@sentry/junior 0.256.0 → 0.257.0

package/dist/{tasks-CODtRzvX.js → tasks-D_WIJtvO.js}

@@ -1,15 +1,15 @@
-import { d as unwrapCurrentInstruction, f as escapeXml, i as completeText, o as resolveGatewayModel } from "./client-BVrAp-pq.js";
-import { d as logException, o as getActiveTraceId, p as logWarn, s as getLogContextAttributes, t as buildTurnFailureResponse, v as setSpanAttributes } from "./logging-tPQeUe2i.js";
+import { d as unwrapCurrentInstruction, f as escapeXml, i as completeText, o as resolveGatewayModel } from "./client-D8HnkOQX.js";
+import { f as logException, m as logWarn, o as getActiveTraceId, s as getLogContextAttributes, t as buildTurnFailureResponse, y as setSpanAttributes } from "./logging-CWxiIuCF.js";
 import { n as captureMessage } from "./sentry-CgWZM_kV.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-DdBiDanf.js";
+import { n as botConfig, v as normalizeSlackEmojiName } from "./config-CJRnWK9H.js";
 import { c as toStoredSlackActor, f as parseSlackUserId, g as parseSlackMessageTs } from "./actor-BTtLaeWy.js";
-import { c as getConversationEventStore, f as getSqlExecutor, m as withConversationEventLock, p as createSqlConversationEventStore, u as getConversationStore, v as startLocationThread, x as addAgentTurnUsage, y as bindProviderConversation } from "./viewer-C-9nFKYr.js";
-import { a as juniorAutomationVersions, o as juniorAutomationRuns, s as juniorAutomations } from "./executor-BroK9oKy.js";
+import { S as bindProviderConversation, b as startLocationThread, d as getConversationStore, h as withConversationEventLock, l as getConversationEventStore, m as createSqlConversationEventStore, p as getSqlExecutor, w as addAgentTurnUsage } from "./viewer-DSZXygMU.js";
+import { a as juniorAutomationRuns, o as juniorAutomationVersions, s as juniorAutomations } from "./executor-Do0THDRR.js";
 import { d as contextProvenance, f as instructionActors, n as agentHistoryItemSchema, p as instructionProvenanceFor } from "./history-9pO1Zd4Y.js";
-import { p as credentialSubjectSchema } from "./registry-CsNavQ_Z.js";
-import { $t as authenticationUnlinkedEvent, Gt as normalizeSlackConversationId, Ht as getSlackClient, Qt as authenticationLinkedEvent, Rt as SlackActionError, Xt as JUNIOR_NATIVE_EVENT_NAMESPACE, Zt as agentsInstructionsUpdatedEvent, n as applyPluginFormatMarkdown, qt as withSlackRetries } from "./agent-hooks-DlSK8PQQ.js";
-import { G as messageCardRef } from "./conversation-T18Xlkx9.js";
-import { D as fenceLock, O as withLock, T as MUTATION_LOCK_TTL_MS, k as sleep, w as getStateAdapter } from "./profile-Bb1zCVGP.js";
+import { h as credentialSubjectSchema } from "./registry-sLTr-sV9.js";
+import { $t as authenticationUnlinkedEvent, Gt as normalizeSlackConversationId, Ht as getSlackClient, Qt as authenticationLinkedEvent, Rt as SlackActionError, Xt as JUNIOR_NATIVE_EVENT_NAMESPACE, Zt as agentsInstructionsUpdatedEvent, n as applyPluginFormatMarkdown, qt as withSlackRetries } from "./agent-hooks-BjtTzvru.js";
+import { G as messageCardRef } from "./conversation-CKNLYBJt.js";
+import { D as fenceLock, O as withLock, T as MUTATION_LOCK_TTL_MS, k as sleep, w as getStateAdapter } from "./profile-h-72wM78.js";
 import { A as eventAutomationSchema, E as scheduledAutomationSchema, S as automationVersionSchema } from "./automation-CHdlHVZP.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
@@ -2869,6 +2869,21 @@ async function recordAutomationVersion(db, task, current, editedBy) {
 		definition
 	});
 }
+/**
+* Select the newest saved version with the same definition as `task`.
+*
+* An Automation run stores this version so that a reader can see the
+* instruction that ran after the definition changes. The value is null when
+* no saved version has this definition.
+*/
+function automationVersionOf(task) {
+	return sql`(
+    SELECT max(${juniorAutomationVersions.version})
+    FROM ${juniorAutomationVersions}
+    WHERE ${juniorAutomationVersions.automationId} = ${task.id}
+      AND ${juniorAutomationVersions.definition} = ${JSON.stringify(automationDefinition(task))}::jsonb
+  )`;
+}
 const versionColumns = {
 	createdAtMs: juniorAutomationVersions.createdAtMs,
 	definition: juniorAutomationVersions.definition,
@@ -3270,4 +3285,4 @@ async function saveScheduledAutomationInLock(db, task, current) {
 	await writeScheduledAutomation(db, requireStoredTask(task), current);
 }
 //#endregion
-export { persistWithRetry as $, createConversationMemoryService as $t, formatSlackLink as A, loadTurnRoute as At, removeReactionFromMessage as B, recordToolExecutionStarted as Bt, listAutomationVersions as C, commitAcceptedReply as Ct, automationRevision as D, loadLastModelProfile as Dt, AutomationConflictError as E, loadConversationProjection as Et, addReactionToMessage as F, recordAuthorizationCompleted as Ft, loadTurnCheckpoint as G, projectConversationMessages as Gt, slackEntitySchema as H, appendConversationMessages as Ht, getSlackMessagePermalink as I, recordAuthorizationRequested as It, completeTurnRecord as J, settleConversationTitleWork as Jt, saveTurnCheckpoint as K, persistConversationMessageSummaries as Kt, openSlackDirectMessage as L, recordGuardianActionReviewed as Lt, normalizeSlackStatusText as M, recordAgentsInstructionsUpdated as Mt, slackMention as N, recordAttachmentsDelivered as Nt, requireAutomationRevision as O, loadProjection as Ot, truncateStatusText as P, recordAuthenticationLinked as Pt, recordTurnSummary as Q, buildConversationContext as Qt, postSlackEphemeralMessage as R, recordMcpProviderConnected as Rt, automationDefinition as S, ToolInputError as St, sameDefinitionValue as T, loadConnectedMcpProviders as Tt, slackExternalRefIdSchema as U, hydrateConversationMessages as Ut, uploadFilesToConversation as V, recordTurnRoute as Vt, continuableMessages as W, persistConversationMessages as Wt, getTurnRecord as X, resolveTaskTitle as Xt, failTurnRecord as Y, fallbackShortTitle as Yt, listTurnSummaries as Z, appendThreadContextMessages as Zt, parseEventAutomationRow as _, normalizeToolNameFromResult as _t, saveScheduledAutomation as a, recordDeliveredAssistantMessage as an, createTurnLimitGate as at, admitEventAutomationRun as b, trimTrailingAssistantMessages as bt, withScheduledAutomationLock as c, estimateTextTokens as cn, getPiMessageRole as ct, createEventAutomation as d, historyItemFromPiMessage as dn, hasRuntimeTurnContext as dt, estimateConversationContextTokens as en, TURN_LIMIT_DISABLED_REASON as et, deleteEventAutomation as f, piMessageFromHistoryItem as fn, instructionTextForProjection as ft, listEventAutomationsForTeam as g, isToolResultMessage as gt, listDeletedEventAutomationsCreatedBy as h, isToolResultError as ht, readScheduledAutomation as i, normalizeConversationText as in, buildTurnErrorResponse as it, normalizeSlackReplyMarkdown as j, openConversationProjection as jt, escapeSlackMrkdwnText as k, loadTurnProjection as kt, blockEventAutomation as l, getAgentContextCompactionTriggerTokens as ln, getTerminalAssistantMessages as lt, getEventAutomation as m, isContinuablePiBoundary as mt, listScheduledAutomationsForTeam as n, isHumanConversationMessage as nn, TurnSliceLimitExceededError as nt, saveScheduledAutomationInLock as o, turnHasReply as on, isTurnExecutionLimitExceededError as ot, findMatchingEventAutomations as p, isAssistantMessage as pt, abandonTurnRecord as q, resolveConversationTitle as qt, parseScheduledAutomationRow as r, markConversationMessage as rn, TurnToolCallLimitExceededError as rt, scheduledRunId as s, upsertConversationMessage as sn, extractAssistantText as st, createScheduledAutomation as t, getConversationMessageSlackTs as tn, TurnBudgetExceededError as tt, collectEventAutomationMatchKeys as u, getAgentContextInputLimitTokens as un, getUserMessageInstructionText as ut, saveEventAutomation as v, retainRuntimeTurnContext as vt, readAutomationVersion as w, commitMessages as wt, eventAutomationRunLimitReason as x, TURN_CONTEXT_TAG as xt, setEventAutomationStatus as y, stripRuntimeTurnContext as yt, postSlackMessage as z, recordSubscribedReplyRoute as zt };
+export { recordTurnSummary as $, buildConversationContext as $t, escapeSlackMrkdwnText as A, loadTurnProjection as At, postSlackMessage as B, recordSubscribedReplyRoute as Bt, automationVersionOf as C, ToolInputError as Ct, AutomationConflictError as D, loadConversationProjection as Dt, sameDefinitionValue as E, loadConnectedMcpProviders as Et, truncateStatusText as F, recordAuthenticationLinked as Ft, continuableMessages as G, persistConversationMessages as Gt, uploadFilesToConversation as H, recordTurnRoute as Ht, addReactionToMessage as I, recordAuthorizationCompleted as It, abandonTurnRecord as J, resolveConversationTitle as Jt, loadTurnCheckpoint as K, projectConversationMessages as Kt, getSlackMessagePermalink as L, recordAuthorizationRequested as Lt, normalizeSlackReplyMarkdown as M, openConversationProjection as Mt, normalizeSlackStatusText as N, recordAgentsInstructionsUpdated as Nt, automationRevision as O, loadLastModelProfile as Ot, slackMention as P, recordAttachmentsDelivered as Pt, listTurnSummaries as Q, appendThreadContextMessages as Qt, openSlackDirectMessage as R, recordGuardianActionReviewed as Rt, automationDefinition as S, TURN_CONTEXT_TAG as St, readAutomationVersion as T, commitMessages as Tt, slackEntitySchema as U, appendConversationMessages as Ut, removeReactionFromMessage as V, recordToolExecutionStarted as Vt, slackExternalRefIdSchema as W, hydrateConversationMessages as Wt, failTurnRecord as X, fallbackShortTitle as Xt, completeTurnRecord as Y, settleConversationTitleWork as Yt, getTurnRecord as Z, resolveTaskTitle as Zt, parseEventAutomationRow as _, isToolResultMessage as _t, saveScheduledAutomation as a, normalizeConversationText as an, buildTurnErrorResponse as at, admitEventAutomationRun as b, stripRuntimeTurnContext as bt, withScheduledAutomationLock as c, upsertConversationMessage as cn, extractAssistantText as ct, createEventAutomation as d, getAgentContextInputLimitTokens as dn, getUserMessageInstructionText as dt, createConversationMemoryService as en, persistWithRetry as et, deleteEventAutomation as f, historyItemFromPiMessage as fn, hasRuntimeTurnContext as ft, listEventAutomationsForTeam as g, isToolResultError as gt, listDeletedEventAutomationsCreatedBy as h, isContinuablePiBoundary as ht, readScheduledAutomation as i, markConversationMessage as in, TurnToolCallLimitExceededError as it, formatSlackLink as j, loadTurnRoute as jt, requireAutomationRevision as k, loadProjection as kt, blockEventAutomation as l, estimateTextTokens as ln, getPiMessageRole as lt, getEventAutomation as m, isAssistantMessage as mt, listScheduledAutomationsForTeam as n, getConversationMessageSlackTs as nn, TurnBudgetExceededError as nt, saveScheduledAutomationInLock as o, recordDeliveredAssistantMessage as on, createTurnLimitGate as ot, findMatchingEventAutomations as p, piMessageFromHistoryItem as pn, instructionTextForProjection as pt, saveTurnCheckpoint as q, persistConversationMessageSummaries as qt, parseScheduledAutomationRow as r, isHumanConversationMessage as rn, TurnSliceLimitExceededError as rt, scheduledRunId as s, turnHasReply as sn, isTurnExecutionLimitExceededError as st, createScheduledAutomation as t, estimateConversationContextTokens as tn, TURN_LIMIT_DISABLED_REASON as tt, collectEventAutomationMatchKeys as u, getAgentContextCompactionTriggerTokens as un, getTerminalAssistantMessages as ut, saveEventAutomation as v, normalizeToolNameFromResult as vt, listAutomationVersions as w, commitAcceptedReply as wt, eventAutomationRunLimitReason as x, trimTrailingAssistantMessages as xt, setEventAutomationStatus as y, retainRuntimeTurnContext as yt, postSlackEphemeralMessage as z, recordMcpProviderConnected as zt };

package/dist/{thread-state-BPkwVmvK.js → thread-state-Ch4yuCqG.js}

@@ -1,10 +1,10 @@
-import { I as isRecord, L as toOptionalNumber, R as toOptionalString } from "./logging-tPQeUe2i.js";
-import { d as getDb } from "./viewer-C-9nFKYr.js";
-import { d as juniorDestinations } from "./agent-invocations-BY60iNw-.js";
-import { l as juniorLocationConfigurations } from "./executor-BroK9oKy.js";
-import { Wt as persistConversationMessages } from "./tasks-CODtRzvX.js";
-import { it as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-DlSK8PQQ.js";
-import { w as getStateAdapter } from "./profile-Bb1zCVGP.js";
+import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-CWxiIuCF.js";
+import { f as getDb } from "./viewer-DSZXygMU.js";
+import { d as juniorDestinations } from "./agent-invocations-Bdu3ROfo.js";
+import { l as juniorLocationConfigurations } from "./executor-Do0THDRR.js";
+import { Gt as persistConversationMessages } from "./tasks-D_WIJtvO.js";
+import { it as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-BjtTzvru.js";
+import { w as getStateAdapter } from "./profile-h-72wM78.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { and, eq, sql } from "drizzle-orm";

package/dist/{turn-failure-response-ChmMeKar.js → turn-failure-response-C5nBKC4S.js}

@@ -1,13 +1,13 @@
-import { _ as getProviderErrorUserMessage, g as getProviderErrorAttributes, h as findProviderError, p as ProviderError } from "./client-BVrAp-pq.js";
-import { I as isRecord, t as buildTurnFailureResponse } from "./logging-tPQeUe2i.js";
+import { _ as getProviderErrorUserMessage, g as getProviderErrorAttributes, h as findProviderError, p as ProviderError } from "./client-D8HnkOQX.js";
+import { t as buildTurnFailureResponse, z as isRecord } from "./logging-CWxiIuCF.js";
 import { g as parseSlackMessageTs } from "./actor-BTtLaeWy.js";
-import { c as getConversationEventStore, d as getDb } from "./viewer-C-9nFKYr.js";
-import { Ut as hydrateConversationMessages, rn as markConversationMessage } from "./tasks-CODtRzvX.js";
-import { Nt as listConversationAnnotations } from "./agent-hooks-DlSK8PQQ.js";
-import { J as removedCardSchema, Y as resolveMessageCards, q as readMessageCardRefs } from "./conversation-T18Xlkx9.js";
-import { r as clearPendingAuth, u as buildDeterministicTurnId } from "./pending-auth-DT3MRVW8.js";
+import { f as getDb, l as getConversationEventStore } from "./viewer-DSZXygMU.js";
+import { Wt as hydrateConversationMessages, in as markConversationMessage } from "./tasks-D_WIJtvO.js";
+import { Nt as listConversationAnnotations } from "./agent-hooks-BjtTzvru.js";
+import { J as removedCardSchema, Y as resolveMessageCards, q as readMessageCardRefs } from "./conversation-CKNLYBJt.js";
+import { r as clearPendingAuth, u as buildDeterministicTurnId } from "./pending-auth-s_QFribU.js";
 import { d as markTurnCompleted, u as markTurnClosed } from "./oauth-authorization-BA4Dt6a7.js";
-import { o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-BPkwVmvK.js";
+import { o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-Ch4yuCqG.js";
 //#region src/chat/conversations/pending-cards.ts
 /** Select undelivered cards and load their latest saved facts. */
 async function loadPendingMessageCards(conversationId) {

package/dist/{turn-lifecycle-BUP7ZOVa.js → turn-lifecycle-CO-ylUmV.js}

@@ -1,4 +1,4 @@
-import { c as getConversationEventStore } from "./viewer-C-9nFKYr.js";
+import { l as getConversationEventStore } from "./viewer-DSZXygMU.js";
 //#region src/chat/conversations/turn-lifecycle.ts
 /** Persist correlated turn lifecycle facts with retry-safe terminal exclusion. */
 var ConversationTurnLifecycleService = class {

package/dist/{turn-session-routing-BcWM3PLm.js → turn-session-routing-B3LWooK5.js}

@@ -34,7 +34,7 @@ function slackSourceForDestination(args) {
 * Reads parent Conversations when this Conversation has no Destination.
 */
 async function resolveConversationRouting(args) {
-	const conversationStore = args.conversationStore ?? (await import("./viewer-C-9nFKYr.js").then((n) => n.s)).getConversationStore();
+	const conversationStore = args.conversationStore ?? (await import("./viewer-DSZXygMU.js").then((n) => n.c)).getConversationStore();
 	const chain = await loadConversationChain(args.conversationId, conversationStore);
 	let destination;
 	let source;

package/dist/{validation-DCd69-cP.js → validation-CXYxaNYx.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-DF5OWqCc.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-CZzhGQ7F.js";
 import { isDeepStrictEqual } from "node:util";
 //#region src/chat/plugins/validation.ts
 var validation_exports = /* @__PURE__ */ __exportAll({

package/dist/{version-DBc4Qt_P.js → version-BcdZy2zg.js}

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.256.0";
+var version = "0.257.0";
 //#endregion
 //#region src/version.ts
 /** Installed Junior package version, or `unknown` when package metadata is unavailable. */

package/dist/version.js

@@ -1,2 +1,2 @@
-import { t as JUNIOR_VERSION } from "./version-DBc4Qt_P.js";
+import { t as JUNIOR_VERSION } from "./version-BcdZy2zg.js";
 export { JUNIOR_VERSION };

package/dist/{viewer-C-9nFKYr.js → viewer-DSZXygMU.js}

@@ -1,13 +1,14 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { F as normalizeIdentityEmail } from "./logging-tPQeUe2i.js";
-import { i as getChatConfig } from "./config-DdBiDanf.js";
+import { I as GOOGLE_IDENTITY_PROVIDER, R as normalizeIdentityEmail } from "./logging-CWxiIuCF.js";
+import { i as getChatConfig } from "./config-CJRnWK9H.js";
 import { d as parseSlackTeamId, o as parseActorUserId, u as parseSlackChannelReferenceId } from "./actor-BTtLaeWy.js";
-import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-BY60iNw-.js";
-import { _ as juniorConversationAnnotations, d as juniorConversationBindings, h as juniorConversationEvents, m as juniorConversationMetrics, p as CONVERSATION_METRICS, t as createJuniorSqlExecutor, u as juniorConversationParticipants } from "./executor-BroK9oKy.js";
+import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-Bdu3ROfo.js";
+import { _ as juniorConversationAnnotations, d as juniorConversationBindings, h as juniorConversationEvents, m as juniorConversationMetrics, p as CONVERSATION_METRICS, t as createJuniorSqlExecutor, u as juniorConversationParticipants } from "./executor-Do0THDRR.js";
 import { c as newConversationEventSchema, h as usageSchema, l as encodeHistoryPayload, o as decodeStoredConversationEvent, r as conversationEventDataSchema, s as historyReplacementSchema } from "./history-9pO1Zd4Y.js";
 import { randomUUID } from "node:crypto";
 import { and, asc, desc, eq, gt, gte, inArray, isNull, lt, lte, ne, or, sql } from "drizzle-orm";
 import { destinationSchema, identitySchema, locationSchema, sourceSchema, userSchema } from "@sentry/junior-plugin-api";
+import { alias } from "drizzle-orm/pg-core";
 //#region src/chat/destination.ts
 /** Build Junior's canonical destination from Slack workspace and channel ids. */
 function createSlackDestination(input) {
@@ -39,6 +40,7 @@ function sameDestination(left, right) {
 }
 //#endregion
 //#region src/chat/identities/sql.ts
+const googleIdentity = alias(juniorIdentities, "google_identity");
 function dateFromMs$1(ms) {
 	return new Date(ms);
 }
@@ -153,12 +155,57 @@ async function upsertIdentity(executor, identity, nowMs = Date.now()) {
 async function upsertLinkedIdentity(executor, userId, identity, nowMs = Date.now()) {
 	return await upsertIdentityRecord(executor, identity, userId, nowMs);
 }
+/**
+* Find the one user whose primary email is in a provider-verified email list.
+* Return undefined when no user or more than one user matches.
+*/
+async function findUserByVerifiedEmails(executor, emails) {
+	const normalized = new Set(emails.map((email) => normalizeIdentityEmail(email) ?? ""));
+	normalized.delete("");
+	if (normalized.size === 0) return void 0;
+	const rows = await executor.db().select({
+		email: juniorUsers.primaryEmail,
+		userId: juniorUsers.id
+	}).from(juniorUsers).where(inArray(juniorUsers.primaryEmailNormalized, Array.from(normalized))).limit(2);
+	return rows.length === 1 ? rows[0] : void 0;
+}
 /** Remove one exact provider identity owned by a workspace Slack user. */
 async function deleteProviderIdentityForSlackUser(executor, slackTeamId, slackUserId, provider, providerSubjectId) {
 	const userId = (await executor.db().select({ userId: juniorIdentities.userId }).from(juniorIdentities).where(and(eq(juniorIdentities.kind, "user"), eq(juniorIdentities.provider, "slack"), eq(juniorIdentities.providerTenantId, slackTeamId), eq(juniorIdentities.providerSubjectId, slackUserId))).limit(1))[0]?.userId;
 	if (!userId) return;
+	await deleteProviderIdentityForUser(executor, userId, provider, providerSubjectId);
+}
+/** Remove one exact provider identity owned by a user. */
+async function deleteProviderIdentityForUser(executor, userId, provider, providerSubjectId) {
 	await executor.db().delete(juniorIdentities).where(and(eq(juniorIdentities.userId, userId), eq(juniorIdentities.provider, provider), eq(juniorIdentities.providerTenantId, ""), eq(juniorIdentities.providerSubjectId, providerSubjectId)));
 }
+/** Read the user linked to one Slack identity. */
+async function findSlackIdentityUserId(executor, slackTeamId, slackUserId) {
+	return (await executor.db().select({ userId: juniorIdentities.userId }).from(juniorIdentities).where(and(eq(juniorIdentities.kind, "user"), eq(juniorIdentities.provider, "slack"), eq(juniorIdentities.providerTenantId, slackTeamId), eq(juniorIdentities.providerSubjectId, slackUserId))).limit(1))[0]?.userId ?? void 0;
+}
+/**
+* Save one Google sign-in. Link the Google identity to the user of its
+* verified email, and set its sign-in time.
+*/
+async function recordGoogleSignIn(executor, account, nowMs = Date.now()) {
+	const stored = await upsertIdentity(executor, {
+		kind: "user",
+		provider: GOOGLE_IDENTITY_PROVIDER,
+		providerSubjectId: account.subject,
+		email: account.email,
+		emailVerified: true,
+		displayName: account.displayName
+	}, nowMs);
+	await executor.db().update(juniorIdentities).set({ signedInAt: dateFromMs$1(nowMs) }).where(eq(juniorIdentities.id, stored.id));
+	return stored;
+}
+/**
+* Return whether the user of one Slack identity signed in with Google at or
+* after `signedInSince`.
+*/
+async function slackUserHasGoogleSignIn(executor, args) {
+	return (await executor.db().select({ id: googleIdentity.id }).from(juniorIdentities).innerJoin(googleIdentity, eq(googleIdentity.userId, juniorIdentities.userId)).where(and(eq(juniorIdentities.kind, "user"), eq(juniorIdentities.provider, "slack"), eq(juniorIdentities.providerTenantId, args.slackTeamId), eq(juniorIdentities.providerSubjectId, args.slackUserId), eq(googleIdentity.kind, "user"), eq(googleIdentity.provider, GOOGLE_IDENTITY_PROVIDER), eq(googleIdentity.emailVerified, true), gte(googleIdentity.signedInAt, args.signedInSince))).limit(1)).length > 0;
+}
 //#endregion
 //#region src/chat/conversations/sql/participants.ts
 /** Resolve the root conversation id that owns personal-feed membership. */
@@ -1042,6 +1089,7 @@ function readAuthor(meta) {
 		...typeof author.userName === "string" ? { userName: author.userName } : void 0
 	};
 }
+/** Read the Slack workspace that owns a conversation, when it has one. */
 async function loadConversationSlackTenantId(executor, conversationId) {
 	const [row] = await executor.db().select({
 		providerTenantId: juniorDestinations.providerTenantId,
@@ -1620,4 +1668,4 @@ async function readActorIdentity(actor) {
 	return await readActorIdentityFromSql(getDb(), actor);
 }
 //#endregion
-export { upsertIdentity as A, agentTurnTotalTokens as C, deleteProviderIdentityForSlackUser as D, resolveRootConversationId as E, sameDestination as F, createSlackDestination as M, parseDestination as N, readUserTimezone as O, requireSlackDestination as P, agentTurnCostUsd as S, hasAgentTurnUsage as T, locationFromRow as _, setUserAdminFromSql as a, parseSessionSource as b, getConversationEventStore as c, getDb as d, getSqlExecutor as f, withConversationMutationLock as g, createSqlStore as h, resolveViewerUser as i, upsertLinkedIdentity as j, saveUserTimezone as k, getConversationMessageSearchStore as l, withConversationEventLock as m, listAdminUsersFromSql as n, updateViewerDisplayName as o, createSqlConversationEventStore as p, readActorIdentity as r, db_exports as s, findUserByEmail as t, getConversationStore as u, startLocationThread as v, agentTurnUsageSchema as w, addAgentTurnUsage as x, bindProviderConversation as y };
+export { deleteProviderIdentityForSlackUser as A, createSlackDestination as B, parseSessionSource as C, agentTurnUsageSchema as D, agentTurnTotalTokens as E, recordGoogleSignIn as F, requireSlackDestination as H, saveUserTimezone as I, slackUserHasGoogleSignIn as L, findSlackIdentityUserId as M, findUserByVerifiedEmails as N, hasAgentTurnUsage as O, readUserTimezone as P, upsertIdentity as R, bindProviderConversation as S, agentTurnCostUsd as T, sameDestination as U, parseDestination as V, createSqlStore as _, resolveViewerUser as a, startLocationThread as b, db_exports as c, getConversationStore as d, getDb as f, loadConversationSlackTenantId as g, withConversationEventLock as h, readActorIdentity as i, deleteProviderIdentityForUser as j, resolveRootConversationId as k, getConversationEventStore as l, createSqlConversationEventStore as m, findUserByEmailFromSql as n, setUserAdminFromSql as o, getSqlExecutor as p, listAdminUsersFromSql as r, updateViewerDisplayName as s, findUserByEmail as t, getConversationMessageSearchStore as u, withConversationMutationLock as v, addAgentTurnUsage as w, identityFromActor as x, locationFromRow as y, upsertLinkedIdentity as z };

package/dist/{web-input-Cv42P3ni.js → web-input-B9Bv0_lR.js}

@@ -1,39 +1,39 @@
-import { A as resolveSlackChannelIdFromMessage, B as effectiveTaskOutcomes, Bt as RetryableDeliveryError, C as renderBlockText, D as storeAttachment, Gt as shouldEmitDevAgentTrace, Lt as createUserTokenStore, M as getConversationInfo, N as listThreadReplies, O as parseSlackThreadId, Rt as buildSteeringPiMessage, S as renderAttachmentText, Ut as AuthorizationFlowDisabledError, a as buildAuthPauseResponse, h as latestProgressStatus, j as resolveSlackChannelIdFromThreadId, k as readSlackRawMessageContext, m as PluginCredentialFailureError, n as executeAgentRun, r as createContextCompactor, t as createAgentRunner, z as eventAutomationTriggerAvailable, zt as withoutSavedSteeringMessages } from "./agent-runner-C6_cd61V.js";
-import { f as escapeXml, i as completeText, r as completeObject, v as isProviderRetryError } from "./client-BVrAp-pq.js";
-import { C as withLogContext, I as isRecord, L as toOptionalNumber, R as toOptionalString, _ as setSentryUser, b as setTags, d as logException, f as logInfo, n as createChatSdkLogger, o as getActiveTraceId, p as logWarn, t as buildTurnFailureResponse, u as logError, v as setSpanAttributes, w as withSpan } from "./logging-tPQeUe2i.js";
-import { c as getSlackClientSecret, i as getChatConfig, l as getSlackSigningSecret, n as botConfig, o as getSlackBotToken, s as getSlackClientId, v as normalizeSlackEmojiName } from "./config-DdBiDanf.js";
+import { A as resolveSlackChannelIdFromMessage, B as effectiveTaskOutcomes, Bt as withoutSavedSteeringMessages, C as renderBlockText, D as storeAttachment, Kt as shouldEmitDevAgentTrace, M as getConversationInfo, N as listThreadReplies, O as parseSlackThreadId, Rt as createUserTokenStore, S as renderAttachmentText, Vt as RetryableDeliveryError, Wt as AuthorizationFlowDisabledError, a as buildAuthPauseResponse, h as latestProgressStatus, j as resolveSlackChannelIdFromThreadId, k as readSlackRawMessageContext, m as PluginCredentialFailureError, n as executeAgentRun, r as createContextCompactor, t as createAgentRunner, z as eventAutomationTriggerAvailable, zt as buildSteeringPiMessage } from "./agent-runner-D7OboVb3.js";
+import { f as escapeXml, i as completeText, r as completeObject, v as isProviderRetryError } from "./client-D8HnkOQX.js";
+import { B as toOptionalNumber, T as withSpan, V as toOptionalString, d as logError, f as logException, m as logWarn, n as createChatSdkLogger, o as getActiveTraceId, p as logInfo, t as buildTurnFailureResponse, v as setSentryUser, w as withLogContext, x as setTags, y as setSpanAttributes, z as isRecord } from "./logging-CWxiIuCF.js";
+import { c as getSlackClientSecret, i as getChatConfig, l as getSlackSigningSecret, n as botConfig, o as getSlackBotToken, s as getSlackClientId, v as normalizeSlackEmojiName } from "./config-CJRnWK9H.js";
 import { o as modelIdForProfile, r as defaultModelId } from "./model-profile-BwU8mqwD.js";
 import { a as isUserActor, g as parseSlackMessageTs, i as isActorUserId, l as parseSlackChannelId, n as createSlackActor, o as parseActorUserId, r as createSlackResumeActor, t as createActor } from "./actor-BTtLaeWy.js";
-import { M as createSlackDestination, P as requireSlackDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, u as getConversationStore } from "./viewer-C-9nFKYr.js";
-import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers } from "./agent-invocations-BY60iNw-.js";
-import { o as juniorAutomationRuns, s as juniorAutomations } from "./executor-BroK9oKy.js";
+import { B as createSlackDestination, H as requireSlackDestination, d as getConversationStore, f as getDb, l as getConversationEventStore, p as getSqlExecutor } from "./viewer-DSZXygMU.js";
+import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers } from "./agent-invocations-Bdu3ROfo.js";
+import { a as juniorAutomationRuns, s as juniorAutomations } from "./executor-Do0THDRR.js";
 import { p as instructionProvenanceFor } from "./history-9pO1Zd4Y.js";
-import { d as credentialContextForActor } from "./registry-CsNavQ_Z.js";
-import { $ as persistWithRetry, $t as createConversationMemoryService, A as formatSlackLink, B as removeReactionFromMessage, C as listAutomationVersions, Ct as commitAcceptedReply, Et as loadConversationProjection, F as addReactionToMessage, Ft as recordAuthorizationCompleted, G as loadTurnCheckpoint, J as completeTurnRecord, K as saveTurnCheckpoint, Kt as persistConversationMessageSummaries, M as normalizeSlackStatusText, Ot as loadProjection, P as truncateStatusText, Q as recordTurnSummary, Qt as buildConversationContext, S as automationDefinition, T as sameDefinitionValue, Ut as hydrateConversationMessages, Wt as persistConversationMessages, X as getTurnRecord, Y as failTurnRecord, Yt as fallbackShortTitle, Z as listTurnSummaries, Zt as appendThreadContextMessages, _ as parseEventAutomationRow, an as recordDeliveredAssistantMessage, bt as trimTrailingAssistantMessages, c as withScheduledAutomationLock, en as estimateConversationContextTokens, f as deleteEventAutomation, h as listDeletedEventAutomationsCreatedBy, i as readScheduledAutomation, in as normalizeConversationText, it as buildTurnErrorResponse, j as normalizeSlackReplyMarkdown, k as escapeSlackMrkdwnText, nn as isHumanConversationMessage, o as saveScheduledAutomationInLock, on as turnHasReply, q as abandonTurnRecord, qt as resolveConversationTitle, r as parseScheduledAutomationRow, rn as markConversationMessage, sn as upsertConversationMessage, tn as getConversationMessageSlackTs, wt as commitMessages, z as postSlackMessage, zt as recordSubscribedReplyRoute } from "./tasks-CODtRzvX.js";
-import { Et as getSlackFileId, Gt as normalizeSlackConversationId, Ht as getSlackClient, Kt as runWithSlackInstallationToken, Lt as lookupSlackUser, Ot as readAttachmentVisionSummary, Rt as SlackActionError, Tt as buildSentryConversationUrl, V as cancelSubscriptions, Vt as getHeaderString, Wt as isDmChannel, at as getDashboardConversationLink, it as JUNIOR_THREAD_STATE_TTL_MS, kt as recordSlackAttachment, o as getPluginSlackConversationLink, ot as getDashboardObjectIconLink, rt as verifyTimerWatchCredentialSubject, zt as downloadPrivateSlackFile } from "./agent-hooks-DlSK8PQQ.js";
-import { F as readMessageAttachments, R as isVisionImageMediaType } from "./conversation-T18Xlkx9.js";
-import { E as acquireActiveLock, O as withLock, T as MUTATION_LOCK_TTL_MS, w as getStateAdapter } from "./profile-Bb1zCVGP.js";
-import { a as wasPendingAuthStopped, c as getThreadStopDecision, l as buildDeterministicAssistantMessageId, o as decideSubscribedThreadReply, r as clearPendingAuth, s as getSubscribedReplyPreflightDecision, u as buildDeterministicTurnId } from "./pending-auth-DT3MRVW8.js";
+import { d as actorLogContext, f as credentialContextForActor } from "./registry-sLTr-sV9.js";
+import { $ as recordTurnSummary, $t as buildConversationContext, A as escapeSlackMrkdwnText, B as postSlackMessage, Bt as recordSubscribedReplyRoute, Dt as loadConversationProjection, E as sameDefinitionValue, F as truncateStatusText, Gt as persistConversationMessages, I as addReactionToMessage, It as recordAuthorizationCompleted, J as abandonTurnRecord, Jt as resolveConversationTitle, K as loadTurnCheckpoint, M as normalizeSlackReplyMarkdown, N as normalizeSlackStatusText, Q as listTurnSummaries, Qt as appendThreadContextMessages, S as automationDefinition, Tt as commitMessages, V as removeReactionFromMessage, Wt as hydrateConversationMessages, X as failTurnRecord, Xt as fallbackShortTitle, Y as completeTurnRecord, Z as getTurnRecord, _ as parseEventAutomationRow, an as normalizeConversationText, at as buildTurnErrorResponse, c as withScheduledAutomationLock, cn as upsertConversationMessage, en as createConversationMemoryService, et as persistWithRetry, f as deleteEventAutomation, h as listDeletedEventAutomationsCreatedBy, i as readScheduledAutomation, in as markConversationMessage, j as formatSlackLink, kt as loadProjection, nn as getConversationMessageSlackTs, o as saveScheduledAutomationInLock, on as recordDeliveredAssistantMessage, q as saveTurnCheckpoint, qt as persistConversationMessageSummaries, r as parseScheduledAutomationRow, rn as isHumanConversationMessage, sn as turnHasReply, tn as estimateConversationContextTokens, w as listAutomationVersions, wt as commitAcceptedReply, xt as trimTrailingAssistantMessages } from "./tasks-D_WIJtvO.js";
+import { Et as getSlackFileId, Gt as normalizeSlackConversationId, Ht as getSlackClient, Kt as runWithSlackInstallationToken, Lt as lookupSlackUser, Ot as readAttachmentVisionSummary, Rt as SlackActionError, Tt as buildSentryConversationUrl, V as cancelSubscriptions, Vt as getHeaderString, Wt as isDmChannel, at as getDashboardConversationLink, it as JUNIOR_THREAD_STATE_TTL_MS, kt as recordSlackAttachment, o as getPluginSlackConversationLink, ot as getDashboardObjectIconLink, rt as verifyTimerWatchCredentialSubject, zt as downloadPrivateSlackFile } from "./agent-hooks-BjtTzvru.js";
+import { F as readMessageAttachments, R as isVisionImageMediaType } from "./conversation-CKNLYBJt.js";
+import { E as acquireActiveLock, O as withLock, T as MUTATION_LOCK_TTL_MS, w as getStateAdapter } from "./profile-h-72wM78.js";
+import { a as wasPendingAuthStopped, c as getThreadStopDecision, l as buildDeterministicAssistantMessageId, o as decideSubscribedThreadReply, r as clearPendingAuth, s as getSubscribedReplyPreflightDecision, u as buildDeterministicTurnId } from "./pending-auth-s_QFribU.js";
 import { a as TurnInputDeferredError, c as isTurnInputCommitLostError, d as markTurnCompleted, f as markTurnFailed, i as TurnInputCommitLostError, l as isTurnInputDeferredError, n as ConversationTurnBoundaryError, o as getConversationTurnBoundaryError, p as startActiveTurn, r as CooperativeTurnYieldError, s as isCooperativeTurnYieldError, u as markTurnClosed } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-yn5G-YEG.js";
-import { A as recordFinishedTurnForAutomatedLimit, F as finishedRunReply, P as deliversFinalText, R as runDispatchOutcome, c as timerWatchCredentialSubject, i as skipInputBeforeConversationStop, k as maybePostAutomatedTurnLimitNotice, l as getEventCatalog, s as isEventMailboxMetadata, v as automationEventCatalog } from "./session-stop-q-6GNHx6.js";
-import { a as EVENT_SYSTEM_ACTOR, o as isEventConversationMessage } from "./prompt-C04mP1hu.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline } from "./job-queue-BbGg3gvu.js";
-import { E as stopConversationWork, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage, w as requestConversationWork } from "./store-D2It0ozF.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CbTPebzL.js";
+import { A as maybePostAutomatedTurnLimitNotice, F as deliversFinalText, I as finishedRunReply, c as timerWatchCredentialSubject, i as skipInputBeforeConversationStop, j as recordFinishedTurnForAutomatedLimit, l as getEventCatalog, s as isEventMailboxMetadata, y as automationEventCatalog, z as runDispatchOutcome } from "./session-stop-CQjKd4a2.js";
+import { a as EVENT_SYSTEM_ACTOR, o as isEventConversationMessage } from "./prompt-DyoEj9c2.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline } from "./job-queue-B6SV9uVa.js";
+import { E as stopConversationWork, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage, w as requestConversationWork } from "./store-DXFIQy-G.js";
 import { l as automationListQuerySchema } from "./automation-CHdlHVZP.js";
-import { r as isExperimentalFeatureEnabled } from "./experimental-Qn9rKLgx.js";
+import { r as isExperimentalFeatureEnabled } from "./experimental-CQIvMUO7.js";
 import { c as sumUtcHoursIntoSixHours, m as healthReportSchema, t as webMessageId } from "./web-message-id-xPI_EFSC.js";
-import { A as readAutomationRuns, C as readAutomationExecutionByConversationId, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, O as readAutomationExecutionSummaries, T as readAutomationExecutionHours, _ as markDispatchCompleted, a as confirmDispatchMailboxAppend, c as getDispatchIdForConversation, d as getDispatchTurnId, g as markDispatchBlocked, h as markDispatchAwaitingResume, i as claimDispatchMailboxAppend, k as readAutomationExecutions, l as getDispatchInputMessageId, n as scheduleSessionCompletedPluginTasks, p as isTerminalDispatchStatus, s as getDispatchConversationId, t as processPluginTask, u as getDispatchRecord, v as markDispatchFailed, w as readAutomationExecutionDays, x as emptyAutomationRunWindows, y as markDispatchRunning } from "./task-runner-cIGU5VwJ.js";
-import { a as withAgentInvocationResultActors, c as resolveMailboxTurnWork, f as joinMailboxText, i as startAgentInvocationsForChildInput, l as sourceFromTurnInput, o as getAuthPausedConversationTurnId, s as getEventBatchDelayMs, t as enqueueAgentInvocationResult, u as turnInputFactsFromConversationMessage } from "./result-j9nS0se-.js";
-import { n as getTurnLifecycle, t as ConversationTurnLifecycleService } from "./turn-lifecycle-BUP7ZOVa.js";
-import { i as resolveAgentInvocationId, o as AgentRunError, s as executeTurn, t as createAgentInvocationWorker } from "./work-6UmVQq1V.js";
-import { a as persistThreadState, c as configValueSchema, i as persistThreadRuntimeState, n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState, t as getLocationConfigurationService } from "./thread-state-BPkwVmvK.js";
-import { c as deleteWebAuthorization, d as getPausedTurnRequest, m as getTurnAuthorization, p as wakePausedTurn, s as createWebAuthorization, u as createPausedTurns } from "./connections-CG04HdpC.js";
-import { n as resolveTurnSessionRouting } from "./turn-session-routing-BcWM3PLm.js";
-import { t as bindMessageAgent } from "./message-DdPGRYQP.js";
-import { t as bindSpawnAgent } from "./spawn-Do5mX3d_.js";
-import { a as persistAuthPauseTurnState, c as getTurnUserSlackMessageTs, d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, n as getAgentTurnDiagnosticsAttributes, o as getTurnUserMessage, r as requireTurnFailureEventId, s as getTurnUserReplyAttachmentContext, t as finalizeFailedTurnReplyWithEvent, u as getInterruptionMarker } from "./turn-failure-response-ChmMeKar.js";
-import { r as storeInputImages } from "./images-D0VZ5nv0.js";
+import { A as readAutomationRuns, C as readAutomationExecutionByConversationId, D as readAutomationExecutionStatusHours, E as readAutomationExecutionStatusDays, O as readAutomationExecutionSummaries, T as readAutomationExecutionHours, _ as markDispatchCompleted, a as confirmDispatchMailboxAppend, c as getDispatchIdForConversation, d as getDispatchTurnId, g as markDispatchBlocked, h as markDispatchAwaitingResume, i as claimDispatchMailboxAppend, k as readAutomationExecutions, l as getDispatchInputMessageId, n as scheduleSessionCompletedPluginTasks, p as isTerminalDispatchStatus, s as getDispatchConversationId, t as processPluginTask, u as getDispatchRecord, v as markDispatchFailed, w as readAutomationExecutionDays, x as emptyAutomationRunWindows, y as markDispatchRunning } from "./task-runner-DUjvzYXj.js";
+import { a as withAgentInvocationResultActors, c as resolveMailboxTurnWork, f as joinMailboxText, i as startAgentInvocationsForChildInput, l as sourceFromTurnInput, o as getAuthPausedConversationTurnId, s as getEventBatchDelayMs, t as enqueueAgentInvocationResult, u as turnInputFactsFromConversationMessage } from "./result-C883vngT.js";
+import { n as getTurnLifecycle, t as ConversationTurnLifecycleService } from "./turn-lifecycle-CO-ylUmV.js";
+import { i as resolveAgentInvocationId, o as AgentRunError, s as executeTurn, t as createAgentInvocationWorker } from "./work-nAfDSUFP.js";
+import { a as persistThreadState, c as configValueSchema, i as persistThreadRuntimeState, n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState, t as getLocationConfigurationService } from "./thread-state-Ch4yuCqG.js";
+import { c as deleteWebAuthorization, d as getPausedTurnRequest, m as getTurnAuthorization, p as wakePausedTurn, s as createWebAuthorization, u as createPausedTurns } from "./connections-ClYrKzpX.js";
+import { n as resolveTurnSessionRouting } from "./turn-session-routing-B3LWooK5.js";
+import { t as bindMessageAgent } from "./message-TUOdbSBW.js";
+import { t as bindSpawnAgent } from "./spawn-DY9CLXDL.js";
+import { a as persistAuthPauseTurnState, c as getTurnUserSlackMessageTs, d as loadPendingMessageCards, i as completeAuthPauseTurn, l as buildDeliveredTurnStatePatch, n as getAgentTurnDiagnosticsAttributes, o as getTurnUserMessage, r as requireTurnFailureEventId, s as getTurnUserReplyAttachmentContext, t as finalizeFailedTurnReplyWithEvent, u as getInterruptionMarker } from "./turn-failure-response-C5nBKC4S.js";
+import { r as storeInputImages } from "./images-BN_BiBXF.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, desc, eq, exists, inArray, ne, or, sql } from "drizzle-orm";
@@ -498,6 +498,47 @@ function renderSlackObjectCard(card, conversationId, surface = "preview") {
 	};
 }
 //#endregion
+//#region src/chat/slack/adapter-context.ts
+const initializedAdapters = /* @__PURE__ */ new WeakSet();
+async function getConnectedState$1(stateAdapter) {
+	const state = stateAdapter ?? getStateAdapter();
+	await state.connect();
+	return state;
+}
+/** Initialize the Slack adapter against the repository state adapter. */
+async function ensureSlackAdapterInitialized(args) {
+	if (initializedAdapters.has(args.adapter)) return;
+	const state = await getConnectedState$1(args.state);
+	await args.adapter.initialize({ getState: () => state });
+	if (args.adapter.defaultBotTokenProvider && !args.adapter.botUserId) throw new Error("Slack adapter initialized without a resolved bot user id");
+	initializedAdapters.add(args.adapter);
+}
+/** Verify a Slack request using the adapter's configured signing secret. */
+function verifySlackSignature(args) {
+	const verifySignature = args.adapter.verifySignature;
+	if (!verifySignature) throw new Error("Slack adapter does not expose signature verification");
+	return verifySignature.call(args.adapter, args.body, args.request.headers.get("x-slack-request-timestamp"), args.request.headers.get("x-slack-signature"));
+}
+/** Run Slack work with the installation token that matches the inbound event. */
+async function runWithSlackInstallation(args) {
+	await ensureSlackAdapterInitialized({
+		adapter: args.adapter,
+		state: args.state
+	});
+	const internals = args.adapter;
+	if (internals.defaultBotTokenProvider) return await args.task();
+	const installationId = args.installation.isEnterpriseInstall ? args.installation.enterpriseId : args.installation.teamId;
+	if (!installationId) throw new Error("Slack installation context is missing team id");
+	if (!internals.resolveTokenForTeam || !internals.requestContext) throw new Error("Slack adapter cannot resolve workspace installations");
+	const tokenContext = await internals.resolveTokenForTeam.call(args.adapter, installationId, args.installation.isEnterpriseInstall);
+	if (!tokenContext) throw new Error(`Slack installation token was not found for ${installationId}`);
+	return await internals.requestContext.run({
+		...tokenContext,
+		enterpriseId: args.installation.enterpriseId,
+		isEnterpriseInstall: args.installation.isEnterpriseInstall
+	}, () => runWithSlackInstallationToken(tokenContext.token, args.task));
+}
+//#endregion
 //#region src/chat/slack/errors.ts
 /** Extract Slack's stable API error code from Web API errors. */
 function getSlackApiErrorCode(error) {
@@ -1728,47 +1769,6 @@ async function subscribeSlackThreadForMessage(args) {
 	return result.value;
 }
 //#endregion
-//#region src/chat/slack/adapter-context.ts
-const initializedAdapters = /* @__PURE__ */ new WeakSet();
-async function getConnectedState$1(stateAdapter) {
-	const state = stateAdapter ?? getStateAdapter();
-	await state.connect();
-	return state;
-}
-/** Initialize the Slack adapter against the repository state adapter. */
-async function ensureSlackAdapterInitialized(args) {
-	if (initializedAdapters.has(args.adapter)) return;
-	const state = await getConnectedState$1(args.state);
-	await args.adapter.initialize({ getState: () => state });
-	if (args.adapter.defaultBotTokenProvider && !args.adapter.botUserId) throw new Error("Slack adapter initialized without a resolved bot user id");
-	initializedAdapters.add(args.adapter);
-}
-/** Verify a Slack request using the adapter's configured signing secret. */
-function verifySlackSignature(args) {
-	const verifySignature = args.adapter.verifySignature;
-	if (!verifySignature) throw new Error("Slack adapter does not expose signature verification");
-	return verifySignature.call(args.adapter, args.body, args.request.headers.get("x-slack-request-timestamp"), args.request.headers.get("x-slack-signature"));
-}
-/** Run Slack work with the installation token that matches the inbound event. */
-async function runWithSlackInstallation(args) {
-	await ensureSlackAdapterInitialized({
-		adapter: args.adapter,
-		state: args.state
-	});
-	const internals = args.adapter;
-	if (internals.defaultBotTokenProvider) return await args.task();
-	const installationId = args.installation.isEnterpriseInstall ? args.installation.enterpriseId : args.installation.teamId;
-	if (!installationId) throw new Error("Slack installation context is missing team id");
-	if (!internals.resolveTokenForTeam || !internals.requestContext) throw new Error("Slack adapter cannot resolve workspace installations");
-	const tokenContext = await internals.resolveTokenForTeam.call(args.adapter, installationId, args.installation.isEnterpriseInstall);
-	if (!tokenContext) throw new Error(`Slack installation token was not found for ${installationId}`);
-	return await internals.requestContext.run({
-		...tokenContext,
-		enterpriseId: args.installation.enterpriseId,
-		isEnterpriseInstall: args.installation.isEnterpriseInstall
-	}, () => runWithSlackInstallationToken(tokenContext.token, args.task));
-}
-//#endregion
 //#region src/chat/task-execution/slack-work.ts
 const slackConversationRouteSchema = z.enum(["mention", "subscribed"]);
 function hasSteeringOverride(text) {
@@ -5598,12 +5598,10 @@ function createReadOnlyConfigService(rawValues) {
 	};
 }
 function getResumeLogContext(args) {
-	const actor = args.run?.actor;
 	return {
 		conversationId: args.conversationId,
 		messageConversationId: args.conversationId,
-		userId: isUserActor(actor) ? actor.userId : void 0,
-		userName: isUserActor(actor) ? actor.userName : void 0,
+		...actorLogContext(args.run?.actor, args.run?.credentialContext),
 		destinationName: args.channelId,
 		assistantUserName: botConfig.userName,
 		modelId: defaultModelId(botConfig)
@@ -7376,4 +7374,4 @@ async function appendAndEnqueueWebMessage(input, options) {
 	};
 }
 //#endregion
-export { withNormalizedThreadId as A, readHealthReport as B, buildSlackInboundMessage as C, isSlackMessageStopped as D, verifySlackSignature as E, renderSlackObjectCard as F, createVercelAttachmentStorage as I, AGENT_DISPATCH_MAX_AGE_MS as L, THREAD_OPTOUT_ACK as M, startProcessingReaction as N, stopSlackThread as O, parseContent as P, enqueueAgentDispatch as R, recordSkippedConversationMessage as S, runWithSlackInstallation as T, readViewerAutomationRuns as _, recordWebConversationActivity as a, readViewerAutomations as b, createProductionSlackWebhookServices as c, resolveSlackConversationContextFromThreadId as d, createSlackWebApiStatusSender as f, readViewerAutomationExecutions as g, readConversationSourceTask as h, createConversationId as i, stopConversationTurn as j, normalizeIncomingSlackThreadId as k, getProductionSlackAdapter as l, deleteViewerTask as m, conversationTurnIdForMessage as n, webActorFromEmail as o, ViewerTaskNotFoundError as p, createAndEnqueueConversation as r, createProductionConversationWorkOptions as s, appendAndEnqueueWebMessage as t, formatSlackConversationRedactedLabel as u, readViewerAutomationSummary as v, clearSlackPendingReactions as w, resolveViewerTaskCandidate as x, readViewerAutomationVersions as y, GET as z };
+export { THREAD_OPTOUT_ACK as A, readHealthReport as B, buildSlackInboundMessage as C, normalizeIncomingSlackThreadId as D, stopSlackThread as E, renderSlackObjectCard as F, createVercelAttachmentStorage as I, AGENT_DISPATCH_MAX_AGE_MS as L, parseContent as M, runWithSlackInstallation as N, withNormalizedThreadId as O, verifySlackSignature as P, enqueueAgentDispatch as R, recordSkippedConversationMessage as S, isSlackMessageStopped as T, readViewerAutomationRuns as _, recordWebConversationActivity as a, readViewerAutomations as b, createProductionSlackWebhookServices as c, resolveSlackConversationContextFromThreadId as d, createSlackWebApiStatusSender as f, readViewerAutomationExecutions as g, readConversationSourceTask as h, createConversationId as i, startProcessingReaction as j, stopConversationTurn as k, getProductionSlackAdapter as l, deleteViewerTask as m, conversationTurnIdForMessage as n, webActorFromEmail as o, ViewerTaskNotFoundError as p, createAndEnqueueConversation as r, createProductionConversationWorkOptions as s, appendAndEnqueueWebMessage as t, formatSlackConversationRedactedLabel as u, readViewerAutomationSummary as v, clearSlackPendingReactions as w, resolveViewerTaskCandidate as x, readViewerAutomationVersions as y, GET as z };

package/dist/{work-6UmVQq1V.js → work-nAfDSUFP.js}

@@ -1,15 +1,15 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { $ as getAgentInvocation, G as recordSubagentStarted, H as stopChildAgentsOf, J as createAgentInvocation, Q as getActiveAgentInvocationForConversation, Rt as buildSteeringPiMessage, Ut as AuthorizationFlowDisabledError, W as recordSubagentEnded, Wt as readBlockedReport, at as getAgentInvocationTurnId, ct as isTerminalAgentInvocation, dt as markAgentInvocationMailboxAppended, gt as reportReplacedAgentInvocation, ht as markAgentInvocationSteered, m as PluginCredentialFailureError, mt as markAgentInvocationRunning, pt as markAgentInvocationPaused, q as completeAgentInvocation, rt as getAgentInvocationMessageId, st as getLatestAgentInvocationForConversation, zt as withoutSavedSteeringMessages } from "./agent-runner-C6_cd61V.js";
-import { n as botConfig } from "./config-DdBiDanf.js";
-import { c as getConversationEventStore, u as getConversationStore } from "./viewer-C-9nFKYr.js";
+import { $ as getAgentInvocation, Bt as withoutSavedSteeringMessages, G as recordSubagentStarted, Gt as readBlockedReport, H as stopChildAgentsOf, J as createAgentInvocation, Q as getActiveAgentInvocationForConversation, W as recordSubagentEnded, Wt as AuthorizationFlowDisabledError, at as getAgentInvocationTurnId, ct as isTerminalAgentInvocation, dt as markAgentInvocationMailboxAppended, gt as reportReplacedAgentInvocation, ht as markAgentInvocationSteered, m as PluginCredentialFailureError, mt as markAgentInvocationRunning, pt as markAgentInvocationPaused, q as completeAgentInvocation, rt as getAgentInvocationMessageId, st as getLatestAgentInvocationForConversation, zt as buildSteeringPiMessage } from "./agent-runner-D7OboVb3.js";
+import { n as botConfig } from "./config-CJRnWK9H.js";
+import { d as getConversationStore, l as getConversationEventStore } from "./viewer-DSZXygMU.js";
 import { m as sameActorIdentity, u as agentInstructionProvenance } from "./history-9pO1Zd4Y.js";
-import { K as saveTurnCheckpoint, X as getTurnRecord, Y as failTurnRecord, jt as openConversationProjection, lt as getTerminalAssistantMessages, ot as isTurnExecutionLimitExceededError, q as abandonTurnRecord } from "./tasks-CODtRzvX.js";
+import { J as abandonTurnRecord, Mt as openConversationProjection, X as failTurnRecord, Z as getTurnRecord, q as saveTurnCheckpoint, st as isTurnExecutionLimitExceededError, ut as getTerminalAssistantMessages } from "./tasks-D_WIJtvO.js";
 import { c as isTurnInputCommitLostError, i as TurnInputCommitLostError, o as getConversationTurnBoundaryError } from "./oauth-authorization-BA4Dt6a7.js";
-import { n as getAssistantReplyText } from "./assistant-reply-yn5G-YEG.js";
-import { A as recordFinishedTurnForAutomatedLimit, j as resetAutomatedTurnLimit, k as maybePostAutomatedTurnLimitNotice } from "./session-stop-q-6GNHx6.js";
-import { r as appendAndEnqueueInboundMessage } from "./store-D2It0ozF.js";
-import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-BUP7ZOVa.js";
-import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-BPkwVmvK.js";
+import { n as getAssistantReplyText } from "./assistant-reply-CbTPebzL.js";
+import { A as maybePostAutomatedTurnLimitNotice, M as resetAutomatedTurnLimit, j as recordFinishedTurnForAutomatedLimit } from "./session-stop-CQjKd4a2.js";
+import { r as appendAndEnqueueInboundMessage } from "./store-DXFIQy-G.js";
+import { t as ConversationTurnLifecycleService } from "./turn-lifecycle-CO-ylUmV.js";
+import { n as getPersistedSandboxState, o as persistThreadStateById, r as getPersistedThreadState } from "./thread-state-Ch4yuCqG.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
 //#region src/chat/runtime/turn-execution.ts

package/dist/{worker-DAoBZuZn.js → worker-vGXZ6XFT.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-B4FMCO8f.js";
-import { v as isProviderRetryError } from "./client-BVrAp-pq.js";
-import { C as withLogContext, d as logException, f as logInfo, p as logWarn } from "./logging-tPQeUe2i.js";
-import { i as getChatConfig } from "./config-DdBiDanf.js";
-import { f as getTurnRequestDeadline, m as ConversationQueueMessageRejectedError } from "./job-queue-BbGg3gvu.js";
-import { C as requestAnotherSlice, M as isInvalidConversationRecordError, T as startConversationWork, b as recordConversationRetry, d as countPendingConversationMessages, f as deadLetterAttempt, g as getConversationWorkState, i as beginConversationResume, j as isFinalAttempt, k as hasConversationStop, l as completeConversationStop, m as ensureConversationWake, o as checkInConversationWork, p as drainConversationMailbox, s as clearConsumedConversationWake, t as ackMessages, u as completeConversationWork, x as releaseConversationWork, y as recordAttemptFailure } from "./store-D2It0ozF.js";
+import { v as isProviderRetryError } from "./client-D8HnkOQX.js";
+import { f as logException, m as logWarn, p as logInfo, w as withLogContext } from "./logging-CWxiIuCF.js";
+import { i as getChatConfig } from "./config-CJRnWK9H.js";
+import { f as getTurnRequestDeadline, m as ConversationQueueMessageRejectedError } from "./job-queue-B6SV9uVa.js";
+import { C as requestAnotherSlice, M as isInvalidConversationRecordError, T as startConversationWork, b as recordConversationRetry, d as countPendingConversationMessages, f as deadLetterAttempt, g as getConversationWorkState, i as beginConversationResume, j as isFinalAttempt, k as hasConversationStop, l as completeConversationStop, m as ensureConversationWake, o as checkInConversationWork, p as drainConversationMailbox, s as clearConsumedConversationWake, t as ackMessages, u as completeConversationWork, x as releaseConversationWork, y as recordAttemptFailure } from "./store-DXFIQy-G.js";
 //#region src/chat/task-execution/worker.ts
 var worker_exports = /* @__PURE__ */ __exportAll({
 	CONVERSATION_WORK_DEFER_DELAY_MS: () => CONVERSATION_WORK_DEFER_DELAY_MS,

package/migrations/0059_automation_run_version.sql

@@ -0,0 +1,2 @@
+ALTER TABLE "junior_automation_runs" ADD COLUMN "automation_version" integer;--> statement-breakpoint
+ALTER TABLE "junior_automation_runs" ADD CONSTRAINT "junior_automation_runs_automation_version_fk" FOREIGN KEY ("automation_id","automation_version") REFERENCES "public"."junior_automation_versions"("automation_id","version") ON DELETE no action ON UPDATE no action;

package/migrations/0060_identity_signed_in_at.sql

@@ -0,0 +1 @@
+ALTER TABLE "junior_identities" ADD COLUMN "signed_in_at" timestamp with time zone;