platform === void 0 || HUMAN_INSTRUCTION_PLATFORMS.has(platform);
-	}
-	if (data.type !== "message") return false;
-	if (data.role !== "user") return false;
-	const meta = data.meta;
-	if (!meta) return true;
-	if (typeof meta.eventType === "string" && meta.eventType.length > 0) return false;
-	const author = meta.author;
-	if (author && typeof author === "object" && !Array.isArray(author) && author.isBot === true) return false;
-	return true;
-}
-/** Split validated event data into column-lifted and JSON payload fields. */
-function insertFromEvent(conversationId, seq, historyVersion, event, actorIdentityId) {
-	const stripped = stripPayloadAuthorIdentityId(event.data);
-	const data = conversationEventDataSchema.parse(stripped);
-	const encoded = encodeHistoryPayload(data);
+/** Allowlist model-call diagnostics; never expose opaque provider metadata. */
+function conversationEventModelCall(data) {
+	if (data.type !== "assistant_message") return void 0;
+	const usage = extractGenAiUsageSummary(data);
+	const provider = text$1(data.provider);
+	const api = text$1(data.api);
+	const stopReason = text$1(data.stopReason);
 	return {
-		conversationId,
-		seq,
-		historyVersion,
-		schemaVersion: encoded.schemaVersion,
-		idempotencyKey: event.idempotencyKey ?? null,
-		type: data.type,
-		payload: sanitizePostgresJson(encoded.payload),
-		actorIdentityId: actorIdentityId ?? null,
-		createdAt: new Date(event.createdAtMs)
+		...provider ? { provider } : void 0,
+		...api ? { api } : void 0,
+		...stopReason ? { stopReason } : void 0,
+		...hasAgentTurnUsage(usage) ? { usage } : void 0
 	};
 }
-/** Parse one physical event row into the storage-compatible domain envelope. */
-function eventFromRow(row) {
-	const payload = row.actorIdentityId && typeof row.payload === "object" && row.payload !== null && !Array.isArray(row.payload) && (row.type === "message" || row.type === "message_updated") && !("authorIdentityId" in row.payload) ? {
-		...row.payload,
-		authorIdentityId: row.actorIdentityId
-	} : row.payload;
-	return decodeStoredConversationEvent({
-		schemaVersion: row.schemaVersion,
-		seq: row.seq,
-		historyVersion: row.historyVersion,
-		...row.idempotencyKey ? { idempotencyKey: row.idempotencyKey } : void 0,
-		createdAtMs: row.createdAt.getTime(),
-		type: row.type,
-		payload
-	});
-}
-/** Decode the summary row that defines a readable message-history suffix. */
-function messagesSummarizedEventFromRow(row) {
-	const event = eventFromRow(row);
-	if (event.schemaVersion !== 1 || event.data.type !== "messages_summarized") throw new Error("Message compaction row did not decode as messages_summarized");
+//#endregion
+//#region src/api/conversations/events.ts
+/** Canonical event types that can contribute to the reporting projection. */
+const conversationReportSourceEventTypes = [
+	"message",
+	"message_handled",
+	"assistant_message",
+	"tool_result",
+	"tool_execution_started",
+	"guardian_action_reviewed",
+	"turn_started",
+	"turn_context",
+	"structured_event",
+	"attachments_delivered",
+	"turn_routed",
+	"turn_completed",
+	"turn_failed",
+	"compaction",
+	"handoff",
+	"subagent_started",
+	"subagent_ended"
+];
+const reportingAssistantMessageSchema = z.object({
+	type: z.literal("assistant_message"),
+	content: z.array(z.unknown())
+}).passthrough();
+const reportingToolCallPartSchema = z.object({
+	type: z.literal("toolCall"),
+	id: z.string().min(1),
+	name: z.string().min(1),
+	arguments: z.unknown()
+}).passthrough();
+const reportingToolResultMessageSchema = z.object({
+	type: z.literal("tool_result"),
+	toolCallId: z.string().min(1),
+	toolName: z.string().min(1).optional(),
+	name: z.string().min(1).optional(),
+	content: z.array(z.unknown()),
+	details: z.unknown().optional(),
+	isError: z.boolean().optional()
+}).passthrough();
+const reportingToolResultDetailsSchema = z.object({
+	ok: z.boolean().optional(),
+	status: z.string().optional()
+}).passthrough();
+const reportingTextPartSchema = z.object({
+	type: z.literal("text"),
+	text: z.string()
+}).passthrough();
+const reportingReasoningPartSchema = z.object({
+	type: z.literal("thinking"),
+	thinking: z.string(),
+	redacted: z.literal(true).optional()
+}).passthrough();
+const reportingMediaPartSchema = z.object({
+	type: z.enum(["image", "audio"]),
+	mimeType: z.string().min(1).optional()
+}).passthrough();
+const reportingMessageAuthorSchema = z.object({
+	fullName: z.string().min(1).optional(),
+	userId: z.string().min(1).optional(),
+	userName: z.string().min(1).optional()
+}).passthrough();
+/** Retain model-visible text and media descriptors, dropping all opaque fields. */
+function sanitizeModelContentPart(value) {
+	const text = reportingTextPartSchema.safeParse(value);
+	if (text.success) return {
+		type: "text",
+		text: text.data.text
+	};
+	const media = reportingMediaPartSchema.safeParse(value);
+	if (!media.success) return void 0;
 	return {
-		...event,
-		schemaVersion: 1,
-		data: event.data
+		type: media.data.type,
+		...media.data.mimeType ? { mimeType: media.data.mimeType } : void 0
 	};
 }
-var SqlConversationEventStore = class {
-	executor;
-	constructor(executor) {
-		this.executor = executor;
-	}
-	async append(conversationId, events, options = {}) {
-		const parsed = events.map((event) => newConversationEventSchema.parse(event));
-		if (parsed.length === 0) return [];
-		return withConversationEventLock(this.executor, conversationId, async () => {
-			const existingKeys = parsed.map((event) => event.idempotencyKey).filter((key) => key !== void 0);
-			const persistedKeys = existingKeys.length === 0 ? /* @__PURE__ */ new Set() : new Set((await this.executor.db().select({ key: juniorConversationEvents.idempotencyKey }).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), inArray(juniorConversationEvents.idempotencyKey, existingKeys)))).flatMap((row) => row.key ? [row.key] : []));
-			const acceptedKeys = new Set(persistedKeys);
-			const pending = parsed.filter((event) => {
-				if (event.idempotencyKey === void 0) return true;
-				if (acceptedKeys.has(event.idempotencyKey)) return false;
-				acceptedKeys.add(event.idempotencyKey);
-				return true;
-			});
-			if (pending.length === 0) return [];
-			const newestCreatedAtMs = Math.max(...pending.map((event) => event.createdAtMs));
-			await ensureConversationRow(this.executor, conversationId, newestCreatedAtMs, options);
-			const cursor = await this.readCursor(conversationId);
-			const historyVersion = cursor.maxHistoryVersion ?? 0;
-			let seq = cursor.nextSeq;
-			const rows = [];
-			for (const event of pending) {
-				const actorIdentityId = await resolveEventActorIdentityId(this.executor, {
-					conversationId,
-					data: event.data,
-					nowMs: event.createdAtMs
-				});
-				rows.push(insertFromEvent(conversationId, seq++, historyVersion, event, actorIdentityId));
-				if (actorIdentityId) await recordConversationParticipant(this.executor, {
-					actorIdentityId,
-					conversationId,
-					atMs: event.createdAtMs,
-					restoreArchive: eventUnarchivesConversation(event.data)
-				});
-			}
-			await this.executor.db().insert(juniorConversationEvents).values(rows);
-			return rows.map((row) => ({
-				seq: row.seq,
-				historyVersion: row.historyVersion
-			}));
-		});
-	}
-	async replaceHistory(conversationId, replacement) {
-		const parsed = historyReplacementSchema.parse(replacement);
-		await withConversationEventLock(this.executor, conversationId, async () => {
-			await ensureConversationRow(this.executor, conversationId, Date.now());
-			const cursor = await this.readCursor(conversationId);
-			const historyVersion = (cursor.maxHistoryVersion ?? 0) + 1;
-			await this.executor.db().insert(juniorConversationEvents).values(insertFromEvent(conversationId, cursor.nextSeq, historyVersion, parsed));
-		});
-	}
-	async loadCurrentHistoryVersion(conversationId) {
-		return (await this.readCursor(conversationId)).maxHistoryVersion ?? 0;
-	}
-	async loadCurrentHistory(conversationId) {
-		const cursor = await this.readCursor(conversationId);
-		if (cursor.maxHistoryVersion === null) return [];
-		return (await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.historyVersion, cursor.maxHistoryVersion))).orderBy(asc(juniorConversationEvents.seq))).map(eventFromRow);
-	}
-	async loadByIdempotencyKey(conversationId, idempotencyKey) {
-		const [row] = await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.idempotencyKey, idempotencyKey))).limit(1);
-		return row ? eventFromRow(row) : void 0;
-	}
-	async loadHistoryContaining(conversationId, seq, throughSeq) {
-		const [boundary] = await this.executor.db().select({ historyVersion: juniorConversationEvents.historyVersion }).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.seq, seq))).limit(1);
-		if (!boundary) return void 0;
-		return (await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.historyVersion, boundary.historyVersion), throughSeq === void 0 ? void 0 : lte(juniorConversationEvents.seq, throughSeq))).orderBy(asc(juniorConversationEvents.seq))).map(eventFromRow);
-	}
-	async loadLatestStructuredEvent(conversationId, namespace, name) {
-		const [row] = await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.type, "structured_event"), sql`${juniorConversationEvents.payload}->>'namespace' = ${namespace}`, sql`${juniorConversationEvents.payload}->>'name' = ${name}`)).orderBy(desc(juniorConversationEvents.seq)).limit(1);
-		return row ? eventFromRow(row) : void 0;
-	}
-	async loadLatestInstruction(conversationId) {
-		const [row] = await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.type, "user_message"), sql`${juniorConversationEvents.payload}->'provenance'->>'authority' = 'instruction'`)).orderBy(desc(juniorConversationEvents.seq)).limit(1);
-		return row ? eventFromRow(row) : void 0;
-	}
-	async loadMessageHistory(conversationId) {
-		const [compactionRow] = await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), eq(juniorConversationEvents.type, "messages_summarized"))).orderBy(desc(juniorConversationEvents.seq)).limit(1);
-		const compaction = compactionRow ? messagesSummarizedEventFromRow(compactionRow) : void 0;
-		const historyFromSeq = compaction?.data.historyFromSeq ?? 0;
-		return {
-			events: (await this.executor.db().select().from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, conversationId), inArray(juniorConversationEvents.type, messageHistoryEventTypes), gte(juniorConversationEvents.seq, historyFromSeq))).orderBy(asc(juniorConversationEvents.seq))).map(eventFromRow),
-			compaction,
-			historyFromSeq
-		};
-	}
-	async loadHistory(conversationId) {
-		return (await this.executor.db().select().from(juniorConversationEvents).where(eq(juniorConversationEvents.conversationId, conversationId)).orderBy(asc(juniorConversationEvents.seq))).map(eventFromRow);
-	}
-	async query(conversationId, query) {
-		if (query.limit < 1) throw new Error("Conversation event query limit must be at least 1");
-		if (query.afterSeq !== void 0 && query.beforeSeq !== void 0 && query.afterSeq >= query.beforeSeq) return {
-			events: [],
-			hasOlder: false,
-			hasNewer: false
-		};
-		const typeFilter = query.types && query.types.length > 0 ? inArray(juniorConversationEvents.type, [...query.types]) : void 0;
-		const bounds = and(eq(juniorConversationEvents.conversationId, conversationId), query.afterSeq === void 0 ? void 0 : gt(juniorConversationEvents.seq, query.afterSeq), query.beforeSeq === void 0 ? void 0 : lt(juniorConversationEvents.seq, query.beforeSeq), typeFilter);
-		const newestFirst = query.afterSeq === void 0;
-		const rows = await this.executor.db().select().from(juniorConversationEvents).where(bounds).orderBy(newestFirst ? desc(juniorConversationEvents.seq) : asc(juniorConversationEvents.seq)).limit(query.limit + 1);
-		const overflow = rows.length > query.limit;
-		const pageRows = overflow ? rows.slice(0, query.limit) : rows;
-		const events = (newestFirst ? [...pageRows].reverse() : pageRows).map(eventFromRow);
-		if (events.length === 0) return {
-			events,
-			hasOlder: false,
-			hasNewer: false
-		};
-		const firstSeq = events[0].seq;
-		const lastSeq = events[events.length - 1].seq;
-		return {
-			events,
-			hasOlder: newestFirst && overflow ? true : await this.hasMatchingEvent({
-				conversationId,
-				beforeSeq: firstSeq,
-				typeFilter
-			}),
-			hasNewer: !newestFirst && overflow ? true : await this.hasMatchingEvent({
-				conversationId,
-				afterSeq: lastSeq,
-				typeFilter
-			})
-		};
-	}
-	/** Return whether any matching event exists inside the exclusive seq window. */
-	async hasMatchingEvent(args) {
-		if (args.afterSeq !== void 0 && args.beforeSeq !== void 0 && args.afterSeq >= args.beforeSeq) return false;
-		const [row] = await this.executor.db().select({ seq: juniorConversationEvents.seq }).from(juniorConversationEvents).where(and(eq(juniorConversationEvents.conversationId, args.conversationId), args.afterSeq === void 0 ? void 0 : gt(juniorConversationEvents.seq, args.afterSeq), args.beforeSeq === void 0 ? void 0 : lt(juniorConversationEvents.seq, args.beforeSeq), args.typeFilter)).limit(1);
-		return row !== void 0;
-	}
-	/** Read the next sequence and active model-history version. */
-	async readCursor(conversationId) {
-		const rows = await this.executor.db().select({
-			maxSeq: sql`max(${juniorConversationEvents.seq})`,
-			maxHistoryVersion: sql`max(${juniorConversationEvents.historyVersion})`
-		}).from(juniorConversationEvents).where(eq(juniorConversationEvents.conversationId, conversationId));
-		const maxSeq = rows[0]?.maxSeq;
-		const maxHistoryVersion = rows[0]?.maxHistoryVersion;
-		return {
-			maxHistoryVersion: maxHistoryVersion === null || maxHistoryVersion === void 0 ? null : Number(maxHistoryVersion),
-			nextSeq: maxSeq === null || maxSeq === void 0 ? 0 : Number(maxSeq) + 1
-		};
-	}
-};
-/** Create a SQL-backed canonical conversation event store. */
-function createSqlConversationEventStore(executor) {
-	return new SqlConversationEventStore(executor);
+/** Convert allowlisted Pi content parts into the reporting result value. */
+function modelVisibleToolOutput(content) {
+	const sanitized = content.map(sanitizeModelContentPart).filter((part) => part !== void 0);
+	if (sanitized.length === 0) return void 0;
+	if (sanitized.length !== 1) return sanitized;
+	const only = sanitized[0];
+	return only.type === "text" ? only.text : only;
 }
-//#endregion
-//#region src/chat/conversations/sql/message-search.ts
-const EXCERPT_WITHOUT_QUERY_CHARS = 240;
-var SqlConversationMessageSearchStore = class {
-	executor;
-	constructor(executor) {
-		this.executor = executor;
-	}
-	async search(args) {
-		const db = this.executor.db();
-		const query = args.filters.query?.trim() || void 0;
-		const text = sql`${juniorConversationEvents.payload}->>'text'`;
-		const role = sql`${juniorConversationEvents.payload}->>'role'`;
-		const messageId = sql`${juniorConversationEvents.payload}->>'messageId'`;
-		const tsquery = query ? sql`websearch_to_tsquery('english', ${query})` : void 0;
-		const rank = tsquery ? sql`ts_rank_cd(to_tsvector('english', ${text}), ${tsquery})` : sql`1`;
-		const excerpt = tsquery ? sql`ts_headline('english', ${text}, ${tsquery}, 'MaxFragments=2, MinWords=8, MaxWords=40, FragmentDelimiter=" … ", StartSel=**, StopSel=**')` : sql`left(${text}, ${EXCERPT_WITHOUT_QUERY_CHARS})`;
-		const conditions = [
-			eq(juniorConversations.source, "slack"),
-			isNull(juniorConversations.parentConversationId),
-			isNull(juniorConversations.transcriptPurgedAt),
-			ne(juniorConversations.conversationId, args.currentConversationId),
-			eq(juniorDestinations.provider, args.scope.provider),
-			eq(juniorDestinations.providerTenantId, args.scope.providerTenantId),
-			eq(juniorDestinations.visibility, "public"),
-			eq(juniorConversationEvents.type, "message"),
-			sql`${role} in ('user', 'assistant')`
-		];
-		if (tsquery) conditions.push(sql`to_tsvector('english', ${text}) @@ ${tsquery}`);
-		if (args.filters.channelId) conditions.push(eq(juniorDestinations.providerDestinationId, args.filters.channelId));
-		if (args.filters.afterMs !== void 0 && Number.isFinite(args.filters.afterMs)) conditions.push(gte(juniorConversations.lastActivityAt, new Date(args.filters.afterMs)));
-		if (args.filters.beforeMs !== void 0 && Number.isFinite(args.filters.beforeMs)) conditions.push(lt(juniorConversations.lastActivityAt, new Date(args.filters.beforeMs)));
-		if (args.filters.annotation) {
-			const annotation = args.filters.annotation.toLowerCase();
-			const nestedAnnotationPrefix = `${annotation}#`;
-			conditions.push(sql`exists (
-          select 1
-          from ${juniorConversationAnnotations}
-          where ${and(eq(juniorConversationAnnotations.conversationId, juniorConversations.conversationId), sql`(
-              lower(${juniorConversationAnnotations.key}) = ${annotation}
-              or starts_with(
-                lower(${juniorConversationAnnotations.key}),
-                ${nestedAnnotationPrefix}
-              )
-            )`)}
-        )`);
-		}
-		const bestPerConversation = db.selectDistinctOn([juniorConversations.conversationId], {
-			channelName: juniorDestinations.displayName,
-			conversationId: juniorConversations.conversationId,
-			excerpt: excerpt.as("excerpt"),
-			lastActivityAt: juniorConversations.lastActivityAt,
-			messageCreatedAt: juniorConversationEvents.createdAt,
-			messageId: messageId.as("message_id"),
-			providerDestinationId: juniorDestinations.providerDestinationId,
-			rank: rank.as("rank"),
-			role: role.as("role")
-		}).from(juniorConversationEvents).innerJoin(juniorConversations, eq(juniorConversations.conversationId, juniorConversationEvents.conversationId)).innerJoin(juniorDestinations, eq(juniorDestinations.id, juniorConversations.destinationId)).where(and(...conditions)).orderBy(juniorConversations.conversationId, desc(rank), desc(juniorConversationEvents.createdAt)).as("best_conversation_matches");
-		return (await db.select().from(bestPerConversation).orderBy(desc(bestPerConversation.rank), desc(bestPerConversation.lastActivityAt), desc(bestPerConversation.messageCreatedAt)).limit(args.limit)).map((row) => ({
-			conversationId: row.conversationId,
-			excerpt: row.excerpt,
-			messageCreatedAtMs: row.messageCreatedAt.getTime(),
-			messageId: row.messageId,
-			providerDestinationId: row.providerDestinationId,
-			role: row.role,
-			...row.channelName ? { channelName: row.channelName } : void 0
-		}));
-	}
-};
-/** Create a SQL-backed public workspace message search store. */
-function createSqlConversationMessageSearchStore(executor) {
-	return new SqlConversationMessageSearchStore(executor);
+function reportMessageActorIdentity(data) {
+	if (data.role !== "user") return void 0;
+	const author = reportingMessageAuthorSchema.safeParse(data.meta?.author);
+	if (!author.success) return void 0;
+	const actorIdentity = {
+		...author.data.fullName ? { fullName: author.data.fullName } : void 0,
+		...author.data.userId ? { slackUserId: author.data.userId } : void 0,
+		...author.data.userName ? { slackUserName: author.data.userName } : void 0
+	};
+	return Object.keys(actorIdentity).length > 0 ? actorIdentity : void 0;
 }
-//#endregion
-//#region src/chat/db.ts
-var db_exports = /* @__PURE__ */ __exportAll({
-	closeDb: () => closeDb,
-	getConversationEventStore: () => getConversationEventStore,
-	getConversationMessageSearchStore: () => getConversationMessageSearchStore,
-	getConversationStore: () => getConversationStore,
-	getDb: () => getDb,
-	getSqlExecutor: () => getSqlExecutor
-});
-let current;
-function createDb(args) {
-	return createJuniorSqlExecutor({
-		connectionString: args.databaseUrl,
-		driver: args.driver,
-		statementTimeoutMs: args.statementTimeoutMs
+/** Project native assistant tool calls through the existing reporting shape. */
+function reportToolCalls(args) {
+	const message = reportingAssistantMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	const calls = message.data.content.flatMap((part) => {
+		const call = reportingToolCallPartSchema.safeParse(part);
+		if (!call.success) return [];
+		return [{
+			toolCallId: call.data.id,
+			name: call.data.name,
+			status: "running",
+			startedAt: new Date(args.createdAtMs).toISOString(),
+			startedSeq: args.seq,
+			...args.canExposePayload && call.data.arguments !== void 0 ? { input: call.data.arguments } : void 0
+		}];
 	});
+	return calls.length > 0 ? {
+		type: "tool_calls",
+		calls
+	} : void 0;
 }
-/** Return the process SQL executor for SQL-specific queries and transactions. */
-function getSqlExecutor() {
-	const { sql } = getChatConfig();
-	if (current?.databaseUrl !== sql.databaseUrl || current.driver !== sql.driver || current.statementTimeoutMs !== sql.statementTimeoutMs) {
-		if (current) {
-			const previous = current;
-			current = void 0;
-			previous.db.close().catch(() => void 0);
+/** Project assistant reasoning with tool ids retained only for display order. */
+function reportAssistantMessage(args) {
+	const message = reportingAssistantMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	if (!message.data.content.some((part) => {
+		const reasoning = reportingReasoningPartSchema.safeParse(part);
+		return reasoning.success && reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0;
+	})) return reportToolCalls(args) ?? {
+		type: "assistant_message",
+		parts: []
+	};
+	const reasoningParts = [];
+	const assistantParts = [];
+	for (const part of message.data.content) {
+		const reasoning = reportingReasoningPartSchema.safeParse(part);
+		if (reasoning.success) {
+			if (reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0) {
+				const projected = {
+					type: "reasoning",
+					...args.canExposePayload ? { text: reasoning.data.thinking } : { redacted: true }
+				};
+				reasoningParts.push(projected);
+				assistantParts.push(projected);
+			}
+			continue;
 		}
-		const db = createDb({
-			databaseUrl: sql.databaseUrl,
-			driver: sql.driver,
-			statementTimeoutMs: sql.statementTimeoutMs
+		const call = reportingToolCallPartSchema.safeParse(part);
+		if (call.success) assistantParts.push({
+			type: "tool_call",
+			toolCallId: call.data.id
 		});
-		current = {
-			databaseUrl: sql.databaseUrl,
-			driver: sql.driver,
-			statementTimeoutMs: sql.statementTimeoutMs,
-			db,
-			store: createSqlStore(db),
-			eventStore: createSqlConversationEventStore(db),
-			searchStore: createSqlConversationMessageSearchStore(db)
-		};
 	}
-	return current.db;
-}
-/** Return the process Drizzle database. */
-function getDb() {
-	return getSqlExecutor().db();
-}
-/** Return the SQL-backed conversation store. */
-function getConversationStore() {
-	getSqlExecutor();
-	return current.store;
-}
-/** Return the canonical SQL-backed conversation event store. */
-function getConversationEventStore() {
-	getSqlExecutor();
-	return current.eventStore;
+	const toolCalls = reportToolCalls(args);
+	if (toolCalls?.type === "tool_calls") return {
+		...toolCalls,
+		assistant: { parts: assistantParts }
+	};
+	return reasoningParts.length > 0 ? {
+		type: "assistant_message",
+		parts: reasoningParts
+	} : void 0;
 }
-/** Return the SQL-backed public provider-tenant conversation search store. */
-function getConversationMessageSearchStore() {
-	getSqlExecutor();
-	return current.searchStore;
+/** Project a native tool result without exposing host-only result details. */
+function reportToolResult(args) {
+	const message = reportingToolResultMessageSchema.safeParse(args.message);
+	if (!message.success) return void 0;
+	const details = reportingToolResultDetailsSchema.safeParse(message.data.details);
+	const outcome = message.data.isError === true || details.success && (details.data.ok === false || details.data.status === "error") ? "error" : "completed";
+	const output = modelVisibleToolOutput(message.data.content);
+	const name = message.data.toolName ?? message.data.name ?? args.start?.name;
+	if (!name) return void 0;
+	return {
+		type: "tool_calls",
+		calls: [{
+			toolCallId: message.data.toolCallId,
+			name,
+			status: outcome,
+			...args.start ? {
+				startedAt: new Date(args.start.createdAtMs).toISOString(),
+				startedSeq: args.start.seq
+			} : void 0,
+			...args.canExposePayload && output !== void 0 ? { output } : void 0
+		}]
+	};
 }
-/** Close the process SQL database when it has been opened. */
-async function closeDb() {
-	const previous = current;
-	current = void 0;
-	await previous?.db.close();
-}
-//#endregion
-//#region src/chat/conversations/structured-events.ts
-/** Reserved namespace for Junior-owned conversation metadata events. */
-const JUNIOR_NATIVE_EVENT_NAMESPACE = "junior";
-const authenticationEventContentSchema = z.object({
-	accountLabel: z.string().trim().min(1).max(120).optional(),
-	actorId: z.string().min(1),
-	authorizationId: z.string().min(1).optional(),
-	provider: z.string().regex(/^[a-z][a-z0-9-]*$/),
-	providerLabel: z.string().trim().min(1).max(80).optional()
-}).strict();
-const agentsInstructionsUpdatedContentSchema = z.object({
-	action: z.enum([
-		"loaded",
-		"replaced",
-		"cleared"
-	]),
-	directory: z.string().trim().min(1).max(500).optional(),
-	fingerprint: z.string().trim().min(1).max(128),
-	sources: z.array(z.object({
-		content: z.string().min(1).max(32768),
-		path: z.string().trim().min(1).max(500)
-	}).strict()).max(32),
-	textBytes: z.number().int().nonnegative().optional()
-}).strict();
-function providerTitle(content) {
-	return content.providerLabel?.trim() || content.provider;
-}
-function agentsInstructionsTitle(action) {
-	if (action === "loaded") return "Loaded AGENTS.md";
-	if (action === "replaced") return "Updated AGENTS.md";
-	return "Cleared AGENTS.md";
-}
-function sourceFilename(sourcePath) {
-	return sourcePath.split("/").at(-1) || sourcePath;
-}
-function formatBytes(bytes) {
-	if (bytes < 1024) return `${bytes} bytes`;
-	const kilobytes = bytes / 1024;
-	return `${Number.isInteger(kilobytes) ? kilobytes : kilobytes.toFixed(1)} KB`;
-}
-function agentsInstructionsPreview(content) {
-	const source = content.sources[0];
-	if (!source) return void 0;
-	const filename = sourceFilename(source.path);
-	const label = content.sources.length === 1 ? filename : `${content.sources.length} AGENTS.md files`;
-	return typeof content.textBytes === "number" ? `${label} · ${formatBytes(content.textBytes)}` : label;
-}
-/** Junior-owned account-link transcript event. */
-const authenticationLinkedEvent = defineConversationEvent({
-	name: "authentication_linked",
-	version: 1,
-	schema: authenticationEventContentSchema,
-	renderEvent(event) {
-		const provider = providerTitle(event);
-		return {
-			icon: "link",
-			title: `${provider} connected`,
-			...event.accountLabel ? { preview: `Connected as \`${event.accountLabel}\`` } : void 0,
-			details: [{
-				title: `${provider} connected`,
-				...event.accountLabel ? { description: `Connected as \`${event.accountLabel}\`` } : void 0,
-				metadata: [event.provider]
-			}]
-		};
-	}
-});
-/** Junior-owned account-unlink transcript event. */
-const authenticationUnlinkedEvent = defineConversationEvent({
-	name: "authentication_unlinked",
-	version: 1,
-	schema: authenticationEventContentSchema,
-	renderEvent(event) {
-		const provider = providerTitle(event);
-		return {
-			icon: "key",
-			title: `${provider} disconnected`,
-			details: [{
-				title: `${provider} disconnected`,
-				metadata: [event.provider]
-			}]
-		};
-	}
-});
-/** Junior-owned AGENTS.md bootstrap transition for the dashboard timeline. */
-const agentsInstructionsUpdatedEvent = defineConversationEvent({
-	name: "agents_instructions_updated",
-	version: 1,
-	schema: agentsInstructionsUpdatedContentSchema,
-	renderEvent(event) {
-		const title = agentsInstructionsTitle(event.action);
-		const preview = agentsInstructionsPreview(event);
-		return {
-			icon: "brain",
-			title,
-			...preview ? { preview } : void 0,
-			...event.sources.length > 0 ? { details: event.sources.map((source) => ({
-				title: sourceFilename(source.path),
-				content: source.content
-			})) } : void 0
-		};
-	}
-});
-const NATIVE_EVENT_DEFINITIONS = [
-	authenticationLinkedEvent,
-	authenticationUnlinkedEvent,
-	agentsInstructionsUpdatedEvent
-];
-/** Resolve a registered Junior-native conversation event definition. */
-function getJuniorNativeEventDefinition(args) {
-	return NATIVE_EVENT_DEFINITIONS.find((definition) => definition.eventName === args.name && definition.version === args.version);
-}
-/** Render one Junior-native event through its active definition. */
-function renderJuniorNativeConversationEvent(args) {
-	if (args.namespace !== "junior") return void 0;
-	const definition = getJuniorNativeEventDefinition(args);
-	if (!definition) return void 0;
-	const presentation = definition.renderEvent(definition.parse(args.content));
-	return presentation === void 0 ? void 0 : conversationEventPresentationSchema.parse(presentation);
-}
-//#endregion
-//#region src/chat/plugins/annotations.ts
-function annotationFromRow(row) {
-	const parsed = conversationAnnotationInputSchema.safeParse(row.annotation);
-	if (!parsed.success) return void 0;
-	return {
-		...parsed.data,
-		plugin: row.plugin,
-		createdAt: row.createdAt.toISOString(),
-		updatedAt: row.updatedAt.toISOString()
-	};
-}
-function createPluginAnnotations(args) {
-	return {
-		async upsert(input) {
-			const annotation = conversationAnnotationInputSchema.parse(input);
-			const now = /* @__PURE__ */ new Date();
-			await args.db.insert(juniorConversationAnnotations).values({
-				annotation,
-				conversationId: args.conversationId,
-				createdAt: now,
-				key: annotation.key,
-				kind: annotation.kind,
-				plugin: args.plugin,
-				updatedAt: now
-			}).onConflictDoUpdate({
-				target: [
-					juniorConversationAnnotations.conversationId,
-					juniorConversationAnnotations.plugin,
-					juniorConversationAnnotations.kind,
-					juniorConversationAnnotations.key
-				],
-				set: {
-					annotation,
-					updatedAt: now
-				}
-			});
-		},
-		async remove(kind, key) {
-			await args.db.delete(juniorConversationAnnotations).where(and(eq(juniorConversationAnnotations.conversationId, args.conversationId), eq(juniorConversationAnnotations.plugin, args.plugin), eq(juniorConversationAnnotations.kind, kind), eq(juniorConversationAnnotations.key, key)));
-		},
-		async list() {
-			return (await listConversationAnnotations(args.db, args.conversationId)).filter((a) => a.plugin === args.plugin);
-		}
-	};
-}
-/** Load stored annotations for one conversation, newest update first. */
-async function listConversationAnnotations(db, conversationId) {
-	return (await listConversationAnnotationsById(db, [conversationId])).get(conversationId) ?? [];
-}
-/** Load stored annotations for a bounded set of conversations. */
-async function listConversationAnnotationsById(db, conversationIds) {
-	const byConversation = /* @__PURE__ */ new Map();
-	if (conversationIds.length === 0) return byConversation;
-	const rows = await db.select().from(juniorConversationAnnotations).where(inArray(juniorConversationAnnotations.conversationId, [...conversationIds])).orderBy(desc(juniorConversationAnnotations.updatedAt));
-	for (const row of rows) {
-		const annotation = annotationFromRow(row);
-		if (!annotation) continue;
-		const current = byConversation.get(row.conversationId);
-		if (current) current.push(annotation);
-		else byConversation.set(row.conversationId, [annotation]);
-	}
-	return byConversation;
-}
-//#endregion
-//#region src/chat/conversations/annotation-results.ts
-/** Save object annotations and retain returned facts in the tool result. */
-async function saveObjectAnnotations(conversationId, plugin, value) {
-	const annotations = objectAnnotationSchema.array().parse(value);
-	await getDb().transaction(async (db) => {
-		const store = createPluginAnnotations({
-			conversationId,
-			plugin,
-			db
-		});
-		for (const annotation of annotations) {
-			await store.upsert(annotation);
-			await store.remove("resource_link", annotation.key);
-		}
-	});
-	return annotations.map((annotation) => ({
-		...annotation,
-		plugin
-	}));
-}
-/** Save annotations from a successful plugin tool result and attach their cards. */
-async function annotateToolResult(conversationId, plugin, result) {
-	if (!isRecord$2(result) || result.isError === true) return result;
-	const details = isRecord$2(result.details) ? result.details : result;
-	if (details.timed_out === true || details.isError === true || !Array.isArray(details.objectAnnotations)) return result;
-	const cards = await saveObjectAnnotations(conversationId, plugin, details.objectAnnotations);
-	const { objectAnnotations: _annotations, ...rest } = details;
-	const annotated = {
-		...rest,
-		objectCards: cards
-	};
-	if (isRecord$2(result.details)) return {
-		...result,
-		details: annotated
-	};
-	return annotated;
-}
-//#endregion
-//#region src/chat/conversations/sql/privacy.ts
-const privacyRoot = alias(juniorConversations, "privacy_root");
-/** Accept only a structurally valid persisted root as privacy authority. */
-async function readRootCandidate(executor, conversationId) {
-	const row = (await executor.db().select({
-		requestedConversationId: juniorConversations.conversationId,
-		requestedParentConversationId: juniorConversations.parentConversationId,
-		requestedRootConversationId: juniorConversations.rootConversationId,
-		rootConversationId: privacyRoot.conversationId,
-		rootDestinationId: privacyRoot.destinationId,
-		rootParentConversationId: privacyRoot.parentConversationId,
-		rootRootConversationId: privacyRoot.rootConversationId
-	}).from(juniorConversations).leftJoin(privacyRoot, eq(privacyRoot.conversationId, juniorConversations.rootConversationId)).where(eq(juniorConversations.conversationId, conversationId)))[0];
-	return row?.requestedRootConversationId !== null && (row?.requestedParentConversationId !== null || row?.requestedRootConversationId === row?.requestedConversationId) && row?.rootConversationId === row.requestedRootConversationId && row.rootRootConversationId === row.rootConversationId && row.rootParentConversationId === null && row.rootDestinationId !== null ? {
-		destinationId: row.rootDestinationId,
-		rootConversationId: row.rootConversationId
-	} : void 0;
-}
-async function readCandidateVisibility(executor, candidate) {
-	const destinations = await executor.db().select({ visibility: juniorDestinations.visibility }).from(juniorDestinations).where(eq(juniorDestinations.id, candidate.destinationId)).for("share");
-	return {
-		rootConversationId: candidate.rootConversationId,
-		visibility: destinations[0]?.visibility ?? null
-	};
-}
-/**
-* Resolve a conversation's privacy authority from its persisted root.
-*
-* Missing or structurally invalid root metadata fails closed. The root
-* destination is locked so callers that keep the transaction open receive a
-* stable visibility decision.
-*/
-async function resolveRootVisibility(executor, conversationId) {
-	const candidate = await readRootCandidate(executor, conversationId);
-	if (!candidate) return {
-		rootConversationId: conversationId,
-		visibility: null
-	};
-	return readCandidateVisibility(executor, candidate);
-}
-//#endregion
-//#region src/chat/briefs/events.ts
-/** Durable cost and size record for one stored Brief version. */
-const briefUpdatedEvent = defineConversationEvent({
-	name: "brief_updated",
-	version: 1,
-	schema: z.object({
-		version: z.number().int().positive(),
-		modelId: z.string().min(1),
-		costUsd: z.number().finite().nonnegative().optional(),
-		decisions: z.number().int().nonnegative(),
-		openDecisions: z.number().int().nonnegative(),
-		links: z.number().int().nonnegative()
-	}).strict(),
-	renderEvent(event) {
-		return {
-			icon: "activity",
-			title: `Brief updated (v${event.version})`
-		};
-	}
-});
-//#endregion
-//#region src/chat/slack/attachments.ts
-/** Save the vision summary for a stored Slack attachment. */
-async function recordSlackAttachment(args) {
-	await args.db.db().update(juniorAttachments).set({ visionSummary: args.visionSummary }).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
-}
-/** Read a saved vision summary for one live attachment. */
-async function readAttachmentVisionSummary(args) {
-	const [row] = await args.db.db().select({ visionSummary: juniorAttachments.visionSummary }).from(juniorAttachments).where(and(eq(juniorAttachments.id, args.attachmentId), eq(juniorAttachments.conversationId, args.conversationId), isNull(juniorAttachments.deleteRequestedAt)));
-	return row?.visionSummary;
-}
-/** Match live conversation attachments to Slack file ids. */
-async function matchSlackAttachments(args) {
-	if (args.providerIds.length === 0) return [];
-	return await args.db.db().select({
-		id: juniorAttachments.id,
-		providerId: juniorAttachments.providerId,
-		bytes: juniorAttachments.bytes,
-		contentType: juniorAttachments.contentType,
-		filename: juniorAttachments.filename
-	}).from(juniorAttachments).where(and(eq(juniorAttachments.conversationId, args.conversationId), eq(juniorAttachments.provider, "slack"), inArray(juniorAttachments.providerId, args.providerIds), isNull(juniorAttachments.deleteRequestedAt)));
-}
-/** Read the Slack file identity retained by the Chat SDK. */
-function getSlackFileId(attachment) {
-	const metadataId = attachment.fetchMetadata?.fileId;
-	if (metadataId) return metadataId;
-	return (attachment.url ?? attachment.fetchMetadata?.url ?? "").match(/(?:^|[-/])(F[A-Z0-9]+)(?:[-/]|$)/i)?.[1];
-}
-//#endregion
-//#region src/api/conversations/message-attachments.ts
-/** Resolve saved Slack file references without exposing private storage details. */
-async function hydrateMessageAttachments(db, conversationId, events) {
-	const messages = events.flatMap((event) => event.data.type === "message" ? [event.data] : []);
-	const ids = [...new Set(messages.flatMap((message) => slackFileIds(message.meta)))];
-	if (!ids.length) return;
-	const attachments = await matchSlackAttachments({
-		db,
-		conversationId,
-		providerIds: ids
-	});
-	const byFileId = new Map(attachments.map(({ providerId, ...attachment }) => [providerId, attachment]));
-	for (const message of messages) {
-		const stored = readMessageAttachments(message.meta?.attachments);
-		const matched = slackFileIds(message.meta).flatMap((id) => {
-			const attachment = byFileId.get(id);
-			return attachment ? [attachment] : [];
-		});
-		if (matched.length) message.meta = {
-			...message.meta,
-			attachments: [...stored, ...matched]
-		};
-	}
-}
-function slackFileIds(meta) {
-	const ids = meta?.slackFileIds ?? meta?.imageFileIds;
-	return Array.isArray(ids) ? ids.filter((id) => typeof id === "string") : [];
-}
-//#endregion
-//#region src/chat/sentry-links.ts
-function getSentryOrgSlug() {
-	return process.env.SENTRY_ORG_SLUG?.trim() || void 0;
-}
-function isSentrySaasDsnHost(host) {
-	return host === "sentry.io" || host.endsWith(".sentry.io");
-}
-function buildSentryWebBaseUrl(dsn) {
-	if (isSentrySaasDsnHost(dsn.host)) return "https://sentry.io";
-	const port = dsn.port ? `:${dsn.port}` : "";
-	const path = dsn.path ? `/${dsn.path}` : "";
-	return `${dsn.protocol}://${dsn.host}${port}${path}`;
-}
-function buildSentryOrgPath(args) {
-	const dsn = getClient$1()?.getDsn();
-	if (!dsn?.host || !dsn.projectId) return;
-	const orgSlug = getSentryOrgSlug();
-	if (!orgSlug) return;
-	const params = new URLSearchParams();
-	params.set("project", dsn.projectId);
-	if (args.query) for (const [key, value] of Object.entries(args.query)) params.set(key, value);
-	const path = `${args.path}?${params.toString()}`;
-	if (isSentrySaasDsnHost(dsn.host)) return `https://${orgSlug}.sentry.io/${path}`;
-	return `${buildSentryWebBaseUrl(dsn)}/organizations/${orgSlug}/${path}`;
-}
-/** Build a Sentry conversation URL only when the runtime has enough Sentry config. */
-function buildSentryConversationUrl(conversationId) {
-	return buildSentryOrgPath({ path: `explore/conversations/${encodeURIComponent(conversationId)}/` });
-}
-/** Build a Sentry event URL only when the runtime has enough Sentry config. */
-function buildSentryEventUrl(eventId) {
-	return buildSentryOrgPath({
-		path: "issues/",
-		query: { query: eventId }
-	});
-}
-//#endregion
-//#region src/api/conversations/event-model.ts
-/** Apply recorded model choices without carrying a previous turn's settings forward. */
-function conversationEventModel(data, current) {
-	if (data.type === "turn_started") return void 0;
-	if (data.type === "turn_routed" || data.type === "handoff") return {
-		modelId: data.modelId,
-		modelProfile: data.modelProfile,
-		...data.reasoningLevel ? { reasoningLevel: data.reasoningLevel } : void 0
-	};
-	if (data.type === "assistant_message") {
-		const model = text$1(data.model);
-		const provider = text$1(data.provider);
-		if (model) {
-			const modelId = model.includes("/") || !provider ? model : `${provider}/${model}`;
-			return {
-				...current,
-				modelId
-			};
-		}
-	}
-	return current;
-}
-function text$1(value) {
-	return typeof value === "string" && value.length > 0 ? value : void 0;
-}
-/** Allowlist model-call diagnostics; never expose opaque provider metadata. */
-function conversationEventModelCall(data) {
-	if (data.type !== "assistant_message") return void 0;
-	const usage = extractGenAiUsageSummary(data);
-	const provider = text$1(data.provider);
-	const api = text$1(data.api);
-	const stopReason = text$1(data.stopReason);
-	return {
-		...provider ? { provider } : void 0,
-		...api ? { api } : void 0,
-		...stopReason ? { stopReason } : void 0,
-		...hasAgentTurnUsage(usage) ? { usage } : void 0
-	};
-}
-//#endregion
-//#region src/api/conversations/events.ts
-/** Canonical event types that can contribute to the reporting projection. */
-const conversationReportSourceEventTypes = [
-	"message",
-	"message_handled",
-	"assistant_message",
-	"tool_result",
-	"tool_execution_started",
-	"guardian_action_reviewed",
-	"turn_started",
-	"turn_context",
-	"structured_event",
-	"attachments_delivered",
-	"turn_routed",
-	"turn_completed",
-	"turn_failed",
-	"compaction",
-	"handoff",
-	"subagent_started",
-	"subagent_ended"
-];
-const reportingAssistantMessageSchema = z.object({
-	type: z.literal("assistant_message"),
-	content: z.array(z.unknown())
-}).passthrough();
-const reportingToolCallPartSchema = z.object({
-	type: z.literal("toolCall"),
-	id: z.string().min(1),
-	name: z.string().min(1),
-	arguments: z.unknown()
-}).passthrough();
-const reportingToolResultMessageSchema = z.object({
-	type: z.literal("tool_result"),
-	toolCallId: z.string().min(1),
-	toolName: z.string().min(1).optional(),
-	name: z.string().min(1).optional(),
-	content: z.array(z.unknown()),
-	details: z.unknown().optional(),
-	isError: z.boolean().optional()
-}).passthrough();
-const reportingToolResultDetailsSchema = z.object({
-	ok: z.boolean().optional(),
-	status: z.string().optional()
-}).passthrough();
-const reportingTextPartSchema = z.object({
-	type: z.literal("text"),
-	text: z.string()
-}).passthrough();
-const reportingReasoningPartSchema = z.object({
-	type: z.literal("thinking"),
-	thinking: z.string(),
-	redacted: z.literal(true).optional()
-}).passthrough();
-const reportingMediaPartSchema = z.object({
-	type: z.enum(["image", "audio"]),
-	mimeType: z.string().min(1).optional()
-}).passthrough();
-const reportingMessageAuthorSchema = z.object({
-	fullName: z.string().min(1).optional(),
-	userId: z.string().min(1).optional(),
-	userName: z.string().min(1).optional()
-}).passthrough();
-/** Retain model-visible text and media descriptors, dropping all opaque fields. */
-function sanitizeModelContentPart(value) {
-	const text = reportingTextPartSchema.safeParse(value);
-	if (text.success) return {
-		type: "text",
-		text: text.data.text
-	};
-	const media = reportingMediaPartSchema.safeParse(value);
-	if (!media.success) return void 0;
-	return {
-		type: media.data.type,
-		...media.data.mimeType ? { mimeType: media.data.mimeType } : void 0
-	};
-}
-/** Convert allowlisted Pi content parts into the reporting result value. */
-function modelVisibleToolOutput(content) {
-	const sanitized = content.map(sanitizeModelContentPart).filter((part) => part !== void 0);
-	if (sanitized.length === 0) return void 0;
-	if (sanitized.length !== 1) return sanitized;
-	const only = sanitized[0];
-	return only.type === "text" ? only.text : only;
-}
-function reportMessageActorIdentity(data) {
-	if (data.role !== "user") return void 0;
-	const author = reportingMessageAuthorSchema.safeParse(data.meta?.author);
-	if (!author.success) return void 0;
-	const actorIdentity = {
-		...author.data.fullName ? { fullName: author.data.fullName } : void 0,
-		...author.data.userId ? { slackUserId: author.data.userId } : void 0,
-		...author.data.userName ? { slackUserName: author.data.userName } : void 0
-	};
-	return Object.keys(actorIdentity).length > 0 ? actorIdentity : void 0;
-}
-/** Project native assistant tool calls through the existing reporting shape. */
-function reportToolCalls(args) {
-	const message = reportingAssistantMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	const calls = message.data.content.flatMap((part) => {
-		const call = reportingToolCallPartSchema.safeParse(part);
-		if (!call.success) return [];
-		return [{
-			toolCallId: call.data.id,
-			name: call.data.name,
-			status: "running",
-			startedAt: new Date(args.createdAtMs).toISOString(),
-			startedSeq: args.seq,
-			...args.canExposePayload && call.data.arguments !== void 0 ? { input: call.data.arguments } : void 0
-		}];
-	});
-	return calls.length > 0 ? {
-		type: "tool_calls",
-		calls
-	} : void 0;
-}
-/** Project assistant reasoning with tool ids retained only for display order. */
-function reportAssistantMessage(args) {
-	const message = reportingAssistantMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	if (!message.data.content.some((part) => {
-		const reasoning = reportingReasoningPartSchema.safeParse(part);
-		return reasoning.success && reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0;
-	})) return reportToolCalls(args) ?? {
-		type: "assistant_message",
-		parts: []
-	};
-	const reasoningParts = [];
-	const assistantParts = [];
-	for (const part of message.data.content) {
-		const reasoning = reportingReasoningPartSchema.safeParse(part);
-		if (reasoning.success) {
-			if (reasoning.data.redacted !== true && reasoning.data.thinking.trim().length > 0) {
-				const projected = {
-					type: "reasoning",
-					...args.canExposePayload ? { text: reasoning.data.thinking } : { redacted: true }
-				};
-				reasoningParts.push(projected);
-				assistantParts.push(projected);
-			}
-			continue;
-		}
-		const call = reportingToolCallPartSchema.safeParse(part);
-		if (call.success) assistantParts.push({
-			type: "tool_call",
-			toolCallId: call.data.id
-		});
-	}
-	const toolCalls = reportToolCalls(args);
-	if (toolCalls?.type === "tool_calls") return {
-		...toolCalls,
-		assistant: { parts: assistantParts }
-	};
-	return reasoningParts.length > 0 ? {
-		type: "assistant_message",
-		parts: reasoningParts
-	} : void 0;
-}
-/** Project a native tool result without exposing host-only result details. */
-function reportToolResult(args) {
-	const message = reportingToolResultMessageSchema.safeParse(args.message);
-	if (!message.success) return void 0;
-	const details = reportingToolResultDetailsSchema.safeParse(message.data.details);
-	const outcome = message.data.isError === true || details.success && (details.data.ok === false || details.data.status === "error") ? "error" : "completed";
-	const output = modelVisibleToolOutput(message.data.content);
-	const name = message.data.toolName ?? message.data.name ?? args.start?.name;
-	if (!name) return void 0;
-	return {
-		type: "tool_calls",
-		calls: [{
-			toolCallId: message.data.toolCallId,
-			name,
-			status: outcome,
-			...args.start ? {
-				startedAt: new Date(args.start.createdAtMs).toISOString(),
-				startedSeq: args.start.seq
-			} : void 0,
-			...args.canExposePayload && output !== void 0 ? { output } : void 0
-		}]
-	};
-}
-/** Return tool result ids that may need start metadata from outside a page. */
-function conversationReportToolResultIds(events) {
-	return [...new Set(events.flatMap((event) => {
-		const result = reportingToolResultMessageSchema.safeParse(event.data);
-		return result.success ? [result.data.toolCallId] : [];
-	}))];
+/** Return tool result ids that may need start metadata from outside a page. */
+function conversationReportToolResultIds(events) {
+	return [...new Set(events.flatMap((event) => {
+		const result = reportingToolResultMessageSchema.safeParse(event.data);
+		return result.success ? [result.data.toolCallId] : [];
+	}))];
 }
 function reportEventData(args) {
 	const { data } = args;
@@ -3294,982 +1792,945 @@ async function updateTimerIndex(state, operation) {
 	}
 }
 //#endregion
-//#region src/chat/events/store.ts
-const EVENT_PREFIX = "junior:resource_event_subscription:v5";
-const INDEX_LOCK_TTL_MS = 1e4;
-const SUBSCRIPTION_LOCK_TTL_MS = 1e4;
-const SUBSCRIPTION_LOCK_WAIT_MS = 1e4;
-const SUBSCRIPTION_LOCK_RETRY_MS = 25;
-const SUBSCRIPTION_LOCK_HEARTBEAT_MS = 3e3;
-const subscriptionStatusSchema = z.enum([
-	"active",
-	"cancelled",
-	"completed"
-]);
-const subscriptionIdIndexSchema = z.array(z.string().min(1));
-const subscriptionSchema = z.object({
-	conversationId: z.string().min(1),
-	createdAtMs: z.number().finite(),
-	events: z.array(eventTypeSchema).min(1),
-	expiresAtMs: z.number().finite(),
-	firesAtMs: z.number().finite().optional(),
-	id: z.string().min(1),
-	intent: z.string().min(1),
-	label: z.string().min(1),
-	match: eventMatchSchema.optional(),
-	namespace: z.string().min(1),
-	identifier: z.string().min(1),
-	resourceType: z.string().min(1),
-	status: subscriptionStatusSchema,
-	updatedAtMs: z.number().finite()
-}).strict();
-function digest(value) {
-	return createHash("sha256").update(value).digest("hex").slice(0, 32);
-}
-function subscriptionKey(id) {
-	return `${EVENT_PREFIX}:record:${id}`;
-}
-function subscriptionLockKey(id) {
-	return `${EVENT_PREFIX}:lock:${id}`;
-}
-function resourceIndexKey(namespace, identifier) {
-	return `${EVENT_PREFIX}:resource:${digest(`${namespace}\0${identifier}`)}`;
-}
-function conversationIndexKey(conversationId) {
-	return `${EVENT_PREFIX}:conversation:${digest(conversationId)}`;
+//#region src/chat/slack/workspace-context.ts
+const workspaceTeamIdStorage = new AsyncLocalStorage();
+/** Run a callback with the Slack workspace team ID for the inbound webhook. */
+function runWithWorkspaceTeamId(teamId, fn) {
+	if (!teamId) return fn();
+	return workspaceTeamIdStorage.run(teamId, fn);
 }
-function indexLockKey(key) {
-	return `${key}:lock`;
+/** Return the Slack workspace team ID for the current inbound webhook. */
+function getWorkspaceTeamId() {
+	return workspaceTeamIdStorage.getStore();
 }
-async function sleep(ms) {
-	await new Promise((resolve) => {
-		setTimeout(resolve, ms).unref?.();
-	});
+//#endregion
+//#region src/chat/slack/client.ts
+var SlackActionError = class extends Error {
+	code;
+	apiError;
+	needed;
+	provided;
+	statusCode;
+	requestId;
+	errorData;
+	retryAfterSeconds;
+	detail;
+	detailLine;
+	detailRule;
+	constructor(message, code, options = {}) {
+		super(message);
+		this.name = "SlackActionError";
+		this.code = code;
+		this.apiError = options.apiError;
+		this.needed = options.needed;
+		this.provided = options.provided;
+		this.statusCode = options.statusCode;
+		this.requestId = options.requestId;
+		this.errorData = options.errorData;
+		this.retryAfterSeconds = options.retryAfterSeconds;
+		this.detail = options.detail;
+		this.detailLine = options.detailLine;
+		this.detailRule = options.detailRule;
+	}
+};
+function serializeSlackErrorData(data) {
+	if (!data || typeof data !== "object") return;
+	const filtered = Object.fromEntries(Object.entries(data).filter(([key]) => key !== "error"));
+	if (Object.keys(filtered).length === 0) return;
+	try {
+		const serialized = JSON.stringify(filtered);
+		return serialized.length <= 600 ? serialized : `${serialized.slice(0, 597)}...`;
+	} catch {
+		return;
+	}
 }
-async function acquireSubscriptionLock(state, subscriptionId, waitDeadlineMs = Date.now() + SUBSCRIPTION_LOCK_WAIT_MS) {
-	while (true) {
-		const lock = await state.acquireLock(subscriptionLockKey(subscriptionId), SUBSCRIPTION_LOCK_TTL_MS);
-		if (lock) return lock;
-		if (Date.now() >= waitDeadlineMs) throw new Error(`Could not acquire watch lock for ${subscriptionId}`);
-		await sleep(SUBSCRIPTION_LOCK_RETRY_MS);
+/** Extract a header value by case-insensitive name from a raw headers object. */
+function getHeaderString(headers, name) {
+	if (!headers || typeof headers !== "object") return;
+	const key = name.toLowerCase();
+	const entries = headers;
+	for (const [entryKey, value] of Object.entries(entries)) {
+		if (entryKey.toLowerCase() !== key) continue;
+		if (typeof value === "string") return value;
+		if (Array.isArray(value)) {
+			const first = value.find((entry) => typeof entry === "string");
+			return typeof first === "string" ? first : void 0;
+		}
 	}
 }
-/** Run one subscription lifecycle transition while keeping its lease alive. */
-async function withSubscriptionLock(state, subscriptionId, callback, waitDeadlineMs) {
-	const lock = await acquireSubscriptionLock(state, subscriptionId, waitDeadlineMs);
-	let lockLostError;
-	let heartbeatError;
-	let heartbeat;
-	const timer = setInterval(() => {
-		if (heartbeat) return;
-		heartbeat = state.extendLock(lock, SUBSCRIPTION_LOCK_TTL_MS).then((extended) => {
-			if (extended) heartbeatError = void 0;
-			else lockLostError = /* @__PURE__ */ new Error(`Watch lock was lost for ${subscriptionId}`);
-		}).catch((error) => {
-			heartbeatError = error instanceof Error ? error : /* @__PURE__ */ new Error(`Failed to extend subscription lock: ${String(error)}`);
-		}).finally(() => {
-			heartbeat = void 0;
-		});
-	}, SUBSCRIPTION_LOCK_HEARTBEAT_MS);
-	timer.unref?.();
-	let result;
-	try {
-		result = await callback();
-	} finally {
-		clearInterval(timer);
-		await heartbeat;
-		await state.releaseLock(lock);
+function parseSlackCanvasDetail(detail) {
+	if (typeof detail !== "string") return {};
+	const trimmed = detail.trim();
+	if (!trimmed) return {};
+	const parsed = { detail: trimmed };
+	const lineMatch = trimmed.match(/line\s+(\d+):/i);
+	if (lineMatch) {
+		const line = Number.parseInt(lineMatch[1] ?? "", 10);
+		if (Number.isFinite(line)) parsed.detailLine = line;
 	}
-	const lockError = lockLostError ?? heartbeatError;
-	if (lockError) throw lockError;
-	return result;
+	if (/unsupported heading depth/i.test(trimmed)) parsed.detailRule = "unsupported_heading_depth";
+	return parsed;
 }
-function ttlUntil(expiresAtMs, nowMs) {
-	return Math.max(1, expiresAtMs - nowMs);
+/**
+* Ambient destination-installation token for Slack outbound calls, bound by
+* installation-scoped entry points so writes carry the destination
+* workspace's credentials instead of the process-global env token.
+*/
+const installationTokenStorage = new AsyncLocalStorage();
+const clientsByToken = /* @__PURE__ */ new Map();
+/**
+* Bind a workspace installation token for all Slack Web API calls inside
+* `fn`, so multi-workspace outbound writes use the destination workspace's
+* credentials rather than the env fallback token.
+*/
+function runWithSlackInstallationToken(token, fn) {
+	const trimmed = token.trim();
+	if (!trimmed) throw new SlackActionError("Slack installation token binding requires a non-empty token", "missing_token");
+	return installationTokenStorage.run({ token: trimmed }, fn);
 }
-async function readSubscriptionIdIndex(state, key) {
-	const value = await state.get(key);
-	if (value === void 0 || value === null) return [];
-	return subscriptionIdIndexSchema.parse(value);
+/**
+* Token precedence: ambient installation token, then env token, then a hard
+* failure for team-scoped calls — a call scoped to one workspace must never
+* silently fall through to another workspace's credentials.
+*/
+function resolveSlackToken() {
+	const ambientToken = installationTokenStorage.getStore()?.token;
+	if (ambientToken) return ambientToken;
+	const envToken = getSlackBotToken();
+	if (envToken) return envToken;
+	const teamId = getWorkspaceTeamId();
+	if (teamId) throw new SlackActionError(`Slack call is scoped to workspace ${teamId} but no installation token is bound and no default bot token is configured`, "missing_token");
+	throw new SlackActionError("SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack Web API actions in this service", "missing_token");
 }
-function buildSubscriptionId(input) {
-	const eventKey = [...new Set(input.events)].sort().join("\0");
-	const matchKey = stableEventMatchKey(input.match);
-	return `resub_${digest(matchKey ? `${input.namespace}\0${input.identifier}\0${input.conversationId}\0${eventKey}\0${matchKey}` : `${input.namespace}\0${input.identifier}\0${input.conversationId}\0${eventKey}`)}`;
+/** Normalize Junior Slack references to native Slack conversation IDs. */
+function normalizeSlackConversationId(channelId) {
+	return parseSlackChannelReferenceId(channelId);
 }
-async function withIndexLock(state, key, callback) {
-	const lock = await state.acquireLock(indexLockKey(key), INDEX_LOCK_TTL_MS);
-	if (!lock) throw new Error(`Could not acquire event index lock for ${key}`);
-	try {
-		return await callback();
-	} finally {
-		await state.releaseLock(lock);
+/**
+* Return the per-token cached WebClient. `withSlackRetries` owns retry
+* classification for this boundary: the WebClient's built-in policy would
+* re-post timed-out writes (a duplicate-message hazard) and sleep for the
+* full unbounded Retry-After inside the request, so both internal behaviors
+* are disabled here.
+*/
+function getClient() {
+	const token = resolveSlackToken();
+	let cached = clientsByToken.get(token);
+	if (!cached) {
+		cached = new WebClient(token, {
+			retryConfig: { retries: 0 },
+			rejectRateLimitedCalls: true
+		});
+		clientsByToken.set(token, cached);
 	}
+	return cached;
 }
-async function addToIndex(state, key, subscriptionId, nowMs) {
-	await withIndexLock(state, key, async () => {
-		const ids = [...new Set(await readSubscriptionIdIndex(state, key))];
-		const next = ids.includes(subscriptionId) ? ids : [...ids, subscriptionId];
-		await state.set(key, next, await indexTtlMs(state, next, nowMs));
+function mapSlackError(error) {
+	if (error instanceof SlackActionError) return error;
+	const candidate = error;
+	const apiError = candidate.data?.error;
+	const message = candidate.message ?? "Slack action failed";
+	const baseOptions = {
+		apiError,
+		statusCode: candidate.statusCode,
+		requestId: getHeaderString(candidate.headers, "x-slack-req-id"),
+		errorData: serializeSlackErrorData(candidate.data),
+		...parseSlackCanvasDetail(candidate.data?.detail)
+	};
+	if (apiError === "missing_scope") return new SlackActionError(message, "missing_scope", {
+		...baseOptions,
+		needed: candidate.data?.needed,
+		provided: candidate.data?.provided
 	});
-}
-async function removeFromIndex(state, key, subscriptionId, nowMs) {
-	await withIndexLock(state, key, async () => {
-		const next = (await readSubscriptionIdIndex(state, key)).filter((id) => id !== subscriptionId);
-		await state.set(key, next, await indexTtlMs(state, next, nowMs));
+	if (apiError === "not_in_channel") return new SlackActionError(message, "not_in_channel", baseOptions);
+	if (apiError === "restricted_action_read_only_channel") return new SlackActionError(message, "read_only_channel", baseOptions);
+	if (apiError === "already_reacted") return new SlackActionError(message, "already_reacted", baseOptions);
+	if (apiError === "no_reaction") return new SlackActionError(message, "no_reaction", baseOptions);
+	if (apiError === "invalid_arguments") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "invalid_cursor") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "invalid_name") return new SlackActionError(message, "invalid_arguments", baseOptions);
+	if (apiError === "not_found" || apiError === "channel_not_found" || apiError === "message_not_found") return new SlackActionError(message, "not_found", baseOptions);
+	if (apiError === "feature_not_enabled" || apiError === "not_allowed_token_type") return new SlackActionError(message, "feature_unavailable", baseOptions);
+	if (apiError === "canvas_creation_failed") return new SlackActionError(message, "canvas_creation_failed", baseOptions);
+	if (apiError === "canvas_editing_failed") return new SlackActionError(message, "canvas_editing_failed", baseOptions);
+	if (candidate.code === "slack_webapi_rate_limited_error" || candidate.statusCode === 429) return new SlackActionError(message, "rate_limited", {
+		...baseOptions,
+		retryAfterSeconds: candidate.retryAfter
 	});
+	return new SlackActionError(message, "internal_error", baseOptions);
 }
-async function indexTtlMs(state, subscriptionIds, nowMs) {
-	const records = await Promise.all(subscriptionIds.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))));
-	return ttlUntil(Math.max(nowMs, ...records.filter((record) => record !== void 0 && activeAt(record, nowMs)).map((record) => record.expiresAtMs)), nowMs);
-}
-function parseSubscription(value) {
-	if (value === void 0 || value === null) return;
-	return subscriptionSchema.parse(value);
-}
-function activeAt(subscription, nowMs) {
-	return subscription.status === "active" && subscription.expiresAtMs > nowMs;
-}
-function matchesEvent(subscription, input) {
-	return subscription.namespace === input.namespace && subscription.identifier === input.identifier && subscription.events.includes(input.eventType) && activeAt(subscription, input.nowMs) && eventMatches(subscription.match, input.data);
-}
-/** Create or replace the active subscription for one conversation/resource/event set. */
-async function createWatch(input, options = {}) {
-	const state = options.state ?? getStateAdapter();
-	await state.connect();
-	const nowMs = options.nowMs ?? Date.now();
-	const events = [...new Set(input.events.map((event) => event.trim()))].filter(Boolean);
-	if (events.length === 0) throw new Error("Watch requires at least one event");
-	if (input.expiresAtMs <= nowMs) throw new Error("Watch expiry must be in the future");
-	const match = input.match && Object.keys(input.match).length > 0 ? input.match : void 0;
-	const id = buildSubscriptionId({
-		conversationId: input.conversationId,
-		events,
-		match,
-		namespace: input.namespace,
-		identifier: input.identifier
-	});
-	const record = {
-		conversationId: input.conversationId,
-		createdAtMs: nowMs,
-		events,
-		expiresAtMs: input.expiresAtMs,
-		id,
-		intent: input.intent,
-		label: input.label,
-		...match ? { match } : void 0,
-		namespace: input.namespace,
-		identifier: input.identifier,
-		resourceType: input.resourceType,
-		status: "active",
-		updatedAtMs: nowMs
-	};
-	const parsed = subscriptionSchema.parse(record);
-	await state.set(subscriptionKey(id), parsed, ttlUntil(parsed.expiresAtMs, nowMs));
-	await addToIndex(state, resourceIndexKey(input.namespace, input.identifier), id, nowMs);
-	await addToIndex(state, conversationIndexKey(input.conversationId), id, nowMs);
-	return parsed;
+const MAX_RETRY_DELAY_MS = 1e4;
+const MAX_TOTAL_RETRY_DELAY_MS = 2e4;
+const CONNECTION_ERROR_CODES = /* @__PURE__ */ new Set([
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ENOTFOUND",
+	"EAI_AGAIN"
+]);
+const TIMEOUT_ERROR_CODES = /* @__PURE__ */ new Set([
+	"ETIMEDOUT",
+	"ECONNABORTED",
+	"ESOCKETTIMEDOUT"
+]);
+function findNetworkErrorCode(error, depth = 0) {
+	if (!error || typeof error !== "object" || depth > 4) return;
+	const candidate = error;
+	if (typeof candidate.code === "string" && (CONNECTION_ERROR_CODES.has(candidate.code) || TIMEOUT_ERROR_CODES.has(candidate.code))) return candidate.code;
+	return findNetworkErrorCode(candidate.original, depth + 1) ?? findNetworkErrorCode(candidate.cause, depth + 1);
 }
-/** Create a retry-stable timer without keeping a process open. */
-async function createTimerWatch(input) {
-	const state = getStateAdapter();
-	await state.connect();
-	const identifier = digest(`${input.conversationId}\0${input.toolCallId}`);
-	const selector = {
-		conversationId: input.conversationId,
-		namespace: "junior",
-		identifier,
-		events: ["timer.fired"]
-	};
-	const id = buildSubscriptionId(selector);
-	return await withSubscriptionLock(state, id, async () => {
-		const existing = parseSubscription(await state.get(subscriptionKey(id)));
-		if (existing) return existing;
-		const nowMs = Date.now();
-		const firesAtMs = nowMs + input.afterMs;
-		const expiresAtMs = firesAtMs + 864e5;
-		const record = subscriptionSchema.parse({
-			...selector,
-			id,
-			firesAtMs,
-			expiresAtMs,
-			resourceType: "timer",
-			label: "Timer",
-			intent: input.intent,
-			status: "active",
-			createdAtMs: nowMs,
-			updatedAtMs: nowMs
-		});
-		await withIndexLock(state, conversationIndexKey(input.conversationId), async () => {
-			const key = conversationIndexKey(input.conversationId);
-			const ids = [.../* @__PURE__ */ new Set([...await readSubscriptionIdIndex(state, key), id])];
-			await state.set(key, ids, Math.max(ttlUntil(expiresAtMs, nowMs), await indexTtlMs(state, ids, nowMs)));
-			await state.set(resourceIndexKey("junior", identifier), [id], ttlUntil(expiresAtMs, nowMs));
-			await updateTimerIndex(state, {
-				kind: "add",
-				id,
-				atMs: firesAtMs
-			});
-			await state.set(subscriptionKey(id), record, ttlUntil(expiresAtMs, nowMs));
-		});
-		return record;
-	});
+function hasSocketHangUpMessage(error) {
+	return error instanceof Error && error.message.toLowerCase().includes("socket hang up");
 }
-/** Claim live timer Watches and discard stale due-index entries. */
-async function takeDueTimerWatches(nowMs) {
-	const state = getStateAdapter();
-	await state.connect();
-	const watches = [];
-	for (const id of await updateTimerIndex(state, {
-		kind: "claim",
-		nowMs
-	})) await withSubscriptionLock(state, id, async () => {
-		const watch = parseSubscription(await state.get(subscriptionKey(id)));
-		if (watch && activeAt(watch, nowMs) && watch.firesAtMs !== void 0) {
-			if (watch.firesAtMs <= nowMs) watches.push(watch);
-		} else await updateTimerIndex(state, {
-			kind: "remove",
-			id
-		});
-	});
-	return watches;
+/**
+* Classify a failed Slack call for retry: rate limits, Slack 5xx, and
+* connection-phase failures are always retryable; timeouts are retried only
+* for idempotent operations because Slack may already have accepted the
+* request.
+*/
+function classifySlackRetry(raw, mapped) {
+	if (mapped.code === "rate_limited") return "rate_limited";
+	if (mapped.statusCode !== void 0 && mapped.statusCode >= 500) return "server_error";
+	const networkCode = findNetworkErrorCode(raw);
+	if (networkCode && CONNECTION_ERROR_CODES.has(networkCode)) return "connection";
+	if (networkCode && TIMEOUT_ERROR_CODES.has(networkCode)) return "timeout";
+	if (hasSocketHangUpMessage(raw)) return "connection";
+	return "none";
 }
-/** List active subscriptions bound to one conversation. */
-async function listWatches(input) {
-	const state = input.state ?? getStateAdapter();
-	await state.connect();
-	const nowMs = input.nowMs ?? Date.now();
-	const ids = await readSubscriptionIdIndex(state, conversationIndexKey(input.conversationId));
-	return (await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))))).filter((record) => record !== void 0 && record.conversationId === input.conversationId && activeAt(record, nowMs)).sort((left, right) => left.createdAtMs - right.createdAtMs);
+/**
+* Run a Slack Web API call with bounded retries so transient platform
+* failures do not surface as turn failures, while non-idempotent posts are
+* never re-sent when Slack may already have accepted them.
+*
+* Retry classes: rate limits (bounded Retry-After), connection-phase network
+* failures, and Slack 5xx responses always retry; request timeouts retry only
+* when the caller marks the operation `idempotent`.
+*/
+async function withSlackRetries(task, maxAttempts = 3, context = {}) {
+	let attempt = 0;
+	let totalDelayMs = 0;
+	const action = context.action ?? "unknown";
+	while (attempt < maxAttempts) {
+		attempt += 1;
+		const attemptNumber = attempt;
+		try {
+			return await withSpan(`POST slack.com/api/${action}`, "http.client", {}, async () => {
+				try {
+					return await task();
+				} catch (error) {
+					const mapped = mapSlackError(error);
+					const errorAttrs = { "error.type": mapped.code };
+					if (mapped.apiError) errorAttrs["app.slack.api_error_code"] = mapped.apiError;
+					if (mapped.code === "rate_limited") {
+						errorAttrs["http.response.status_code"] = 429;
+						if (mapped.retryAfterSeconds) errorAttrs["app.slack.retry_after_ms"] = mapped.retryAfterSeconds * 1e3;
+					} else if (mapped.statusCode != null) errorAttrs["http.response.status_code"] = mapped.statusCode;
+					setSpanAttributes(errorAttrs);
+					setSpanStatus("error");
+					throw error;
+				}
+			}, {
+				"http.request.method": "POST",
+				"server.address": "slack.com",
+				"url.scheme": "https",
+				"url.path": `/api/${action}`,
+				"app.slack.method": action,
+				"app.retry.max_attempts": maxAttempts,
+				...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : void 0,
+				...context.attributes ?? {},
+				...context.spanAttributes ?? {}
+			});
+		} catch (error) {
+			const mapped = mapSlackError(error);
+			const retryClass = classifySlackRetry(error, mapped);
+			const isRetryable = retryClass === "rate_limited" || retryClass === "connection" || retryClass === "server_error" || retryClass === "timeout" && context.idempotent === true;
+			const remainingDelayBudgetMs = MAX_TOTAL_RETRY_DELAY_MS - totalDelayMs;
+			const baseLogAttributes = {
+				"app.slack.action": action,
+				"app.slack.error_code": mapped.code,
+				...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : void 0,
+				...mapped.detail ? { "app.slack.detail": mapped.detail } : void 0,
+				...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : void 0,
+				...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : void 0,
+				...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : void 0,
+				...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : void 0,
+				...context.attributes ?? {}
+			};
+			if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
+				logWarn("slack.action.failed", {
+					...baseLogAttributes,
+					...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : void 0
+				});
+				throw mapped;
+			}
+			logWarn("slack.action.retrying", {
+				...baseLogAttributes,
+				"app.slack.retry_attempt": attempt,
+				"app.slack.retry_class": retryClass
+			});
+			const retryAfterMs = retryClass === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
+			const backoffMs = Math.min(2e3, 250 * 2 ** (attempt - 1));
+			const delayMs = Math.min(retryAfterMs ?? backoffMs, MAX_RETRY_DELAY_MS, remainingDelayBudgetMs);
+			totalDelayMs += delayMs;
+			await sleep$1(delayMs);
+		}
+	}
+	throw new SlackActionError("Slack action exhausted retries", "internal_error");
 }
-/** Cancel a current-conversation subscription and remove it from match indexes. */
-async function cancelWatch(input) {
-	const state = input.state ?? getStateAdapter();
-	await state.connect();
-	return await withSubscriptionLock(state, input.id, async () => {
-		const current = parseSubscription(await state.get(subscriptionKey(input.id)));
-		if (!current || current.conversationId !== input.conversationId) return;
-		const nowMs = input.nowMs ?? Date.now();
-		if (current.status === "completed") return current;
-		const next = {
-			...current,
-			status: "cancelled",
-			updatedAtMs: nowMs
-		};
-		await state.set(subscriptionKey(input.id), next, JUNIOR_THREAD_STATE_TTL_MS);
-		await removeFromIndex(state, resourceIndexKey(current.namespace, current.identifier), input.id, nowMs);
-		await removeFromIndex(state, conversationIndexKey(current.conversationId), input.id, nowMs);
-		if (current.firesAtMs !== void 0) await updateTimerIndex(state, {
-			kind: "remove",
-			id: input.id
-		});
-		return next;
+/**
+* Slack Web API client for the current destination workspace: the ambient
+* installation token when one is bound, otherwise the env bot token for
+* single-workspace deployments. Fails instead of falling back when the call
+* is workspace-scoped and no installation token can be resolved, so a write
+* never goes out with another workspace's credentials.
+*/
+function getSlackClient(options) {
+	if (options) return new WebClient(resolveSlackToken(), {
+		retryConfig: { retries: 0 },
+		rejectRateLimitedCalls: true,
+		timeout: options.timeoutMs
 	});
+	return getClient();
 }
-/** Cancel every active watch bound to one conversation. */
-async function cancelSubscriptions(input) {
-	const subscriptions = await listWatches(input);
-	for (const subscription of subscriptions) await cancelWatch({
-		conversationId: input.conversationId,
-		id: subscription.id,
-		nowMs: input.nowMs,
-		state: input.state
-	});
+/**
+* Slack channel ID prefixes:
+* - C: channel — modern private channels also use C, so the prefix never
+*   proves a channel is public
+* - G: legacy private channel / group DM
+* - D: direct message (1:1)
+*/
+function isDmChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	return Boolean(normalized && normalized.startsWith("D"));
 }
 /**
-* Collect match keys from active watches for these identifiers and event types.
-* Does not evaluate match values — only reports keys that filters use.
+* Conversation-scoped Slack contexts backed by a concrete conversation ID.
+* Includes channels/groups/DMs (C/G/D).
 */
-async function collectEventMatchKeys(input) {
-	const state = input.state ?? getStateAdapter();
-	await state.connect();
-	const nowMs = input.nowMs ?? Date.now();
-	const eventTypes = new Set(input.eventTypes.map((eventType) => eventType.trim()).filter(Boolean));
-	if (eventTypes.size === 0) return [];
-	const keys = /* @__PURE__ */ new Set();
-	const identifiers = new Set(input.identifiers.map((value) => value.trim()).filter(Boolean));
-	for (const identifier of identifiers) {
-		const ids = await readSubscriptionIdIndex(state, resourceIndexKey(input.namespace, identifier));
-		const records = await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))));
-		for (const record of records) {
-			if (!record) continue;
-			if (record.namespace !== input.namespace) continue;
-			if (record.identifier !== identifier) continue;
-			if (!activeAt(record, nowMs)) continue;
-			if (!record.events.some((eventType) => eventTypes.has(eventType))) continue;
-			for (const key of Object.keys(record.match ?? {})) keys.add(key);
-		}
-	}
-	return [...keys].sort();
+function isConversationScopedChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	if (!normalized) return false;
+	return normalized.startsWith("C") || normalized.startsWith("G") || normalized.startsWith("D");
 }
-/** Find active subscriptions interested in a normalized event. */
-async function findMatchingWatches(input) {
-	const state = input.state ?? getStateAdapter();
-	await state.connect();
-	const nowMs = input.nowMs ?? Date.now();
-	const ids = await readSubscriptionIdIndex(state, resourceIndexKey(input.namespace, input.identifier));
-	return (await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))))).filter((record) => record !== void 0 && matchesEvent(record, {
-		data: input.data,
-		eventType: input.eventType,
-		nowMs,
-		namespace: input.namespace,
-		identifier: input.identifier
-	}));
+function isConversationChannel(channelId) {
+	const normalized = normalizeSlackConversationId(channelId);
+	if (!normalized) return false;
+	return normalized.startsWith("C") || normalized.startsWith("G");
 }
-/** Recheck and deliver a matched subscription while holding its status lock. */
-async function deliverWatch(input) {
-	const state = input.state ?? getStateAdapter();
-	await state.connect();
-	return await withSubscriptionLock(state, input.subscription.id, async () => {
-		const nowMs = input.nowMs ?? Date.now();
-		const current = parseSubscription(await state.get(subscriptionKey(input.subscription.id)));
-		if (!current || !matchesEvent(current, {
-			data: input.data,
-			eventType: input.eventType,
-			nowMs,
-			namespace: input.namespace,
-			identifier: input.identifier
-		})) return false;
-		const delivered = await input.deliver(current);
-		if (input.terminal) {
-			const latest = parseSubscription(await state.get(subscriptionKey(current.id)));
-			if (!latest || latest.status !== current.status || latest.updatedAtMs !== current.updatedAtMs) return delivered;
-			const next = {
-				...current,
-				status: "completed",
-				updatedAtMs: nowMs
-			};
-			await state.set(subscriptionKey(current.id), next, JUNIOR_THREAD_STATE_TTL_MS);
-			await removeFromIndex(state, resourceIndexKey(current.namespace, current.identifier), current.id, nowMs);
-			await removeFromIndex(state, conversationIndexKey(current.conversationId), current.id, nowMs);
+async function getFilePermalink(fileId) {
+	const client = getClient();
+	return (await withSlackRetries(() => client.files.info({ file: fileId }), 3, {
+		action: "files.info",
+		idempotent: true,
+		spanAttributes: { "app.slack.file_id": fileId }
+	})).file?.permalink;
+}
+async function downloadPrivateSlackFile(url) {
+	const token = resolveSlackToken();
+	return withSpan("GET files.slack.com", "http.client", {}, async () => {
+		const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
+		setSpanAttributes({ "http.response.status_code": response.status });
+		if (!response.ok) {
+			setSpanAttributes({ "error.type": String(response.status) });
+			setSpanStatus("error");
+			throw new Error(`Slack file download failed: ${response.status}`);
 		}
-		if (input.terminal && current.firesAtMs !== void 0) await updateTimerIndex(state, {
-			kind: "remove",
-			id: current.id
-		});
-		return delivered;
-	}, input.waitDeadlineMs);
+		return Buffer.from(await response.arrayBuffer());
+	}, {
+		"http.request.method": "GET",
+		"server.address": "files.slack.com",
+		"url.scheme": "https",
+		"app.slack.method": "files.download"
+	});
 }
 //#endregion
-//#region src/chat/events/tool-support.ts
-/** Default lifetime for temporary watches. */
-const RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS = 12096e5;
-/** Hard upper bound for temporary watches. */
-const RESOURCE_SUBSCRIPTION_MAX_TTL_MS = 2592e6;
-const STOP_WATCHING_TOOL_NAME = "stopWatchingResources";
-const RESOURCE_WATCH_TOOL_SOURCE = {
-	id: "resource-watches",
-	description: "Inspect or stop watches for the current conversation."
-};
-//#endregion
-//#region src/chat/slack/tool-support/context.ts
-/** Resolve Slack tool context from the Conversation Location. */
-function getSlackToolContext(context) {
-	const source = context.source.kind === "slack" ? context.source : void 0;
-	const location = context.location?.provider === "slack" ? context.location : source ? {
-		provider: "slack",
-		teamId: source.teamId,
-		channelId: source.channelId,
-		threadTs: source.threadTs
-	} : void 0;
-	if (!location) return void 0;
-	const destinationChannelId = parseSlackChannelReferenceId(context.destination.platform === "slack" ? context.destination.channelId : location.channelId);
-	const locationChannelId = parseSlackChannelReferenceId(location.channelId);
-	const teamId = parseSlackTeamId(location.teamId);
-	if (!destinationChannelId || !locationChannelId || !teamId) return;
+//#region src/chat/credentials/subject.ts
+const CREDENTIAL_SUBJECT_HMAC_CONTEXT = "junior.credential_subject.v1";
+const CREDENTIAL_SUBJECT_SIGNATURE_VERSION = "v1";
+function getCredentialSubjectSecret() {
+	return process.env.JUNIOR_SECRET?.trim() || void 0;
+}
+/** Encode ordered signing fields without allowing delimiter ambiguity. */
+function buildPayload(parts) {
+	return [CREDENTIAL_SUBJECT_HMAC_CONTEXT, ...parts].join("\0");
+}
+function signPayload(secret, payload) {
+	const digest = createHmac("sha256", secret).update(payload).digest("hex");
+	return `${CREDENTIAL_SUBJECT_SIGNATURE_VERSION}=${digest}`;
+}
+function timingSafeMatch(expected, actual) {
+	const expectedBuffer = Buffer.from(expected);
+	const actualBuffer = Buffer.from(actual);
+	if (expectedBuffer.length !== actualBuffer.length) return false;
+	return timingSafeEqual(expectedBuffer, actualBuffer);
+}
+/** Create a delegated user credential subject for a verified Slack DM turn. */
+function createSlackDirectCredentialSubject(input) {
+	const channelId = normalizeSlackConversationId(input.channelId);
+	const teamId = input.teamId?.trim();
+	const userId = parseActorUserId(input.userId);
+	if (!channelId || !teamId || !userId || !isDmChannel(channelId)) return;
 	return {
-		actor: context.actor?.platform === "slack" ? context.actor : void 0,
-		destinationChannelId,
-		locationChannelId,
-		messageChannelId: source ? parseSlackChannelReferenceId(source.channelId) : void 0,
-		messageTs: parseSlackMessageTs(source?.messageTs),
-		teamId,
-		threadTs: parseSlackMessageTs(location.threadTs)
+		type: "user",
+		userId,
+		allowedWhen: "private-direct-conversation"
 	};
 }
-//#endregion
-//#region src/chat/plugins/viewer.ts
-function identityFromRow(row) {
-	return identitySchema.parse({
-		id: row.id,
-		provider: row.provider,
-		providerSubjectId: row.providerSubjectId,
-		...row.providerTenantId ? { providerTenantId: row.providerTenantId } : void 0,
-		...row.displayName ? { displayName: row.displayName } : void 0,
-		...row.handle ? { handle: row.handle } : void 0
-	});
+/** Bind a delegated user subject to the Slack DM destination being dispatched. */
+function bindSlackDirectCredentialSubject(input) {
+	const channelId = normalizeSlackConversationId(input.channelId);
+	const teamId = input.teamId.trim();
+	const secret = getCredentialSubjectSecret();
+	const { subject } = input;
+	const userId = parseActorUserId(subject.userId);
+	if (!channelId || !teamId || !secret || !isDmChannel(channelId) || subject.type !== "user" || !userId || subject.allowedWhen !== "private-direct-conversation") return;
+	return {
+		type: "user",
+		userId,
+		allowedWhen: subject.allowedWhen,
+		binding: {
+			type: "slack-direct-conversation",
+			teamId,
+			channelId,
+			signature: signPayload(secret, buildPayload([
+				subject.allowedWhen,
+				teamId,
+				channelId,
+				userId
+			]))
+		}
+	};
 }
-async function readUserById(db, userRow) {
-	const identityRows = await db.select().from(juniorIdentities).where(and(eq(juniorIdentities.userId, userRow.id), eq(juniorIdentities.kind, "user"))).orderBy(asc(juniorIdentities.provider), asc(juniorIdentities.providerTenantId), asc(juniorIdentities.providerSubjectId));
-	return userSchema.parse({
-		email: userRow.primaryEmail,
-		id: userRow.id,
-		identities: identityRows.map(identityFromRow),
-		...userRow.displayName ? { displayName: userRow.displayName } : void 0
-	});
+/** Verify that a delegated subject was signed for the dispatch destination. */
+function verifySlackDirectCredentialSubject(input) {
+	const channelId = normalizeSlackConversationId(input.channelId);
+	const secret = getCredentialSubjectSecret();
+	if (!channelId || !secret) return false;
+	const { subject } = input;
+	const binding = subject.binding;
+	if (subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "private-direct-conversation" || !binding || binding.type !== "slack-direct-conversation" || typeof binding.signature !== "string" || !binding.signature || binding.teamId !== input.teamId || binding.channelId !== channelId) return false;
+	return timingSafeMatch(signPayload(secret, buildPayload([
+		subject.allowedWhen,
+		binding.teamId,
+		binding.channelId,
+		subject.userId
+	])), binding.signature);
 }
-/** Resolve or create the canonical user for one verified viewer email. */
-async function resolveViewerUserFromSql(db, email) {
-	const normalizedEmail = normalizeIdentityEmail(email);
-	if (!normalizedEmail) return void 0;
-	const now = /* @__PURE__ */ new Date();
-	const userRow = (await db.insert(juniorUsers).values({
-		id: randomUUID(),
-		primaryEmail: email.trim(),
-		primaryEmailNormalized: normalizedEmail,
-		displayName: null,
-		createdAt: now,
-		updatedAt: now
-	}).onConflictDoNothing({ target: juniorUsers.primaryEmailNormalized }).returning())[0] ?? (await db.select().from(juniorUsers).where(eq(juniorUsers.primaryEmailNormalized, normalizedEmail)).limit(1))[0];
-	return userRow ? await readUserById(db, userRow) : void 0;
-}
-/** Resolve or create the canonical user for one authenticated viewer. */
-async function resolveViewerUser(email) {
-	return await resolveViewerUserFromSql(getDb(), email);
-}
-/** Read one existing canonical user by verified email without creating a row. */
-async function findUserByEmailFromSql(db, email) {
-	const normalizedEmail = normalizeIdentityEmail(email);
-	if (!normalizedEmail) return void 0;
-	const userRow = (await db.select().from(juniorUsers).where(eq(juniorUsers.primaryEmailNormalized, normalizedEmail)).limit(1))[0];
-	return userRow ? await readUserById(db, userRow) : void 0;
-}
-/** Read one existing canonical user by verified email without creating a row. */
-async function findUserByEmail(email) {
-	return await findUserByEmailFromSql(getDb(), email);
-}
-/** Update one canonical user's display name in SQL. */
-async function updateViewerDisplayNameFromSql(db, userId, displayName) {
-	const userRow = (await db.update(juniorUsers).set({
-		displayName,
-		updatedAt: /* @__PURE__ */ new Date()
-	}).where(eq(juniorUsers.id, userId)).returning())[0];
-	return userRow ? await readUserById(db, userRow) : void 0;
-}
-/** Update one canonical user's display name. */
-async function updateViewerDisplayName(userId, displayName) {
-	return await updateViewerDisplayNameFromSql(getDb(), userId, displayName);
-}
-/** Resolve the stored identity and linked user for one runtime actor. */
-async function readActorIdentityFromSql(db, actor) {
-	if (actor.platform === "system") return void 0;
-	const providerTenantId = actor.platform === "slack" ? actor.teamId : "";
-	const row = (await db.select({
-		identity: juniorIdentities,
-		user: juniorUsers
-	}).from(juniorIdentities).leftJoin(juniorUsers, eq(juniorUsers.id, juniorIdentities.userId)).where(and(eq(juniorIdentities.kind, "user"), eq(juniorIdentities.provider, actor.platform), eq(juniorIdentities.providerTenantId, providerTenantId), eq(juniorIdentities.providerSubjectId, actor.userId))).limit(1))[0];
-	if (!row) return void 0;
+/** Bind a delegated user subject to one scheduler task dispatch. */
+function bindScheduledAutomationCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const plugin = input.plugin.trim();
+	const userId = parseActorUserId(input.subject.userId);
+	if (!secret || plugin !== "scheduler" || !userId || input.subject.allowedWhen !== "scheduled-automation") return;
+	const taskId = input.subject.taskId;
+	if (!taskId || taskId !== taskId.trim()) return;
 	return {
-		identity: identityFromRow(row.identity),
-		...row.user ? { user: await readUserById(db, row.user) } : void 0
+		type: "user",
+		userId,
+		allowedWhen: "scheduled-automation",
+		taskId,
+		binding: {
+			type: "scheduled-automation",
+			plugin,
+			taskId,
+			signature: signPayload(secret, buildPayload([
+				"scheduled-automation",
+				plugin,
+				taskId,
+				userId
+			]))
+		}
 	};
 }
-/** Resolve the stored identity and linked user for one runtime actor. */
-async function readActorIdentity(actor) {
-	return await readActorIdentityFromSql(getDb(), actor);
-}
-//#endregion
-//#region src/chat/slack/workspace-context.ts
-const workspaceTeamIdStorage = new AsyncLocalStorage();
-/** Run a callback with the Slack workspace team ID for the inbound webhook. */
-function runWithWorkspaceTeamId(teamId, fn) {
-	if (!teamId) return fn();
-	return workspaceTeamIdStorage.run(teamId, fn);
+/** Verify that a delegated subject was signed for one scheduler task. */
+function verifyScheduledAutomationCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const { subject } = input;
+	const binding = subject.binding;
+	if (!secret || input.plugin !== "scheduler" || subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "scheduled-automation" || !subject.taskId || binding.type !== "scheduled-automation" || binding.plugin !== input.plugin || binding.taskId !== subject.taskId) return false;
+	return timingSafeMatch(signPayload(secret, buildPayload([
+		"scheduled-automation",
+		binding.plugin,
+		binding.taskId,
+		subject.userId
+	])), binding.signature);
 }
-/** Return the Slack workspace team ID for the current inbound webhook. */
-function getWorkspaceTeamId() {
-	return workspaceTeamIdStorage.getStore();
+/** Bind a delegated user subject to one event automation dispatch. */
+function bindEventAutomationCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const plugin = input.plugin.trim();
+	const userId = parseActorUserId(input.subject.userId);
+	if (!secret || plugin !== "junior" || !userId || input.subject.allowedWhen !== "event-automation") return;
+	const taskId = input.subject.taskId;
+	if (!taskId || taskId !== taskId.trim()) return;
+	return {
+		type: "user",
+		userId,
+		allowedWhen: "event-automation",
+		taskId,
+		binding: {
+			type: "event-automation",
+			plugin,
+			taskId,
+			signature: signPayload(secret, buildPayload([
+				"event-automation",
+				plugin,
+				taskId,
+				userId
+			]))
+		}
+	};
 }
-//#endregion
-//#region src/chat/slack/client.ts
-var SlackActionError = class extends Error {
-	code;
-	apiError;
-	needed;
-	provided;
-	statusCode;
-	requestId;
-	errorData;
-	retryAfterSeconds;
-	detail;
-	detailLine;
-	detailRule;
-	constructor(message, code, options = {}) {
-		super(message);
-		this.name = "SlackActionError";
-		this.code = code;
-		this.apiError = options.apiError;
-		this.needed = options.needed;
-		this.provided = options.provided;
-		this.statusCode = options.statusCode;
-		this.requestId = options.requestId;
-		this.errorData = options.errorData;
-		this.retryAfterSeconds = options.retryAfterSeconds;
-		this.detail = options.detail;
-		this.detailLine = options.detailLine;
-		this.detailRule = options.detailRule;
-	}
-};
-function serializeSlackErrorData(data) {
-	if (!data || typeof data !== "object") return;
-	const filtered = Object.fromEntries(Object.entries(data).filter(([key]) => key !== "error"));
-	if (Object.keys(filtered).length === 0) return;
-	try {
-		const serialized = JSON.stringify(filtered);
-		return serialized.length <= 600 ? serialized : `${serialized.slice(0, 597)}...`;
-	} catch {
-		return;
-	}
+/** Verify that a delegated subject was signed for one event automation. */
+function verifyEventAutomationCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const { subject } = input;
+	const binding = subject.binding;
+	if (!secret || input.plugin !== "junior" || subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "event-automation" || !subject.taskId || binding.type !== "event-automation" || binding.plugin !== input.plugin || binding.taskId !== subject.taskId) return false;
+	return timingSafeMatch(signPayload(secret, buildPayload([
+		"event-automation",
+		binding.plugin,
+		binding.taskId,
+		subject.userId
+	])), binding.signature);
 }
-/** Extract a header value by case-insensitive name from a raw headers object. */
-function getHeaderString(headers, name) {
-	if (!headers || typeof headers !== "object") return;
-	const key = name.toLowerCase();
-	const entries = headers;
-	for (const [entryKey, value] of Object.entries(entries)) {
-		if (entryKey.toLowerCase() !== key) continue;
-		if (typeof value === "string") return value;
-		if (Array.isArray(value)) {
-			const first = value.find((entry) => typeof entry === "string");
-			return typeof first === "string" ? first : void 0;
+/** Bind the user who set a timer Watch to that one Watch. */
+function bindTimerWatchCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const userId = parseActorUserId(input.userId);
+	const { conversationId, watchId } = input;
+	if (!secret || !userId || !conversationId || conversationId !== conversationId.trim() || !watchId || watchId !== watchId.trim()) return;
+	return {
+		type: "user",
+		userId,
+		allowedWhen: "timer-watch",
+		binding: {
+			type: "timer-watch",
+			conversationId,
+			watchId,
+			signature: signPayload(secret, buildPayload([
+				"timer-watch",
+				conversationId,
+				watchId,
+				userId
+			]))
 		}
-	}
+	};
 }
-function parseSlackCanvasDetail(detail) {
-	if (typeof detail !== "string") return {};
-	const trimmed = detail.trim();
-	if (!trimmed) return {};
-	const parsed = { detail: trimmed };
-	const lineMatch = trimmed.match(/line\s+(\d+):/i);
-	if (lineMatch) {
-		const line = Number.parseInt(lineMatch[1] ?? "", 10);
-		if (Number.isFinite(line)) parsed.detailLine = line;
-	}
-	if (/unsupported heading depth/i.test(trimmed)) parsed.detailRule = "unsupported_heading_depth";
-	return parsed;
+/** Verify that a delegated subject was signed for one timer Watch. */
+function verifyTimerWatchCredentialSubject(input) {
+	const secret = getCredentialSubjectSecret();
+	const { subject } = input;
+	const binding = subject.binding;
+	if (!secret || subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "timer-watch" || binding.type !== "timer-watch" || binding.conversationId !== input.conversationId || binding.watchId !== input.watchId) return false;
+	return timingSafeMatch(signPayload(secret, buildPayload([
+		"timer-watch",
+		binding.conversationId,
+		binding.watchId,
+		subject.userId
+	])), binding.signature);
 }
-/**
-* Ambient destination-installation token for Slack outbound calls, bound by
-* installation-scoped entry points so writes carry the destination
-* workspace's credentials instead of the process-global env token.
-*/
-const installationTokenStorage = new AsyncLocalStorage();
-const clientsByToken = /* @__PURE__ */ new Map();
-/**
-* Bind a workspace installation token for all Slack Web API calls inside
-* `fn`, so multi-workspace outbound writes use the destination workspace's
-* credentials rather than the env fallback token.
-*/
-function runWithSlackInstallationToken(token, fn) {
-	const trimmed = token.trim();
-	if (!trimmed) throw new SlackActionError("Slack installation token binding requires a non-empty token", "missing_token");
-	return installationTokenStorage.run({ token: trimmed }, fn);
+//#endregion
+//#region src/chat/events/store.ts
+const EVENT_PREFIX = "junior:resource_event_subscription:v5";
+const INDEX_LOCK_TTL_MS = 1e4;
+const SUBSCRIPTION_LOCK_TTL_MS = 1e4;
+const SUBSCRIPTION_LOCK_WAIT_MS = 1e4;
+const SUBSCRIPTION_LOCK_RETRY_MS = 25;
+const SUBSCRIPTION_LOCK_HEARTBEAT_MS = 3e3;
+const subscriptionStatusSchema = z.enum([
+	"active",
+	"cancelled",
+	"completed"
+]);
+const subscriptionIdIndexSchema = z.array(z.string().min(1));
+const subscriptionSchema = z.object({
+	conversationId: z.string().min(1),
+	createdAtMs: z.number().finite(),
+	/** Timer creator whose grants the timer Turn may use. */
+	credentialSubject: credentialSubjectSchema.optional(),
+	events: z.array(eventTypeSchema).min(1),
+	expiresAtMs: z.number().finite(),
+	firesAtMs: z.number().finite().optional(),
+	id: z.string().min(1),
+	intent: z.string().min(1),
+	label: z.string().min(1),
+	match: eventMatchSchema.optional(),
+	namespace: z.string().min(1),
+	identifier: z.string().min(1),
+	resourceType: z.string().min(1),
+	status: subscriptionStatusSchema,
+	updatedAtMs: z.number().finite()
+}).strict();
+function digest(value) {
+	return createHash("sha256").update(value).digest("hex").slice(0, 32);
 }
-/**
-* Token precedence: ambient installation token, then env token, then a hard
-* failure for team-scoped calls — a call scoped to one workspace must never
-* silently fall through to another workspace's credentials.
-*/
-function resolveSlackToken() {
-	const ambientToken = installationTokenStorage.getStore()?.token;
-	if (ambientToken) return ambientToken;
-	const envToken = getSlackBotToken();
-	if (envToken) return envToken;
-	const teamId = getWorkspaceTeamId();
-	if (teamId) throw new SlackActionError(`Slack call is scoped to workspace ${teamId} but no installation token is bound and no default bot token is configured`, "missing_token");
-	throw new SlackActionError("SLACK_BOT_TOKEN (or SLACK_BOT_USER_TOKEN) is required for Slack Web API actions in this service", "missing_token");
+function subscriptionKey(id) {
+	return `${EVENT_PREFIX}:record:${id}`;
 }
-/** Normalize Junior Slack references to native Slack conversation IDs. */
-function normalizeSlackConversationId(channelId) {
-	return parseSlackChannelReferenceId(channelId);
+function subscriptionLockKey(id) {
+	return `${EVENT_PREFIX}:lock:${id}`;
 }
-/**
-* Return the per-token cached WebClient. `withSlackRetries` owns retry
-* classification for this boundary: the WebClient's built-in policy would
-* re-post timed-out writes (a duplicate-message hazard) and sleep for the
-* full unbounded Retry-After inside the request, so both internal behaviors
-* are disabled here.
-*/
-function getClient() {
-	const token = resolveSlackToken();
-	let cached = clientsByToken.get(token);
-	if (!cached) {
-		cached = new WebClient(token, {
-			retryConfig: { retries: 0 },
-			rejectRateLimitedCalls: true
-		});
-		clientsByToken.set(token, cached);
-	}
-	return cached;
+function resourceIndexKey(namespace, identifier) {
+	return `${EVENT_PREFIX}:resource:${digest(`${namespace}\0${identifier}`)}`;
 }
-function mapSlackError(error) {
-	if (error instanceof SlackActionError) return error;
-	const candidate = error;
-	const apiError = candidate.data?.error;
-	const message = candidate.message ?? "Slack action failed";
-	const baseOptions = {
-		apiError,
-		statusCode: candidate.statusCode,
-		requestId: getHeaderString(candidate.headers, "x-slack-req-id"),
-		errorData: serializeSlackErrorData(candidate.data),
-		...parseSlackCanvasDetail(candidate.data?.detail)
-	};
-	if (apiError === "missing_scope") return new SlackActionError(message, "missing_scope", {
-		...baseOptions,
-		needed: candidate.data?.needed,
-		provided: candidate.data?.provided
-	});
-	if (apiError === "not_in_channel") return new SlackActionError(message, "not_in_channel", baseOptions);
-	if (apiError === "restricted_action_read_only_channel") return new SlackActionError(message, "read_only_channel", baseOptions);
-	if (apiError === "already_reacted") return new SlackActionError(message, "already_reacted", baseOptions);
-	if (apiError === "no_reaction") return new SlackActionError(message, "no_reaction", baseOptions);
-	if (apiError === "invalid_arguments") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "invalid_cursor") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "invalid_name") return new SlackActionError(message, "invalid_arguments", baseOptions);
-	if (apiError === "not_found" || apiError === "channel_not_found" || apiError === "message_not_found") return new SlackActionError(message, "not_found", baseOptions);
-	if (apiError === "feature_not_enabled" || apiError === "not_allowed_token_type") return new SlackActionError(message, "feature_unavailable", baseOptions);
-	if (apiError === "canvas_creation_failed") return new SlackActionError(message, "canvas_creation_failed", baseOptions);
-	if (apiError === "canvas_editing_failed") return new SlackActionError(message, "canvas_editing_failed", baseOptions);
-	if (candidate.code === "slack_webapi_rate_limited_error" || candidate.statusCode === 429) return new SlackActionError(message, "rate_limited", {
-		...baseOptions,
-		retryAfterSeconds: candidate.retryAfter
-	});
-	return new SlackActionError(message, "internal_error", baseOptions);
+function conversationIndexKey(conversationId) {
+	return `${EVENT_PREFIX}:conversation:${digest(conversationId)}`;
 }
-const MAX_RETRY_DELAY_MS = 1e4;
-const MAX_TOTAL_RETRY_DELAY_MS = 2e4;
-const CONNECTION_ERROR_CODES = /* @__PURE__ */ new Set([
-	"ECONNREFUSED",
-	"ECONNRESET",
-	"ENOTFOUND",
-	"EAI_AGAIN"
-]);
-const TIMEOUT_ERROR_CODES = /* @__PURE__ */ new Set([
-	"ETIMEDOUT",
-	"ECONNABORTED",
-	"ESOCKETTIMEDOUT"
-]);
-function findNetworkErrorCode(error, depth = 0) {
-	if (!error || typeof error !== "object" || depth > 4) return;
-	const candidate = error;
-	if (typeof candidate.code === "string" && (CONNECTION_ERROR_CODES.has(candidate.code) || TIMEOUT_ERROR_CODES.has(candidate.code))) return candidate.code;
-	return findNetworkErrorCode(candidate.original, depth + 1) ?? findNetworkErrorCode(candidate.cause, depth + 1);
+function indexLockKey(key) {
+	return `${key}:lock`;
 }
-function hasSocketHangUpMessage(error) {
-	return error instanceof Error && error.message.toLowerCase().includes("socket hang up");
+async function sleep(ms) {
+	await new Promise((resolve) => {
+		setTimeout(resolve, ms).unref?.();
+	});
 }
-/**
-* Classify a failed Slack call for retry: rate limits, Slack 5xx, and
-* connection-phase failures are always retryable; timeouts are retried only
-* for idempotent operations because Slack may already have accepted the
-* request.
-*/
-function classifySlackRetry(raw, mapped) {
-	if (mapped.code === "rate_limited") return "rate_limited";
-	if (mapped.statusCode !== void 0 && mapped.statusCode >= 500) return "server_error";
-	const networkCode = findNetworkErrorCode(raw);
-	if (networkCode && CONNECTION_ERROR_CODES.has(networkCode)) return "connection";
-	if (networkCode && TIMEOUT_ERROR_CODES.has(networkCode)) return "timeout";
-	if (hasSocketHangUpMessage(raw)) return "connection";
-	return "none";
+async function acquireSubscriptionLock(state, subscriptionId, waitDeadlineMs = Date.now() + SUBSCRIPTION_LOCK_WAIT_MS) {
+	while (true) {
+		const lock = await state.acquireLock(subscriptionLockKey(subscriptionId), SUBSCRIPTION_LOCK_TTL_MS);
+		if (lock) return lock;
+		if (Date.now() >= waitDeadlineMs) throw new Error(`Could not acquire watch lock for ${subscriptionId}`);
+		await sleep(SUBSCRIPTION_LOCK_RETRY_MS);
+	}
 }
-/**
-* Run a Slack Web API call with bounded retries so transient platform
-* failures do not surface as turn failures, while non-idempotent posts are
-* never re-sent when Slack may already have accepted them.
-*
-* Retry classes: rate limits (bounded Retry-After), connection-phase network
-* failures, and Slack 5xx responses always retry; request timeouts retry only
-* when the caller marks the operation `idempotent`.
-*/
-async function withSlackRetries(task, maxAttempts = 3, context = {}) {
-	let attempt = 0;
-	let totalDelayMs = 0;
-	const action = context.action ?? "unknown";
-	while (attempt < maxAttempts) {
-		attempt += 1;
-		const attemptNumber = attempt;
-		try {
-			return await withSpan(`POST slack.com/api/${action}`, "http.client", {}, async () => {
-				try {
-					return await task();
-				} catch (error) {
-					const mapped = mapSlackError(error);
-					const errorAttrs = { "error.type": mapped.code };
-					if (mapped.apiError) errorAttrs["app.slack.api_error_code"] = mapped.apiError;
-					if (mapped.code === "rate_limited") {
-						errorAttrs["http.response.status_code"] = 429;
-						if (mapped.retryAfterSeconds) errorAttrs["app.slack.retry_after_ms"] = mapped.retryAfterSeconds * 1e3;
-					} else if (mapped.statusCode != null) errorAttrs["http.response.status_code"] = mapped.statusCode;
-					setSpanAttributes(errorAttrs);
-					setSpanStatus("error");
-					throw error;
-				}
-			}, {
-				"http.request.method": "POST",
-				"server.address": "slack.com",
-				"url.scheme": "https",
-				"url.path": `/api/${action}`,
-				"app.slack.method": action,
-				"app.retry.max_attempts": maxAttempts,
-				...attemptNumber > 1 ? { "http.request.resend_count": attemptNumber - 1 } : void 0,
-				...context.attributes ?? {},
-				...context.spanAttributes ?? {}
-			});
-		} catch (error) {
-			const mapped = mapSlackError(error);
-			const retryClass = classifySlackRetry(error, mapped);
-			const isRetryable = retryClass === "rate_limited" || retryClass === "connection" || retryClass === "server_error" || retryClass === "timeout" && context.idempotent === true;
-			const remainingDelayBudgetMs = MAX_TOTAL_RETRY_DELAY_MS - totalDelayMs;
-			const baseLogAttributes = {
-				"app.slack.action": action,
-				"app.slack.error_code": mapped.code,
-				...mapped.apiError ? { "app.slack.api_error": mapped.apiError } : void 0,
-				...mapped.detail ? { "app.slack.detail": mapped.detail } : void 0,
-				...mapped.detailLine !== void 0 ? { "app.slack.detail_line": mapped.detailLine } : void 0,
-				...mapped.detailRule ? { "app.slack.detail_rule": mapped.detailRule } : void 0,
-				...mapped.requestId ? { "app.slack.request_id": mapped.requestId } : void 0,
-				...mapped.statusCode !== void 0 ? { "http.response.status_code": mapped.statusCode } : void 0,
-				...context.attributes ?? {}
-			};
-			if (!isRetryable || attempt >= maxAttempts || remainingDelayBudgetMs <= 0) {
-				logWarn("slack.action.failed", {
-					...baseLogAttributes,
-					...mapped.errorData ? { "app.slack.error_data": mapped.errorData } : void 0
-				});
-				throw mapped;
-			}
-			logWarn("slack.action.retrying", {
-				...baseLogAttributes,
-				"app.slack.retry_attempt": attempt,
-				"app.slack.retry_class": retryClass
-			});
-			const retryAfterMs = retryClass === "rate_limited" && mapped.retryAfterSeconds && mapped.retryAfterSeconds > 0 ? mapped.retryAfterSeconds * 1e3 : void 0;
-			const backoffMs = Math.min(2e3, 250 * 2 ** (attempt - 1));
-			const delayMs = Math.min(retryAfterMs ?? backoffMs, MAX_RETRY_DELAY_MS, remainingDelayBudgetMs);
-			totalDelayMs += delayMs;
-			await sleep$1(delayMs);
-		}
+/** Run one subscription lifecycle transition while keeping its lease alive. */
+async function withSubscriptionLock(state, subscriptionId, callback, waitDeadlineMs) {
+	const lock = await acquireSubscriptionLock(state, subscriptionId, waitDeadlineMs);
+	let lockLostError;
+	let heartbeatError;
+	let heartbeat;
+	const timer = setInterval(() => {
+		if (heartbeat) return;
+		heartbeat = state.extendLock(lock, SUBSCRIPTION_LOCK_TTL_MS).then((extended) => {
+			if (extended) heartbeatError = void 0;
+			else lockLostError = /* @__PURE__ */ new Error(`Watch lock was lost for ${subscriptionId}`);
+		}).catch((error) => {
+			heartbeatError = error instanceof Error ? error : /* @__PURE__ */ new Error(`Failed to extend subscription lock: ${String(error)}`);
+		}).finally(() => {
+			heartbeat = void 0;
+		});
+	}, SUBSCRIPTION_LOCK_HEARTBEAT_MS);
+	timer.unref?.();
+	let result;
+	try {
+		result = await callback();
+	} finally {
+		clearInterval(timer);
+		await heartbeat;
+		await state.releaseLock(lock);
 	}
-	throw new SlackActionError("Slack action exhausted retries", "internal_error");
+	const lockError = lockLostError ?? heartbeatError;
+	if (lockError) throw lockError;
+	return result;
 }
-/**
-* Slack Web API client for the current destination workspace: the ambient
-* installation token when one is bound, otherwise the env bot token for
-* single-workspace deployments. Fails instead of falling back when the call
-* is workspace-scoped and no installation token can be resolved, so a write
-* never goes out with another workspace's credentials.
-*/
-function getSlackClient(options) {
-	if (options) return new WebClient(resolveSlackToken(), {
-		retryConfig: { retries: 0 },
-		rejectRateLimitedCalls: true,
-		timeout: options.timeoutMs
+function ttlUntil(expiresAtMs, nowMs) {
+	return Math.max(1, expiresAtMs - nowMs);
+}
+async function readSubscriptionIdIndex(state, key) {
+	const value = await state.get(key);
+	if (value === void 0 || value === null) return [];
+	return subscriptionIdIndexSchema.parse(value);
+}
+function buildSubscriptionId(input) {
+	const eventKey = [...new Set(input.events)].sort().join("\0");
+	const matchKey = stableEventMatchKey(input.match);
+	return `resub_${digest(matchKey ? `${input.namespace}\0${input.identifier}\0${input.conversationId}\0${eventKey}\0${matchKey}` : `${input.namespace}\0${input.identifier}\0${input.conversationId}\0${eventKey}`)}`;
+}
+async function withIndexLock(state, key, callback) {
+	const lock = await state.acquireLock(indexLockKey(key), INDEX_LOCK_TTL_MS);
+	if (!lock) throw new Error(`Could not acquire event index lock for ${key}`);
+	try {
+		return await callback();
+	} finally {
+		await state.releaseLock(lock);
+	}
+}
+async function addToIndex(state, key, subscriptionId, nowMs) {
+	await withIndexLock(state, key, async () => {
+		const ids = [...new Set(await readSubscriptionIdIndex(state, key))];
+		const next = ids.includes(subscriptionId) ? ids : [...ids, subscriptionId];
+		await state.set(key, next, await indexTtlMs(state, next, nowMs));
 	});
-	return getClient();
 }
-/**
-* Slack channel ID prefixes:
-* - C: channel — modern private channels also use C, so the prefix never
-*   proves a channel is public
-* - G: legacy private channel / group DM
-* - D: direct message (1:1)
-*/
-function isDmChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	return Boolean(normalized && normalized.startsWith("D"));
+async function removeFromIndex(state, key, subscriptionId, nowMs) {
+	await withIndexLock(state, key, async () => {
+		const next = (await readSubscriptionIdIndex(state, key)).filter((id) => id !== subscriptionId);
+		await state.set(key, next, await indexTtlMs(state, next, nowMs));
+	});
 }
-/**
-* Conversation-scoped Slack contexts backed by a concrete conversation ID.
-* Includes channels/groups/DMs (C/G/D).
-*/
-function isConversationScopedChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	if (!normalized) return false;
-	return normalized.startsWith("C") || normalized.startsWith("G") || normalized.startsWith("D");
+async function indexTtlMs(state, subscriptionIds, nowMs) {
+	const records = await Promise.all(subscriptionIds.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))));
+	return ttlUntil(Math.max(nowMs, ...records.filter((record) => record !== void 0 && activeAt(record, nowMs)).map((record) => record.expiresAtMs)), nowMs);
 }
-function isConversationChannel(channelId) {
-	const normalized = normalizeSlackConversationId(channelId);
-	if (!normalized) return false;
-	return normalized.startsWith("C") || normalized.startsWith("G");
+function parseSubscription(value) {
+	if (value === void 0 || value === null) return;
+	return subscriptionSchema.parse(value);
 }
-async function getFilePermalink(fileId) {
-	const client = getClient();
-	return (await withSlackRetries(() => client.files.info({ file: fileId }), 3, {
-		action: "files.info",
-		idempotent: true,
-		spanAttributes: { "app.slack.file_id": fileId }
-	})).file?.permalink;
+function activeAt(subscription, nowMs) {
+	return subscription.status === "active" && subscription.expiresAtMs > nowMs;
 }
-async function downloadPrivateSlackFile(url) {
-	const token = resolveSlackToken();
-	return withSpan("GET files.slack.com", "http.client", {}, async () => {
-		const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` } });
-		setSpanAttributes({ "http.response.status_code": response.status });
-		if (!response.ok) {
-			setSpanAttributes({ "error.type": String(response.status) });
-			setSpanStatus("error");
-			throw new Error(`Slack file download failed: ${response.status}`);
-		}
-		return Buffer.from(await response.arrayBuffer());
-	}, {
-		"http.request.method": "GET",
-		"server.address": "files.slack.com",
-		"url.scheme": "https",
-		"app.slack.method": "files.download"
+function matchesEvent(subscription, input) {
+	return subscription.namespace === input.namespace && subscription.identifier === input.identifier && subscription.events.includes(input.eventType) && activeAt(subscription, input.nowMs) && eventMatches(subscription.match, input.data);
+}
+/** Create or replace the active subscription for one conversation/resource/event set. */
+async function createWatch(input, options = {}) {
+	const state = options.state ?? getStateAdapter();
+	await state.connect();
+	const nowMs = options.nowMs ?? Date.now();
+	const events = [...new Set(input.events.map((event) => event.trim()))].filter(Boolean);
+	if (events.length === 0) throw new Error("Watch requires at least one event");
+	if (input.expiresAtMs <= nowMs) throw new Error("Watch expiry must be in the future");
+	const match = input.match && Object.keys(input.match).length > 0 ? input.match : void 0;
+	const id = buildSubscriptionId({
+		conversationId: input.conversationId,
+		events,
+		match,
+		namespace: input.namespace,
+		identifier: input.identifier
+	});
+	const record = {
+		conversationId: input.conversationId,
+		createdAtMs: nowMs,
+		events,
+		expiresAtMs: input.expiresAtMs,
+		id,
+		intent: input.intent,
+		label: input.label,
+		...match ? { match } : void 0,
+		namespace: input.namespace,
+		identifier: input.identifier,
+		resourceType: input.resourceType,
+		status: "active",
+		updatedAtMs: nowMs
+	};
+	const parsed = subscriptionSchema.parse(record);
+	await state.set(subscriptionKey(id), parsed, ttlUntil(parsed.expiresAtMs, nowMs));
+	await addToIndex(state, resourceIndexKey(input.namespace, input.identifier), id, nowMs);
+	await addToIndex(state, conversationIndexKey(input.conversationId), id, nowMs);
+	return parsed;
+}
+/** Create a retry-stable timer without keeping a process open. */
+async function createTimerWatch(input) {
+	const state = getStateAdapter();
+	await state.connect();
+	const identifier = digest(`${input.conversationId}\0${input.toolCallId}`);
+	const selector = {
+		conversationId: input.conversationId,
+		namespace: "junior",
+		identifier,
+		events: ["timer.fired"]
+	};
+	const id = buildSubscriptionId(selector);
+	return await withSubscriptionLock(state, id, async () => {
+		const existing = parseSubscription(await state.get(subscriptionKey(id)));
+		if (existing) return existing;
+		const nowMs = Date.now();
+		const firesAtMs = nowMs + input.afterMs;
+		const expiresAtMs = firesAtMs + 864e5;
+		const credentialSubject = input.creatorUserId ? bindTimerWatchCredentialSubject({
+			conversationId: input.conversationId,
+			userId: input.creatorUserId,
+			watchId: id
+		}) : void 0;
+		const record = subscriptionSchema.parse({
+			...selector,
+			...credentialSubject ? { credentialSubject } : void 0,
+			id,
+			firesAtMs,
+			expiresAtMs,
+			resourceType: "timer",
+			label: "Timer",
+			intent: input.intent,
+			status: "active",
+			createdAtMs: nowMs,
+			updatedAtMs: nowMs
+		});
+		await withIndexLock(state, conversationIndexKey(input.conversationId), async () => {
+			const key = conversationIndexKey(input.conversationId);
+			const ids = [.../* @__PURE__ */ new Set([...await readSubscriptionIdIndex(state, key), id])];
+			await state.set(key, ids, Math.max(ttlUntil(expiresAtMs, nowMs), await indexTtlMs(state, ids, nowMs)));
+			await state.set(resourceIndexKey("junior", identifier), [id], ttlUntil(expiresAtMs, nowMs));
+			await updateTimerIndex(state, {
+				kind: "add",
+				id,
+				atMs: firesAtMs
+			});
+			await state.set(subscriptionKey(id), record, ttlUntil(expiresAtMs, nowMs));
+		});
+		return record;
+	});
+}
+/** Claim live timer Watches and discard stale due-index entries. */
+async function takeDueTimerWatches(nowMs) {
+	const state = getStateAdapter();
+	await state.connect();
+	const watches = [];
+	for (const id of await updateTimerIndex(state, {
+		kind: "claim",
+		nowMs
+	})) await withSubscriptionLock(state, id, async () => {
+		const watch = parseSubscription(await state.get(subscriptionKey(id)));
+		if (watch && activeAt(watch, nowMs) && watch.firesAtMs !== void 0) {
+			if (watch.firesAtMs <= nowMs) watches.push(watch);
+		} else await updateTimerIndex(state, {
+			kind: "remove",
+			id
+		});
+	});
+	return watches;
+}
+/** List active subscriptions bound to one conversation. */
+async function listWatches(input) {
+	const state = input.state ?? getStateAdapter();
+	await state.connect();
+	const nowMs = input.nowMs ?? Date.now();
+	const ids = await readSubscriptionIdIndex(state, conversationIndexKey(input.conversationId));
+	return (await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))))).filter((record) => record !== void 0 && record.conversationId === input.conversationId && activeAt(record, nowMs)).sort((left, right) => left.createdAtMs - right.createdAtMs);
+}
+/** Cancel a current-conversation subscription and remove it from match indexes. */
+async function cancelWatch(input) {
+	const state = input.state ?? getStateAdapter();
+	await state.connect();
+	return await withSubscriptionLock(state, input.id, async () => {
+		const current = parseSubscription(await state.get(subscriptionKey(input.id)));
+		if (!current || current.conversationId !== input.conversationId) return;
+		const nowMs = input.nowMs ?? Date.now();
+		if (current.status === "completed") return current;
+		const next = {
+			...current,
+			status: "cancelled",
+			updatedAtMs: nowMs
+		};
+		await state.set(subscriptionKey(input.id), next, JUNIOR_THREAD_STATE_TTL_MS);
+		await removeFromIndex(state, resourceIndexKey(current.namespace, current.identifier), input.id, nowMs);
+		await removeFromIndex(state, conversationIndexKey(current.conversationId), input.id, nowMs);
+		if (current.firesAtMs !== void 0) await updateTimerIndex(state, {
+			kind: "remove",
+			id: input.id
+		});
+		return next;
 	});
 }
-//#endregion
-//#region src/chat/credentials/subject.ts
-const CREDENTIAL_SUBJECT_HMAC_CONTEXT = "junior.credential_subject.v1";
-const CREDENTIAL_SUBJECT_SIGNATURE_VERSION = "v1";
-function getCredentialSubjectSecret() {
-	return process.env.JUNIOR_SECRET?.trim() || void 0;
-}
-/** Encode ordered signing fields without allowing delimiter ambiguity. */
-function buildPayload(parts) {
-	return [CREDENTIAL_SUBJECT_HMAC_CONTEXT, ...parts].join("\0");
-}
-function signPayload(secret, payload) {
-	const digest = createHmac("sha256", secret).update(payload).digest("hex");
-	return `${CREDENTIAL_SUBJECT_SIGNATURE_VERSION}=${digest}`;
-}
-function timingSafeMatch(expected, actual) {
-	const expectedBuffer = Buffer.from(expected);
-	const actualBuffer = Buffer.from(actual);
-	if (expectedBuffer.length !== actualBuffer.length) return false;
-	return timingSafeEqual(expectedBuffer, actualBuffer);
-}
-/** Create a delegated user credential subject for a verified Slack DM turn. */
-function createSlackDirectCredentialSubject(input) {
-	const channelId = normalizeSlackConversationId(input.channelId);
-	const teamId = input.teamId?.trim();
-	const userId = parseActorUserId(input.userId);
-	if (!channelId || !teamId || !userId || !isDmChannel(channelId)) return;
-	return {
-		type: "user",
-		userId,
-		allowedWhen: "private-direct-conversation"
-	};
+/** Cancel every active watch bound to one conversation. */
+async function cancelSubscriptions(input) {
+	const subscriptions = await listWatches(input);
+	for (const subscription of subscriptions) await cancelWatch({
+		conversationId: input.conversationId,
+		id: subscription.id,
+		nowMs: input.nowMs,
+		state: input.state
+	});
 }
-/** Bind a delegated user subject to the Slack DM destination being dispatched. */
-function bindSlackDirectCredentialSubject(input) {
-	const channelId = normalizeSlackConversationId(input.channelId);
-	const teamId = input.teamId.trim();
-	const secret = getCredentialSubjectSecret();
-	const { subject } = input;
-	const userId = parseActorUserId(subject.userId);
-	if (!channelId || !teamId || !secret || !isDmChannel(channelId) || subject.type !== "user" || !userId || subject.allowedWhen !== "private-direct-conversation") return;
-	return {
-		type: "user",
-		userId,
-		allowedWhen: subject.allowedWhen,
-		binding: {
-			type: "slack-direct-conversation",
-			teamId,
-			channelId,
-			signature: signPayload(secret, buildPayload([
-				subject.allowedWhen,
-				teamId,
-				channelId,
-				userId
-			]))
+/**
+* Collect match keys from active watches for these identifiers and event types.
+* Does not evaluate match values — only reports keys that filters use.
+*/
+async function collectEventMatchKeys(input) {
+	const state = input.state ?? getStateAdapter();
+	await state.connect();
+	const nowMs = input.nowMs ?? Date.now();
+	const eventTypes = new Set(input.eventTypes.map((eventType) => eventType.trim()).filter(Boolean));
+	if (eventTypes.size === 0) return [];
+	const keys = /* @__PURE__ */ new Set();
+	const identifiers = new Set(input.identifiers.map((value) => value.trim()).filter(Boolean));
+	for (const identifier of identifiers) {
+		const ids = await readSubscriptionIdIndex(state, resourceIndexKey(input.namespace, identifier));
+		const records = await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))));
+		for (const record of records) {
+			if (!record) continue;
+			if (record.namespace !== input.namespace) continue;
+			if (record.identifier !== identifier) continue;
+			if (!activeAt(record, nowMs)) continue;
+			if (!record.events.some((eventType) => eventTypes.has(eventType))) continue;
+			for (const key of Object.keys(record.match ?? {})) keys.add(key);
 		}
-	};
+	}
+	return [...keys].sort();
 }
-/** Verify that a delegated subject was signed for the dispatch destination. */
-function verifySlackDirectCredentialSubject(input) {
-	const channelId = normalizeSlackConversationId(input.channelId);
-	const secret = getCredentialSubjectSecret();
-	if (!channelId || !secret) return false;
-	const { subject } = input;
-	const binding = subject.binding;
-	if (subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "private-direct-conversation" || !binding || binding.type !== "slack-direct-conversation" || typeof binding.signature !== "string" || !binding.signature || binding.teamId !== input.teamId || binding.channelId !== channelId) return false;
-	return timingSafeMatch(signPayload(secret, buildPayload([
-		subject.allowedWhen,
-		binding.teamId,
-		binding.channelId,
-		subject.userId
-	])), binding.signature);
+/** Find active subscriptions interested in a normalized event. */
+async function findMatchingWatches(input) {
+	const state = input.state ?? getStateAdapter();
+	await state.connect();
+	const nowMs = input.nowMs ?? Date.now();
+	const ids = await readSubscriptionIdIndex(state, resourceIndexKey(input.namespace, input.identifier));
+	return (await Promise.all(ids.map(async (id) => parseSubscription(await state.get(subscriptionKey(id)))))).filter((record) => record !== void 0 && matchesEvent(record, {
+		data: input.data,
+		eventType: input.eventType,
+		nowMs,
+		namespace: input.namespace,
+		identifier: input.identifier
+	}));
 }
-/** Bind a delegated user subject to one scheduler task dispatch. */
-function bindScheduledAutomationCredentialSubject(input) {
-	const secret = getCredentialSubjectSecret();
-	const plugin = input.plugin.trim();
-	const userId = parseActorUserId(input.subject.userId);
-	if (!secret || plugin !== "scheduler" || !userId || input.subject.allowedWhen !== "scheduled-automation") return;
-	const taskId = input.subject.taskId;
-	if (!taskId || taskId !== taskId.trim()) return;
-	return {
-		type: "user",
-		userId,
-		allowedWhen: "scheduled-automation",
-		taskId,
-		binding: {
-			type: "scheduled-automation",
-			plugin,
-			taskId,
-			signature: signPayload(secret, buildPayload([
-				"scheduled-automation",
-				plugin,
-				taskId,
-				userId
-			]))
+/** Recheck and deliver a matched subscription while holding its status lock. */
+async function deliverWatch(input) {
+	const state = input.state ?? getStateAdapter();
+	await state.connect();
+	return await withSubscriptionLock(state, input.subscription.id, async () => {
+		const nowMs = input.nowMs ?? Date.now();
+		const current = parseSubscription(await state.get(subscriptionKey(input.subscription.id)));
+		if (!current || !matchesEvent(current, {
+			data: input.data,
+			eventType: input.eventType,
+			nowMs,
+			namespace: input.namespace,
+			identifier: input.identifier
+		})) return false;
+		const delivered = await input.deliver(current);
+		if (input.terminal) {
+			const latest = parseSubscription(await state.get(subscriptionKey(current.id)));
+			if (!latest || latest.status !== current.status || latest.updatedAtMs !== current.updatedAtMs) return delivered;
+			const next = {
+				...current,
+				status: "completed",
+				updatedAtMs: nowMs
+			};
+			await state.set(subscriptionKey(current.id), next, JUNIOR_THREAD_STATE_TTL_MS);
+			await removeFromIndex(state, resourceIndexKey(current.namespace, current.identifier), current.id, nowMs);
+			await removeFromIndex(state, conversationIndexKey(current.conversationId), current.id, nowMs);
 		}
-	};
-}
-/** Verify that a delegated subject was signed for one scheduler task. */
-function verifyScheduledAutomationCredentialSubject(input) {
-	const secret = getCredentialSubjectSecret();
-	const { subject } = input;
-	const binding = subject.binding;
-	if (!secret || input.plugin !== "scheduler" || subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "scheduled-automation" || !subject.taskId || binding.type !== "scheduled-automation" || binding.plugin !== input.plugin || binding.taskId !== subject.taskId) return false;
-	return timingSafeMatch(signPayload(secret, buildPayload([
-		"scheduled-automation",
-		binding.plugin,
-		binding.taskId,
-		subject.userId
-	])), binding.signature);
+		if (input.terminal && current.firesAtMs !== void 0) await updateTimerIndex(state, {
+			kind: "remove",
+			id: current.id
+		});
+		return delivered;
+	}, input.waitDeadlineMs);
 }
-/** Bind a delegated user subject to one event automation dispatch. */
-function bindEventAutomationCredentialSubject(input) {
-	const secret = getCredentialSubjectSecret();
-	const plugin = input.plugin.trim();
-	const userId = parseActorUserId(input.subject.userId);
-	if (!secret || plugin !== "junior" || !userId || input.subject.allowedWhen !== "event-automation") return;
-	const taskId = input.subject.taskId;
-	if (!taskId || taskId !== taskId.trim()) return;
+//#endregion
+//#region src/chat/events/tool-support.ts
+/** Default lifetime for temporary watches. */
+const RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS = 12096e5;
+/** Hard upper bound for temporary watches. */
+const RESOURCE_SUBSCRIPTION_MAX_TTL_MS = 2592e6;
+const STOP_WATCHING_TOOL_NAME = "stopWatchingResources";
+const RESOURCE_WATCH_TOOL_SOURCE = {
+	id: "resource-watches",
+	description: "Inspect or stop watches for the current conversation."
+};
+//#endregion
+//#region src/chat/slack/tool-support/context.ts
+/** Resolve Slack tool context from the Conversation Location. */
+function getSlackToolContext(context) {
+	const source = context.source.kind === "slack" ? context.source : void 0;
+	const location = context.location?.provider === "slack" ? context.location : source ? {
+		provider: "slack",
+		teamId: source.teamId,
+		channelId: source.channelId,
+		threadTs: source.threadTs
+	} : void 0;
+	if (!location) return void 0;
+	const destinationChannelId = parseSlackChannelReferenceId(context.destination.platform === "slack" ? context.destination.channelId : location.channelId);
+	const locationChannelId = parseSlackChannelReferenceId(location.channelId);
+	const teamId = parseSlackTeamId(location.teamId);
+	if (!destinationChannelId || !locationChannelId || !teamId) return;
 	return {
-		type: "user",
-		userId,
-		allowedWhen: "event-automation",
-		taskId,
-		binding: {
-			type: "event-automation",
-			plugin,
-			taskId,
-			signature: signPayload(secret, buildPayload([
-				"event-automation",
-				plugin,
-				taskId,
-				userId
-			]))
-		}
+		actor: context.actor?.platform === "slack" ? context.actor : void 0,
+		destinationChannelId,
+		locationChannelId,
+		messageChannelId: source ? parseSlackChannelReferenceId(source.channelId) : void 0,
+		messageTs: parseSlackMessageTs(source?.messageTs),
+		teamId,
+		threadTs: parseSlackMessageTs(location.threadTs)
 	};
 }
-/** Verify that a delegated subject was signed for one event automation. */
-function verifyEventAutomationCredentialSubject(input) {
-	const secret = getCredentialSubjectSecret();
-	const { subject } = input;
-	const binding = subject.binding;
-	if (!secret || input.plugin !== "junior" || subject.type !== "user" || !isActorUserId(subject.userId) || subject.allowedWhen !== "event-automation" || !subject.taskId || binding.type !== "event-automation" || binding.plugin !== input.plugin || binding.taskId !== subject.taskId) return false;
-	return timingSafeMatch(signPayload(secret, buildPayload([
-		"event-automation",
-		binding.plugin,
-		binding.taskId,
-		subject.userId
-	])), binding.signature);
-}
 //#endregion
 //#region src/chat/slack/tool-support/channel-capabilities.ts
 /** Resolve channel capabilities from a Slack channel ID. */
@@ -5743,4 +4204,4 @@ function createPluginHookRunner(input = {}) {
 	};
 }
 //#endregion
-export { readActorIdentity as $, getConversationMessageSearchStore as $t, getWorkspaceSnapshotBuilder as A, conversationHasParticipantUser as At, SlackActionError as B, readAttachmentVisionSummary as Bt, WorkspaceValidationError as C, createPluginModel as Ct, setWorkspaceSnapshotBuild as D, conversationArchivedForEmail as Dt, setWorkspaceSnapshot as E, conversationArchiveTimes as Et, bindScheduledAutomationCredentialSubject as F, readLatestConversationBrief as Ft, isConversationScopedChannel as G, listConversationAnnotations as Gt, getFilePermalink as H, resolveRootVisibility as Ht, bindSlackDirectCredentialSubject as I, readConversationEventPage as It, runWithSlackInstallationToken as J, agentsInstructionsUpdatedEvent as Jt, isDmChannel as K, listConversationAnnotationsById as Kt, verifyEventAutomationCredentialSubject as L, buildSentryConversationUrl as Lt, workspaceRepoCheckoutPath as M, conversationNotArchivedForUser as Mt, resolveChannelCapabilities as N, viewerConversationMembership as Nt, SANDBOX_RUNTIME as O, conversationArchivedForUser as Ot, bindEventAutomationCredentialSubject as P, createPluginConversationEvents as Pt, findUserByEmail as Q, getConversationEventStore as Qt, verifyScheduledAutomationCredentialSubject as R, getSlackFileId as Rt, updateWorkspace as S, createPluginEmbedder as St, loadSnapshotsForProfile as T, readConversationAccessFromSql as Tt, getHeaderString as U, saveObjectAnnotations as Ut, downloadPrivateSlackFile as V, recordSlackAttachment as Vt, getSlackClient as W, createPluginAnnotations as Wt, getWorkspaceTeamId as X, authenticationUnlinkedEvent as Xt, withSlackRetries as Y, authenticationLinkedEvent as Yt, runWithWorkspaceTeamId as Z, db_exports as Zt, deleteWorkspace as _, upsertLinkedIdentity as _n, getDashboardConversationLink as _t, getPluginRoutes as a, withConversationMutationLock as an, RESOURCE_WATCH_TOOL_SOURCE as at, listWorkspaces as b, requireSlackDestination as bn, setDashboardConversationLinkOptions as bt, getPluginTools as c, parseSessionSource as cn, cancelWatch as ct, setPlugins as d, agentTurnTotalTokens as dn, createWatch as dt, getConversationStore as en, resolveViewerUser as et, validatePlugins as f, agentTurnUsageSchema as fn, deliverWatch as ft, createWorkspace as g, upsertIdentity as gn, JUNIOR_THREAD_STATE_TTL_MS as gt, setBriefsConfig as h, deleteProviderIdentityForSlackUser as hn, takeDueTimerWatches as ht, getPluginApiRoutes as i, withConversationEventLock as in, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as it, tryWorkspaceRepoCheckoutPath as j, conversationNotArchivedForEmail as jt, deleteWorkspaceSnapshotBuilders as k, conversationHasParticipantEmail as kt, getPluginUserPromptContributions as l, addAgentTurnUsage as ln, collectEventMatchKeys as lt, registration_exports as m, resolveRootConversationId as mn, listWatches as mt, applyPluginFormatMarkdown as n, getSqlExecutor as nn, getSlackToolContext as nt, getPluginSlackConversationLink as o, locationFromRow as on, STOP_WATCHING_TOOL_NAME as ot, coreTaskRegistrations as p, hasAgentTurnUsage as pn, findMatchingWatches as pt, normalizeSlackConversationId as q, JUNIOR_NATIVE_EVENT_NAMESPACE as qt, createPluginHookRunner as r, createSqlConversationEventStore as rn, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as rt, getPluginSystemPromptContributions as s, bindProviderConversation as sn, cancelSubscriptions as st, agent_hooks_exports as t, getDb as tn, updateViewerDisplayName as tt, getPlugins as u, agentTurnCostUsd as un, createTimerWatch as ut, getWorkspace as v, createSlackDestination as vn, getDashboardObjectIconLink as vt, invalidateReadySnapshot as w, createPluginLogger as wt, listWorkspacesByRepository as x, sameDestination as xn, createPluginState as xt, getWorkspaceByName as y, parseDestination as yn, getDashboardTaskLink as yt, verifySlackDirectCredentialSubject as z, matchSlackAttachments as zt };
+export { verifySlackDirectCredentialSubject as $, getWorkspaceSnapshotBuilder as A, viewerConversationMembership as At, cancelWatch as B, saveObjectAnnotations as Bt, WorkspaceValidationError as C, conversationArchiveTimes as Ct, setWorkspaceSnapshotBuild as D, conversationHasParticipantUser as Dt, setWorkspaceSnapshot as E, conversationHasParticipantEmail as Et, RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS as F, getSlackFileId as Ft, findMatchingWatches as G, agentsInstructionsUpdatedEvent as Gt, createTimerWatch as H, listConversationAnnotations as Ht, RESOURCE_SUBSCRIPTION_MAX_TTL_MS as I, matchSlackAttachments as It, bindEventAutomationCredentialSubject as J, listWatches as K, authenticationLinkedEvent as Kt, RESOURCE_WATCH_TOOL_SOURCE as L, readAttachmentVisionSummary as Lt, workspaceRepoCheckoutPath as M, readLatestConversationBrief as Mt, resolveChannelCapabilities as N, readConversationEventPage as Nt, SANDBOX_RUNTIME as O, conversationNotArchivedForEmail as Ot, getSlackToolContext as P, buildSentryConversationUrl as Pt, verifyScheduledAutomationCredentialSubject as Q, STOP_WATCHING_TOOL_NAME as R, recordSlackAttachment as Rt, updateWorkspace as S, readConversationAccessFromSql as St, loadSnapshotsForProfile as T, conversationArchivedForUser as Tt, createWatch as U, listConversationAnnotationsById as Ut, collectEventMatchKeys as V, createPluginAnnotations as Vt, deliverWatch as W, JUNIOR_NATIVE_EVENT_NAMESPACE as Wt, bindSlackDirectCredentialSubject as X, bindScheduledAutomationCredentialSubject as Y, verifyEventAutomationCredentialSubject as Z, deleteWorkspace as _, setDashboardConversationLinkOptions as _t, getPluginRoutes as a, getSlackClient as at, listWorkspaces as b, createPluginModel as bt, getPluginTools as c, normalizeSlackConversationId as ct, setPlugins as d, getWorkspaceTeamId as dt, verifyTimerWatchCredentialSubject as et, validatePlugins as f, runWithWorkspaceTeamId as ft, createWorkspace as g, getDashboardTaskLink as gt, setBriefsConfig as h, getDashboardObjectIconLink as ht, getPluginApiRoutes as i, getHeaderString as it, tryWorkspaceRepoCheckoutPath as j, createPluginConversationEvents as jt, deleteWorkspaceSnapshotBuilders as k, conversationNotArchivedForUser as kt, getPluginUserPromptContributions as l, runWithSlackInstallationToken as lt, registration_exports as m, getDashboardConversationLink as mt, applyPluginFormatMarkdown as n, downloadPrivateSlackFile as nt, getPluginSlackConversationLink as o, isConversationScopedChannel as ot, coreTaskRegistrations as p, JUNIOR_THREAD_STATE_TTL_MS as pt, takeDueTimerWatches as q, authenticationUnlinkedEvent as qt, createPluginHookRunner as r, getFilePermalink as rt, getPluginSystemPromptContributions as s, isDmChannel as st, agent_hooks_exports as t, SlackActionError as tt, getPlugins as u, withSlackRetries as ut, getWorkspace as v, createPluginState as vt, invalidateReadySnapshot as w, conversationArchivedForEmail as wt, listWorkspacesByRepository as x, createPluginLogger as xt, getWorkspaceByName as y, createPluginEmbedder as yt, cancelSubscriptions as z, resolveRootVisibility as zt };