@sentry/junior 0.262.0 → 0.263.0

package/dist/{store-dZynGGFW.js → store-UlOrW6JC.js}

@@ -1,10 +1,10 @@
-import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-dZN1Bvtu.js";
-import { i as getChatConfig } from "./config-BiCtNiu5.js";
+import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-Dk_FpF36.js";
+import { i as getChatConfig } from "./config-Dnv8KmNs.js";
 import { s as parseStoredSlackActor } from "./actor-tlxzqaRe.js";
-import { B as sameDestination, R as parseDestination, u as getConversationStore } from "./viewer-oMTUVAcR.js";
-import { gt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-9q2zdKHL.js";
-import { n as getDefaultRedisStateAdapterFor, r as getStateAdapter } from "./adapter-t-Y9RHML.js";
-import "./job-queue-DmarAQGI.js";
+import { B as sameDestination, R as parseDestination, u as getConversationStore } from "./viewer-DmNRM88V.js";
+import { gt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-CqnZfuCt.js";
+import { n as getDefaultRedisStateAdapterFor, r as getStateAdapter } from "./adapter-BIacI0Bt.js";
+import "./job-queue-B4yTgklN.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { destinationSchema } from "@sentry/junior-plugin-api";

package/dist/{task-queue-CmMCtzHO.js → task-queue-BRB49H-J.js}

@@ -1,5 +1,5 @@
-import { m as logWarn } from "./logging-dZN1Bvtu.js";
-import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-DmarAQGI.js";
+import { m as logWarn } from "./logging-Dk_FpF36.js";
+import { c as QUEUE_SIGNATURE_MAX_AGE_MS, d as createVercelQueueClient, l as signQueueMessage, p as runWithTurnRequestDeadline, u as verifyQueueMessage } from "./job-queue-B4yTgklN.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { handleCallback, registerDevConsumer } from "@vercel/queue";
@@ -114,7 +114,7 @@ function pluginTaskCallback() {
 		maxDeliveries: PLUGIN_TASK_MAX_DELIVERIES,
 		onRejected: logPluginTaskQueueMessageRejected,
 		run: async (message) => {
-			const { processPluginTask } = await import("./task-runner-BRgJ5e0s.js").then((n) => n.r);
+			const { processPluginTask } = await import("./task-runner-C575f2Dd.js").then((n) => n.r);
 			await processPluginTask(message);
 		},
 		topic: PLUGIN_TASK_QUEUE_TOPIC,

package/dist/{task-runner-BRgJ5e0s.js → task-runner-C575f2Dd.js}

@@ -1,17 +1,17 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { $t as isToolResultError, Gn as openSlackDirectMessage, Kn as postSlackMessage, Kt as getPiMessageRole, Ln as escapeSlackMrkdwnText, Pt as getTurnRecord, Rn as formatSlackLink, Xt as instructionTextForProjection, Z as hydrateConversationMessages, en as isToolResultMessage, i as readScheduledAutomation, l as blockEventAutomation, m as getEventAutomation, rn as stripRuntimeTurnContext, rt as fallbackShortTitle, tn as normalizeToolNameFromResult } from "./tasks-Bh2qYaed.js";
-import { g as runBestEffort, m as logWarn } from "./logging-dZN1Bvtu.js";
+import { $t as isToolResultMessage, Gt as getPiMessageRole, Kn as openSlackDirectMessage, Nt as getTurnRecord, Qt as isToolResultError, Rn as escapeSlackMrkdwnText, X as hydrateConversationMessages, Yt as instructionTextForProjection, en as normalizeToolNameFromResult, i as readScheduledAutomation, l as blockEventAutomation, m as getEventAutomation, nn as stripRuntimeTurnContext, nt as fallbackShortTitle, qn as postSlackMessage, zn as formatSlackLink } from "./tasks-LOItiYgL.js";
+import { g as runBestEffort, m as logWarn } from "./logging-Dk_FpF36.js";
 import { g as parseSlackMessageTs } from "./actor-tlxzqaRe.js";
-import { T as agentTurnTotalTokens, d as getDb, r as readActorIdentity, u as getConversationStore, w as agentTurnCostUsd } from "./viewer-oMTUVAcR.js";
+import { T as agentTurnTotalTokens, d as getDb, r as readActorIdentity, u as getConversationStore, w as agentTurnCostUsd } from "./viewer-DmNRM88V.js";
 import { s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { a as juniorAutomationRuns, s as juniorAutomations } from "./executor-O8xqLDN6.js";
+import { a as juniorAutomationRuns, s as juniorAutomations } from "./executor-J9k2sp9m.js";
 import { m as sameActorIdentity } from "./history-AY8rs-FR.js";
-import { h as credentialSubjectSchema } from "./registry-BUje_knT.js";
-import { Ct as createPluginModel, Pt as createPluginConversationEvents, St as createPluginEmbedder, Xt as createPluginCache, gt as JUNIOR_THREAD_STATE_TTL_MS, p as coreTaskRegistrations, u as getPlugins, wt as createPluginLogger, xt as createPluginState, yt as getDashboardTaskLink } from "./agent-hooks-9q2zdKHL.js";
-import { r as getStateAdapter } from "./adapter-t-Y9RHML.js";
-import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DA37FsAT.js";
-import { t as resolveConversationRouting } from "./turn-session-routing-DdbSbJS6.js";
-import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-CmMCtzHO.js";
+import { h as credentialSubjectSchema } from "./registry-BFzQFV_y.js";
+import { Ct as createPluginState, Et as createPluginLogger, It as createPluginConversationEvents, Qt as createPluginCache, Tt as createPluginModel, gt as JUNIOR_THREAD_STATE_TTL_MS, p as coreTaskRegistrations, u as getPlugins, wt as createPluginEmbedder, yt as getDashboardTaskLink } from "./agent-hooks-CqnZfuCt.js";
+import { r as getStateAdapter } from "./adapter-BIacI0Bt.js";
+import { r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-IDHdZA7R.js";
+import { t as resolveConversationRouting } from "./turn-session-routing-5Nyv4fso.js";
+import { i as pluginTaskParamsSchema, o as sendVercelPluginTask, r as pluginTaskId } from "./task-queue-BRB49H-J.js";
 import { z } from "zod";
 import { createHash } from "node:crypto";
 import { and, asc, count, desc, eq, gte, inArray, isNotNull, lte, max, sql } from "drizzle-orm";

package/dist/{tasks-Bh2qYaed.js → tasks-LOItiYgL.js}

@@ -1,19 +1,19 @@
-import { a as completeText, f as unwrapCurrentInstruction, p as escapeXml, s as resolveGatewayModel, y as isProviderRetryError } from "./client-DpfjZgNk.js";
-import { V as toOptionalString, f as logException, m as logWarn, o as getActiveTraceId, p as logInfo, s as getLogContextAttributes, t as buildTurnFailureResponse, u as logAudit, y as setSpanAttributes, z as isRecord } from "./logging-dZN1Bvtu.js";
+import { a as completeText, f as unwrapCurrentInstruction, p as escapeXml, s as resolveGatewayModel, y as isProviderRetryError } from "./client-DZBCBj1M.js";
+import { V as toOptionalString, f as logException, m as logWarn, o as getActiveTraceId, p as logInfo, s as getLogContextAttributes, t as buildTurnFailureResponse, u as logAudit, y as setSpanAttributes, z as isRecord } from "./logging-Dk_FpF36.js";
 import { n as captureMessage } from "./sentry-BBUlHih9.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-BiCtNiu5.js";
+import { n as botConfig, v as normalizeSlackEmojiName } from "./config-Dnv8KmNs.js";
 import { c as toStoredSlackActor, f as parseSlackUserId, g as parseSlackMessageTs } from "./actor-tlxzqaRe.js";
-import { C as addAgentTurnUsage, R as parseDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, m as withConversationEventLock, p as createSqlConversationEventStore, u as getConversationStore, x as bindProviderConversation, y as startLocationThread } from "./viewer-oMTUVAcR.js";
+import { C as addAgentTurnUsage, R as parseDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, m as withConversationEventLock, p as createSqlConversationEventStore, u as getConversationStore, x as bindProviderConversation, y as startLocationThread } from "./viewer-DmNRM88V.js";
 import { d as juniorDestinations } from "./agent-invocations-CxKldAeB.js";
-import { a as juniorAutomationRuns, l as juniorLocationConfigurations, o as juniorAutomationVersions, s as juniorAutomations } from "./executor-O8xqLDN6.js";
+import { a as juniorAutomationRuns, l as juniorLocationConfigurations, o as juniorAutomationVersions, s as juniorAutomations } from "./executor-J9k2sp9m.js";
 import { d as contextProvenance, f as instructionActors, n as agentHistoryItemSchema, p as instructionProvenanceFor } from "./history-AY8rs-FR.js";
-import { _ as CredentialUnavailableError, a as resolveAuthTokenPlaceholder, f as credentialContextForActor, h as credentialSubjectSchema, o as resolvePluginCommandEnv, p as credentialContextSchema } from "./registry-BUje_knT.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-CfwKT0sn.js";
-import { $t as agentsInstructionsUpdatedEvent, Qt as JUNIOR_NATIVE_EVENT_NAMESPACE, Xt as createPluginCache, ct as getSlackClient, dt as normalizeSlackConversationId, en as authenticationLinkedEvent, it as SlackActionError, n as applyPluginFormatMarkdown, pt as withSlackRetries, tn as authenticationUnlinkedEvent, u as getPlugins, ut as isDmChannel, wt as createPluginLogger } from "./agent-hooks-9q2zdKHL.js";
-import { a as acquireActiveLock, i as MUTATION_LOCK_TTL_MS, o as fenceLock, r as getStateAdapter, s as withLock } from "./adapter-t-Y9RHML.js";
-import { N as messageCardRef } from "./conversation-CvuKJ3tA.js";
-import { y as sleep } from "./profile-BP2N5uDY.js";
-import { A as eventAutomationSchema, E as scheduledAutomationSchema, S as automationVersionSchema } from "./automation-DrpcA-SX.js";
+import { _ as CredentialUnavailableError, a as resolveAuthTokenPlaceholder, f as credentialContextForActor, h as credentialSubjectSchema, o as resolvePluginCommandEnv, p as credentialContextSchema } from "./registry-BFzQFV_y.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Suf-aLlh.js";
+import { Et as createPluginLogger, Qt as createPluginCache, ct as getSlackClient, dt as normalizeSlackConversationId, en as JUNIOR_NATIVE_EVENT_NAMESPACE, it as SlackActionError, n as applyPluginFormatMarkdown, nn as authenticationLinkedEvent, pt as withSlackRetries, rn as authenticationUnlinkedEvent, tn as agentsInstructionsUpdatedEvent, u as getPlugins, ut as isDmChannel, xt as ToolInputError } from "./agent-hooks-CqnZfuCt.js";
+import { a as acquireActiveLock, i as MUTATION_LOCK_TTL_MS, o as fenceLock, r as getStateAdapter, s as withLock } from "./adapter-BIacI0Bt.js";
+import { N as messageCardRef } from "./conversation-B0baEwoA.js";
+import { y as sleep } from "./profile-Dq5I7TV1.js";
+import { A as eventAutomationSchema, E as scheduledAutomationSchema, S as automationVersionSchema } from "./automation-CWX0qL8U.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1336,12 +1336,10 @@ const sandboxEgressAuthRequiredSignalSchema = z.object({
 });
 const sandboxEgressPermissionDeniedSignalSchema = z.object({
 	account: pluginProviderAccountSchema.optional(),
-	acceptedPermissions: z.string().optional(),
 	grant: sandboxEgressGrantSchema,
 	message: z.string().min(1),
 	provider: providerNameSchema,
 	source: z.literal("upstream"),
-	sso: z.string().optional(),
 	status: httpStatusSchema,
 	upstreamHost: z.string().min(1),
 	upstreamPath: z.string().min(1),
@@ -2007,21 +2005,6 @@ function displayedUpstreamPath(upstreamUrl) {
 	if (upstreamUrl.hostname.toLowerCase() === "github.com" && (gitService === "git-upload-pack" || gitService === "git-receive-pack")) return `${upstreamUrl.pathname}?service=${gitService}`;
 	return upstreamUrl.pathname;
 }
-function upstreamPermissionAttributes(provider, upstream) {
-	if (provider !== "github") return {};
-	return {
-		"app.github.accepted_permissions": upstream.headers.get("x-accepted-github-permissions") ?? void 0,
-		"app.github.sso": upstream.headers.get("x-github-sso") ?? void 0
-	};
-}
-function githubPermissionHeaders(upstream) {
-	const acceptedPermissions = upstream.headers.get("x-accepted-github-permissions");
-	const sso = upstream.headers.get("x-github-sso");
-	return {
-		...acceptedPermissions ? { acceptedPermissions } : void 0,
-		...sso ? { sso } : void 0
-	};
-}
 function permissionDeniedMessage(provider, grant) {
 	return `${provider} returned HTTP 403 after the runtime injected the ${grant.name} grant. The request was forwarded; this is not a local runtime block.`;
 }
@@ -2193,8 +2176,7 @@ function leaseLogAttributes(input) {
 			provider: input.provider,
 			status: input.status
 		}),
-		...routingAttributes(input.request, input.upstreamUrl),
-		...input.upstream ? upstreamPermissionAttributes(input.provider, input.upstream) : void 0
+		...routingAttributes(input.request, input.upstreamUrl)
 	};
 }
 async function recordSandboxAuthRequired(input) {
@@ -2215,8 +2197,7 @@ async function recordSandboxPermissionDenied(input) {
 		source: "upstream",
 		status: input.upstream.status,
 		upstreamHost: input.upstreamUrl.hostname,
-		upstreamPath: displayedUpstreamPath(input.upstreamUrl),
-		...input.provider === "github" ? githubPermissionHeaders(input.upstream) : void 0
+		upstreamPath: displayedUpstreamPath(input.upstreamUrl)
 	});
 }
 /**
@@ -2326,13 +2307,12 @@ async function executeCredentialedEgressRequest(input) {
 	let leaseOrResponse = await resolveLease();
 	if (leaseOrResponse instanceof Response) return leaseOrResponse;
 	let lease = leaseOrResponse;
-	const attributes = (activeLease, status, upstream) => leaseLogAttributes({
+	const attributes = (activeLease, status) => leaseLogAttributes({
 		egressId: activeEgressId,
 		lease: activeLease,
 		provider,
 		request,
 		status,
-		...upstream ? { upstream } : void 0,
 		upstreamUrl
 	});
 	if (!hasSandboxEgressLeaseTransformForHost(lease, upstreamUrl.hostname)) {
@@ -2387,7 +2367,7 @@ async function executeCredentialedEgressRequest(input) {
 				authorization: error.authorization ?? lease.authorization,
 				message: error.message
 			});
-			logWarn("sandbox.egress.upstream_auth_requirement.classified", { ...attributes(lease, upstream.status, upstream) });
+			logWarn("sandbox.egress.upstream_auth_requirement.classified", { ...attributes(lease, upstream.status) });
 			await upstream.body?.cancel().catch(() => void 0);
 			return authRequiredResponse({
 				provider,
@@ -2406,12 +2386,12 @@ async function executeCredentialedEgressRequest(input) {
 			upstreamUrl
 		});
 		if (upstream.status >= 400) logWarn("sandbox.egress.upstream_response.failed", {
-			...attributes(lease, upstream.status, upstream),
+			...attributes(lease, upstream.status),
 			"error.type": `http_${upstream.status}`
 		});
 		if (upstream.status === UPSTREAM_TOKEN_REJECTION_STATUS) {
 			logWarn("sandbox.egress.upstream_auth.rejected", {
-				...attributes(lease, upstream.status, upstream),
+				...attributes(lease, upstream.status),
 				"app.sandbox.egress.www_authenticate": upstream.headers.get("www-authenticate") ?? void 0
 			});
 			await clearCredentialLease(provider, lease.grant, credentialContext);
@@ -2430,10 +2410,10 @@ async function executeCredentialedEgressRequest(input) {
 			});
 		}
 		if (upstream.status === UPSTREAM_PERMISSION_REJECTION_STATUS && !retriedAfter403) {
-			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status, upstream) });
+			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status) });
 			await clearCredentialLease(provider, lease.grant, credentialContext);
 			await upstream.body?.cancel().catch(() => void 0);
-			logWarn("sandbox.egress.upstream_auth.retrying", { ...attributes(lease, upstream.status, upstream) });
+			logWarn("sandbox.egress.upstream_auth.retrying", { ...attributes(lease, upstream.status) });
 			leaseOrResponse = await resolveLease();
 			if (leaseOrResponse instanceof Response) return leaseOrResponse;
 			lease = leaseOrResponse;
@@ -2441,7 +2421,7 @@ async function executeCredentialedEgressRequest(input) {
 			continue;
 		}
 		if (upstream.status === UPSTREAM_PERMISSION_REJECTION_STATUS) {
-			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status, upstream) });
+			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status) });
 			await clearCredentialLease(provider, lease.grant, credentialContext);
 			await recordPermissionDenied({
 				credentialContext,
@@ -2451,7 +2431,7 @@ async function executeCredentialedEgressRequest(input) {
 				upstream,
 				upstreamUrl
 			});
-			if (pluginPermissionDenied) logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status, upstream) });
+			if (pluginPermissionDenied) logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status) });
 			return new Response(upstream.body, {
 				status: upstream.status,
 				statusText: upstream.statusText,
@@ -2467,7 +2447,7 @@ async function executeCredentialedEgressRequest(input) {
 				upstream,
 				upstreamUrl
 			});
-			logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status, upstream) });
+			logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status) });
 		}
 		return new Response(upstream.body, {
 			status: upstream.status,
@@ -2959,6 +2939,17 @@ function buildDeterministicAssistantMessageId(turnId) {
 * both in sync without requiring the full prompt module.
 */
 const TURN_CONTEXT_TAG = "runtime-turn-context";
+/** Turn context section that only session context includes. */
+const SESSION_CONTEXT_SECTION_TAG = "runtime";
+/**
+* Turn context sections that are true only for the Turn that received them.
+* Context compaction removes them from the context of earlier Turns.
+*/
+const REQUEST_CONTEXT_SECTION_TAG = {
+	pluginContext: "plugin-context",
+	conversationNotes: "conversation-notes",
+	disabledTools: "disabled-tools"
+};
 // src/chat/pi/transcript.ts
 const RUNTIME_TURN_CONTEXT_START = `<${TURN_CONTEXT_TAG}>`;
 const AGENTS_INSTRUCTIONS_START = "# AGENTS.md instructions";
@@ -3293,6 +3284,7 @@ const storedTurnRecordSchema = z.object({
 	errorMessage: z.string().optional(),
 	cumulativeToolCallCount: z.number().int().nonnegative().optional(),
 	turnLimitWrappedUp: z.boolean().optional(),
+	lostWorkerResumeCount: z.number().int().nonnegative().optional(),
 	turnStartSeq: seqCursorSchema.optional(),
 	runtimeContext: z.array(piMessageSchema).optional()
 }).strip();
@@ -3390,6 +3382,7 @@ function materializeTurnRecord(stored, piProjection, turnStartMessageIndex, runt
 			credentialSubject: stored.credentialSubject,
 			cumulativeToolCallCount: stored.cumulativeToolCallCount,
 			turnLimitWrappedUp: stored.turnLimitWrappedUp,
+			lostWorkerResumeCount: stored.lostWorkerResumeCount,
 			cumulativeUsage: runtimeMetrics?.cumulativeUsage,
 			dispatchId: stored.dispatchId,
 			dispatchOutcome: stored.dispatchOutcome,
@@ -3461,6 +3454,7 @@ function buildStoredRecord(args) {
 			credentialSubject: args.credentialSubject,
 			cumulativeToolCallCount: args.cumulativeToolCallCount,
 			turnLimitWrappedUp: args.turnLimitWrappedUp,
+			lostWorkerResumeCount: args.lostWorkerResumeCount,
 			dispatchId: args.dispatchId,
 			dispatchOutcome: args.dispatchOutcome,
 			errorMessage: args.errorMessage,
@@ -3538,6 +3532,7 @@ async function updateTurnState(args) {
 				credentialSubject: args.existing.credentialSubject,
 				cumulativeToolCallCount: args.existing.cumulativeToolCallCount,
 				turnLimitWrappedUp: args.existing.turnLimitWrappedUp,
+				lostWorkerResumeCount: args.existing.lostWorkerResumeCount,
 				dispatchId: args.existing.dispatchId,
 				dispatchOutcome: args.existing.dispatchOutcome,
 				errorMessage: args.errorMessage ?? args.existing.errorMessage,
@@ -3613,6 +3608,7 @@ async function upsertTurnRecordLocked(args, fence) {
 				credentialSubject: existingRecord?.credentialSubject ?? args.credentialSubject,
 				cumulativeToolCallCount: args.cumulativeToolCallCount ?? existingRecord?.cumulativeToolCallCount,
 				turnLimitWrappedUp: args.turnLimitWrappedUp ?? existingRecord?.turnLimitWrappedUp,
+				lostWorkerResumeCount: args.lostWorkerResumeCount ?? existingRecord?.lostWorkerResumeCount,
 				dispatchId,
 				dispatchOutcome: args.dispatchOutcome ?? existingRecord?.dispatchOutcome,
 				errorMessage: args.errorMessage,
@@ -3796,7 +3792,8 @@ function sharedWrite(args, latest) {
 			traceId: getActiveTraceId() ?? latest?.traceId,
 			turnStartMessageIndex: args.turnStartMessageIndex ?? latest?.turnStartMessageIndex,
 			cumulativeToolCallCount: args.cumulativeToolCallCount ?? latest?.cumulativeToolCallCount,
-			turnLimitWrappedUp: args.turnLimitWrappedUp ?? latest?.turnLimitWrappedUp
+			turnLimitWrappedUp: args.turnLimitWrappedUp ?? latest?.turnLimitWrappedUp,
+			lostWorkerResumeCount: args.lostWorkerResumeCount ?? latest?.lostWorkerResumeCount
 		})
 	};
 }
@@ -5329,14 +5326,6 @@ async function recordGuardianActionReviewed(args) {
 		createdAtMs: Date.now()
 	}]);
 }
-// src/chat/tools/execution/tool-input-error.ts
-/** Thrown when a tool fails due to invalid model/user input, not a system error. */
-var ToolInputError = class extends Error {
-	constructor(message, options) {
-		super(message, options);
-		this.name = "ToolInputError";
-	}
-};
 // src/chat/automations/revision.ts
 /** Storage revisions prevent stale edits from replacing newer values. */
 var AutomationConflictError = class extends ToolInputError {
@@ -5825,4 +5814,4 @@ async function saveScheduledAutomation(db, task, expectedRevision, editedBy) {
 async function saveScheduledAutomationInLock(db, task, current) {
 	await writeScheduledAutomation(db, requireStoredTask(task), current);
 }
-export { projectConversationMessages as $, createDurableLocationConfigurationService as $n, isToolResultError as $t, ToolInputError as A, parseSandboxEgressCredentialToken as An, saveTurnCheckpoint as At, recordAgentsInstructionsUpdated as B, normalizeSlackStatusText as Bn, TurnToolCallLimitExceededError as Bt, automationVersionOf as C, normalizeSandboxEgressTracePropagationDomains as Cn, abandonReplacedPendingAuth as Ct, AutomationConflictError as D, consumeSandboxEgressAuthRequiredSignal as Dn, wasPendingAuthStopped as Dt, sameDefinitionValue as E, clearSandboxEgressSignals as En, getConversationPendingAuth as Et, loadLastModelProfile as F, resolveBaseUrl as Fn, listTurnSummaries as Ft, recordGuardianActionReviewed as G, openSlackDirectMessage as Gn, extractAssistantText as Gt, recordAuthenticationLinked as H, truncateStatusText as Hn, createTurnLimitGate as Ht, loadProjection as I, startOAuthFlow as In, recordTurnSummary as It, recordToolExecutionStarted as J, uploadFilesToConversation as Jn, getUserMessageInstructionText as Jt, recordMcpProviderConnected as K, postSlackMessage as Kn, getPiMessageRole as Kt, loadTurnProjection as L, escapeSlackMrkdwnText as Ln, TURN_LIMIT_DISABLED_REASON as Lt, commitMessages as M, deliverOAuthAuthorization as Mn, completeTurnRecord as Mt, loadConnectedMcpProviders as N, formatProviderLabel as Nn, failTurnRecord as Nt, automationRevision as O, consumeSandboxEgressPermissionDeniedSignal as On, continuableMessages as Ot, loadConversationProjection as P, parseOAuthStatePayload as Pn, getTurnRecord as Pt, persistConversationMessages as Q, resolvePluginOAuthAccount as Qn, isContinuablePiBoundary as Qt, loadTurnRoute as R, formatSlackLink as Rn, TurnBudgetExceededError as Rt, automationDefinition as S, resolveSandboxEgressProviderForHost as Sn, AuthorizationPauseError as St, readAutomationVersion as T, SANDBOX_EGRESS_PROXY_PATH as Tn, clearPendingAuth as Tt, recordAuthorizationCompleted as U, addReactionToMessage as Un, isTurnExecutionLimitExceededError as Ut, recordAttachmentsDelivered as V, slackMention as Vn, buildTurnErrorResponse as Vt, recordAuthorizationRequested as W, getSlackMessagePermalink as Wn, persistWithRetry as Wt, appendConversationMessages as X, slackExternalRefIdSchema as Xn, instructionTextForProjection as Xt, recordTurnRoute as Y, slackEntitySchema as Yn, hasRuntimeTurnContext as Yt, hydrateConversationMessages as Z, getOAuthAccountProviders as Zn, isAssistantMessage as Zt, parseEventAutomationRow as _, setExperimentalFeatures as _n, PluginCredentialFailureError as _t, saveScheduledAutomation as a, TURN_CONTEXT_TAG as an, appendThreadContextMessages as at, admitEventAutomationRun as b, buildSandboxEgressNetworkPolicy as bn, AuthPausePersistenceError as bt, withScheduledAutomationLock as c, SubscribedReplyReason as cn, estimateConversationContextTokens as ct, createEventAutomation as d, getThreadStopDecision as dn, markConversationMessage as dt, isToolResultMessage as en, configValueSchema as er, persistConversationMessageSummaries as et, deleteEventAutomation as f, estimateTextTokens as fn, normalizeConversationText as ft, listEventAutomationsForTeam as g, isExperimentalFeatureEnabled as gn, createPluginEgress as gt, listDeletedEventAutomationsCreatedBy as h, getExperimentalFeatures as hn, upsertConversationMessage as ht, readScheduledAutomation as i, trimTrailingAssistantMessages as in, setConfigDefaults as ir, resolveTaskTitle as it, commitAcceptedReply as j, sandboxEgressSignalsResponseSchema as jn, abandonTurnRecord as jt, requireAutomationRevision as k, createSandboxEgressCredentialToken as kn, loadTurnCheckpoint as kt, blockEventAutomation as l, decideSubscribedThreadReply as ln, getConversationMessageSlackTs as lt, getEventAutomation as m, getAgentContextInputLimitTokens as mn, turnHasReply as mt, listScheduledAutomationsForTeam as n, retainRuntimeTurnContext as nn, piMessageFromHistoryItem as nr, settleConversationTitleWork as nt, saveScheduledAutomationInLock as o, buildDeterministicAssistantMessageId as on, buildConversationContext as ot, findMatchingEventAutomations as p, getAgentContextCompactionTriggerTokens as pn, recordDeliveredAssistantMessage as pt, recordSubscribedReplyRoute as q, removeReactionFromMessage as qn, getTerminalAssistantMessages as qt, parseScheduledAutomationRow as r, stripRuntimeTurnContext as rn, getConfigDefaults as rr, fallbackShortTitle as rt, scheduledRunId as s, buildDeterministicTurnId as sn, createConversationMemoryService as st, createScheduledAutomation as t, normalizeToolNameFromResult as tn, historyItemFromPiMessage as tr, resolveConversationTitle as tt, collectEventAutomationMatchKeys as u, getSubscribedReplyPreflightDecision as un, isHumanConversationMessage as ut, saveEventAutomation as v, executeCredentialedEgressRequest as vn, createPluginAuthOrchestration as vt, listAutomationVersions as w, shouldPropagateSandboxEgressTrace as wn, canReusePendingAuthLink as wt, eventAutomationRunLimitReason as x, resolveSandboxCommandEnvironment as xn, AuthorizationFlowDisabledError as xt, setEventAutomationStatus as y, createUserTokenStore as yn, authorizationId as yt, openConversationProjection as z, normalizeSlackReplyMarkdown as zn, TurnSliceLimitExceededError as zt };
+export { persistConversationMessageSummaries as $, resolvePluginOAuthAccount as $n, isToolResultMessage as $t, commitAcceptedReply as A, createSandboxEgressCredentialToken as An, abandonTurnRecord as At, recordAttachmentsDelivered as B, normalizeSlackReplyMarkdown as Bn, buildTurnErrorResponse as Bt, automationVersionOf as C, resolveSandboxEgressProviderForHost as Cn, canReusePendingAuthLink as Ct, AutomationConflictError as D, clearSandboxEgressSignals as Dn, continuableMessages as Dt, sameDefinitionValue as E, SANDBOX_EGRESS_PROXY_PATH as En, wasPendingAuthStopped as Et, loadProjection as F, parseOAuthStatePayload as Fn, recordTurnSummary as Ft, recordMcpProviderConnected as G, getSlackMessagePermalink as Gn, getPiMessageRole as Gt, recordAuthorizationCompleted as H, slackMention as Hn, isTurnExecutionLimitExceededError as Ht, loadTurnProjection as I, resolveBaseUrl as In, TURN_LIMIT_DISABLED_REASON as It, recordTurnRoute as J, removeReactionFromMessage as Jn, hasRuntimeTurnContext as Jt, recordSubscribedReplyRoute as K, openSlackDirectMessage as Kn, getTerminalAssistantMessages as Kt, loadTurnRoute as L, startOAuthFlow as Ln, TurnBudgetExceededError as Lt, loadConnectedMcpProviders as M, sandboxEgressSignalsResponseSchema as Mn, failTurnRecord as Mt, loadConversationProjection as N, deliverOAuthAuthorization as Nn, getTurnRecord as Nt, automationRevision as O, consumeSandboxEgressAuthRequiredSignal as On, loadTurnCheckpoint as Ot, loadLastModelProfile as P, formatProviderLabel as Pn, listTurnSummaries as Pt, projectConversationMessages as Q, getOAuthAccountProviders as Qn, isToolResultError as Qt, openConversationProjection as R, escapeSlackMrkdwnText as Rn, TurnSliceLimitExceededError as Rt, automationDefinition as S, resolveSandboxCommandEnvironment as Sn, abandonReplacedPendingAuth as St, readAutomationVersion as T, shouldPropagateSandboxEgressTrace as Tn, getConversationPendingAuth as Tt, recordAuthorizationRequested as U, truncateStatusText as Un, persistWithRetry as Ut, recordAuthenticationLinked as V, normalizeSlackStatusText as Vn, createTurnLimitGate as Vt, recordGuardianActionReviewed as W, addReactionToMessage as Wn, extractAssistantText as Wt, hydrateConversationMessages as X, slackEntitySchema as Xn, isAssistantMessage as Xt, appendConversationMessages as Y, uploadFilesToConversation as Yn, instructionTextForProjection as Yt, persistConversationMessages as Z, slackExternalRefIdSchema as Zn, isContinuablePiBoundary as Zt, parseEventAutomationRow as _, isExperimentalFeatureEnabled as _n, createPluginAuthOrchestration as _t, saveScheduledAutomation as a, SESSION_CONTEXT_SECTION_TAG as an, setConfigDefaults as ar, buildConversationContext as at, admitEventAutomationRun as b, createUserTokenStore as bn, AuthorizationFlowDisabledError as bt, withScheduledAutomationLock as c, buildDeterministicTurnId as cn, getConversationMessageSlackTs as ct, createEventAutomation as d, getSubscribedReplyPreflightDecision as dn, normalizeConversationText as dt, normalizeToolNameFromResult as en, createDurableLocationConfigurationService as er, resolveConversationTitle as et, deleteEventAutomation as f, getThreadStopDecision as fn, recordDeliveredAssistantMessage as ft, listEventAutomationsForTeam as g, getExperimentalFeatures as gn, PluginCredentialFailureError as gt, listDeletedEventAutomationsCreatedBy as h, getAgentContextInputLimitTokens as hn, createPluginEgress as ht, readScheduledAutomation as i, REQUEST_CONTEXT_SECTION_TAG as in, getConfigDefaults as ir, appendThreadContextMessages as it, commitMessages as j, parseSandboxEgressCredentialToken as jn, completeTurnRecord as jt, requireAutomationRevision as k, consumeSandboxEgressPermissionDeniedSignal as kn, saveTurnCheckpoint as kt, blockEventAutomation as l, SubscribedReplyReason as ln, isHumanConversationMessage as lt, getEventAutomation as m, getAgentContextCompactionTriggerTokens as mn, upsertConversationMessage as mt, listScheduledAutomationsForTeam as n, stripRuntimeTurnContext as nn, historyItemFromPiMessage as nr, fallbackShortTitle as nt, saveScheduledAutomationInLock as o, TURN_CONTEXT_TAG as on, createConversationMemoryService as ot, findMatchingEventAutomations as p, estimateTextTokens as pn, turnHasReply as pt, recordToolExecutionStarted as q, postSlackMessage as qn, getUserMessageInstructionText as qt, parseScheduledAutomationRow as r, trimTrailingAssistantMessages as rn, piMessageFromHistoryItem as rr, resolveTaskTitle as rt, scheduledRunId as s, buildDeterministicAssistantMessageId as sn, estimateConversationContextTokens as st, createScheduledAutomation as t, retainRuntimeTurnContext as tn, configValueSchema as tr, settleConversationTitleWork as tt, collectEventAutomationMatchKeys as u, decideSubscribedThreadReply as un, markConversationMessage as ut, saveEventAutomation as v, setExperimentalFeatures as vn, authorizationId as vt, listAutomationVersions as w, normalizeSandboxEgressTracePropagationDomains as wn, clearPendingAuth as wt, eventAutomationRunLimitReason as x, buildSandboxEgressNetworkPolicy as xn, AuthorizationPauseError as xt, setEventAutomationStatus as y, executeCredentialedEgressRequest as yn, AuthPausePersistenceError as yt, recordAgentsInstructionsUpdated as z, formatSlackLink as zn, TurnToolCallLimitExceededError as zt };

package/dist/{thread-state-DA37FsAT.js → thread-state-IDHdZA7R.js}

@@ -1,8 +1,8 @@
-import { $n as createDurableLocationConfigurationService, Q as persistConversationMessages } from "./tasks-Bh2qYaed.js";
-import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-dZN1Bvtu.js";
-import { d as getDb } from "./viewer-oMTUVAcR.js";
-import { gt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-9q2zdKHL.js";
-import { r as getStateAdapter } from "./adapter-t-Y9RHML.js";
+import { Z as persistConversationMessages, er as createDurableLocationConfigurationService } from "./tasks-LOItiYgL.js";
+import { B as toOptionalNumber, V as toOptionalString, z as isRecord } from "./logging-Dk_FpF36.js";
+import { d as getDb } from "./viewer-DmNRM88V.js";
+import { gt as JUNIOR_THREAD_STATE_TTL_MS } from "./agent-hooks-CqnZfuCt.js";
+import { r as getStateAdapter } from "./adapter-BIacI0Bt.js";
 // src/chat/state/conversation.ts
 function defaultConversationState() {
 	return {

package/dist/{turn-failure-response-BLcscQ-f.js → turn-failure-response-h_LSXJ-M.js}

@@ -1,19 +1,20 @@
-import { Tt as clearPendingAuth, Z as hydrateConversationMessages, dt as markConversationMessage, sn as buildDeterministicTurnId } from "./tasks-Bh2qYaed.js";
-import { _ as getProviderErrorAttributes, g as findProviderError, m as ProviderError, v as getProviderErrorUserMessage } from "./client-DpfjZgNk.js";
-import { t as buildTurnFailureResponse, z as isRecord } from "./logging-dZN1Bvtu.js";
+import { X as hydrateConversationMessages, cn as buildDeterministicTurnId, ut as markConversationMessage, wt as clearPendingAuth } from "./tasks-LOItiYgL.js";
+import { _ as getProviderErrorAttributes, g as findProviderError, m as ProviderError, v as getProviderErrorUserMessage } from "./client-DZBCBj1M.js";
+import { t as buildTurnFailureResponse, z as isRecord } from "./logging-Dk_FpF36.js";
 import { g as parseSlackMessageTs } from "./actor-tlxzqaRe.js";
-import { c as getConversationEventStore, d as getDb } from "./viewer-oMTUVAcR.js";
-import { Lt as markTurnClosed, Rt as markTurnCompleted } from "./agent-runner-Cx6NO5LE.js";
-import { Gt as listConversationAnnotations } from "./agent-hooks-9q2zdKHL.js";
-import { F as readMessageCardRefs, I as removedCardSchema, L as resolveMessageCards } from "./conversation-CvuKJ3tA.js";
-import { o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-DA37FsAT.js";
+import { c as getConversationEventStore, d as getDb } from "./viewer-DmNRM88V.js";
+import { qt as listConversationAnnotations } from "./agent-hooks-CqnZfuCt.js";
+import { F as readMessageCardRefs, I as removedCardSchema, L as resolveMessageCards } from "./conversation-B0baEwoA.js";
+import { D as parseAgentInvocationResultMessageId, J as markTurnClosed, Y as markTurnCompleted, c as getAgentInvocation, m as getAgentInvocationTurnId } from "./store-TKg1HVKx.js";
+import { o as persistThreadStateById, r as getPersistedThreadState, s as coerceThreadConversationState } from "./thread-state-IDHdZA7R.js";
 // src/chat/conversations/pending-cards.ts
-/** Select undelivered cards and load their latest saved facts. */
-async function loadPendingMessageCards(conversationId) {
-	const cards = /* @__PURE__ */ new Map();
-	const deleted = /* @__PURE__ */ new Set();
-	let beforeSeq;
-	selection: while (true) {
+/**
+* Add the cards that tool results selected since the last visible assistant
+* Message or Turn start, scanning back from `beforeSeq`. Returns the input
+* message ids of the Turn start that ended the scan.
+*/
+async function selectTurnCards(conversationId, selection, beforeSeq) {
+	while (true) {
 		const page = await getConversationEventStore().query(conversationId, {
 			beforeSeq,
 			limit: 100,
@@ -25,20 +26,45 @@ async function loadPendingMessageCards(conversationId) {
 		});
 		for (const event of [...page.events].reverse()) {
 			const data = event.data;
-			if (data.type === "turn_started" || data.type === "message" && data.role === "assistant") break selection;
+			if (data.type === "turn_started") return data.inputMessageIds;
+			if (data.type === "message" && data.role === "assistant") return [];
 			if (data.type !== "tool_result" || data.isError || typeof data.toolName !== "string" || !isRecord(data.details)) continue;
 			if (data.details.timed_out === true) continue;
-			if (Array.isArray(data.details.removedCards)) for (const ref of removedCardSchema.array().parse(data.details.removedCards)) deleted.add(JSON.stringify([ref.plugin, ref.key]));
+			if (Array.isArray(data.details.removedCards)) for (const ref of removedCardSchema.array().parse(data.details.removedCards)) selection.deleted.add(JSON.stringify([ref.plugin, ref.key]));
 			for (const card of readMessageCardRefs(data.details)) {
 				const key = JSON.stringify([card.plugin, card.key]);
-				if (!deleted.has(key) && !cards.has(key)) cards.set(key, card);
+				if (!selection.deleted.has(key) && !selection.cards.has(key)) selection.cards.set(key, card);
 			}
 		}
-		if (!page.hasOlder || page.events.length === 0) break;
+		if (!page.hasOlder || page.events.length === 0) return [];
 		beforeSeq = page.events[0].seq;
 	}
-	if (cards.size === 0) return [];
-	return resolveMessageCards([...cards.values()].reverse(), await listConversationAnnotations(getDb(), conversationId));
+}
+/**
+* Add the cards of child agents whose results started this Turn. A child
+* cannot reply to people, so its parent's reply delivers its cards.
+*/
+async function selectChildResultCards(inputMessageIds, selection) {
+	const events = getConversationEventStore();
+	for (const messageId of [...inputMessageIds].reverse()) {
+		const invocationId = parseAgentInvocationResultMessageId(messageId);
+		const invocation = invocationId ? await getAgentInvocation(invocationId) : void 0;
+		if (!invocation) continue;
+		const turnId = getAgentInvocationTurnId(invocation.invocationId);
+		const terminal = await events.loadByIdempotencyKey(invocation.childConversationId, `turn:${turnId}:terminal`);
+		if (!terminal) continue;
+		await selectTurnCards(invocation.childConversationId, selection, terminal.seq);
+	}
+}
+/** Select undelivered cards and load their latest saved facts. */
+async function loadPendingMessageCards(conversationId) {
+	const selection = {
+		cards: /* @__PURE__ */ new Map(),
+		deleted: /* @__PURE__ */ new Set()
+	};
+	await selectChildResultCards(await selectTurnCards(conversationId, selection), selection);
+	if (selection.cards.size === 0) return [];
+	return resolveMessageCards([...selection.cards.values()].reverse(), await listConversationAnnotations(getDb(), conversationId));
 }
 // src/chat/interruption-marker.ts
 const INTERRUPTED_MARKER = "\n\n[Response interrupted before completion]";

package/dist/{turn-lifecycle-D0e887FM.js → turn-lifecycle-Cvi6Sb8Y.js}

@@ -1,4 +1,4 @@
-import { c as getConversationEventStore } from "./viewer-oMTUVAcR.js";
+import { c as getConversationEventStore } from "./viewer-DmNRM88V.js";
 // src/chat/conversations/turn-lifecycle.ts
 /** Persist correlated turn lifecycle facts with retry-safe terminal exclusion. */
 var ConversationTurnLifecycleService = class {

package/dist/{turn-session-routing-DdbSbJS6.js → turn-session-routing-5Nyv4fso.js}

@@ -34,7 +34,7 @@ function slackSourceForDestination(args) {
 * Reads parent Conversations when this Conversation has no Destination.
 */
 async function resolveConversationRouting(args) {
-	const conversationStore = args.conversationStore ?? (await import("./viewer-oMTUVAcR.js").then((n) => n.s)).getConversationStore();
+	const conversationStore = args.conversationStore ?? (await import("./viewer-DmNRM88V.js").then((n) => n.s)).getConversationStore();
 	const chain = await loadConversationChain(args.conversationId, conversationStore);
 	let destination;
 	let source;

package/dist/{validation-DtcovXqq.js → validation-BeTriWC2.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-CfwKT0sn.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Suf-aLlh.js";
 import { isDeepStrictEqual } from "node:util";
 // src/chat/plugins/validation.ts
 var validation_exports = /* @__PURE__ */ __exportAll({

package/dist/{version-JcDaJ75p.js → version-BQX_hLDC.js}

@@ -1,5 +1,5 @@
 // package.json
-var version = "0.262.0";
+var version = "0.263.0";
 // src/version.ts
 /** Installed Junior package version, or `unknown` when package metadata is unavailable. */
 const JUNIOR_VERSION = typeof version === "string" && version.trim() ? version : "unknown";

package/dist/version.js

@@ -1 +1 @@
-export { t as JUNIOR_VERSION } from "./version-JcDaJ75p.js";
+export { t as JUNIOR_VERSION } from "./version-BQX_hLDC.js";

package/dist/{viewer-oMTUVAcR.js → viewer-DmNRM88V.js}

@@ -1,9 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { I as GOOGLE_IDENTITY_PROVIDER, R as normalizeIdentityEmail } from "./logging-dZN1Bvtu.js";
-import { i as getChatConfig } from "./config-BiCtNiu5.js";
+import { I as GOOGLE_IDENTITY_PROVIDER, R as normalizeIdentityEmail } from "./logging-Dk_FpF36.js";
+import { i as getChatConfig } from "./config-Dnv8KmNs.js";
 import { d as parseSlackTeamId, o as parseActorUserId, u as parseSlackChannelReferenceId } from "./actor-tlxzqaRe.js";
 import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, o as conversationReadColumns, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { _ as juniorConversationAnnotations, d as juniorConversationBindings, h as juniorConversationEvents, m as juniorConversationMetrics, p as CONVERSATION_METRICS, t as createJuniorSqlExecutor, u as juniorConversationParticipants } from "./executor-O8xqLDN6.js";
+import { _ as juniorConversationAnnotations, d as juniorConversationBindings, h as juniorConversationEvents, m as juniorConversationMetrics, p as CONVERSATION_METRICS, t as createJuniorSqlExecutor, u as juniorConversationParticipants } from "./executor-J9k2sp9m.js";
 import { c as newConversationEventSchema, h as usageSchema, l as encodeHistoryPayload, o as decodeStoredConversationEvent, r as conversationEventDataSchema, s as historyReplacementSchema } from "./history-AY8rs-FR.js";
 import { randomUUID } from "node:crypto";
 import { and, asc, desc, eq, gt, gte, inArray, isNull, lt, lte, ne, or, sql } from "drizzle-orm";