@sentry/junior 0.254.0 → 0.255.0

package/dist/{web-input-Dpqh0oBt.js → web-input-Dc1VwcT4.js}

@@ -1,39 +1,39 @@
-import { A as resolveSlackChannelIdFromMessage, B as effectiveTaskOutcomes, Bt as RetryableDeliveryError, C as renderBlockText, D as storeAttachment, Gt as shouldEmitDevAgentTrace, Lt as createUserTokenStore, M as getConversationInfo, N as listThreadReplies, O as parseSlackThreadId, Rt as buildSteeringPiMessage, S as renderAttachmentText, Ut as AuthorizationFlowDisabledError, a as buildAuthPauseResponse, h as latestProgressStatus, j as resolveSlackChannelIdFromThreadId, k as readSlackRawMessageContext, m as PluginCredentialFailureError, n as executeAgentRun, r as createContextCompactor, t as createAgentRunner, z as eventAutomationTriggerAvailable, zt as withoutSavedSteeringMessages } from "./agent-runner-BWmnJ0dD.js";
-import { f as escapeXml, i as completeText, r as completeObject, v as isProviderRetryError } from "./client-oBgOmQV6.js";
-import { C as withLogContext, I as isRecord, L as toOptionalNumber, R as toOptionalString, _ as setSentryUser, b as setTags, d as logException, f as logInfo, n as createChatSdkLogger, o as getActiveTraceId, p as logWarn, t as buildTurnFailureResponse, u as logError, v as setSpanAttributes, w as withSpan } from "./logging-B3nJLXT7.js";
-import { c as getSlackClientSecret, i as getChatConfig, l as getSlackSigningSecret, n as botConfig, o as getSlackBotToken, s as getSlackClientId, v as normalizeSlackEmojiName } from "./config-CRlLncIj.js";
+import { A as resolveSlackChannelIdFromMessage, B as effectiveTaskOutcomes, Bt as RetryableDeliveryError, C as renderBlockText, D as storeAttachment, Gt as shouldEmitDevAgentTrace, Lt as createUserTokenStore, M as getConversationInfo, N as listThreadReplies, O as parseSlackThreadId, Rt as buildSteeringPiMessage, S as renderAttachmentText, Ut as AuthorizationFlowDisabledError, a as buildAuthPauseResponse, h as latestProgressStatus, j as resolveSlackChannelIdFromThreadId, k as readSlackRawMessageContext, m as PluginCredentialFailureError, n as executeAgentRun, r as createContextCompactor, t as createAgentRunner, z as eventAutomationTriggerAvailable, zt as withoutSavedSteeringMessages } from "./agent-runner-Caiof09f.js";
+import { f as escapeXml, i as completeText, r as completeObject, v as isProviderRetryError } from "./client-Clj7onnT.js";
+import { C as withLogContext, I as isRecord, L as toOptionalNumber, R as toOptionalString, _ as setSentryUser, b as setTags, d as logException, f as logInfo, n as createChatSdkLogger, o as getActiveTraceId, p as logWarn, t as buildTurnFailureResponse, u as logError, v as setSpanAttributes, w as withSpan } from "./logging-D3aYP0aG.js";
+import { c as getSlackClientSecret, i as getChatConfig, l as getSlackSigningSecret, n as botConfig, o as getSlackBotToken, s as getSlackClientId, v as normalizeSlackEmojiName } from "./config-BDAfLTI9.js";
 import { o as modelIdForProfile, r as defaultModelId } from "./model-profile-BwU8mqwD.js";
 import { a as isUserActor, g as parseSlackMessageTs, i as isActorUserId, l as parseSlackChannelId, n as createSlackActor, o as parseActorUserId, r as createSlackResumeActor, t as createActor } from "./actor-BTtLaeWy.js";
-import { M as createSlackDestination, P as requireSlackDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, u as getConversationStore } from "./viewer-CGZiUVMU.js";
+import { M as createSlackDestination, P as requireSlackDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, u as getConversationStore } from "./viewer-Rnim7alE.js";
 import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers } from "./agent-invocations-BY60iNw-.js";
-import { o as juniorAutomationRuns, s as juniorAutomations } from "./executor-B88oEqok.js";
+import { o as juniorAutomationRuns, s as juniorAutomations } from "./executor-Dh4Ofsnx.js";
 import { p as instructionProvenanceFor } from "./history-9pO1Zd4Y.js";
-import { d as credentialContextForActor } from "./registry-C-jns0Be.js";
-import { $ as listTurnSummaries, $t as appendThreadContextMessages, At as loadProjection, D as sameDefinitionValue, Et as commitMessages, Gt as hydrateConversationMessages, H as removeReactionFromMessage, I as truncateStatusText, J as saveTurnCheckpoint, Jt as persistConversationMessageSummaries, Kt as persistConversationMessages, L as addReactionToMessage, Lt as recordAuthorizationCompleted, M as formatSlackLink, N as normalizeSlackReplyMarkdown, Ot as loadConversationProjection, P as normalizeSlackStatusText, Q as getTurnRecord, St as trimTrailingAssistantMessages, T as listAutomationVersions, Tt as commitAcceptedReply, V as postSlackMessage, Vt as recordSubscribedReplyRoute, X as completeTurnRecord, Y as abandonTurnRecord, Yt as resolveConversationTitle, Z as failTurnRecord, Zt as fallbackShortTitle, _ as listDeletedEventAutomationsCreatedBy, a as readScheduledAutomation, an as markConversationMessage, cn as turnHasReply, en as buildConversationContext, et as recordTurnSummary, g as getEventAutomation, i as parseScheduledAutomationRow, in as isHumanConversationMessage, j as escapeSlackMrkdwnText, l as withScheduledAutomationLock, ln as upsertConversationMessage, m as eventAutomationBelongsToUser, nn as estimateConversationContextTokens, on as normalizeConversationText, ot as buildTurnErrorResponse, p as deleteEventAutomation, q as loadTurnCheckpoint, rn as getConversationMessageSlackTs, s as saveScheduledAutomationInLock, sn as recordDeliveredAssistantMessage, tn as createConversationMemoryService, tt as persistWithRetry, w as automationDefinition, y as parseEventAutomationRow } from "./tasks-DO9VM9cu.js";
-import { Et as getSlackFileId, Gt as normalizeSlackConversationId, Ht as getSlackClient, Kt as runWithSlackInstallationToken, Lt as lookupSlackUser, Ot as readAttachmentVisionSummary, Rt as SlackActionError, Tt as buildSentryConversationUrl, V as cancelSubscriptions, Vt as getHeaderString, Wt as isDmChannel, at as getDashboardConversationLink, it as JUNIOR_THREAD_STATE_TTL_MS, kt as recordSlackAttachment, o as getPluginSlackConversationLink, ot as getDashboardObjectIconLink, rt as verifyTimerWatchCredentialSubject, zt as downloadPrivateSlackFile } from "./agent-hooks-DfPubHYm.js";
+import { d as credentialContextForActor } from "./registry-CmKmKHpp.js";
+import { $ as persistWithRetry, $t as createConversationMemoryService, A as formatSlackLink, B as removeReactionFromMessage, C as listAutomationVersions, Ct as commitAcceptedReply, Et as loadConversationProjection, F as addReactionToMessage, Ft as recordAuthorizationCompleted, G as loadTurnCheckpoint, J as completeTurnRecord, K as saveTurnCheckpoint, Kt as persistConversationMessageSummaries, M as normalizeSlackStatusText, Ot as loadProjection, P as truncateStatusText, Q as recordTurnSummary, Qt as buildConversationContext, S as automationDefinition, T as sameDefinitionValue, Ut as hydrateConversationMessages, Wt as persistConversationMessages, X as getTurnRecord, Y as failTurnRecord, Yt as fallbackShortTitle, Z as listTurnSummaries, Zt as appendThreadContextMessages, _ as parseEventAutomationRow, an as recordDeliveredAssistantMessage, bt as trimTrailingAssistantMessages, c as withScheduledAutomationLock, en as estimateConversationContextTokens, f as deleteEventAutomation, h as listDeletedEventAutomationsCreatedBy, i as readScheduledAutomation, in as normalizeConversationText, it as buildTurnErrorResponse, j as normalizeSlackReplyMarkdown, k as escapeSlackMrkdwnText, nn as isHumanConversationMessage, o as saveScheduledAutomationInLock, on as turnHasReply, q as abandonTurnRecord, qt as resolveConversationTitle, r as parseScheduledAutomationRow, rn as markConversationMessage, sn as upsertConversationMessage, tn as getConversationMessageSlackTs, wt as commitMessages, z as postSlackMessage, zt as recordSubscribedReplyRoute } from "./tasks-dJooqiip.js";
+import { Et as getSlackFileId, Gt as normalizeSlackConversationId, Ht as getSlackClient, Kt as runWithSlackInstallationToken, Lt as lookupSlackUser, Ot as readAttachmentVisionSummary, Rt as SlackActionError, Tt as buildSentryConversationUrl, V as cancelSubscriptions, Vt as getHeaderString, Wt as isDmChannel, at as getDashboardConversationLink, it as JUNIOR_THREAD_STATE_TTL_MS, kt as recordSlackAttachment, o as getPluginSlackConversationLink, ot as getDashboardObjectIconLink, rt as verifyTimerWatchCredentialSubject, zt as downloadPrivateSlackFile } from "./agent-hooks-CDVx26Uu.js";
 import { F as readMessageAttachments, R as isVisionImageMediaType } from "./conversation-T18Xlkx9.js";
-import { E as acquireActiveLock, O as withLock, T as MUTATION_LOCK_TTL_MS, w as getStateAdapter } from "./profile-Dh73O6lZ.js";
-import { a as wasPendingAuthStopped, c as getThreadStopDecision, l as buildDeterministicAssistantMessageId, o as decideSubscribedThreadReply, r as clearPendingAuth, s as getSubscribedReplyPreflightDecision, u as buildDeterministicTurnId } from "./pending-auth-m8aJlwP_.js";
+import { E as acquireActiveLock, O as withLock, T as MUTATION_LOCK_TTL_MS, w as getStateAdapter } from "./profile-DnkX3e2S.js";
+import { a as wasPendingAuthStopped, c as getThreadStopDecision, l as buildDeterministicAssistantMessageId, o as decideSubscribedThreadReply, r as clearPendingAuth, s as getSubscribedReplyPreflightDecision, u as buildDeterministicTurnId } from "./pending-auth-D2t1Moxf.js";
 import { a as TurnInputDeferredError, c as isTurnInputCommitLostError, d as markTurnCompleted, f as markTurnFailed, i as TurnInputCommitLostError, l as isTurnInputDeferredError, n as ConversationTurnBoundaryError, o as getConversationTurnBoundaryError, p as startActiveTurn, r as CooperativeTurnYieldError, s as isCooperativeTurnYieldError, u as markTurnClosed } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-B3J6ogAM.js";
-import { A as recordFinishedTurnForAutomatedLimit, F as finishedRunReply, P as deliversFinalText, R as runDispatchOutcome, c as timerWatchCredentialSubject, i as skipInputBeforeConversationStop, k as maybePostAutomatedTurnLimitNotice, l as getEventCatalog, s as isEventMailboxMetadata, v as automationEventCatalog } from "./session-stop-DenN1GuJ.js";
+import { n as getAssistantReplyText } from "./assistant-reply-BddmM66R.js";
+import { A as recordFinishedTurnForAutomatedLimit, F as finishedRunReply, P as deliversFinalText, R as runDispatchOutcome, c as timerWatchCredentialSubject, i as skipInputBeforeConversationStop, k as maybePostAutomatedTurnLimitNotice, l as getEventCatalog, s as isEventMailboxMetadata, v as automationEventCatalog } from "./session-stop-BEBfE97J.js";
 import { a as EVENT_SYSTEM_ACTOR, o as isEventConversationMessage } from "./prompt-C04mP1hu.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline } from "./job-queue-B6KaQXY6.js";
-import { E as stopConversationWork, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage, w as requestConversationWork } from "./store-CIs0Tr31.js";
-import { l as automationListQuerySchema } from "./automation-gznOMaQ2.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline } from "./job-queue-BaCL36FY.js";
+import { E as stopConversationWork, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage, w as requestConversationWork } from "./store-BashBewg.js";
+import { l as automationListQuerySchema } from "./automation-CHdlHVZP.js";
 import { r as isExperimentalFeatureEnabled } from "./experimental-Qn9rKLgx.js";
 import { c as sumUtcHoursIntoSixHours, m as healthReportSchema, t as webMessageId } from "./web-message-id-xPI_EFSC.js";
-import { A as readAutomationRuns, C as readAutomationExecutionByConversationId, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, O as readAutomationExecutionSummaries, T as readAutomationExecutionHours, _ as markDispatchCompleted, a as confirmDispatchMailboxAppend, c as getDispatchIdForConversation, d as getDispatchTurnId, g as markDispatchBlocked, h as markDispatchAwaitingResume, i as claimDispatchMailboxAppend, k as readAutomationExecutions, l as getDispatchInputMessageId, n as scheduleSessionCompletedPluginTasks, p as isTerminalDispatchStatus, s as getDispatchConversationId, t as processPluginTask, u as getDispatchRecord, v as markDispatchFailed, w as readAutomationExecutionDays, x as emptyAutomationRunWindows, y as markDispatchRunning } from "./task-runner-BE6Jgt2u.js";
-import { a as withAgentInvocationResultActors, c as resolveMailboxTurnWork, f as joinMailboxText, i as startAgentInvocationsForChildInput, l as sourceFromTurnInput, o as getAuthPausedConversationTurnId, s as getEventBatchDelayMs, t as enqueueAgentInvocationResult, u as turnInputFactsFromConversationMessage } from "./result-sih-x_yN.js";
-import { n as getTurnLifecycle, t as ConversationTurnLifecycleService } from "./turn-lifecycle-BXclEcfZ.js";
-import { i as resolveAgentInvocationId, o as AgentRunError, s as executeTurn, t as createAgentInvocationWorker } from "./work-DbA9xNO1.js";
-import { a as persistThreadState, c as configValueSchema, i as persistThreadRuntimeState, n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState, t as getLocationConfigurationService } from "./thread-state-FreaCOZD.js";
-import { c as deleteWebAuthorization, d as getPausedTurnRequest, m as getTurnAuthorization, p as wakePausedTurn, s as createWebAuthorization, u as createPausedTurns } from "./connections-BZAuDnYm.js";
-import { n as resolveTurnSessionRouting } from "./turn-session-routing-CItfUsjQ.js";
-import { t as bindMessageAgent } from "./message-C9Wx3Rxx.js";
-import { t as bindSpawnAgent } from "./spawn-CcWYt3Tl.js";
-import { a as persistAuthPauseTurnState, c as getTurnUserSlackMessageTs, d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, n as getAgentTurnDiagnosticsAttributes, o as getTurnUserMessage, r as requireTurnFailureEventId, s as getTurnUserReplyAttachmentContext, t as finalizeFailedTurnReplyWithEvent, u as getInterruptionMarker } from "./turn-failure-response-CJSt2ZSf.js";
-import { r as storeInputImages } from "./images-k8HewSp_.js";
+import { A as readAutomationRuns, C as readAutomationExecutionByConversationId, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, O as readAutomationExecutionSummaries, T as readAutomationExecutionHours, _ as markDispatchCompleted, a as confirmDispatchMailboxAppend, c as getDispatchIdForConversation, d as getDispatchTurnId, g as markDispatchBlocked, h as markDispatchAwaitingResume, i as claimDispatchMailboxAppend, k as readAutomationExecutions, l as getDispatchInputMessageId, n as scheduleSessionCompletedPluginTasks, p as isTerminalDispatchStatus, s as getDispatchConversationId, t as processPluginTask, u as getDispatchRecord, v as markDispatchFailed, w as readAutomationExecutionDays, x as emptyAutomationRunWindows, y as markDispatchRunning } from "./task-runner-D2CpD6GN.js";
+import { a as withAgentInvocationResultActors, c as resolveMailboxTurnWork, f as joinMailboxText, i as startAgentInvocationsForChildInput, l as sourceFromTurnInput, o as getAuthPausedConversationTurnId, s as getEventBatchDelayMs, t as enqueueAgentInvocationResult, u as turnInputFactsFromConversationMessage } from "./result-Df5nEDX2.js";
+import { n as getTurnLifecycle, t as ConversationTurnLifecycleService } from "./turn-lifecycle-BfodfmiY.js";
+import { i as resolveAgentInvocationId, o as AgentRunError, s as executeTurn, t as createAgentInvocationWorker } from "./work-BAn43SsN.js";
+import { a as persistThreadState, c as configValueSchema, i as persistThreadRuntimeState, n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState, t as getLocationConfigurationService } from "./thread-state-CsMC-ob0.js";
+import { c as deleteWebAuthorization, d as getPausedTurnRequest, m as getTurnAuthorization, p as wakePausedTurn, s as createWebAuthorization, u as createPausedTurns } from "./connections-BC0RTejT.js";
+import { n as resolveTurnSessionRouting } from "./turn-session-routing-BAh_qsBJ.js";
+import { t as bindMessageAgent } from "./message-B9xqD2BP.js";
+import { t as bindSpawnAgent } from "./spawn-OgTwBUj0.js";
+import { a as persistAuthPauseTurnState, c as getTurnUserSlackMessageTs, d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, n as getAgentTurnDiagnosticsAttributes, o as getTurnUserMessage, r as requireTurnFailureEventId, s as getTurnUserReplyAttachmentContext, t as finalizeFailedTurnReplyWithEvent, u as getInterruptionMarker } from "./turn-failure-response-zB364t7_.js";
+import { r as storeInputImages } from "./images-C-WOnTc_.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, desc, eq, exists, inArray, ne, or, sql } from "drizzle-orm";
@@ -2738,12 +2738,11 @@ function recordSkippedConversationMessage(args) {
 */
 function viewerAutomationCollection(user) {
 	const db = getDb();
-	const identities = user.identities.filter((identity) => identity.provider === "slack");
-	const teamIds = identities.flatMap((identity) => identity.providerTenantId ? [identity.providerTenantId] : []);
+	const teamIds = user.identities.filter((identity) => identity.provider === "slack").flatMap((identity) => identity.providerTenantId ? [identity.providerTenantId] : []);
 	const automation = juniorAutomations;
 	const destination = juniorDestinations;
 	const isScheduled = eq(automation.kind, "scheduled");
-	const owned = or(and(isScheduled, inArray(automation.creatorIdentityId, user.identities.map((identity) => identity.id))), ...identities.map((identity) => and(eq(automation.kind, "event"), eq(automation.teamId, identity.providerTenantId ?? ""), eq(automation.creatorSlackUserId, identity.providerSubjectId)))) ?? sql`false`;
+	const owned = inArray(automation.creatorIdentityId, user.identities.map((identity) => identity.id));
 	const publicDestination = sql`coalesce(${destination.visibility} = 'public', false)`;
 	const publicToViewer = and(inArray(automation.teamId, teamIds), publicDestination, ne(automation.status, "completed"));
 	const available = or(isScheduled, ...Object.entries(automationEventCatalog(getEventCatalog())).map(([namespace, registration]) => {
@@ -2801,7 +2800,7 @@ async function readAutomationCollection(user, input) {
 		rows: await db.select({
 			id: collection.id,
 			kind: collection.kind
-		}).from(collection).where(where).orderBy(order, desc(collection.id), asc(collection.kind)).limit(input.pageSize).offset((page - 1) * input.pageSize),
+		}).from(collection).where(where).orderBy(order, desc(collection.id)).limit(input.pageSize).offset((page - 1) * input.pageSize),
 		total,
 		page,
 		pageSize: input.pageSize,
@@ -2810,12 +2809,17 @@ async function readAutomationCollection(user, input) {
 		destinations
 	};
 }
-z.object({
-	createdAtMs: z.number().finite(),
-	id: z.string().min(1),
-	query: z.string().max(200).optional(),
-	version: z.literal(1)
-}).strict();
+//#endregion
+//#region src/chat/automations/creator.ts
+/**
+* Return whether the user created the Automation. Both kinds store the
+* creating Junior identity, so one rule decides ownership.
+*/
+function isAutomationCreator(user, automation) {
+	return user.identities.some((identity) => identity.id === automation.creatorIdentityId);
+}
+//#endregion
+//#region src/chat/scheduled-automations/personal.ts
 var PersonalScheduledAutomationNotFoundError = class extends Error {
 	constructor() {
 		super("Scheduled automation was not found.");
@@ -2825,9 +2829,8 @@ var PersonalScheduledAutomationNotFoundError = class extends Error {
 /** Delete one scheduled automation created by the viewer. */
 async function deleteViewerScheduledAutomation(db, user, id, nowMs = Date.now()) {
 	await withScheduledAutomationLock(db, id, async (tx) => {
-		const identityIds = new Set(user.identities.map((identity) => identity.id));
 		const task = await readScheduledAutomation(tx, id);
-		if (!task || task.status === "deleted" || !identityIds.has(task.creatorIdentityId)) throw new PersonalScheduledAutomationNotFoundError();
+		if (!task || task.status === "deleted" || !isAutomationCreator(user, task)) throw new PersonalScheduledAutomationNotFoundError();
 		await saveScheduledAutomationInLock(tx, {
 			...task,
 			nextRunAtMs: void 0,
@@ -2972,38 +2975,35 @@ function viewerTeamIds(user) {
 	return [...new Set(user.identities.filter((identity) => identity.provider === "slack").map((identity) => identity.providerTenantId).filter((teamId) => Boolean(teamId)))];
 }
 /** Resolve an Automation the viewer owns or can read through a public Destination. */
-async function resolveViewerTaskCandidate(user, kind, id) {
-	const db = getDb();
-	const identityIds = new Set(user.identities.map((identity) => identity.id));
-	const teamIds = viewerTeamIds(user);
-	if (kind === "scheduled") {
-		const task = await readScheduledAutomation(db, id);
-		if (!task || task.status === "deleted") return void 0;
-		const ownedByViewer = identityIds.has(task.creatorIdentityId);
-		const destination = (await destinationDetails([task.destination])).get(destinationKey(task.destination));
-		const publicToViewer = teamIds.includes(task.destination.teamId) && destination?.visibility === "public";
-		if (!ownedByViewer && !publicToViewer) return void 0;
-		return {
+async function resolveViewerTaskCandidate(user, id) {
+	const [row] = await getDb().select().from(juniorAutomations).where(eq(juniorAutomations.id, id)).limit(1);
+	if (!row) return void 0;
+	let candidate;
+	if (row.kind === "scheduled") {
+		const task = parseScheduledAutomationRow(row);
+		if (!task) return void 0;
+		candidate = {
 			kind: "scheduled",
-			ownedByViewer,
+			ownedByViewer: isAutomationCreator(user, task),
+			task
+		};
+	} else {
+		const task = parseEventAutomationRow(row);
+		candidate = {
+			kind: "event",
+			ownedByViewer: isAutomationCreator(user, task),
 			task
 		};
 	}
-	const task = await getEventAutomation(db, id);
-	if (!task || task.status === "deleted") return void 0;
-	const ownedByViewer = eventAutomationBelongsToUser(task, user);
+	const { task } = candidate;
+	if (task.status === "deleted") return void 0;
+	if (candidate.ownedByViewer) return candidate;
 	const destination = (await destinationDetails([task.destination])).get(destinationKey(task.destination));
-	const publicToViewer = teamIds.includes(task.destination.teamId) && destination?.visibility === "public";
-	if (!ownedByViewer && !publicToViewer) return void 0;
-	return {
-		kind: "event",
-		ownedByViewer,
-		task
-	};
+	return viewerTeamIds(user).includes(task.destination.teamId) && destination?.visibility === "public" ? candidate : void 0;
 }
 /** Read one current Automation summary with the Automations view access rules. */
 async function readViewerAutomationSummary(user, id) {
-	const candidate = await resolveViewerTaskCandidate(user, "scheduled", id) ?? await resolveViewerTaskCandidate(user, "event", id);
+	const candidate = await resolveViewerTaskCandidate(user, id);
 	if (!candidate) return void 0;
 	return automationSummaryForCandidate(candidate);
 }
@@ -3057,7 +3057,6 @@ async function readViewerAutomations(user, input = automationListQuerySchema.par
 	const db = getDb();
 	const ids = rows.map((row) => row.id);
 	const stored = ids.length ? await db.select().from(juniorAutomations).where(inArray(juniorAutomations.id, ids)) : [];
-	const identityIds = new Set(user.identities.map((identity) => identity.id));
 	const candidates = /* @__PURE__ */ new Map();
 	for (const row of stored) {
 		if (row.kind === "scheduled") {
@@ -3065,7 +3064,7 @@ async function readViewerAutomations(user, input = automationListQuerySchema.par
 			if (task && task.status !== "deleted") candidates.set(task.id, {
 				kind: "scheduled",
 				task,
-				ownedByViewer: identityIds.has(task.creatorIdentityId)
+				ownedByViewer: isAutomationCreator(user, task)
 			});
 			continue;
 		}
@@ -3073,7 +3072,7 @@ async function readViewerAutomations(user, input = automationListQuerySchema.par
 		if (task.status !== "deleted") candidates.set(task.id, {
 			kind: "event",
 			task,
-			ownedByViewer: eventAutomationBelongsToUser(task, user)
+			ownedByViewer: isAutomationCreator(user, task)
 		});
 	}
 	const selected = rows.flatMap((row) => {
@@ -3183,8 +3182,8 @@ var ViewerTaskNotFoundError = class extends Error {
 	}
 };
 /** Read one viewer-visible task and its newest terminal executions. */
-async function readViewerAutomationExecutions(user, kind, id) {
-	const candidate = await resolveViewerTaskCandidate(user, kind, id);
+async function readViewerAutomationExecutions(user, id) {
+	const candidate = await resolveViewerTaskCandidate(user, id);
 	if (!candidate) throw new ViewerTaskNotFoundError();
 	const [automation, executions, executionDays, executionHours] = await Promise.all([
 		automationSummaryForCandidate(candidate),
@@ -3205,8 +3204,8 @@ async function readViewerAutomationExecutions(user, kind, id) {
 	};
 }
 /** Read saved definitions for one viewer-visible Automation, newest first. */
-async function readViewerAutomationVersions(user, kind, id) {
-	const candidate = await resolveViewerTaskCandidate(user, kind, id);
+async function readViewerAutomationVersions(user, id) {
+	const candidate = await resolveViewerTaskCandidate(user, id);
 	if (!candidate) throw new ViewerTaskNotFoundError();
 	const versions = await listAutomationVersions(getDb(), id, 101);
 	const current = automationDefinition(candidate.task);
@@ -3247,7 +3246,7 @@ async function readConversationSourceTask(args) {
 		...dispatchId ? { triggerMessageId: getDispatchInputMessageId(dispatchId) } : void 0
 	};
 	if (!args.viewer) return base;
-	const candidate = await resolveViewerTaskCandidate(args.viewer, execution.kind, execution.automationId);
+	const candidate = await resolveViewerTaskCandidate(args.viewer, execution.automationId);
 	if (!candidate) return base;
 	const credential = await readRunCredential(dispatchId, candidate.task.createdBy);
 	if (candidate.kind === "scheduled") {
@@ -3276,16 +3275,16 @@ async function readConversationSourceTask(args) {
 	};
 }
 /** Delete one viewer-owned scheduled or event automation. */
-async function deleteViewerTask(user, kind, id) {
-	if (kind === "scheduled") try {
+async function deleteViewerTask(user, id) {
+	const candidate = await resolveViewerTaskCandidate(user, id);
+	if (!candidate?.ownedByViewer) throw new ViewerTaskNotFoundError();
+	if (candidate.kind === "scheduled") try {
 		await deleteViewerScheduledAutomation(getDb(), user, id);
 		return;
 	} catch (error) {
 		if (error instanceof PersonalScheduledAutomationNotFoundError) throw new ViewerTaskNotFoundError();
 		throw error;
 	}
-	const task = await getEventAutomation(getDb(), id);
-	if (!task || task.status === "deleted" || !eventAutomationBelongsToUser(task, user)) throw new ViewerTaskNotFoundError();
 	await deleteEventAutomation(getDb(), id);
 }
 //#endregion

package/dist/{work-DbA9xNO1.js → work-BAn43SsN.js}

@@ -1,15 +1,15 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { $ as getAgentInvocation, G as recordSubagentStarted, H as stopChildAgentsOf, J as createAgentInvocation, Q as getActiveAgentInvocationForConversation, Rt as buildSteeringPiMessage, Ut as AuthorizationFlowDisabledError, W as recordSubagentEnded, Wt as readBlockedReport, at as getAgentInvocationTurnId, ct as isTerminalAgentInvocation, dt as markAgentInvocationMailboxAppended, gt as reportReplacedAgentInvocation, ht as markAgentInvocationSteered, m as PluginCredentialFailureError, mt as markAgentInvocationRunning, pt as markAgentInvocationPaused, q as completeAgentInvocation, rt as getAgentInvocationMessageId, st as getLatestAgentInvocationForConversation, zt as withoutSavedSteeringMessages } from "./agent-runner-BWmnJ0dD.js";
-import { n as botConfig } from "./config-CRlLncIj.js";
-import { c as getConversationEventStore, u as getConversationStore } from "./viewer-CGZiUVMU.js";
+import { $ as getAgentInvocation, G as recordSubagentStarted, H as stopChildAgentsOf, J as createAgentInvocation, Q as getActiveAgentInvocationForConversation, Rt as buildSteeringPiMessage, Ut as AuthorizationFlowDisabledError, W as recordSubagentEnded, Wt as readBlockedReport, at as getAgentInvocationTurnId, ct as isTerminalAgentInvocation, dt as markAgentInvocationMailboxAppended, gt as reportReplacedAgentInvocation, ht as markAgentInvocationSteered, m as PluginCredentialFailureError, mt as markAgentInvocationRunning, pt as markAgentInvocationPaused, q as completeAgentInvocation, rt as getAgentInvocationMessageId, st as getLatestAgentInvocationForConversation, zt as withoutSavedSteeringMessages } from "./agent-runner-Caiof09f.js";
+import { n as botConfig } from "./config-BDAfLTI9.js";
+import { c as getConversationEventStore, u as getConversationStore } from "./viewer-Rnim7alE.js";
 import { m as sameActorIdentity, u as agentInstructionProvenance } from "./history-9pO1Zd4Y.js";
-import { J as saveTurnCheckpoint, Nt as openConversationProjection, Q as getTurnRecord, Y as abandonTurnRecord, Z as failTurnRecord, ct as isTurnExecutionLimitExceededError, dt as getTerminalAssistantMessages } from "./tasks-DO9VM9cu.js";
+import { K as saveTurnCheckpoint, X as getTurnRecord, Y as failTurnRecord, jt as openConversationProjection, lt as getTerminalAssistantMessages, ot as isTurnExecutionLimitExceededError, q as abandonTurnRecord } from "./tasks-dJooqiip.js";
 import { c as isTurnInputCommitLostError, i as TurnInputCommitLostError, o as getConversationTurnBoundaryError } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-B3J6ogAM.js";
-import { A as recordFinishedTurnForAutomatedLimit, j as resetAutomatedTurnLimit, k as maybePostAutomatedTurnLimitNotice } from "./session-stop-DenN1GuJ.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-CIs0Tr31.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BXclEcfZ.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-FreaCOZD.js";
+import { n as getAssistantReplyText } from "./assistant-reply-BddmM66R.js";
+import { A as recordFinishedTurnForAutomatedLimit, j as resetAutomatedTurnLimit, k as maybePostAutomatedTurnLimitNotice } from "./session-stop-BEBfE97J.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-BashBewg.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BfodfmiY.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-CsMC-ob0.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
 //#region src/chat/runtime/turn-execution.ts

package/dist/{worker-DuCs9-3G.js → worker-mBXq4_zg.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { v as isProviderRetryError } from "./client-oBgOmQV6.js";
-import { C as withLogContext, d as logException, f as logInfo, p as logWarn } from "./logging-B3nJLXT7.js";
-import { i as getChatConfig } from "./config-CRlLncIj.js";
-import { f as getTurnRequestDeadline, m as ConversationQueueMessageRejectedError } from "./job-queue-B6KaQXY6.js";
-import { C as requestAnotherSlice, M as isInvalidConversationRecordError, T as startConversationWork, b as recordConversationRetry, d as countPendingConversationMessages, f as deadLetterAttempt, g as getConversationWorkState, i as beginConversationResume, j as isFinalAttempt, k as hasConversationStop, l as completeConversationStop, m as ensureConversationWake, o as checkInConversationWork, p as drainConversationMailbox, s as clearConsumedConversationWake, t as ackMessages, u as completeConversationWork, x as releaseConversationWork, y as recordAttemptFailure } from "./store-CIs0Tr31.js";
+import { v as isProviderRetryError } from "./client-Clj7onnT.js";
+import { C as withLogContext, d as logException, f as logInfo, p as logWarn } from "./logging-D3aYP0aG.js";
+import { i as getChatConfig } from "./config-BDAfLTI9.js";
+import { f as getTurnRequestDeadline, m as ConversationQueueMessageRejectedError } from "./job-queue-BaCL36FY.js";
+import { C as requestAnotherSlice, M as isInvalidConversationRecordError, T as startConversationWork, b as recordConversationRetry, d as countPendingConversationMessages, f as deadLetterAttempt, g as getConversationWorkState, i as beginConversationResume, j as isFinalAttempt, k as hasConversationStop, l as completeConversationStop, m as ensureConversationWake, o as checkInConversationWork, p as drainConversationMailbox, s as clearConsumedConversationWake, t as ackMessages, u as completeConversationWork, x as releaseConversationWork, y as recordAttemptFailure } from "./store-BashBewg.js";
 //#region src/chat/task-execution/worker.ts
 var worker_exports = /* @__PURE__ */ __exportAll({
 	CONVERSATION_WORK_DEFER_DELAY_MS: () => CONVERSATION_WORK_DEFER_DELAY_MS,

package/migrations/0058_automation_creator_identity.sql

@@ -0,0 +1,45 @@
+-- Bind every Automation to the Junior identity that created it. Event rows
+-- did not store an identity before. Use the Slack identity of the stored
+-- creator, and add it when Junior has not seen that Slack user yet. A stored
+-- identity ID that has no identity row is replaced the same way, so the
+-- foreign key can be added.
+UPDATE "junior_automations" AS automation
+SET "creator_identity_id" = NULL
+WHERE automation."creator_identity_id" IS NOT NULL
+	AND NOT EXISTS (
+		SELECT 1 FROM "junior_identities" AS identity
+		WHERE identity."id" = automation."creator_identity_id"
+	);--> statement-breakpoint
+INSERT INTO "junior_identities" (
+	"id",
+	"kind",
+	"provider",
+	"provider_tenant_id",
+	"provider_subject_id",
+	"created_at",
+	"updated_at"
+)
+SELECT DISTINCT ON (automation."team_id", automation."creator_slack_user_id")
+	'automation-slack-' || md5(automation."team_id" || ':' || automation."creator_slack_user_id"),
+	'user',
+	'slack',
+	automation."team_id",
+	automation."creator_slack_user_id",
+	to_timestamp(automation."created_at_ms" / 1000.0),
+	CURRENT_TIMESTAMP
+FROM "junior_automations" AS automation
+WHERE automation."creator_identity_id" IS NULL
+ORDER BY automation."team_id", automation."creator_slack_user_id", automation."created_at_ms"
+ON CONFLICT DO NOTHING;--> statement-breakpoint
+UPDATE "junior_automations" AS automation
+SET "creator_identity_id" = identity."id"
+FROM "junior_identities" AS identity
+WHERE automation."creator_identity_id" IS NULL
+	AND identity."provider" = 'slack'
+	AND identity."provider_tenant_id" = automation."team_id"
+	AND identity."provider_subject_id" = automation."creator_slack_user_id";--> statement-breakpoint
+DROP INDEX "junior_automations_creator_idx";--> statement-breakpoint
+DROP INDEX "junior_automations_creator_identity_idx";--> statement-breakpoint
+ALTER TABLE "junior_automations" ALTER COLUMN "creator_identity_id" SET NOT NULL;--> statement-breakpoint
+ALTER TABLE "junior_automations" ADD CONSTRAINT "junior_automations_creator_identity_id_junior_identities_id_fk" FOREIGN KEY ("creator_identity_id") REFERENCES "public"."junior_identities"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+CREATE INDEX "junior_automations_creator_identity_idx" ON "junior_automations" USING btree ("creator_identity_id","created_at_ms","id");