@sentry/junior 0.260.0 → 0.262.0

package/dist/api.js

@@ -1,30 +1,30 @@
-import { D as AutomationConflictError, E as sameDefinitionValue, L as loadTurnProjection, O as automationRevision, S as automationDefinition, T as readAutomationVersion, a as saveScheduledAutomation, bn as createUserTokenStore, k as requireAutomationRevision, rr as piMessageFromHistoryItem, v as saveEventAutomation, y as setEventAutomationStatus } from "./tasks-CjrS098O.js";
-import { p as escapeXml } from "./client-JeyzRwsT.js";
-import { f as logException, m as logWarn, p as logInfo } from "./logging-DSMmkHXG.js";
+import { D as AutomationConflictError, E as sameDefinitionValue, L as loadTurnProjection, O as automationRevision, S as automationDefinition, T as readAutomationVersion, a as saveScheduledAutomation, k as requireAutomationRevision, nr as piMessageFromHistoryItem, v as saveEventAutomation, y as setEventAutomationStatus, yn as createUserTokenStore } from "./tasks-Bh2qYaed.js";
+import { p as escapeXml } from "./client-DpfjZgNk.js";
+import { f as logException, m as logWarn, p as logInfo } from "./logging-dZN1Bvtu.js";
 import { d as parseSlackTeamId, g as parseSlackMessageTs, l as parseSlackChannelId } from "./actor-tlxzqaRe.js";
-import { C as addAgentTurnUsage, D as hasAgentTurnUsage, E as agentTurnUsageSchema, O as resolveRootConversationId, S as parseSessionSource, c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as loadConversationSlackTenantIds, i as resolveViewerUser, m as withConversationEventLock, o as updateViewerDisplayName, t as findUserByEmail, u as getConversationStore, v as locationFromRow } from "./viewer-C-J0ewlH.js";
-import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-Qfz7dWgU.js";
-import { f as juniorConversationBriefs, g as juniorApiTokens, h as juniorConversationEvents, m as juniorConversationMetrics, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-BoGNVEDn.js";
+import { C as addAgentTurnUsage, D as hasAgentTurnUsage, E as agentTurnUsageSchema, O as resolveRootConversationId, S as parseSessionSource, c as getConversationEventStore, d as getDb, f as getSqlExecutor, h as loadConversationSlackTenantIds, i as resolveViewerUser, m as withConversationEventLock, o as updateViewerDisplayName, t as findUserByEmail, u as getConversationStore, v as locationFromRow } from "./viewer-oMTUVAcR.js";
+import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
+import { f as juniorConversationBriefs, g as juniorApiTokens, h as juniorConversationEvents, m as juniorConversationMetrics, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-O8xqLDN6.js";
 import { d as contextProvenance } from "./history-AY8rs-FR.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-Bpcs2b2L.js";
-import { F as AutomationEditError, I as eventAutomationTriggerAvailable, P as editEventAutomation, R as resolveTaskOutcomes, S as readLiveAttachment, T as parseSlackThreadId, U as listChildAgents, _t as conversationSubtreeColumns, gt as conversationSubtree, j as editScheduledAutomation, m as readStats, rt as getChildAgentLabel } from "./agent-runner-DvTUyGTY.js";
-import { At as conversationHasParticipantUser, C as WorkspaceValidationError, Dt as conversationArchivedForEmail, Et as conversationArchiveTimes, Ft as readLatestConversationBrief, Gt as listConversationAnnotations, It as readConversationEventPage, Kt as listConversationAnnotationsById, Lt as buildSentryConversationUrl, M as workspaceRepoCheckoutPath, Mt as conversationNotArchivedForUser, Nt as viewerConversationMembership, O as SANDBOX_RUNTIME, Ot as conversationArchivedForUser, S as updateWorkspace, Tt as readConversationAccessFromSql, Yt as lookupSlackUser, _ as deleteWorkspace, b as listWorkspaces, ct as getSlackClient, g as createWorkspace, jt as conversationNotArchivedForEmail, kt as conversationHasParticipantEmail, pt as withSlackRetries, u as getPlugins, v as getWorkspace, wt as createPluginLogger, x as listWorkspacesByRepository } from "./agent-hooks-V4Hfc2tB.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-CfwKT0sn.js";
+import { F as AutomationEditError, I as eventAutomationTriggerAvailable, P as editEventAutomation, R as resolveTaskOutcomes, S as readLiveAttachment, T as parseSlackThreadId, U as listChildAgents, bt as conversationSubtreeColumns, it as getChildAgentLabel, j as editScheduledAutomation, m as readStats, yt as conversationSubtree } from "./agent-runner-Cx6NO5LE.js";
+import { At as conversationIsMemberRoot, C as WorkspaceValidationError, Dt as conversationArchivedForEmail, Et as conversationArchiveTimes, Ft as readLatestConversationBrief, Gt as listConversationAnnotations, It as readConversationEventPage, Kt as listConversationAnnotationsById, Lt as buildSentryConversationUrl, M as workspaceRepoCheckoutPath, Mt as conversationNotArchivedForUser, Nt as viewerConversationMembership, O as SANDBOX_RUNTIME, Ot as conversationArchivedForUser, S as updateWorkspace, Tt as readConversationAccessFromSql, Xt as createPluginCache, Yt as lookupSlackUser, _ as deleteWorkspace, b as listWorkspaces, ct as getSlackClient, g as createWorkspace, jt as conversationNotArchivedForEmail, kt as conversationHasParticipantUser, pt as withSlackRetries, u as getPlugins, v as getWorkspace, wt as createPluginLogger, x as listWorkspacesByRepository } from "./agent-hooks-9q2zdKHL.js";
 import { t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
 import { A as forkConversationResponseSchema, B as readMessageAttachments, D as createConversationBodySchema, O as createConversationMessageBodySchema, V as INPUT_IMAGE_TYPES, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, k as forkConversationBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-CvuKJ3tA.js";
-import { n as hash, t as create } from "./profile-ByWkAY7L.js";
-import { d as getEventCatalog, x as automationEventCatalog } from "./session-stop-HfKx-pky.js";
-import { d as getSandboxResources, t as getCachedSnapshot } from "./resolve-HuPG2VMB.js";
-import { a as getVercelConversationWorkQueue } from "./job-queue-CbdVyaCo.js";
-import { a as cancelHumanFacingPendingMessages, h as getConversation } from "./store-DzRbd5VT.js";
-import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-Ko1Xs--F.js";
+import { n as hash, t as create } from "./profile-BP2N5uDY.js";
+import { d as getEventCatalog, x as automationEventCatalog } from "./session-stop-ZuyOHxdK.js";
+import { d as getSandboxResources, t as getCachedSnapshot } from "./resolve-DftZiYNU.js";
+import { a as getVercelConversationWorkQueue } from "./job-queue-DmarAQGI.js";
+import { a as cancelHumanFacingPendingMessages, h as getConversation } from "./store-dZynGGFW.js";
+import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-Del2I_x3.js";
 import { M as compileScheduleIntent, P as weekdaySchema, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, j as ScheduleIntentError, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-DrpcA-SX.js";
 import { C as skillReportsSchema, a as fillUtcHours, b as pluginsSchema, c as sumUtcHoursIntoSixHours, d as trailingUtcSixHourWindow, f as utcDayKey, h as pluginOperationalReportFeedSchema, i as fillUtcDays, l as trailingUtcDayWindow, m as healthReportSchema, n as DAY_MS$1, o as fillUtcSixHours, p as utcHourKey, r as HOUR_MS$1, s as startOfUtcHour, u as trailingUtcHourWindow, x as runtimeInfoReportSchema } from "./web-message-id-CJSUiksE.js";
-import { B as readHealthReport, I as createVercelAttachmentStorage, _ as readViewerAutomationRuns, a as recordWebConversationActivity, b as readViewerAutomations, d as resolveSlackConversationContextFromThreadId, g as readViewerAutomationExecutions, h as readConversationSourceTask, i as createConversationId, k as stopConversationTurn, l as getProductionSlackAdapter, m as deleteViewerTask, o as webActorFromEmail, p as ViewerTaskNotFoundError, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationSummary, w as clearSlackPendingReactions, x as resolveViewerTaskCandidate, y as readViewerAutomationVersions } from "./web-input-C_xB3RXp.js";
-import { F as conversationAggregateColumns, I as conversationRangeColumns, M as readAutomationTitlesByConversationId, P as conversationActiveDaysColumn } from "./task-runner-DGnd_B5X.js";
-import { d as legacyWebMailboxMetadataSchema } from "./result-DS7V4a3-.js";
-import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection, u as htmlCallbackResponse } from "./connections-CZ7HhEmN.js";
-import { t as decodeInputImages } from "./images-BBmDXQCB.js";
-import { A as activityHours$1, C as personParamsSchema, D as locationDirectoryReportSchema, E as locationDetailReportSchema, H as codePersonReportSchema, I as disconnectConnectionResponseSchema, J as stopConversationTurnResponseSchema, L as startConnectionResponseSchema, N as connectionListSchema, O as locationParamsSchema, P as connectionParamsSchema, S as actorProfileReportSchema, U as codeRepositoryParamsSchema, V as codeOverviewReportSchema, W as codeRepositoryReportSchema, X as apiErrorSchema, Y as conversationStatsReportSchema, _ as personalTokenListSchema, a as workspaceBodySchema, b as revokePersonalTokenResponseSchema, d as serviceAccountListSchema, f as serviceAccountParamsSchema, g as createdPersonalTokenSchema, h as createPersonalTokenBodySchema, i as deleteWorkspaceResponseSchema, j as activitySixHours$1, k as activityDays$1, l as workspaceSchema, m as startServiceAccountSignInResponseSchema, n as statsReportSchema, o as workspaceListSchema, q as conversationChildAgentsReportSchema, s as workspaceParamsSchema, u as disconnectServiceAccountResponseSchema, w as personalSpendReportSchema, x as actorDirectoryReportSchema, y as personalTokenParamsSchema } from "./schema-OzL8Zw4H.js";
+import { B as readHealthReport, I as createVercelAttachmentStorage, _ as readViewerAutomationRuns, a as recordWebConversationActivity, b as readViewerAutomations, d as resolveSlackConversationContextFromThreadId, g as readViewerAutomationExecutions, h as readConversationSourceTask, i as createConversationId, k as stopConversationTurn, l as getProductionSlackAdapter, m as deleteViewerTask, o as webActorFromEmail, p as ViewerTaskNotFoundError, r as createAndEnqueueConversation, t as appendAndEnqueueWebMessage, u as formatSlackConversationRedactedLabel, v as readViewerAutomationSummary, w as clearSlackPendingReactions, x as resolveViewerTaskCandidate, y as readViewerAutomationVersions } from "./web-input-FQ5wgqYn.js";
+import { F as conversationAggregateColumns, I as conversationRangeColumns, M as readAutomationTitlesByConversationId, P as conversationActiveDaysColumn } from "./task-runner-BRgJ5e0s.js";
+import { d as legacyWebMailboxMetadataSchema } from "./result-CRMRT9CE.js";
+import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection, u as htmlCallbackResponse } from "./connections-D9IKbfk-.js";
+import { t as decodeInputImages } from "./images-AM1exvU0.js";
+import { A as activityHours$1, C as personParamsSchema, D as locationDirectoryReportSchema, E as locationDetailReportSchema, H as codePersonReportSchema, I as disconnectConnectionResponseSchema, J as stopConversationTurnResponseSchema, L as startConnectionResponseSchema, N as connectionListSchema, O as locationParamsSchema, P as connectionParamsSchema, S as actorProfileReportSchema, U as codeRepositoryParamsSchema, V as codeOverviewReportSchema, W as codeRepositoryReportSchema, X as apiErrorSchema, Y as conversationStatsReportSchema, _ as personalTokenListSchema, a as workspaceBodySchema, b as revokePersonalTokenResponseSchema, d as serviceAccountListSchema, f as serviceAccountParamsSchema, g as createdPersonalTokenSchema, h as createPersonalTokenBodySchema, i as deleteWorkspaceResponseSchema, j as activitySixHours$1, k as activityDays$1, l as workspaceSchema, m as startServiceAccountSignInResponseSchema, n as statsReportSchema, o as workspaceListSchema, q as conversationChildAgentsReportSchema, s as workspaceParamsSchema, u as disconnectServiceAccountResponseSchema, w as personalSpendReportSchema, x as actorDirectoryReportSchema, y as personalTokenParamsSchema } from "./schema-XuTZukI9.js";
 import { Hono } from "hono";
 import path from "node:path";
 import { z } from "zod";
@@ -629,7 +629,8 @@ async function listConversationSidebarAnnotations(conversationIds, annotationsBy
 				conversationIds,
 				db: getDb(),
 				log: createPluginLogger(plugin.manifest.name),
-				plugin: { name: plugin.manifest.name }
+				plugin: { name: plugin.manifest.name },
+				cache: createPluginCache(plugin.manifest.name)
 			});
 			for (const [conversationId, annotations] of Object.entries(result.annotationsByConversationId)) {
 				if (!candidates.has(conversationId)) continue;
@@ -1199,7 +1200,8 @@ async function listConversationWork(conversationIds) {
 				conversationIds,
 				db: getDb(),
 				log: createPluginLogger(plugin.manifest.name),
-				plugin: { name: plugin.manifest.name }
+				plugin: { name: plugin.manifest.name },
+				cache: createPluginCache(plugin.manifest.name)
 			});
 			for (const conversationId of result.conversationIds) {
 				if (!candidates.has(conversationId)) continue;
@@ -1346,14 +1348,8 @@ async function readConversationParticipants(db, conversationIds) {
 const CONVERSATION_FEED_LIMIT = 50;
 function conversationFeedMembershipFilter(status, filter) {
 	if (!filter) return status === "archived" ? sql`false` : void 0;
-	if (filter.kind === "viewer") return and(viewerConversationMembership({
-		actorMatch: eq(juniorIdentities.userId, filter.userId),
-		participantMatch: conversationHasParticipantUser(filter.userId)
-	}), status === "archived" ? conversationArchivedForUser(filter.userId) : status === "all" ? void 0 : conversationNotArchivedForUser(filter.userId));
-	return and(viewerConversationMembership({
-		actorMatch: eq(juniorUsers.primaryEmailNormalized, filter.email),
-		participantMatch: conversationHasParticipantEmail(filter.email)
-	}), status === "archived" ? conversationArchivedForEmail(filter.email) : status === "all" ? void 0 : conversationNotArchivedForEmail(filter.email));
+	if (filter.kind === "viewer") return and(conversationIsMemberRoot({ userId: filter.userId }), status === "archived" ? conversationArchivedForUser(filter.userId) : status === "all" ? void 0 : conversationNotArchivedForUser(filter.userId));
+	return and(conversationIsMemberRoot({ email: filter.email }), status === "archived" ? conversationArchivedForEmail(filter.email) : status === "all" ? void 0 : conversationNotArchivedForEmail(filter.email));
 }
 /**
 * Keep root conversations linked to one code repository. A code change can
@@ -2022,6 +2018,8 @@ function statsWindow(nowMs) {
 	};
 }
 const HOUR_MS = 36e5;
+/** Keep 7d of hours so clients can roll 7d charts into 6h buckets. */
+const WINDOW_HOURS = 168;
 function applyMetricBuckets(rows, metrics) {
 	const byDate = new Map(rows.map((row) => [row.date, {
 		...row,
@@ -2172,6 +2170,7 @@ function guardianStats(dayRows, hourRows, endMs) {
 }
 async function aggregateStats(db, start, end) {
 	const where = statsWhere(start, end);
+	const hourStart = trailingUtcHourWindow(end.getTime(), WINDOW_HOURS).start;
 	const activityDate = sql`TO_CHAR(
     ${juniorConversations.lastActivityAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
@@ -2207,7 +2206,7 @@ async function aggregateStats(db, start, end) {
 		db.select({
 			conversations: treeAggregateColumns$1.conversations,
 			date: activityHour
-		}).from(juniorConversations).innerJoin(treeConversation$1, eq(treeConversation$1.rootConversationId, juniorConversations.conversationId)).where(where).groupBy(activityHour),
+		}).from(juniorConversations).innerJoin(treeConversation$1, eq(treeConversation$1.rootConversationId, juniorConversations.conversationId)).where(statsWhere(hourStart, end)).groupBy(activityHour),
 		readConversationMetricBuckets(db, {
 			bucket: "day",
 			start,
@@ -2215,7 +2214,7 @@ async function aggregateStats(db, start, end) {
 		}),
 		readConversationMetricBuckets(db, {
 			bucket: "hour",
-			start,
+			start: hourStart,
 			end
 		})
 	]);
@@ -2228,6 +2227,7 @@ async function aggregateStats(db, start, end) {
 	};
 }
 async function aggregateGuardianStats(db, start, end) {
+	const hourStart = trailingUtcHourWindow(end.getTime(), WINDOW_HOURS).start;
 	const day = sql`TO_CHAR(
     ${juniorConversationEvents.createdAt} AT TIME ZONE 'UTC',
     'YYYY-MM-DD'
@@ -2249,14 +2249,14 @@ async function aggregateGuardianStats(db, start, end) {
 		deny: sql`COUNT(*) FILTER (WHERE ${decision} = 'deny')::integer`,
 		requests: sql`COUNT(*)::integer`
 	};
-	const where = and(eq(juniorConversationEvents.type, "guardian_action_reviewed"), gte(juniorConversationEvents.createdAt, start), lte(juniorConversationEvents.createdAt, end));
+	const where = (windowStart) => and(eq(juniorConversationEvents.type, "guardian_action_reviewed"), gte(juniorConversationEvents.createdAt, windowStart), lte(juniorConversationEvents.createdAt, end));
 	const [dayRows, hourRows] = await Promise.all([db.select({
 		...selectColumns,
 		date: day
-	}).from(juniorConversationEvents).where(where).groupBy(day), db.select({
+	}).from(juniorConversationEvents).where(where(start)).groupBy(day), db.select({
 		...selectColumns,
 		date: hour
-	}).from(juniorConversationEvents).where(where).groupBy(hour)]);
+	}).from(juniorConversationEvents).where(where(hourStart)).groupBy(hour)]);
 	return {
 		dayRows,
 		hourRows
@@ -3710,7 +3710,7 @@ async function readPeoplePluginReports(args) {
 		reports: [],
 		source: "plugins"
 	});
-	const { getPluginProfileReports } = await import("./agent-hooks-V4Hfc2tB.js").then((n) => n.t);
+	const { getPluginProfileReports } = await import("./agent-hooks-9q2zdKHL.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		generatedAt: new Date(nowMs).toISOString(),
 		reports: await getPluginProfileReports({
@@ -4186,6 +4186,7 @@ async function readPluginUserPage(input) {
 		db: getDb(),
 		log: createPluginLogger(plugin.manifest.name),
 		plugin: { name: plugin.manifest.name },
+		cache: createPluginCache(plugin.manifest.name),
 		viewer
 	}, input.query));
 	if (content.records.some((record) => record.actions?.some((action) => !actionBelongsToPlugin(action.href, plugin.manifest.name)))) throw new Error(`Plugin user page "${plugin.manifest.name}/${page.id}" returned an action outside its API namespace.`);
@@ -4741,7 +4742,7 @@ function readDescriptionText(home) {
 }
 /** Read discovered skill names for authenticated runtime diagnostics. */
 async function readSkillReports() {
-	const { discoverSkills } = await import("./skills-D6_bcAuW.js").then((n) => n.o);
+	const { discoverSkills } = await import("./skills-lPeepA2b.js").then((n) => n.o);
 	const skills = await discoverSkills();
 	return skillReportsSchema.parse(skills.map((skill) => ({
 		name: skill.name,
@@ -4750,7 +4751,7 @@ async function readSkillReports() {
 }
 /** Read safe configured plugin metadata for authenticated runtime diagnostics. */
 async function readPlugins() {
-	const { pluginCatalogRuntime } = await import("./catalog-runtime-Bpcs2b2L.js").then((n) => n.t);
+	const { pluginCatalogRuntime } = await import("./catalog-runtime-CfwKT0sn.js").then((n) => n.t);
 	return pluginsSchema.parse(pluginCatalogRuntime.getProviders().map((plugin) => ({
 		configKeys: plugin.manifest.configKeys ?? [],
 		description: plugin.manifest.description,
@@ -4762,7 +4763,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
 	const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
 		import("./package-discovery-DJBompdd.js").then((n) => n.r),
-		import("./catalog-runtime-Bpcs2b2L.js").then((n) => n.t),
+		import("./catalog-runtime-CfwKT0sn.js").then((n) => n.t),
 		readPlugins(),
 		readSkillReports()
 	]);
@@ -4779,7 +4780,7 @@ async function readRuntimeInfoReport() {
 /** Read sanitized operational summaries contributed by plugins. */
 async function readPluginOperationalReportFeed() {
 	const nowMs = Date.now();
-	const { getPluginOperationalReports } = await import("./agent-hooks-V4Hfc2tB.js").then((n) => n.t);
+	const { getPluginOperationalReports } = await import("./agent-hooks-9q2zdKHL.js").then((n) => n.t);
 	return pluginOperationalReportFeedSchema.parse({
 		source: "plugins",
 		generatedAt: new Date(nowMs).toISOString(),

package/dist/{app-BsBUs3rF.d.ts → app-Bo0kB987.d.ts}

@@ -80,7 +80,7 @@ interface RuntimeLimits {
  * Add new keys here as features graduate from private experiments; remove them
  * once they become stable defaults.
  */
-declare const EXPERIMENTAL_FEATURES: readonly ["operator-tools", "passive-routing", "subagents"];
+declare const EXPERIMENTAL_FEATURES: readonly ["operator-tools", "passive-routing"];
 /** One known experimental feature name. */
 type ExperimentalFeature = (typeof EXPERIMENTAL_FEATURES)[number];
 /** App-level opt-ins for unstable product features. */
@@ -251,6 +251,11 @@ interface JuniorAppOptions extends BotModelConfig {
      * `JUNIOR_CROSS_ACTOR_MID_RUN_MODE` or `follow_up`.
      */
     crossActorMidRunMode?: CrossActorMidRunMode;
+    /**
+     * Slack user IDs of bots that may start a Turn from a mention or DM. Bots
+     * have no profile email, so `allowedDomains` blocks them otherwise.
+     */
+    allowedBotUserIds?: string[];
   };
   /** Install-wide provider defaults. Unregistered `provider.key` entries warn at startup. */
   configDefaults?: Record<string, unknown>;

package/dist/app.d.ts

@@ -1,4 +1,4 @@
-import { i as ModelProfileInput, n as createApp, r as JuniorDashboardOptions, t as JuniorAppOptions } from "./app-BsBUs3rF.js";
+import { i as ModelProfileInput, n as createApp, r as JuniorDashboardOptions, t as JuniorAppOptions } from "./app-Bo0kB987.js";
 import { i as defineJuniorPlugins, n as JuniorPluginSet, r as JuniorPluginSetOptions, t as JuniorPluginInput } from "./plugins-B_0Cr0MO.js";
 import { t as JUNIOR_VERSION } from "./version-Cc2OFd9G.js";
 export { JUNIOR_VERSION, JuniorAppOptions, type JuniorDashboardOptions, type JuniorPluginInput, type JuniorPluginSet, type JuniorPluginSetOptions, type ModelProfileInput, createApp, defineJuniorPlugins };

package/dist/app.js

@@ -1,37 +1,37 @@
-import { $ as projectConversationMessages, C as automationVersionOf, Cn as resolveSandboxEgressProviderForHost, Dn as clearSandboxEgressSignals, En as SANDBOX_EGRESS_PROXY_PATH, Hn as slackMention, In as resolveBaseUrl, Ln as startOAuthFlow, On as consumeSandboxEgressAuthRequiredSignal, Pn as formatProviderLabel, Tn as shouldPropagateSandboxEgressTrace, X as appendConversationMessages, Xn as slackEntitySchema, Zn as slackExternalRefIdSchema, _n as isExperimentalFeatureEnabled, ar as setConfigDefaults, b as admitEventAutomationRun, bn as createUserTokenStore, c as withScheduledAutomationLock, cn as SubscribedReplyReason, dn as getThreadStopDecision, gn as getExperimentalFeatures, i as readScheduledAutomation, ir as getConfigDefaults, jn as parseSandboxEgressCredentialToken, kn as consumeSandboxEgressPermissionDeniedSignal, l as blockEventAutomation, n as listScheduledAutomationsForTeam, nt as settleConversationTitleWork, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, s as scheduledRunId, u as collectEventAutomationMatchKeys, vn as setExperimentalFeatures, wn as normalizeSandboxEgressTracePropagationDomains, x as eventAutomationRunLimitReason, yn as executeCredentialedEgressRequest } from "./tasks-CjrS098O.js";
-import { C as withContext, M as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, R as normalizeIdentityEmail, T as withSpan, b as setSpanStatus, f as logException, k as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, m as logWarn, p as logInfo, r as createRequestContext, v as setSentryUser, w as withLogContext, y as setSpanAttributes } from "./logging-DSMmkHXG.js";
+import { $ as projectConversationMessages, An as parseSandboxEgressCredentialToken, C as automationVersionOf, Cn as normalizeSandboxEgressTracePropagationDomains, Dn as consumeSandboxEgressAuthRequiredSignal, En as clearSandboxEgressSignals, Fn as resolveBaseUrl, In as startOAuthFlow, Nn as formatProviderLabel, On as consumeSandboxEgressPermissionDeniedSignal, Sn as resolveSandboxEgressProviderForHost, Tn as SANDBOX_EGRESS_PROXY_PATH, Vn as slackMention, X as appendConversationMessages, Xn as slackExternalRefIdSchema, Yn as slackEntitySchema, _n as setExperimentalFeatures, b as admitEventAutomationRun, c as withScheduledAutomationLock, cn as SubscribedReplyReason, dn as getThreadStopDecision, gn as isExperimentalFeatureEnabled, hn as getExperimentalFeatures, i as readScheduledAutomation, ir as setConfigDefaults, l as blockEventAutomation, n as listScheduledAutomationsForTeam, nt as settleConversationTitleWork, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, rr as getConfigDefaults, s as scheduledRunId, u as collectEventAutomationMatchKeys, vn as executeCredentialedEgressRequest, wn as shouldPropagateSandboxEgressTrace, x as eventAutomationRunLimitReason, yn as createUserTokenStore } from "./tasks-Bh2qYaed.js";
+import { C as withContext, M as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, R as normalizeIdentityEmail, T as withSpan, b as setSpanStatus, f as logException, k as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, m as logWarn, p as logInfo, r as createRequestContext, v as setSentryUser, w as withLogContext, y as setSpanAttributes } from "./logging-dZN1Bvtu.js";
 import { n as captureMessage, r as continueTrace } from "./sentry-BBUlHih9.js";
-import { t as JUNIOR_VERSION } from "./version-Ct049vav.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-ULs6Zl9b.js";
+import { t as JUNIOR_VERSION } from "./version-JcDaJ75p.js";
+import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-BiCtNiu5.js";
 import { _ as slackMessageTsSchema, d as parseSlackTeamId, f as parseSlackUserId, h as slackUserIdSchema, m as slackTeamIdSchema, o as parseActorUserId, p as slackChannelIdSchema } from "./actor-tlxzqaRe.js";
-import { N as recordGoogleSignIn, _ as withConversationMutationLock, c as getConversationEventStore, d as getDb, f as getSqlExecutor, m as withConversationEventLock, r as readActorIdentity, u as getConversationStore } from "./viewer-C-J0ewlH.js";
-import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-Qfz7dWgU.js";
-import { a as juniorAutomationRuns, f as juniorConversationBriefs, h as juniorConversationEvents, s as juniorAutomations } from "./executor-BoGNVEDn.js";
-import { m as credentialLogContext } from "./registry-BL-osYWN.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-Bpcs2b2L.js";
-import { B as stopConversationSession, C as requestAttachmentDeletion, L as effectiveTaskOutcomes, M as logScheduledAutomationRunSkipped, N as scheduledAutomationRunAttributes, T as parseSlackThreadId, V as recordSubagentEnded, _ as unpublishedArtifactHeaders, g as readPublicArtifact, h as publicArtifactHeaders, n as executeAgentRun, ot as listPendingAgentInvocationMailboxAppends, st as listPendingAgentInvocationResults, t as createAgentRunner, v as lookupSlackUserProfile, vt as processWorkspaceSnapshotJob, x as collectAttachmentGarbage, yt as ingestEvent } from "./agent-runner-DvTUyGTY.js";
-import { $ as bindSlackDirectCredentialSubject, Gt as listConversationAnnotations, Ht as resolveRootVisibility, Q as bindScheduledAutomationCredentialSubject, Tt as readConversationAccessFromSql, U as collectEventMatchKeys, X as takeDueTimerWatches, Z as bindEventAutomationCredentialSubject, _t as getDashboardConversationLink, a as getPluginRoutes, bt as setDashboardConversationLinkOptions, ct as getSlackClient, d as setPlugins, et as verifyEventAutomationCredentialSubject, f as validatePlugins, h as setBriefsConfig, ht as runWithWorkspaceTeamId, i as getPluginApiRoutes, mt as getWorkspaceTeamId, nt as verifySlackDirectCredentialSubject, q as findMatchingWatches, tt as verifyScheduledAutomationCredentialSubject, u as getPlugins, ut as isDmChannel, wt as createPluginLogger, xt as createPluginState, yt as getDashboardTaskLink } from "./agent-hooks-V4Hfc2tB.js";
+import { N as recordGoogleSignIn, _ as withConversationMutationLock, c as getConversationEventStore, d as getDb, f as getSqlExecutor, m as withConversationEventLock, r as readActorIdentity, u as getConversationStore } from "./viewer-oMTUVAcR.js";
+import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
+import { a as juniorAutomationRuns, f as juniorConversationBriefs, h as juniorConversationEvents, s as juniorAutomations } from "./executor-O8xqLDN6.js";
+import { m as credentialLogContext } from "./registry-BUje_knT.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-CfwKT0sn.js";
+import { B as stopConversationSession, C as requestAttachmentDeletion, L as effectiveTaskOutcomes, M as logScheduledAutomationRunSkipped, N as scheduledAutomationRunAttributes, St as ingestEvent, T as parseSlackThreadId, V as recordSubagentEnded, _ as unpublishedArtifactHeaders, ct as listPendingAgentInvocationResults, g as readPublicArtifact, h as publicArtifactHeaders, n as executeAgentRun, st as listPendingAgentInvocationMailboxAppends, t as createAgentRunner, v as lookupSlackUserProfile, x as collectAttachmentGarbage, xt as processWorkspaceSnapshotJob } from "./agent-runner-Cx6NO5LE.js";
+import { $ as bindSlackDirectCredentialSubject, Gt as listConversationAnnotations, Ht as resolveRootVisibility, Q as bindScheduledAutomationCredentialSubject, Tt as readConversationAccessFromSql, U as collectEventMatchKeys, X as takeDueTimerWatches, Xt as createPluginCache, Z as bindEventAutomationCredentialSubject, Zt as createCache, _t as getDashboardConversationLink, a as getPluginRoutes, bt as setDashboardConversationLinkOptions, ct as getSlackClient, d as setPlugins, et as verifyEventAutomationCredentialSubject, f as validatePlugins, h as setBriefsConfig, ht as runWithWorkspaceTeamId, i as getPluginApiRoutes, mt as getWorkspaceTeamId, nt as verifySlackDirectCredentialSubject, q as findMatchingWatches, tt as verifyScheduledAutomationCredentialSubject, u as getPlugins, ut as isDmChannel, wt as createPluginLogger, xt as createPluginState, yt as getDashboardTaskLink } from "./agent-hooks-9q2zdKHL.js";
+import { r as getStateAdapter, s as withLock$1 } from "./adapter-t-Y9RHML.js";
 import { n as getNextRunAtMs } from "./cadence-R7Em4RjE.js";
 import { M as annotationCard } from "./conversation-CvuKJ3tA.js";
-import { r as getStateAdapter, s as withLock$1 } from "./adapter-Dj5BTJRd.js";
-import { M as renderTaskInput, S as eventGuidance, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-HfKx-pky.js";
-import { f as setSandboxResourceConfig, u as getSandboxResourceConfig } from "./resolve-HuPG2VMB.js";
-import { a as getVercelConversationWorkQueue, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-CbdVyaCo.js";
-import { A as hasRunnableConversationWork$1, M as isInvalidConversationRecordError, O as CONVERSATION_WORK_STALE_ENQUEUE_MS, S as removeActiveConversation, _ as hasRunnableConversationWork, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-DzRbd5VT.js";
+import { M as renderTaskInput, S as eventGuidance, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-ZuyOHxdK.js";
+import { f as setSandboxResourceConfig, u as getSandboxResourceConfig } from "./resolve-DftZiYNU.js";
+import { a as getVercelConversationWorkQueue, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-DmarAQGI.js";
+import { A as hasRunnableConversationWork$1, M as isInvalidConversationRecordError, O as CONVERSATION_WORK_STALE_ENQUEUE_MS, S as removeActiveConversation, _ as hasRunnableConversationWork, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-dZynGGFW.js";
 import { D as scheduledRunSchema } from "./automation-DrpcA-SX.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-BrXMYPyo.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-DtcovXqq.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-DOm9Y6qI.js";
-import { A as THREAD_OPTOUT_ACK, C as buildSlackInboundMessage, D as normalizeIncomingSlackThreadId, E as stopSlackThread, F as renderSlackObjectCard, I as createVercelAttachmentStorage, M as parseContent, N as runWithSlackInstallation, O as withNormalizedThreadId, P as verifySlackSignature, R as enqueueAgentDispatch, S as recordSkippedConversationMessage, T as isSlackMessageStopped, a as recordWebConversationActivity, c as createProductionSlackWebhookServices, f as createSlackWebApiStatusSender, j as startProcessingReaction, k as stopConversationTurn, l as getProductionSlackAdapter, n as conversationTurnIdForMessage, o as webActorFromEmail, s as createProductionConversationWorkOptions, t as appendAndEnqueueWebMessage, v as readViewerAutomationSummary, w as clearSlackPendingReactions, z as GET$3 } from "./web-input-C_xB3RXp.js";
-import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-DGnd_B5X.js";
-import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-DS7V4a3-.js";
-import { r as enqueueAgentInvocation } from "./work-D829Ue7k.js";
-import { s as coerceThreadConversationState } from "./thread-state-CqkYowEz.js";
-import { o as unlinkProvider } from "./connections-CZ7HhEmN.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-BKcv5rBe.js";
-import { a as registerVercelPluginTaskDevConsumer, n as createVercelPluginTaskCallback, s as queueCallback } from "./task-queue-9LICOzcL.js";
-import { t as processConversationWork } from "./worker-BRTYzlpk.js";
-import { t as bindMessageAgent } from "./message-zaj5gBbS.js";
-import { t as bindSpawnAgent } from "./spawn-BWqK6EwM.js";
+import { A as THREAD_OPTOUT_ACK, C as buildSlackInboundMessage, D as normalizeIncomingSlackThreadId, E as stopSlackThread, F as renderSlackObjectCard, I as createVercelAttachmentStorage, M as parseContent, N as runWithSlackInstallation, O as withNormalizedThreadId, P as verifySlackSignature, R as enqueueAgentDispatch, S as recordSkippedConversationMessage, T as isSlackMessageStopped, a as recordWebConversationActivity, c as createProductionSlackWebhookServices, f as createSlackWebApiStatusSender, j as startProcessingReaction, k as stopConversationTurn, l as getProductionSlackAdapter, n as conversationTurnIdForMessage, o as webActorFromEmail, s as createProductionConversationWorkOptions, t as appendAndEnqueueWebMessage, v as readViewerAutomationSummary, w as clearSlackPendingReactions, z as GET$3 } from "./web-input-FQ5wgqYn.js";
+import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-BRgJ5e0s.js";
+import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-CRMRT9CE.js";
+import { r as enqueueAgentInvocation } from "./work-BiIKfayl.js";
+import { s as coerceThreadConversationState } from "./thread-state-DA37FsAT.js";
+import { o as unlinkProvider } from "./connections-D9IKbfk-.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-Bu6ZOuOk.js";
+import { a as registerVercelPluginTaskDevConsumer, n as createVercelPluginTaskCallback, s as queueCallback } from "./task-queue-CmMCtzHO.js";
+import { t as processConversationWork } from "./worker-BZ7l75NM.js";
+import { t as bindMessageAgent } from "./message-C_g2S8kv.js";
+import { t as bindSpawnAgent } from "./spawn-DovpdlrW.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
 import { z } from "zod";
@@ -260,6 +260,7 @@ function createHeartbeatContext(args) {
 	let dispatchCount = 0;
 	return {
 		plugin: { name: pluginName },
+		cache: createPluginCache(pluginName),
 		nowMs: args.nowMs,
 		db: getDb(),
 		state: createPluginState(pluginName),
@@ -2319,34 +2320,25 @@ async function isSlackWorkspaceMember(raw, state) {
 	const event = parsed.data;
 	const userId = parseSlackUserId(event.user);
 	if (!userId) return false;
+	const cache = createCache(state, "core");
 	const key = `slack:membership:${workspaceTeamId}:${userId}`;
 	const authorTeam = parseSlackTeamId(event.user_team);
 	if (authorTeam === workspaceTeamId) return true;
 	if (event.user_team !== void 0 && !authorTeam && !/^E[A-Z0-9]+$/.test(event.user_team)) return false;
-	const explicitlyExternal = authorTeam !== void 0;
-	if (!explicitlyExternal) {
-		const cached = await state.get(key);
-		if (typeof cached === "boolean") return cached;
-	}
-	const result = await withLock$1(state, `${key}:lookup`, async () => {
-		if (explicitlyExternal) {
-			await state.set(key, false, NON_MEMBER_TTL_MS);
-			return false;
-		}
-		const cached = await state.get(key);
-		if (typeof cached === "boolean") return cached;
+	if (authorTeam !== void 0) return await cache.getOrLoad(key, async () => ({
+		value: false,
+		ttlMs: NON_MEMBER_TTL_MS
+	}), { refresh: true });
+	return await cache.getOrLoad(key, async () => {
 		const user = await lookupSlackUserProfile(userId);
 		const authorTeam = parseSlackTeamId(user.team_id);
-		if (user.id !== userId || !authorTeam) return false;
+		if (user.id !== userId || !authorTeam) return { value: false };
 		const member = authorTeam === workspaceTeamId && !user.is_deleted;
-		await state.set(key, member, member ? MEMBER_TTL_MS : NON_MEMBER_TTL_MS);
-		return member;
-	}, {
-		keepAlive: true,
-		waitMs: 1e4
+		return {
+			value: member,
+			ttlMs: member ? MEMBER_TTL_MS : NON_MEMBER_TTL_MS
+		};
 	});
-	if (!result.acquired) throw new Error("Could not acquire Slack membership lookup lock");
-	return result.value;
 }
 // src/chat/sign-in/allowlist.ts
 /**
@@ -2396,23 +2388,26 @@ const NOT_ALLOWED_TTL_MS = 3e4;
 /**
 * Return whether a Slack author may start a Turn. With allowed domains, the
 * email of the author's Slack profile must be on one of them. Slack verifies
-* that email, so Junior trusts it. Without allowed domains, every author may.
+* that email, so Junior trusts it. Bots have no profile email, so the allowed
+* bot user IDs skip this check. Without allowed domains, every author may.
 */
 async function isSlackAuthorDomainAllowed(args) {
 	if (args.allowedDomains.length === 0) return true;
 	const userId = parseSlackUserId(args.user);
 	if (!args.teamId || !userId) return false;
-	const key = `slack:allowed-domain:${args.teamId}:${userId}`;
-	const cached = await args.state.get(key);
-	if (typeof cached === "boolean") return cached;
-	const profile = await lookupSlackUserProfile(userId);
-	const email = profile.email?.toLowerCase();
-	const separator = email?.lastIndexOf("@") ?? -1;
-	const domain = separator > 0 ? email?.slice(separator + 1) : void 0;
-	const allowed = profile.id === userId && isAllowedDomain(domain, args.allowedDomains);
-	if (!allowed) logWarn("slack.allowed_domain.rejected", { "app.reason": email ? "domain_not_allowed" : "missing_email" });
-	await args.state.set(key, allowed, allowed ? ALLOWED_TTL_MS : NOT_ALLOWED_TTL_MS);
-	return allowed;
+	if (args.allowedBotUserIds.includes(userId)) return true;
+	return await createCache(args.state, "core").getOrLoad(`slack:allowed-domain:${args.teamId}:${userId}`, async () => {
+		const profile = await lookupSlackUserProfile(userId);
+		const email = profile.email?.toLowerCase();
+		const separator = email?.lastIndexOf("@") ?? -1;
+		const domain = separator > 0 ? email?.slice(separator + 1) : void 0;
+		const allowed = profile.id === userId && isAllowedDomain(domain, args.allowedDomains);
+		if (!allowed) logWarn("slack.allowed_domain.rejected", { "app.reason": email ? "domain_not_allowed" : "missing_email" });
+		return {
+			value: allowed,
+			ttlMs: allowed ? ALLOWED_TTL_MS : NOT_ALLOWED_TTL_MS
+		};
+	});
 }
 // src/chat/ingress/slack-message-telemetry.ts
 function field(value, pattern) {
@@ -2835,6 +2830,7 @@ async function routeParsedMessage(args) {
 		return;
 	}
 	if (route === "mention" && !await isSlackAuthorDomainAllowed({
+		allowedBotUserIds: args.allowedBotUserIds,
 		allowedDomains: args.allowedDomains,
 		state: args.state,
 		teamId: args.installation.teamId,
@@ -2956,6 +2952,7 @@ async function handleSlackEvent(args) {
 					conversationStore: args.services.conversationStore,
 					queue: args.services.queue,
 					receivedAtMs,
+					allowedBotUserIds: args.services.allowedBotUserIds ?? [],
 					allowedDomains: args.services.allowedDomains ?? [],
 					state
 				}), {
@@ -5055,8 +5052,7 @@ function readGoogleClaims(idToken) {
 	} catch {
 		return;
 	}
-	const parsed = googleClaimsSchema.safeParse(payload);
-	return parsed.success ? parsed.data : void 0;
+	return googleClaimsSchema.safeParse(payload).success ? payload : void 0;
 }
 function trimSlashes(value, leading) {
 	let start = 0;
@@ -5106,7 +5102,6 @@ function createBetterAuth(config) {
 				if (!isAllowedDomain(claims.hd, allowedDomains)) return null;
 				return {
 					user: {
-						id: claims.sub,
 						email: claims.email,
 						emailVerified: claims.email_verified === true,
 						image: claims.picture,
@@ -5593,6 +5588,7 @@ async function createApp(options) {
 			queue: conversationWorkQueue,
 			services: runtimeServiceOverrides
 		}),
+		allowedBotUserIds: options?.slack?.allowedBotUserIds ?? [],
 		allowedDomains
 	};
 	const app = new Hono();

package/dist/{assistant-reply-CEOMzsWy.js → assistant-reply-B2qUBAwL.js}

@@ -1,4 +1,4 @@
-import { Gt as extractAssistantText } from "./tasks-CjrS098O.js";
+import { Gt as extractAssistantText } from "./tasks-Bh2qYaed.js";
 // src/chat/no-reply.ts
 const NO_REPLY_MARKER = "[[NO_REPLY]]";
 /**

package/dist/{briefs-BSCkyYqs.js → briefs-DsGH2Vym.js}

@@ -1,4 +1,4 @@
-import { i as completeObject } from "./client-JeyzRwsT.js";
+import { i as completeObject } from "./client-DpfjZgNk.js";
 import { r as defaultModelId } from "./model-profile-Bg8EoCKD.js";
 import { J as parseBriefInput, W as briefCodeChangeSchema, d as conversationDetailReportSchema, p as conversationEventPageSchema } from "./conversation-CvuKJ3tA.js";
 import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-DeVax2qO.js";
@@ -267,7 +267,7 @@ async function parseRunOptions(argv) {
 * `DATABASE_URL` at import, and `briefs pull` must work with only a token.
 */
 async function configuredDefaultModelId() {
-	const { botConfig } = await import("./config-ULs6Zl9b.js").then((n) => n.r);
+	const { botConfig } = await import("./config-BiCtNiu5.js").then((n) => n.r);
 	return defaultModelId(botConfig);
 }
 function apiUrl(baseUrl, pathname) {

package/dist/{catalog-runtime-Bpcs2b2L.js → catalog-runtime-CfwKT0sn.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { t as createPluginCatalogRuntime } from "./registry-BL-osYWN.js";
+import { t as createPluginCatalogRuntime } from "./registry-BUje_knT.js";
 // src/chat/plugins/catalog-runtime.ts
 var catalog_runtime_exports = /* @__PURE__ */ __exportAll({ pluginCatalogRuntime: () => pluginCatalogRuntime });
 const pluginCatalogRuntime = createPluginCatalogRuntime();

package/dist/cli/chat.js

@@ -1,4 +1,4 @@
-import { n as executeAgentRun, t as createAgentRunner } from "../agent-runner-DvTUyGTY.js";
+import { n as executeAgentRun, t as createAgentRunner } from "../agent-runner-Cx6NO5LE.js";
 import { t as loadAppPluginSet } from "../plugin-module-Cf5gVPWP.js";
 import path from "node:path";
 import { createHash, randomUUID } from "node:crypto";
@@ -99,10 +99,10 @@ async function loadLocalPluginSet() {
 async function configureLocalChatPlugins(pluginSet) {
 	const [pluginsModule, agentHooksModule, catalogRuntimeModule, validationModule, databaseModule] = await Promise.all([
 		import("../plugins-DOm9Y6qI.js").then((n) => n.o),
-		import("../agent-hooks-V4Hfc2tB.js").then((n) => n.t),
-		import("../catalog-runtime-Bpcs2b2L.js").then((n) => n.t),
-		import("../validation-BrXMYPyo.js").then((n) => n.r),
-		import("../viewer-C-J0ewlH.js").then((n) => n.s)
+		import("../agent-hooks-9q2zdKHL.js").then((n) => n.t),
+		import("../catalog-runtime-CfwKT0sn.js").then((n) => n.t),
+		import("../validation-DtcovXqq.js").then((n) => n.r),
+		import("../viewer-oMTUVAcR.js").then((n) => n.s)
 	]);
 	const resolvedPluginSet = pluginSet === void 0 ? await loadLocalPluginSet() : pluginSet ?? void 0;
 	const plugins = pluginsModule.pluginRuntimeRegistrationsFromPluginSet(resolvedPluginSet);
@@ -152,21 +152,19 @@ function localDevServerUrl() {
 async function prepareLocalChatRun(io, pluginSet) {
 	defaultStateAdapterForLocalChat();
 	await configureLocalChatPlugins(pluginSet);
-	const { setExperimentalFeatures } = await import("../tasks-CjrS098O.js").then((n) => n.hn);
-	setExperimentalFeatures({ subagents: true });
-	const { setBriefsConfig } = await import("../agent-hooks-V4Hfc2tB.js").then((n) => n.m);
+	const { setBriefsConfig } = await import("../agent-hooks-9q2zdKHL.js").then((n) => n.m);
 	setBriefsConfig({ enabled: true });
-	const { runLocalAgentTurn } = await import("../runner-Cba_OfGl.js");
-	const { startLocalOAuthCallbackServer } = await import("../oauth-callback-server-yYFG8Own.js");
+	const { runLocalAgentTurn } = await import("../runner-4mmL2Pt1.js");
+	const { startLocalOAuthCallbackServer } = await import("../oauth-callback-server-DvvOvr4q.js");
 	const { createLocalOAuthState } = await import("../oauth-relay-CTygMkNx.js").then((n) => n.t);
-	const { createLocalSandboxEgressSignalTransport } = await import("../sandbox-egress-signals-C7NcPzea.js");
-	const { bindSpawnAgent } = await import("../spawn-BWqK6EwM.js").then((n) => n.n);
-	const { bindMessageAgent } = await import("../message-zaj5gBbS.js").then((n) => n.n);
-	const { createAgentInvocationWorker, routeAgentInvocationWork } = await import("../work-D829Ue7k.js").then((n) => n.a);
-	const { startAgentInvocationsForChildInput } = await import("../result-DS7V4a3-.js").then((n) => n.r);
-	const { skipInputBeforeConversationStop } = await import("../session-stop-HfKx-pky.js").then((n) => n.r);
+	const { createLocalSandboxEgressSignalTransport } = await import("../sandbox-egress-signals-1ysv0z5A.js");
+	const { bindSpawnAgent } = await import("../spawn-DovpdlrW.js").then((n) => n.n);
+	const { bindMessageAgent } = await import("../message-C_g2S8kv.js").then((n) => n.n);
+	const { createAgentInvocationWorker, routeAgentInvocationWork } = await import("../work-BiIKfayl.js").then((n) => n.a);
+	const { startAgentInvocationsForChildInput } = await import("../result-CRMRT9CE.js").then((n) => n.r);
+	const { skipInputBeforeConversationStop } = await import("../session-stop-ZuyOHxdK.js").then((n) => n.r);
 	const { createLocalConversationWork } = await import("../conversation-work-BaT_T6EB.js");
-	const { processConversationWork } = await import("../worker-BRTYzlpk.js").then((n) => n.n);
+	const { processConversationWork } = await import("../worker-BZ7l75NM.js").then((n) => n.n);
 	let agentRunner;
 	const localConversationWork = createLocalConversationWork(async (message) => {
 		if (!agentRunner) throw new Error("Local agent runner is not ready");

package/dist/cli/check.js

@@ -1,6 +1,6 @@
-import { E as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, N as LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION, O as JUNIOR_HEARTBEAT_ROUTE } from "../logging-DSMmkHXG.js";
-import { v as parseInlinePluginManifest, y as parsePluginManifest } from "../registry-BL-osYWN.js";
-import { i as parseSkillFile } from "../skills-D6_bcAuW.js";
+import { E as JUNIOR_CONVERSATION_WORK_CALLBACK_ROUTE, N as LEGACY_JUNIOR_CONVERSATION_WORK_FUNCTION, O as JUNIOR_HEARTBEAT_ROUTE } from "../logging-dZN1Bvtu.js";
+import { v as parseInlinePluginManifest, y as parsePluginManifest } from "../registry-BUje_knT.js";
+import { i as parseSkillFile } from "../skills-lPeepA2b.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { pathToFileURL } from "node:url";

package/dist/cli/init.js

@@ -136,7 +136,7 @@ async function runInit(dir, log = console.log) {
 			"@sentry/junior-memory": "latest",
 			"@sentry/junior-maintenance": "latest",
 			"@sentry/nitro": "10.65.0",
-			hono: "^4.12.27"
+			hono: "^4.13.11"
 		},
 		devDependencies: {
 			"@types/node": "^25.9.1",

package/dist/cli/main.js

@@ -25,13 +25,13 @@ async function runChat(argv, pluginSet) {
 	return await (await import("./chat.js")).runChat(argv, void 0, { pluginSet });
 }
 async function runAdmin(argv) {
-	return await (await import("../admin-tzkZDqrH.js")).runAdmin(argv);
+	return await (await import("../admin-BCqeFndQ.js")).runAdmin(argv);
 }
 async function runServiceAccount(argv) {
-	return await (await import("../service-account-DqwHhwJA.js")).runServiceAccount(argv);
+	return await (await import("../service-account-B1sH3P7d.js")).runServiceAccount(argv);
 }
 async function runBriefs(argv) {
-	return await (await import("../briefs-BSCkyYqs.js")).runBriefs(argv);
+	return await (await import("../briefs-DsGH2Vym.js")).runBriefs(argv);
 }
 function topLevelCommand(argv) {
 	return (argv[0] === "--" ? argv.slice(1) : argv)[0];

package/dist/cli/plugins.js

@@ -1,7 +1,7 @@
-import { d as getDb } from "../viewer-C-J0ewlH.js";
-import { n as pluginCatalogRuntime } from "../catalog-runtime-Bpcs2b2L.js";
-import { d as setPlugins, f as validatePlugins, wt as createPluginLogger } from "../agent-hooks-V4Hfc2tB.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-BrXMYPyo.js";
+import { d as getDb } from "../viewer-oMTUVAcR.js";
+import { n as pluginCatalogRuntime } from "../catalog-runtime-CfwKT0sn.js";
+import { d as setPlugins, f as validatePlugins, wt as createPluginLogger } from "../agent-hooks-9q2zdKHL.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "../validation-DtcovXqq.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, i as pluginCliRegistrationsFromPluginSet, r as pluginCatalogConfigFromPluginSet } from "../plugins-DOm9Y6qI.js";
 import { t as loadAppPluginSet } from "../plugin-module-Cf5gVPWP.js";
 import { stderr, stdout } from "node:process";