@sentry/junior 0.264.0 → 0.266.0

package/dist/{tasks-OgXmReUv.js → tasks-DDT-J3Rf.js}

@@ -1,24 +1,22 @@
-import { a as completeText, f as unwrapCurrentInstruction, p as escapeXml, s as resolveGatewayModel, y as isProviderRetryError } from "./client-DpOwh_zX.js";
-import { V as toOptionalString, f as logException, m as logWarn, o as getActiveTraceId, p as logInfo, s as getLogContextAttributes, t as buildTurnFailureResponse, u as logAudit, y as setSpanAttributes, z as isRecord } from "./logging-DNQqsQ57.js";
-import { n as captureMessage } from "./sentry-BBUlHih9.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-BxPrFVJP.js";
-import { c as toStoredSlackActor, f as parseSlackUserId, g as parseSlackMessageTs } from "./actor-tlxzqaRe.js";
-import { C as addAgentTurnUsage, R as parseDestination, c as getConversationEventStore, d as getDb, f as getSqlExecutor, m as withConversationEventLock, p as createSqlConversationEventStore, u as getConversationStore, x as bindProviderConversation, y as startLocationThread } from "./viewer-BuPwzOC9.js";
+import { a as completeText, f as unwrapCurrentInstruction, p as escapeXml, s as resolveGatewayModel, y as isProviderRetryError } from "./client-B0YZfxNy.js";
+import { n as botConfig } from "./config-C0UwYqDK.js";
+import { V as toOptionalString, f as logException, m as logWarn, o as getActiveTraceId, t as buildTurnFailureResponse, y as setSpanAttributes, z as isRecord } from "./logging-Ce0mXZ8J.js";
+import { c as toStoredSlackActor, g as parseSlackMessageTs } from "./actor-tlxzqaRe.js";
+import { S as bindProviderConversation, b as startLocationThread, d as getConversationStore, f as getDb, h as withConversationEventLock, l as getConversationEventStore, m as createSqlConversationEventStore, p as getSqlExecutor, w as addAgentTurnUsage } from "./viewer-BpE6Z3qf.js";
 import { d as juniorDestinations } from "./agent-invocations-CxKldAeB.js";
-import { a as juniorAutomationRuns, l as juniorLocationConfigurations, o as juniorAutomationVersions, s as juniorAutomations } from "./executor-D3WIS4vl.js";
-import { d as contextProvenance, f as instructionActors, n as agentHistoryItemSchema, p as instructionProvenanceFor } from "./history-AY8rs-FR.js";
-import { _ as CredentialUnavailableError, a as resolveAuthTokenPlaceholder, f as credentialContextForActor, h as credentialSubjectSchema, o as resolvePluginCommandEnv, p as credentialContextSchema } from "./registry-CfdUEk4N.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-R53MWcMi.js";
-import { Et as createPluginLogger, Qt as createPluginCache, ct as getSlackClient, dt as normalizeSlackConversationId, en as JUNIOR_NATIVE_EVENT_NAMESPACE, it as SlackActionError, n as applyPluginFormatMarkdown, nn as authenticationLinkedEvent, pt as withSlackRetries, rn as authenticationUnlinkedEvent, tn as agentsInstructionsUpdatedEvent, u as getPlugins, ut as isDmChannel, xt as ToolInputError } from "./agent-hooks-D_PbluRX.js";
-import { a as acquireActiveLock, i as MUTATION_LOCK_TTL_MS, o as fenceLock, r as getStateAdapter, s as withLock } from "./adapter-BIbMSKlG.js";
-import { N as messageCardRef } from "./conversation-B0baEwoA.js";
-import { y as sleep } from "./profile-ieODOp4u.js";
-import { A as eventAutomationSchema, E as scheduledAutomationSchema, S as automationVersionSchema } from "./automation-CWX0qL8U.js";
+import { a as juniorAutomationRuns, l as juniorLocationConfigurations, o as juniorAutomationVersions, s as juniorAutomations } from "./executor-TnWbvL09.js";
+import { d as contextProvenance, f as instructionActors, n as agentHistoryItemSchema, p as instructionProvenanceFor } from "./history-C84mlAwO.js";
+import { f as credentialContextForActor, h as credentialSubjectSchema } from "./registry-1BEIPdbT.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-DAJjAbSx.js";
+import { An as createPluginLogger, Q as parseSandboxEgressAuthRequiredSignal, ar as agentsInstructionsUpdatedEvent, at as formatProviderLabel, ct as startOAuthFlow, ir as JUNIOR_NATIVE_EVENT_NAMESPACE, mn as ToolInputError, nr as createPluginCache, nt as resolveSandboxEgressProviderForHost, on as sleep, or as authenticationLinkedEvent, p as getPlugins, sr as authenticationUnlinkedEvent, t as executeCredentialedEgressRequest } from "./credentialed-enF5Bf3y.js";
+import { i as MUTATION_LOCK_TTL_MS, o as fenceLock, r as getStateAdapter, s as withLock } from "./adapter-eRFA_naf.js";
+import { N as messageCardRef } from "./conversation-DF4rUcjb.js";
+import { A as eventAutomationSchema, E as scheduledAutomationSchema, S as automationVersionSchema } from "./automation-BKpY9LPa.js";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
-import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { and, asc, desc, eq, inArray, ne, or, sql } from "drizzle-orm";
-import { EgressAuthRequired, EgressPolicyDenied, actorSchema, eventMatches, pluginAuthorizationSchema, pluginCredentialHeaderTransformSchema, pluginCredentialResultSchema, pluginGrantSchema, pluginProviderAccountSchema, pluginStoredTokensSchema, sourceSchema } from "@sentry/junior-plugin-api";
+import { actorSchema, eventMatches, sourceSchema } from "@sentry/junior-plugin-api";
 // src/chat/configuration/defaults.ts
 let installDefaults = {};
 function cloneDefaults(defaults) {
@@ -54,7 +52,7 @@ function authorizationObservationMessage(data, createdAtMs) {
 		role: "user",
 		content: [{
 			type: "text",
-			text: `${label} completed for provider "${data.provider}". Continue the request that waited for it and retry the provider operation. If the person dropped that request since, do not continue it; say only that ${data.provider} is connected.`
+			text: `${label} completed for provider "${data.provider}". Continue the newest request that waited for it and retry the provider operation. If a later message from the person dropped that request, do not continue it; say only that ${data.provider} is connected.`
 		}],
 		timestamp: createdAtMs
 	});
@@ -397,2065 +395,6 @@ function createDurableLocationConfigurationService(args) {
 		}
 	});
 }
-// src/chat/plugins/credential-hooks.ts
-function parseSchema(schema, value, message) {
-	const result = schema.safeParse(value);
-	if (!result.success) throw new Error(message);
-	return result.data;
-}
-function parseAuthorization(value, pluginName) {
-	if (value === void 0) return;
-	const authorization = parseSchema(pluginAuthorizationSchema, value, `Plugin "${pluginName}" grant authorization is invalid`);
-	if (authorization.provider !== pluginName) throw new Error(`Plugin "${pluginName}" grant authorization provider must match the issuing plugin`);
-	return authorization;
-}
-function parseGrant(value, pluginName) {
-	return parseSchema(pluginGrantSchema, value, `Plugin "${pluginName}" grantForEgress returned an invalid grant`);
-}
-function pluginFor(provider) {
-	return getPlugins().find((candidate) => candidate.manifest.name === provider);
-}
-function basePluginContext(plugin) {
-	const pluginName = plugin.manifest.name;
-	return {
-		plugin: { name: pluginName },
-		cache: createPluginCache(pluginName),
-		log: createPluginLogger(pluginName),
-		db: getDb()
-	};
-}
-function parseCredentialResult(value, pluginName) {
-	const result = parseSchema(pluginCredentialResultSchema, value, `Plugin "${pluginName}" issueCredential result is invalid`);
-	if (result.type === "lease") {
-		parseAuthorization(result.lease.authorization, pluginName);
-		return result;
-	}
-	if (result.type === "unavailable") return result;
-	parseAuthorization(result.authorization, pluginName);
-	return result;
-}
-/** Ask a plugin which grant an outbound request needs. */
-async function selectPluginGrant(input) {
-	const plugin = pluginFor(input.provider);
-	const hook = plugin?.hooks?.grantForEgress;
-	if (!plugin || !hook) return;
-	const result = await hook({
-		...basePluginContext(plugin),
-		request: {
-			...input.bodyText !== void 0 ? { bodyText: input.bodyText } : void 0,
-			method: input.method,
-			...input.operation ? { operation: input.operation } : void 0,
-			url: input.upstreamUrl.toString()
-		}
-	});
-	return result === void 0 ? void 0 : parseGrant(result, plugin.manifest.name);
-}
-/** Let the owning plugin inspect an upstream response without changing pass-through behavior. */
-async function onPluginEgressResponse(input) {
-	const plugin = pluginFor(input.provider);
-	const hook = plugin?.hooks?.onEgressResponse;
-	if (!plugin || !hook) return {};
-	let permissionDenied;
-	await hook({
-		...basePluginContext(plugin),
-		grant: input.grant,
-		permissionDenied(message) {
-			const trimmed = message.trim();
-			if (!trimmed) throw new Error(`Plugin "${plugin.manifest.name}" onEgressResponse permissionDenied message is empty`);
-			permissionDenied = { message: trimmed };
-		},
-		request: {
-			method: input.method,
-			...input.operation ? { operation: input.operation } : void 0,
-			url: input.upstreamUrl.toString()
-		},
-		response: input.response
-	});
-	return permissionDenied ? { permissionDenied } : {};
-}
-/** Return whether a plugin owns credential issuance for egress. */
-function hasEgressCredentialHooks(provider) {
-	const hooks = pluginFor(provider)?.hooks;
-	return Boolean(hooks?.grantForEgress || hooks?.issueCredential);
-}
-/** Return providers that can verify an OAuth account for identity storage. */
-function getOAuthAccountProviders() {
-	return getPlugins().filter((plugin) => Boolean(plugin.hooks?.resolveOAuthAccount)).map((plugin) => plugin.manifest.name);
-}
-/** Ask a plugin which provider account belongs to an OAuth token. */
-async function resolvePluginOAuthAccount(input) {
-	const plugin = pluginFor(input.provider);
-	const hook = plugin?.hooks?.resolveOAuthAccount;
-	if (!plugin || !hook) return;
-	const account = await hook({
-		...basePluginContext(plugin),
-		tokenResponse: input.tokenResponse,
-		tokens: input.tokens
-	});
-	return account === void 0 ? void 0 : parseSchema(pluginProviderAccountSchema, account, `Plugin "${plugin.manifest.name}" resolveOAuthAccount returned an invalid account`);
-}
-/** Ask a plugin to issue headers or describe why the selected grant is unavailable. */
-async function issuePluginCredential(input) {
-	const plugin = pluginFor(input.provider);
-	const hook = plugin?.hooks?.issueCredential;
-	if (!plugin || !hook) throw new Error(`Plugin "${input.provider}" has no issueCredential hook`);
-	const currentUserId = "type" in input.actor ? input.actor.userId : void 0;
-	const credentialSubjectUserId = input.credentialSubject?.userId;
-	return parseCredentialResult(await hook({
-		...basePluginContext(plugin),
-		actor: input.actor,
-		grant: input.grant,
-		...input.credentialSubject ? { credentialSubject: input.credentialSubject } : void 0,
-		tokens: {
-			...currentUserId ? { currentUser: {
-				userId: currentUserId,
-				get: async () => await input.userTokenStore.get(currentUserId, plugin.manifest.name),
-				set: async (tokens) => {
-					await input.userTokenStore.set(currentUserId, plugin.manifest.name, tokens);
-				},
-				withRefresh: async (callback) => await input.userTokenStore.withRefresh(currentUserId, plugin.manifest.name, callback)
-			} } : void 0,
-			...credentialSubjectUserId ? { credentialSubject: {
-				userId: credentialSubjectUserId,
-				get: async () => await input.userTokenStore.get(credentialSubjectUserId, plugin.manifest.name),
-				set: async (tokens) => {
-					await input.userTokenStore.set(credentialSubjectUserId, plugin.manifest.name, tokens);
-				},
-				withRefresh: async (callback) => await input.userTokenStore.withRefresh(credentialSubjectUserId, plugin.manifest.name, callback)
-			} } : void 0
-		}
-	}), plugin.manifest.name);
-}
-// src/chat/slack/post-warning.ts
-const codes = /* @__PURE__ */ new Set([
-	"invalid_metadata_format",
-	"invalid_metadata_schema",
-	"metadata_too_large",
-	"invalid_arguments",
-	"invalid_blocks",
-	"missing_scope",
-	"missing_charset",
-	"superfluous_charset",
-	"message_truncated"
-]);
-const pathFields = /* @__PURE__ */ new Set([
-	"metadata",
-	"event_type",
-	"event_payload",
-	"entities",
-	"entity_type",
-	"entity_payload",
-	"external_ref",
-	"id",
-	"type",
-	"url",
-	"attributes",
-	"title",
-	"text",
-	"display_id",
-	"display_type",
-	"product_name",
-	"fields",
-	"status",
-	"custom_fields",
-	"key",
-	"label",
-	"value",
-	"long",
-	"format",
-	"link",
-	"display_order",
-	"app_unfurl_url",
-	"app_id",
-	"created_by",
-	"created_at",
-	"updated_by",
-	"updated_at",
-	"full_size_preview",
-	"preview_url",
-	"mime_type"
-]);
-const diagnosticWords = new Set(`WARN ERROR Message message metadata was incorrectly formatted The the will be
-  ignored as a result For for event entity refer to following errors error
-  missing required field fields property properties additional unexpected unknown
-  unsupported invalid expected received actual type types must should match matches
-  matching does not is are has have of at in on and or an only allowed allow
-  value values string number integer boolean object array null minimum maximum
-  length min max items item empty nonempty too long short large small size limit
-  exceeded exceeds less greater than equal valid format schema validation failed
-  failure cannot contain contains found one any all none enum pattern definition
-  defined constraint constraints satisfy satisfies with without provided specified
-  unrecognized unrecognised recognized recognised extraneous disallowed duplicate
-  unique malformed nested root exactly needs need requires requirement supported
-  json-pointer input different schema_uri schema_id schemas additionalProperties
-  minLength maxLength minItems maxItems anyOf oneOf allOf`.split(/\s+/));
-function summarizeDiagnostic(value) {
-	return value.slice(0, 2e3).replace(/\b(?:https?:\/\/|www\.)[^\s"'`<>]+/gi, "[value]").replace(/\/[^\s"'`[\],;()]*|[\p{L}\p{N}\p{M}_]+(?:[-./:@=+%~][\p{L}\p{N}\p{M}_]+)*|[^\s\w[\]{}():,;."'`/*=<>!?+-]/gu, (token) => {
-		if (token.startsWith("/")) return token.split("/").slice(0, 17).map((part, index) => index === 0 ? "" : pathFields.has(part) ? part : "*").join("/");
-		return codes.has(token) || pathFields.has(token) || diagnosticWords.has(token) ? token : "[value]";
-	}).replace(/\s+/g, " ").slice(0, 2e3);
-}
-/** Report Slack warnings once, on the request span, without retrying the post. */
-function captureSlackPostWarning(response, attributes) {
-	const warnings = response.response_metadata?.warnings ?? [];
-	const messages = response.response_metadata?.messages ?? [];
-	const knownCodes = [...new Set(warnings.slice(0, 20).filter((code) => codes.has(code)))].sort();
-	const diagnostics = {
-		"app.slack.warning_count": warnings.length,
-		"app.slack.response_message_count": messages.length,
-		"app.slack.diagnostic_codes": knownCodes
-	};
-	setSpanAttributes(diagnostics);
-	if (!warnings.length && !messages.length) return;
-	captureMessage("Slack chat.postMessage returned warnings", {
-		level: "warning",
-		fingerprint: ["slack.chat.postMessage.warning", ...knownCodes.length ? knownCodes : ["unknown"]],
-		tags: { "app.slack.method": "chat.postMessage" },
-		extra: {
-			...getLogContextAttributes(),
-			...attributes,
-			...diagnostics,
-			"app.slack.response_diagnostics": {
-				warnings: warnings.slice(0, 20).map(summarizeDiagnostic),
-				messages: messages.slice(0, 20).map(summarizeDiagnostic)
-			}
-		}
-	});
-}
-// src/chat/slack/work-object.ts
-const url = z.url({ protocol: /^https?$/ });
-const textField = z.strictObject({
-	type: z.literal("string"),
-	key: z.string().min(1),
-	label: z.string().min(1),
-	value: z.string(),
-	long: z.boolean().optional(),
-	format: z.literal("markdown").optional(),
-	link: url.optional()
-}).refine((field) => !field.format || !field.link, { message: "Slack string fields cannot combine format and link" });
-const customField = z.discriminatedUnion("type", [textField, z.strictObject({
-	type: z.literal("slack#/types/timestamp"),
-	key: z.string().min(1),
-	label: z.string().min(1),
-	value: z.number().int(),
-	link: url.optional()
-})]);
-const payload = z.strictObject({
-	attributes: z.strictObject({
-		title: z.strictObject({ text: z.string().min(1) }),
-		display_id: z.string().optional(),
-		display_type: z.string().optional(),
-		product_name: z.string().optional(),
-		product_icon: z.strictObject({
-			url,
-			alt_text: z.string().min(1)
-		}).optional()
-	}),
-	custom_fields: z.array(customField).optional(),
-	display_order: z.array(z.string()).optional()
-});
-/** Limit IDs to Junior's safe subset; Slack silently rejects JSON punctuation. */
-const slackExternalRefIdSchema = z.string().min(1).regex(/^[A-Za-z0-9_-]+$/, "Unsupported Slack external reference ID");
-const entity = z.strictObject({
-	external_ref: z.strictObject({
-		id: slackExternalRefIdSchema,
-		type: z.string().min(1).optional()
-	}),
-	url
-});
-/** Validate notification and detail metadata before Slack can ignore bad fields. */
-const slackEntitySchema = z.discriminatedUnion("entity_type", [entity.extend({
-	entity_type: z.literal("slack#/entities/item"),
-	entity_payload: payload.extend({ fields: z.never().optional() })
-}), entity.extend({
-	entity_type: z.literal("slack#/entities/task"),
-	entity_payload: payload.extend({ fields: z.strictObject({ status: z.strictObject({ value: z.string() }).optional() }).optional() })
-})]);
-// src/chat/slack/outbound.ts
-const MAX_SLACK_MESSAGE_TEXT_CHARS = 4e4;
-function requireSlackConversationId(channelId, action) {
-	const normalized = normalizeSlackConversationId(channelId);
-	if (!normalized) throw new Error(`${action} requires a valid channel ID`);
-	return normalized;
-}
-function requireSlackThreadTimestamp(threadTs, action) {
-	const normalized = threadTs.trim();
-	if (!normalized) throw new Error(`${action} requires a thread timestamp`);
-	return normalized;
-}
-function requireSlackMessageTimestamp(timestamp, action) {
-	const normalized = parseSlackMessageTs(timestamp);
-	if (!normalized) throw new Error(`${action} requires a target message timestamp`);
-	return normalized;
-}
-function requireSlackMessageText(text, action) {
-	if (text.trim().length === 0) throw new Error(`${action} requires non-empty text`);
-	if (text.length > MAX_SLACK_MESSAGE_TEXT_CHARS) throw new Error(`${action} text exceeds Slack's 40000 character truncation limit`);
-	return text;
-}
-/** Resolve a Slack message permalink without making read-only workflows fail on lookup errors. */
-async function getSlackMessagePermalink(args) {
-	try {
-		return (await withSlackRetries(() => getSlackClient().chat.getPermalink({
-			channel: args.channelId,
-			message_ts: args.messageTs
-		}), 3, {
-			action: "chat.getPermalink",
-			idempotent: true,
-			spanAttributes: {
-				"app.slack.channel_id": args.channelId,
-				"app.slack.message_ts": args.messageTs
-			}
-		})).permalink;
-	} catch {
-		return;
-	}
-}
-/** Open the bot's direct message with one Slack user and return its channel ID. */
-async function openSlackDirectMessage(userId) {
-	const channelId = (await withSlackRetries(() => getSlackClient().conversations.open({ users: userId }), 3, { action: "conversations.open" })).channel?.id;
-	if (!channelId) throw new Error("Slack did not return a direct message channel.");
-	return channelId;
-}
-/** Post Slack `mrkdwn` text to a conversation or thread via the shared outbound boundary. */
-async function postSlackMessage(input) {
-	const channelId = requireSlackConversationId(input.channelId, "Slack message posting");
-	const text = requireSlackMessageText(input.text, "Slack message posting");
-	const entities = input.entities?.length ? slackEntitySchema.array().parse(input.entities) : void 0;
-	const threadTs = input.threadTs ? requireSlackThreadTimestamp(input.threadTs, "Slack thread message posting") : void 0;
-	const attributes = {
-		"app.slack.channel_id": channelId,
-		...threadTs ? { "app.slack.thread_ts": threadTs } : void 0,
-		"app.slack.work_object.count": entities?.length ?? 0
-	};
-	const response = await withSlackRetries(async () => {
-		const response = await getSlackClient().chat.postMessage({
-			channel: channelId,
-			text,
-			unfurl_links: false,
-			unfurl_media: false,
-			...input.blocks?.length ? { blocks: input.blocks } : void 0,
-			...entities ? { metadata: { entities } } : void 0,
-			...threadTs ? { thread_ts: threadTs } : void 0
-		});
-		const messageId = parseSlackMessageTs(response.ts);
-		setSpanAttributes({ "messaging.message.id": messageId });
-		captureSlackPostWarning(response, {
-			...attributes,
-			"messaging.message.id": messageId
-		});
-		return response;
-	}, 3, {
-		action: "chat.postMessage",
-		attributes
-	});
-	const messageTs = parseSlackMessageTs(response.ts);
-	if (!messageTs) throw new Error("Slack message posted without ts");
-	return {
-		ts: messageTs,
-		...input.includePermalink ? { permalink: await getSlackMessagePermalink({
-			channelId,
-			messageTs
-		}) } : void 0
-	};
-}
-/**
-* Post an ephemeral Slack message. Delivery is best-effort on Slack's side, but
-* request validation and Web API behavior are centralized here.
-*/
-async function postSlackEphemeralMessage(input) {
-	const channelId = requireSlackConversationId(input.channelId, "Slack ephemeral message posting");
-	const userId = parseSlackUserId(input.userId);
-	if (!userId) throw new Error("Slack ephemeral message posting requires a user ID");
-	const text = requireSlackMessageText(input.text, "Slack ephemeral message posting");
-	const threadTs = input.threadTs ? requireSlackThreadTimestamp(input.threadTs, "Slack ephemeral thread message posting") : void 0;
-	return { messageTs: (await withSlackRetries(() => getSlackClient().chat.postEphemeral({
-		channel: channelId,
-		user: userId,
-		text,
-		...input.blocks?.length ? { blocks: input.blocks } : void 0,
-		...threadTs ? { thread_ts: threadTs } : void 0
-	}), 3, {
-		action: "chat.postEphemeral",
-		spanAttributes: {
-			"app.slack.channel_id": channelId,
-			"app.slack.user_id": userId,
-			...threadTs ? { "app.slack.thread_ts": threadTs } : void 0
-		}
-	})).message_ts };
-}
-/** Upload files into a Slack conversation or thread via the shared outbound file boundary. */
-async function uploadFilesToConversation(input) {
-	const channelId = requireSlackConversationId(input.channelId, "Slack file upload");
-	const threadTs = input.threadTs ? requireSlackThreadTimestamp(input.threadTs, "Slack file upload") : void 0;
-	if (input.files.length === 0) throw new Error("Slack file upload requires at least one file");
-	const fileUploads = input.files.map((file) => {
-		const filename = file.filename.trim();
-		if (!filename) throw new Error("Slack file upload requires every file to have a filename");
-		return {
-			file: file.data,
-			filename
-		};
-	});
-	return { files: ((await withSlackRetries(() => getSlackClient().filesUploadV2({
-		channel_id: channelId,
-		...threadTs ? { thread_ts: threadTs } : void 0,
-		file_uploads: fileUploads
-	}), 3, {
-		action: "filesUploadV2",
-		spanAttributes: {
-			"app.slack.channel_id": channelId,
-			...threadTs ? { "app.slack.thread_ts": threadTs } : void 0
-		}
-	})).files ?? []).flatMap((completion) => (completion.files ?? []).map((file) => file.id ? { id: file.id } : {})) };
-}
-/** Add a reaction to a Slack message, treating `already_reacted` as idempotent success. */
-async function addReactionToMessage(input) {
-	const channelId = requireSlackConversationId(input.channelId, "Slack reaction");
-	const timestamp = requireSlackMessageTimestamp(input.timestamp, "Slack reaction");
-	const emoji = normalizeSlackEmojiName(input.emoji);
-	if (!emoji) throw new Error("Slack reaction requires a valid emoji alias name");
-	try {
-		await withSlackRetries(() => getSlackClient(input.timeoutMs === void 0 ? void 0 : { timeoutMs: input.timeoutMs }).reactions.add({
-			channel: channelId,
-			timestamp,
-			name: emoji
-		}), input.timeoutMs === void 0 ? 3 : 1, {
-			action: "reactions.add",
-			idempotent: true,
-			spanAttributes: {
-				"app.slack.channel_id": channelId,
-				"app.slack.message_ts": timestamp,
-				"app.slack.reaction": emoji
-			}
-		});
-	} catch (error) {
-		if (error instanceof SlackActionError && error.code === "already_reacted") return { ok: true };
-		throw error;
-	}
-	return { ok: true };
-}
-/** Remove a reaction from a Slack message, treating `no_reaction` as idempotent success. */
-async function removeReactionFromMessage(input) {
-	const channelId = requireSlackConversationId(input.channelId, "Slack reaction removal");
-	const timestamp = requireSlackMessageTimestamp(input.timestamp, "Slack reaction removal");
-	const emoji = normalizeSlackEmojiName(input.emoji);
-	if (!emoji) throw new Error("Slack reaction removal requires a valid emoji alias name");
-	try {
-		await withSlackRetries(() => getSlackClient().reactions.remove({
-			channel: channelId,
-			timestamp,
-			name: emoji
-		}), 3, {
-			action: "reactions.remove",
-			idempotent: true,
-			spanAttributes: {
-				"app.slack.channel_id": channelId,
-				"app.slack.message_ts": timestamp,
-				"app.slack.reaction": emoji
-			}
-		});
-	} catch (error) {
-		if (error instanceof SlackActionError && error.code === "no_reaction") return { ok: true };
-		throw error;
-	}
-	return { ok: true };
-}
-// src/chat/slack/status-format.ts
-const SLACK_STATUS_MAX_LENGTH = 50;
-/** Truncate a status string to fit Slack's 50-char assistant status limit. */
-function truncateStatusText(text) {
-	const trimmed = text.trim();
-	if (!trimmed) return "";
-	if (trimmed.length <= SLACK_STATUS_MAX_LENGTH) return trimmed;
-	return `${trimmed.slice(0, 47).trimEnd()}...`;
-}
-// src/chat/slack/mrkdwn.ts
-/** Escape dynamic text for Slack mrkdwn without changing intended formatting. */
-function escapeSlackMrkdwnText(text) {
-	return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-}
-/** Escape a URL for Slack explicit link syntax while preserving query semantics. */
-function escapeSlackLinkUrl(url) {
-	return url.replaceAll("&", "&amp;").replaceAll("<", "%3C").replaceAll(">", "%3E");
-}
-/** Build a Slack explicit link from dynamic URL and label values. */
-function formatSlackLink(url, label) {
-	return `<${escapeSlackLinkUrl(url)}|${escapeSlackMrkdwnText(label)}>`;
-}
-function readInlineCodeSpan(line, start) {
-	if (line[start] !== "`") return;
-	let n = 1;
-	while (line[start + n] === "`") n++;
-	const marker = "`".repeat(n);
-	let search = start + n;
-	while (search < line.length) {
-		const close = line.indexOf(marker, search);
-		if (close === -1) return;
-		const after = close + n;
-		if (line[after] !== "`") return {
-			text: line.slice(start, after),
-			end: after
-		};
-		search = after + 1;
-	}
-}
-function readExistingSlackAngleToken(line, start) {
-	if (line[start] !== "<") return;
-	const close = line.indexOf(">", start + 1);
-	if (close === -1) return;
-	const body = line.slice(start + 1, close);
-	if (/^(?:https?:\/\/|@|#|!)/.test(body)) return {
-		text: line.slice(start, close + 1),
-		end: close + 1
-	};
-}
-function readMarkdownLink(line, start) {
-	if (line[start] !== "[") return;
-	const labelEnd = line.indexOf("](", start + 1);
-	if (labelEnd === -1) return;
-	const destStart = labelEnd + 2;
-	if (!line.startsWith("http://", destStart) && !line.startsWith("https://", destStart)) return;
-	const closeParens = line.indexOf(")", destStart);
-	if (closeParens === -1) return;
-	return {
-		text: line.slice(start, closeParens + 1),
-		end: closeParens + 1
-	};
-}
-function hasUnmatchedClosingParen(text) {
-	let balance = 0;
-	for (const ch of text) if (ch === "(") balance++;
-	else if (ch === ")") balance--;
-	return balance < 0;
-}
-function readBareUrl(line, start) {
-	let end = start;
-	while (end < line.length) {
-		const ch = line.charAt(end);
-		if (/\s/.test(ch) || ch === "<" || ch === ">" || ch === "\"" || ch === "`" || ch === "|" || ch === "*") break;
-		end++;
-	}
-	if (end === start) return;
-	let raw = line.slice(start, end);
-	let suffix = "";
-	const peel = () => {
-		suffix = raw.slice(-1) + suffix;
-		raw = raw.slice(0, -1);
-	};
-	const shouldPeel = () => raw.endsWith("_") || /[.,!?;:]$/.test(raw) || raw.endsWith(")") && hasUnmatchedClosingParen(raw);
-	while (raw.length > 0 && shouldPeel()) peel();
-	if (!/^https?:\/\/.+/.test(raw)) return;
-	return {
-		url: raw,
-		suffix,
-		end
-	};
-}
-const BARE_SLACK_USER_ID_RE = /^@([UW](?=[A-Z0-9]*\d)[A-Z0-9]{8,})(?![\w])/;
-function readBareSlackUserMention(line, start) {
-	if (line[start] !== "@" || /\w/.test(line[start - 1] ?? "")) return;
-	const match = BARE_SLACK_USER_ID_RE.exec(line.slice(start));
-	if (!match) return;
-	return {
-		text: `<@${match[1]}>`,
-		end: start + match[0].length
-	};
-}
-/**
-* Wrap bare http(s) URLs and bare `@U123` Slack user IDs on a single line as
-* Slack explicit `<url>` links and `<@U123>` mentions.
-*/
-function wrapBareReferencesOnLine(line) {
-	let result = "";
-	let i = 0;
-	while (i < line.length) {
-		const codeSpan = readInlineCodeSpan(line, i);
-		if (codeSpan) {
-			result += codeSpan.text;
-			i = codeSpan.end;
-			continue;
-		}
-		const angleToken = readExistingSlackAngleToken(line, i);
-		if (angleToken) {
-			result += angleToken.text;
-			i = angleToken.end;
-			continue;
-		}
-		const mdLink = readMarkdownLink(line, i);
-		if (mdLink) {
-			result += mdLink.text;
-			i = mdLink.end;
-			continue;
-		}
-		const userMention = readBareSlackUserMention(line, i);
-		if (userMention) {
-			result += userMention.text;
-			i = userMention.end;
-			continue;
-		}
-		if (line.startsWith("https://", i) || line.startsWith("http://", i)) {
-			const parsed = readBareUrl(line, i);
-			if (parsed) {
-				result += `<${parsed.url}>${parsed.suffix}`;
-				i = parsed.end;
-				continue;
-			}
-		}
-		result += line[i];
-		i++;
-	}
-	return result;
-}
-/**
-* Pre-wrap bare http(s) URLs outside fenced code blocks as Slack explicit
-* links, preventing Slack's auto-linker from consuming adjacent formatting
-* markers into the URL. Bare `@U123` user IDs become `<@U123>` mentions,
-* because Slack shows a bare ID as literal text.
-*
-* Uses the same fence-toggle rule as `ensureBlockSpacing` so both passes
-* agree on which lines are code.
-*/
-function wrapBareReferences(text) {
-	const lines = text.split("\n");
-	const out = [];
-	let inCodeBlock = false;
-	for (const line of lines) {
-		if (line.trimStart().startsWith("```")) {
-			inCodeBlock = !inCodeBlock;
-			out.push(line);
-			continue;
-		}
-		out.push(inCodeBlock ? line : wrapBareReferencesOnLine(line));
-	}
-	return out.join("\n");
-}
-const LIST_ITEM_PATTERN = /^[-*•]\s|^\d+\.\s/;
-/**
-* Turn a follow-up paragraph inside a list item into a bullet at the same
-* indent.
-*
-* Slack's `markdown` block keeps only one paragraph per list item. It joins
-* the other paragraphs to the top-level item's text with no space and renders
-* nested lists after them. As a bullet, the paragraph keeps its place and
-* nesting.
-*/
-function bulletListFollowUpParagraphs(text) {
-	const lines = text.split("\n");
-	let inCodeBlock = false;
-	let inList = false;
-	for (const [i, line] of lines.entries()) {
-		const trimmed = line.trimStart();
-		const isFence = trimmed.startsWith("```");
-		if (!inCodeBlock && trimmed && trimmed.length === line.length) inList = LIST_ITEM_PATTERN.test(line);
-		else if (!inCodeBlock && inList && trimmed && !isFence && lines[i - 1]?.trim() === "" && !LIST_ITEM_PATTERN.test(trimmed)) lines[i] = `${line.slice(0, line.length - trimmed.length)}- ${trimmed}`;
-		if (isFence) inCodeBlock = !inCodeBlock;
-	}
-	return lines.join("\n");
-}
-/** Insert blank lines between content blocks so Slack renders them with visual separation. */
-function ensureBlockSpacing(text) {
-	const codeBlockPattern = /^```/;
-	const lines = text.split("\n");
-	const result = [];
-	let inCodeBlock = false;
-	for (const line of lines) {
-		if (codeBlockPattern.test(line.trimStart())) {
-			if (!inCodeBlock) {
-				const prev = result.length > 0 ? result[result.length - 1] : void 0;
-				if (prev !== void 0 && prev.trim() !== "") result.push("");
-			}
-			inCodeBlock = !inCodeBlock;
-			result.push(line);
-			continue;
-		}
-		if (inCodeBlock) {
-			result.push(line);
-			continue;
-		}
-		const prev = result.length > 0 ? result[result.length - 1] : void 0;
-		const isListItem = LIST_ITEM_PATTERN.test(line.trimStart());
-		const isListContinuation = prev !== void 0 && !isListItem && /^\s/.test(line) && (/^\s/.test(prev) || LIST_ITEM_PATTERN.test(prev));
-		if (prev !== void 0 && prev.trim() !== "" && line.trim() !== "" && !isListContinuation && !(LIST_ITEM_PATTERN.test(prev.trimStart()) && isListItem)) result.push("");
-		result.push(line);
-	}
-	return result.join("\n");
-}
-/**
-* Normalize model-authored Slack markdown for delivery via `markdown_text`
-* or `{ type: "markdown" }` blocks.
-*
-* Plugins may first rewrite ordinary Markdown. Core then applies Slack-only
-* delivery shaping: bare URL wrapping, block spacing, and list follow-up
-* paragraph bullets. Slack reply delivery owns chunking and continuation
-* markers separately.
-*/
-function normalizeSlackReplyMarkdown(text) {
-	let normalized = applyPluginFormatMarkdown(text).replace(/\r\n?/g, "\n").replace(/[ \t]+$/gm, "");
-	normalized = wrapBareReferences(normalized);
-	normalized = ensureBlockSpacing(normalized);
-	normalized = bulletListFollowUpParagraphs(normalized);
-	return normalized.replace(/\n{3,}/g, "\n\n").trim();
-}
-/** Normalize assistant status text before handing it to Slack. */
-function normalizeSlackStatusText(text) {
-	const trimmed = text.trim();
-	if (!trimmed) return "";
-	return truncateStatusText(trimmed.replace(/(?:\.\s*)+$/, "").trim());
-}
-/** Render a Slack user mention, which Slack shows as the person's name. */
-function slackMention(userId) {
-	return `<@${userId}>`;
-}
-// src/chat/slack/oauth-authorization-message.ts
-const ACCOUNT_SCOPE_NOTE = "This connects only your account. Junior sees only what you can see.";
-/** Present private OAuth authorization with a clear action and text fallback. */
-function buildSlackOAuthAuthorizationMessage(args) {
-	return {
-		text: `${formatSlackLink(args.authorizationUrl, args.label)}. ${ACCOUNT_SCOPE_NOTE} ${args.completionText}`,
-		blocks: [{
-			type: "section",
-			text: {
-				type: "mrkdwn",
-				text: `*${escapeSlackMrkdwnText(args.label)}*\n${ACCOUNT_SCOPE_NOTE}\n${escapeSlackMrkdwnText(args.completionText)}`
-			},
-			accessory: {
-				type: "button",
-				text: {
-					type: "plain_text",
-					text: "Connect"
-				},
-				style: "primary",
-				url: args.authorizationUrl,
-				action_id: "oauth_connect"
-			}
-		}]
-	};
-}
-// src/chat/oauth-flow.ts
-const OAUTH_STATE_TTL_MS = 6e5;
-function optionalString(value) {
-	return typeof value === "string" ? value : void 0;
-}
-/** Parse OAuth callback state that was persisted before a provider redirect. */
-function parseOAuthStatePayload(value) {
-	if (!isRecord(value)) return;
-	if (typeof value.userId !== "string" || typeof value.provider !== "string") return;
-	const actor = value.actor === void 0 ? void 0 : actorSchema.safeParse(value.actor);
-	if (value.actor !== void 0 && (!actor || !actor.success)) return;
-	const destination = parseDestination(value.destination);
-	if (value.destination !== void 0 && !destination) return;
-	const source = value.source === void 0 ? void 0 : sourceSchema.safeParse(value.source);
-	if (value.source !== void 0 && (!source || !source.success)) return;
-	return {
-		userId: value.userId,
-		provider: value.provider,
-		...actor?.success ? { actor: actor.data } : void 0,
-		...optionalString(value.channelId) ? { channelId: optionalString(value.channelId) } : void 0,
-		...destination ? { destination } : void 0,
-		...source?.success ? { source: source.data } : void 0,
-		...optionalString(value.threadTs) ? { threadTs: optionalString(value.threadTs) } : void 0,
-		...optionalString(value.resumeConversationId) ? { resumeConversationId: optionalString(value.resumeConversationId) } : void 0,
-		...optionalString(value.resumeSessionId) ? { resumeSessionId: optionalString(value.resumeSessionId) } : void 0,
-		...optionalString(value.scope) ? { scope: optionalString(value.scope) } : void 0
-	};
-}
-/** Return the manifest-owned display label for a provider. */
-function formatProviderLabel(provider) {
-	const displayName = pluginCatalogRuntime.getDisplayName(provider);
-	if (!displayName) throw new Error(`Unknown plugin provider display name: "${provider}"`);
-	return displayName;
-}
-/** Resolve the public base URL from environment variables (JUNIOR_BASE_URL or Vercel). */
-function resolveBaseUrl() {
-	const explicit = process.env.JUNIOR_BASE_URL?.trim();
-	if (explicit) return explicit;
-	const vercelProd = process.env.VERCEL_PROJECT_PRODUCTION_URL?.trim();
-	if (vercelProd) return `https://${vercelProd}`;
-	const vercelUrl = process.env.VERCEL_URL?.trim();
-	if (vercelUrl) return `https://${vercelUrl}`;
-}
-/**
-* Authorization links must only be visible to the requesting user.
-* Try in-context private delivery first, then fall back to a DM.
-*/
-async function deliverPrivateMessage(input) {
-	let client;
-	try {
-		client = getSlackClient();
-	} catch {
-		logWarn("oauth.private_delivery.skipped", { "app.reason": "missing_bot_token" });
-		return false;
-	}
-	if (input.channelId) try {
-		if (isDmChannel(input.channelId)) await postSlackMessage({
-			channelId: input.channelId,
-			text: input.text,
-			blocks: input.blocks,
-			threadTs: input.threadTs
-		});
-		else await postSlackEphemeralMessage({
-			channelId: input.channelId,
-			userId: input.userId,
-			text: input.text,
-			blocks: input.blocks,
-			threadTs: input.threadTs
-		});
-		return "in_context";
-	} catch (error) {
-		logWarn("oauth.private_delivery.failed", {
-			"app.slack.error": error instanceof Error ? error.message : String(error),
-			"app.slack.channel": input.channelId
-		});
-	}
-	try {
-		const dmChannelId = (await withSlackRetries(() => client.conversations.open({ users: input.userId }), 3, {
-			action: "conversations.open",
-			spanAttributes: { "app.slack.user_id": input.userId }
-		})).channel?.id;
-		if (!dmChannelId) {
-			logWarn("oauth.dm.fallback.failed", { "app.reason": "no_dm_channel_id" });
-			return false;
-		}
-		await postSlackMessage({
-			channelId: dmChannelId,
-			text: input.text,
-			blocks: input.blocks
-		});
-		return "fallback_dm";
-	} catch (error) {
-		logWarn("oauth.dm.fallback.failed", { "app.slack.error": error instanceof Error ? error.message : String(error) });
-		return false;
-	}
-}
-/** Present one OAuth request through the active surface's private delivery. */
-async function deliverOAuthAuthorization(request, input) {
-	if (input.authorization) {
-		await input.authorization.deliver(request);
-		return "in_context";
-	}
-	return await deliverPrivateMessage({
-		channelId: input.channelId,
-		threadTs: input.threadTs,
-		userId: input.userId,
-		...buildSlackOAuthAuthorizationMessage(request)
-	});
-}
-/** Initiate an OAuth authorization code flow for a provider and deliver the auth link to the user. */
-async function startOAuthFlow(provider, input) {
-	const providerConfig = pluginCatalogRuntime.getOAuthConfig(provider);
-	if (!providerConfig) return {
-		ok: false,
-		error: `Provider "${provider}" does not support OAuth authorization`
-	};
-	const clientId = process.env[providerConfig.clientIdEnv]?.trim();
-	if (!clientId) return {
-		ok: false,
-		error: `Missing ${providerConfig.clientIdEnv} environment variable`
-	};
-	const baseUrl = resolveBaseUrl();
-	if (!baseUrl) return {
-		ok: false,
-		error: "Cannot determine base URL (set JUNIOR_BASE_URL or deploy to Vercel)"
-	};
-	const state = input.authorization ? await input.authorization.createState() : randomBytes(32).toString("hex");
-	const requestedScope = input.scope ?? providerConfig.scope;
-	await getStateAdapter().set(`oauth-state:${state}`, {
-		userId: input.actorId,
-		provider,
-		...input.actor ? { actor: input.actor } : void 0,
-		...input.channelId ? { channelId: input.channelId } : void 0,
-		...input.destination ? { destination: input.destination } : void 0,
-		...input.source ? { source: input.source } : void 0,
-		...input.threadTs ? { threadTs: input.threadTs } : void 0,
-		...input.resumeConversationId ? { resumeConversationId: input.resumeConversationId } : void 0,
-		...input.resumeSessionId ? { resumeSessionId: input.resumeSessionId } : void 0,
-		...requestedScope ? { scope: requestedScope } : void 0
-	}, OAUTH_STATE_TTL_MS);
-	const authorizeParams = new URLSearchParams({
-		client_id: clientId,
-		state,
-		redirect_uri: `${baseUrl}${providerConfig.callbackPath}`,
-		response_type: "code"
-	});
-	if (requestedScope) authorizeParams.set("scope", requestedScope);
-	for (const [key, value] of Object.entries(providerConfig.authorizeParams ?? {})) authorizeParams.set(key, value);
-	logInfo("jr_rpc.oauth.started", {
-		"app.credential.provider": provider,
-		...input.activeSkillName ? { "app.skill.name": input.activeSkillName } : void 0
-	});
-	return {
-		ok: true,
-		delivery: await deliverOAuthAuthorization({
-			authorizationUrl: `${providerConfig.authorizeEndpoint}?${authorizeParams.toString()}`,
-			label: `Connect your ${formatProviderLabel(provider)} account`,
-			completionText: input.resumeSessionId ? "Once you've authorized, Junior will continue automatically." : "Once you've authorized, you'll see a confirmation in Slack."
-		}, {
-			authorization: input.authorization,
-			channelId: input.channelId,
-			threadTs: input.threadTs,
-			userId: input.actorId
-		})
-	};
-}
-// src/chat/sandbox/egress/schemas.ts
-const finiteNumberSchema = z.number().refine(Number.isFinite);
-const httpStatusSchema = z.number().int().min(100).max(599);
-const providerNameSchema = z.string().regex(/^[a-z][a-z0-9-]*$/);
-const credentialSignalKindSchema = z.enum(["auth_required", "unavailable"]);
-const sandboxEgressGrantSchema = pluginGrantSchema;
-const sandboxEgressCredentialContextSchema = z.object({
-	credentials: credentialContextSchema,
-	/** Conversation that the credentials act for. Telemetry only; it grants nothing. */
-	conversationId: z.string().min(1).optional(),
-	egressId: z.string().min(1),
-	expiresAtMs: finiteNumberSchema,
-	contextId: z.string().min(1)
-}).strict();
-const sandboxEgressCredentialLeaseSchema = z.object({
-	account: pluginProviderAccountSchema.optional(),
-	authorization: pluginAuthorizationSchema.optional(),
-	grant: sandboxEgressGrantSchema,
-	provider: providerNameSchema,
-	expiresAt: z.string().min(1),
-	headerTransforms: z.array(pluginCredentialHeaderTransformSchema).min(1)
-}).strict();
-const sandboxEgressAuthRequiredSignalSchema = z.object({
-	authorization: pluginAuthorizationSchema.optional(),
-	grant: sandboxEgressGrantSchema,
-	kind: credentialSignalKindSchema.default("auth_required"),
-	provider: providerNameSchema,
-	message: z.string().optional(),
-	createdAtMs: finiteNumberSchema
-}).strict().superRefine((signal, ctx) => {
-	if (signal.authorization && signal.authorization.provider !== signal.provider) ctx.addIssue({
-		code: z.ZodIssueCode.custom,
-		message: "Auth signal authorization provider must match provider",
-		path: ["authorization", "provider"]
-	});
-});
-const sandboxEgressPermissionDeniedSignalSchema = z.object({
-	account: pluginProviderAccountSchema.optional(),
-	grant: sandboxEgressGrantSchema,
-	message: z.string().min(1),
-	provider: providerNameSchema,
-	source: z.literal("upstream"),
-	status: httpStatusSchema,
-	upstreamHost: z.string().min(1),
-	upstreamPath: z.string().min(1),
-	createdAtMs: finiteNumberSchema
-}).strict();
-const sandboxEgressSignalsResponseSchema = z.object({
-	auth_required: sandboxEgressAuthRequiredSignalSchema.optional(),
-	permission_denied: sandboxEgressPermissionDeniedSignalSchema.optional()
-}).strict();
-/** Parse a host-owned sandbox egress auth signal from state or tool results. */
-function parseSandboxEgressAuthRequiredSignal(value) {
-	const result = sandboxEgressAuthRequiredSignalSchema.safeParse(value);
-	return result.success ? result.data : void 0;
-}
-/** Parse a host-owned sandbox egress permission-denied signal from state or tool results. */
-function parseSandboxEgressPermissionDeniedSignal(value) {
-	const result = sandboxEgressPermissionDeniedSignalSchema.safeParse(value);
-	return result.success ? result.data : void 0;
-}
-// src/chat/sandbox/egress/session.ts
-const SANDBOX_EGRESS_PROXY_PATH = "/api/internal/sandbox-egress";
-const SANDBOX_EGRESS_TOKEN_VERSION = "v1";
-const SANDBOX_EGRESS_HMAC_CONTEXT = "junior.sandbox_egress.v1";
-const SANDBOX_EGRESS_AUTH_SIGNAL_PREFIX = "sandbox-egress-auth-required";
-const SANDBOX_EGRESS_PERMISSION_SIGNAL_PREFIX = "sandbox-egress-permission-denied";
-const SANDBOX_EGRESS_LEASE_PREFIX = "sandbox-egress-lease";
-const DEFAULT_SESSION_TTL_MS = 18e5;
-/** Treat a cached lease as expired this long before its provider expiry. */
-const LEASE_REFRESH_BUFFER_MS = 3e5;
-/** True when this grant may keep shared auth headers on the host. */
-function isSharedInstallationGrant(grant) {
-	return grant.name.startsWith("installation-");
-}
-/**
-* Build the host key for a shared installation grant.
-*
-* Only installation grants are remembered. User and other grants issue live
-* headers each time, so they never write a host key.
-*/
-function leaseKey(provider, grant) {
-	return `${SANDBOX_EGRESS_LEASE_PREFIX}:${provider}:${grant.name}:shared`;
-}
-/**
-* Build the command signal key for credential issuance failures by access level.
-*/
-function authSignalKey(egressId, access) {
-	return `${SANDBOX_EGRESS_AUTH_SIGNAL_PREFIX}:${egressId}:${access}`;
-}
-/**
-* Build the command signal key for upstream permission denials by access level.
-*/
-function permissionSignalKey(egressId, access) {
-	return `${SANDBOX_EGRESS_PERMISSION_SIGNAL_PREFIX}:${egressId}:${access}`;
-}
-function base64Url(input) {
-	return Buffer.from(input, "utf8").toString("base64url");
-}
-function fromBase64Url(input) {
-	return Buffer.from(input, "base64url").toString("utf8");
-}
-/**
-* Sign a versioned context payload in the sandbox egress HMAC domain.
-*
-* `JUNIOR_SECRET` is the shared secret so proxy URLs cannot be forged by code
-* running inside the sandbox.
-*/
-function signPayload(payload) {
-	return createHmac("sha256", getSandboxEgressSecret()).update(`${SANDBOX_EGRESS_HMAC_CONTEXT}:${payload}`).digest("base64url");
-}
-function timingSafeMatch(expected, actual) {
-	const expectedBuffer = Buffer.from(expected);
-	const actualBuffer = Buffer.from(actual);
-	if (expectedBuffer.length !== actualBuffer.length) return false;
-	return timingSafeEqual(expectedBuffer, actualBuffer);
-}
-function parseSandboxEgressContext(value) {
-	const result = sandboxEgressCredentialContextSchema.safeParse(value);
-	if (!result.success) return;
-	if (result.data.expiresAtMs <= Date.now()) return;
-	return result.data;
-}
-function parseLease(value) {
-	const result = sandboxEgressCredentialLeaseSchema.safeParse(value);
-	if (!result.success) return;
-	const expiresAtMs = Date.parse(result.data.expiresAt);
-	if (!Number.isFinite(expiresAtMs) || expiresAtMs <= Date.now() + LEASE_REFRESH_BUFFER_MS) return;
-	return result.data;
-}
-function getSandboxEgressSecret() {
-	const secret = process.env.JUNIOR_SECRET?.trim();
-	if (secret) return secret;
-	throw new Error("Cannot determine sandbox egress secret (set JUNIOR_SECRET)");
-}
-/**
-* Create the signed Junior credential context embedded in the proxy URL.
-*
-* The token binds actor credentials to a specific sandbox egress id and a
-* short expiry. Vercel OIDC proves which VM sent a request; this token proves
-* which Junior actor and credential context that VM is allowed to use.
-*/
-function createSandboxEgressCredentialToken(input) {
-	const ttlMs = Math.max(1, input.ttlMs ?? DEFAULT_SESSION_TTL_MS);
-	const now = Date.now();
-	const context = {
-		...input.conversationId ? { conversationId: input.conversationId } : void 0,
-		credentials: input.credentials,
-		egressId: input.egressId,
-		expiresAtMs: now + ttlMs,
-		contextId: randomUUID()
-	};
-	const payload = `${SANDBOX_EGRESS_TOKEN_VERSION}.${base64Url(JSON.stringify(context))}`;
-	return `${payload}.${signPayload(payload)}`;
-}
-/**
-* Verify the signed Junior credential context from the proxy URL.
-*
-* Returning `undefined` means the token is missing, expired, malformed, or not
-* signed with the current `JUNIOR_SECRET`.
-*/
-function parseSandboxEgressCredentialToken(token) {
-	if (!token) return;
-	const parts = token.split(".");
-	if (parts.length !== 3 || parts[0] !== SANDBOX_EGRESS_TOKEN_VERSION) return;
-	const encodedSession = parts[1];
-	const signature = parts[2];
-	if (!encodedSession || !signature) return;
-	if (!timingSafeMatch(signPayload(`${parts[0]}.${encodedSession}`), signature)) return;
-	try {
-		return parseSandboxEgressContext(JSON.parse(fromBase64Url(encodedSession)));
-	} catch {
-		return;
-	}
-}
-/**
-* Remember auth headers for a shared installation grant.
-*
-* User and other grants are ignored here. TTL follows the provider expiry.
-* Sandbox context expiry still decides whether a request may use the headers;
-* it does not shorten a shared installation grant for other sandboxes.
-*/
-async function setSandboxEgressCredentialLease(_context, lease) {
-	if (!isSharedInstallationGrant(lease.grant)) return;
-	const leaseExpiresAtMs = Date.parse(lease.expiresAt);
-	if (!Number.isFinite(leaseExpiresAtMs) || leaseExpiresAtMs <= Date.now()) return;
-	const ttlMs = Math.max(1, leaseExpiresAtMs - Date.now());
-	const state = getStateAdapter();
-	await state.connect();
-	await state.set(leaseKey(lease.provider, lease.grant), lease, ttlMs);
-}
-/** Load remembered auth headers for a shared installation grant. */
-async function getSandboxEgressCredentialLease(provider, grant, _context) {
-	if (!isSharedInstallationGrant(grant)) return;
-	const state = getStateAdapter();
-	await state.connect();
-	return parseLease(await state.get(leaseKey(provider, grant)));
-}
-/** Drop remembered installation headers after the upstream rejects them. */
-async function clearSandboxEgressCredentialLease(provider, grant, _context) {
-	if (!isSharedInstallationGrant(grant)) return;
-	const state = getStateAdapter();
-	await state.connect();
-	await state.delete(leaseKey(provider, grant));
-}
-/**
-* Record that credential issuance needs user authorization for this command.
-*
-* The command runner consumes this after the sandbox tool finishes so the agent
-* can present a normal authorization-required response instead of a raw proxy
-* failure.
-*/
-async function setSandboxEgressAuthRequiredSignal(context, signal) {
-	const ttlMs = Math.max(1, context.expiresAtMs - Date.now());
-	const state = getStateAdapter();
-	await state.connect();
-	await state.set(authSignalKey(context.egressId, signal.grant.access), {
-		...signal,
-		createdAtMs: Date.now()
-	}, ttlMs);
-}
-/**
-* Record that the provider rejected an issued credential with permission denial.
-*/
-async function setSandboxEgressPermissionDeniedSignal(context, signal) {
-	const ttlMs = Math.max(1, context.expiresAtMs - Date.now());
-	const state = getStateAdapter();
-	await state.connect();
-	await state.set(permissionSignalKey(context.egressId, signal.grant.access), {
-		...signal,
-		createdAtMs: Date.now()
-	}, ttlMs);
-}
-/** Remove pending auth/permission signals before or after a sandbox command. */
-async function clearSandboxEgressSignals(egressId) {
-	if (!egressId) return;
-	const state = getStateAdapter();
-	await state.connect();
-	await Promise.all([
-		state.delete(authSignalKey(egressId, "read")),
-		state.delete(authSignalKey(egressId, "write")),
-		state.delete(permissionSignalKey(egressId, "read")),
-		state.delete(permissionSignalKey(egressId, "write"))
-	]);
-}
-/**
-* Consume the auth signal produced during a sandbox command, preferring writes.
-*/
-async function consumeSandboxEgressAuthRequiredSignal(egressId) {
-	if (!egressId) return;
-	const state = getStateAdapter();
-	await state.connect();
-	const [writeSignal, readSignal] = await Promise.all([state.get(authSignalKey(egressId, "write")), state.get(authSignalKey(egressId, "read"))]);
-	const signal = parseSandboxEgressAuthRequiredSignal(writeSignal) ?? parseSandboxEgressAuthRequiredSignal(readSignal);
-	await Promise.all([state.delete(authSignalKey(egressId, "read")), state.delete(authSignalKey(egressId, "write"))]);
-	return signal;
-}
-/**
-* Consume the permission signal produced during a sandbox command, preferring writes.
-*/
-async function consumeSandboxEgressPermissionDeniedSignal(egressId) {
-	if (!egressId) return;
-	const state = getStateAdapter();
-	await state.connect();
-	const [writeSignal, readSignal] = await Promise.all([state.get(permissionSignalKey(egressId, "write")), state.get(permissionSignalKey(egressId, "read"))]);
-	const signal = parseSandboxEgressPermissionDeniedSignal(writeSignal) ?? parseSandboxEgressPermissionDeniedSignal(readSignal);
-	await Promise.all([state.delete(permissionSignalKey(egressId, "read")), state.delete(permissionSignalKey(egressId, "write"))]);
-	return signal;
-}
-// src/chat/sandbox/egress/tracing.ts
-function isValidDomainPattern(domain) {
-	if (domain.includes("*")) return domain.startsWith("*.") && domain.indexOf("*", 1) === -1;
-	return true;
-}
-/** Normalize exact and leading-wildcard sandbox egress trace domains. */
-function normalizeSandboxEgressTracePropagationDomains(domains) {
-	if (domains === void 0) return [];
-	if (!Array.isArray(domains)) throw new Error("sandbox.egressTracePropagationDomains must be an array");
-	return [...new Set(domains.map((domain) => {
-		if (typeof domain !== "string") throw new Error("sandbox.egressTracePropagationDomains entries must be strings");
-		const normalized = domain.trim().toLowerCase();
-		if (!normalized) throw new Error("sandbox.egressTracePropagationDomains entries must be non-empty");
-		if (!isValidDomainPattern(normalized)) throw new Error("sandbox.egressTracePropagationDomains entries must be exact domains or leading wildcard domains");
-		return normalized;
-	}))].sort((left, right) => left.localeCompare(right));
-}
-/** Return whether a host may carry sandbox egress trace propagation headers. */
-function shouldPropagateSandboxEgressTrace(host, config = {}) {
-	const normalizedHost = host.trim().toLowerCase();
-	return (config.domains ?? []).some((domain) => {
-		if (domain.startsWith("*.")) {
-			const suffix = domain.slice(1);
-			return normalizedHost.endsWith(suffix) && normalizedHost !== domain.slice(2);
-		}
-		return domain === normalizedHost;
-	});
-}
-// src/chat/sandbox/egress/policy.ts
-/** Return whether an outbound host is covered by a provider domain rule. */
-function matchesSandboxEgressDomain(host, domain) {
-	return host.toLowerCase() === domain.toLowerCase();
-}
-function manifestDomains(manifest) {
-	return [.../* @__PURE__ */ new Set([...manifest.credentials?.domains ?? [], ...manifest.domains ?? []])].sort((left, right) => left.localeCompare(right));
-}
-function providerEntries() {
-	return pluginCatalogRuntime.getProviders().map((plugin) => ({
-		provider: plugin.manifest.name,
-		domains: manifestDomains(plugin.manifest)
-	})).filter((entry) => entry.domains.length > 0).sort((left, right) => left.provider.localeCompare(right.provider));
-}
-/**
-* Resolve the plugin provider responsible for an outbound sandbox host.
-*
-* Only plugin-declared provider domains are eligible for credentialed sandbox
-* egress. Hosts without a matching provider are blocked by the proxy even if a
-* malformed or stale network policy tried to forward them.
-*/
-function resolveSandboxEgressProviderForHost(host) {
-	return providerEntries().find((entry) => entry.domains.some((domain) => matchesSandboxEgressDomain(host, domain)))?.provider;
-}
-function sandboxProxyUrl(credentialToken) {
-	const baseUrl = resolveBaseUrl();
-	if (!baseUrl) throw new Error("Cannot determine base URL for sandbox credential egress (set JUNIOR_BASE_URL or deploy to Vercel)");
-	const path = credentialToken ? `${SANDBOX_EGRESS_PROXY_PATH}/${credentialToken}` : SANDBOX_EGRESS_PROXY_PATH;
-	return new URL(path, baseUrl).toString();
-}
-/**
-* Build the policy that forwards provider domains through the egress proxy.
-*
-* The signed credential token is embedded in the forward URL so the proxy can
-* bind each forwarded request back to the actor and sandbox VM that created the
-* command. The sandbox receives placeholder env vars, not provider credentials.
-*/
-function buildSandboxEgressNetworkPolicy(input) {
-	const allow = { "*": [] };
-	const entries = providerEntries();
-	const traceHeaders = Object.fromEntries(Object.entries(input?.traceHeaders ?? {}).filter(([, value]) => typeof value === "string" && value.trim()));
-	const hasTraceHeaders = Object.keys(traceHeaders).length > 0;
-	if (entries.length === 0 && (!hasTraceHeaders || (input?.traceConfig?.domains ?? []).length === 0)) return { allow };
-	const forwardURL = input?.credentialToken ? sandboxProxyUrl(input.credentialToken) : void 0;
-	const domains = /* @__PURE__ */ new Map();
-	if (forwardURL) for (const entry of entries) for (const domain of entry.domains) domains.set(domain, { forward: true });
-	if (hasTraceHeaders) for (const domain of input?.traceConfig?.domains ?? []) domains.set(domain, { forward: domains.get(domain)?.forward ?? false });
-	for (const [domain, policy] of [...domains.entries()].sort(([left], [right]) => left.localeCompare(right))) {
-		const shouldPropagateTrace = shouldPropagateSandboxEgressTrace(domain, input?.traceConfig);
-		if (policy.forward && forwardURL) allow[domain] = [{ forwardURL }];
-		else if (shouldPropagateTrace && hasTraceHeaders) allow[domain] = [{ transform: [{ headers: traceHeaders }] }];
-	}
-	return { allow };
-}
-/**
-* Resolve non-secret command environment values for registered sandbox providers.
-*
-* Credential env vars are placeholders that tell tools which auth variable name
-* exists; real credential headers are issued lazily by host egress.
-*/
-async function resolveSandboxCommandEnvironment() {
-	const env = {};
-	for (const plugin of pluginCatalogRuntime.getProviders().sort((left, right) => left.manifest.name.localeCompare(right.manifest.name))) {
-		Object.assign(env, resolvePluginCommandEnv(plugin.manifest));
-		const credentials = plugin.manifest.credentials;
-		if (credentials?.authTokenEnv) env[credentials.authTokenEnv] = resolveAuthTokenPlaceholder(credentials);
-	}
-	return env;
-}
-// src/chat/capabilities/router.ts
-var ProviderCredentialRouter = class {
-	brokersByProvider;
-	constructor(input) {
-		this.brokersByProvider = input.brokersByProvider;
-	}
-	async issue(input) {
-		const broker = this.brokersByProvider[input.provider];
-		if (!broker) throw new Error(`No credential broker registered for provider: ${input.provider}`);
-		return await broker.issue({
-			context: input.context,
-			reason: input.reason
-		});
-	}
-};
-// src/chat/credentials/user-token-store.ts
-const storedTokensSchema = pluginStoredTokensSchema;
-// src/chat/credentials/state-adapter-token-store.ts
-const KEY_PREFIX = "oauth-token";
-const BUFFER_MS = 864e5;
-const LONG_LIVED_TTL_MS = 31536e6;
-const REFRESH_LOCK_WAIT_MS = 3e4;
-const REFRESH_LOCK_RETRY_MS = 100;
-function tokenKey(userId, provider) {
-	return `${KEY_PREFIX}:${userId}:${provider}`;
-}
-function refreshLockKey(userId, provider) {
-	return `${tokenKey(userId, provider)}:refresh`;
-}
-var StateAdapterTokenStore = class {
-	state;
-	constructor(stateAdapter) {
-		this.state = stateAdapter;
-	}
-	async get(userId, provider) {
-		const stored = await this.state.get(tokenKey(userId, provider));
-		return stored === null || stored === void 0 ? void 0 : storedTokensSchema.parse(stored);
-	}
-	async set(userId, provider, tokens) {
-		const parsed = storedTokensSchema.parse(tokens);
-		const expiresAt = parsed.refreshTokenExpiresAt ?? parsed.expiresAt;
-		const ttlMs = expiresAt ? Math.max(expiresAt - Date.now() + BUFFER_MS, BUFFER_MS) : LONG_LIVED_TTL_MS;
-		await this.state.set(tokenKey(userId, provider), parsed, ttlMs);
-	}
-	async delete(userId, provider) {
-		await this.state.delete(tokenKey(userId, provider));
-	}
-	/** Wait for the per-slot refresh gate so rotated refresh tokens are used once. */
-	async withRefresh(userId, provider, callback) {
-		const lockKey = refreshLockKey(userId, provider);
-		const deadline = Date.now() + REFRESH_LOCK_WAIT_MS;
-		while (true) {
-			const lock = await acquireActiveLock(this.state, lockKey);
-			if (lock) try {
-				return await callback();
-			} finally {
-				await this.state.releaseLock(lock);
-			}
-			if (Date.now() >= deadline) throw new Error(`Could not acquire OAuth token refresh lock`);
-			await sleep(REFRESH_LOCK_RETRY_MS);
-		}
-	}
-};
-// src/chat/capabilities/factory.ts
-const sandboxEgressRouters = /* @__PURE__ */ new WeakMap();
-/** Create the user token store used by OAuth-backed credential brokers. */
-function createUserTokenStore() {
-	return new StateAdapterTokenStore(getStateAdapter());
-}
-function createProviderCredentialRouter(userTokenStore) {
-	const brokersByProvider = {};
-	for (const plugin of pluginCatalogRuntime.getProviders()) {
-		const { name } = plugin.manifest;
-		if (!plugin.manifest.credentials && !plugin.manifest.apiHeaders) continue;
-		brokersByProvider[name] = pluginCatalogRuntime.createBroker(name, { userTokenStore });
-	}
-	return new ProviderCredentialRouter({ brokersByProvider });
-}
-function getSandboxEgressRouter() {
-	const stateAdapter = getStateAdapter();
-	let router = sandboxEgressRouters.get(stateAdapter);
-	if (!router) {
-		router = createProviderCredentialRouter(new StateAdapterTokenStore(stateAdapter));
-		sandboxEgressRouters.set(stateAdapter, router);
-	}
-	return router;
-}
-/** Issue one provider credential lease for host-side sandbox egress proxying. */
-async function issueProviderCredentialLease(input) {
-	return await getSandboxEgressRouter().issue(input);
-}
-// src/chat/sandbox/egress/credentials.ts
-const HTTP_READ_METHODS = /* @__PURE__ */ new Set([
-	"GET",
-	"HEAD",
-	"OPTIONS"
-]);
-/**
-* Signals that egress selected a grant but could not issue credential headers.
-*
-* Callers convert this into command-level auth-required state so the agent can
-* request authorization without exposing provider-specific lease internals.
-*/
-var SandboxEgressCredentialError = class extends Error {
-	authorization;
-	grant;
-	kind;
-	provider;
-	constructor(input) {
-		super(input.message);
-		this.name = "SandboxEgressCredentialError";
-		this.authorization = input.authorization;
-		this.grant = input.grant;
-		this.kind = input.kind;
-		this.provider = input.provider;
-	}
-};
-function defaultGrantForProvider(input) {
-	const access = HTTP_READ_METHODS.has(input.method.toUpperCase()) ? "read" : "write";
-	return {
-		source: "broker",
-		grant: {
-			name: "default",
-			access,
-			reason: `sandbox-egress:${input.provider}:${access}`
-		}
-	};
-}
-function hasGenericCredentials(provider) {
-	const manifest = pluginCatalogRuntime.getDefinition(provider)?.manifest;
-	return Boolean(manifest?.credentials || manifest?.apiHeaders);
-}
-function oauthAuthorizationForProvider(provider) {
-	const oauth = pluginCatalogRuntime.getOAuthConfig(provider);
-	return oauth ? {
-		type: "oauth",
-		provider,
-		...oauth.scope ? { scope: oauth.scope } : void 0
-	} : void 0;
-}
-function credentialSubjectFromContext(context) {
-	return "subject" in context.credentials && context.credentials.subject ? {
-		type: "user",
-		userId: context.credentials.subject.userId
-	} : void 0;
-}
-function assertLeaseTransformsOwnedByProvider(provider, lease) {
-	for (const transform of lease.headerTransforms) if (resolveSandboxEgressProviderForHost(transform.domain) !== provider) throw new Error(`Credential lease for ${provider} included header transform for unowned domain ${transform.domain}`);
-}
-/**
-* Select the grant needed for one outbound request.
-*
-* GitHub GraphQL and other plugin-owned APIs may need body-aware grant choices;
-* providers without hooks use a simple read/write default based on HTTP method.
-* A hook plugin that also declares generic credentials can return no grant to
-* use that default for one request.
-*/
-async function selectSandboxEgressGrant(input) {
-	if (!hasEgressCredentialHooks(input.provider)) return defaultGrantForProvider(input);
-	const pluginGrant = await selectPluginGrant({
-		...input.bodyText !== void 0 ? { bodyText: input.bodyText } : void 0,
-		...input.operation ? { operation: input.operation } : void 0,
-		provider: input.provider,
-		method: input.method,
-		upstreamUrl: input.upstreamUrl
-	});
-	if (!pluginGrant) {
-		if (hasGenericCredentials(input.provider)) return defaultGrantForProvider(input);
-		throw new Error(`Plugin "${input.provider}" grantForEgress must return a grant for sandbox egress`);
-	}
-	return {
-		source: "plugin",
-		grant: pluginGrant
-	};
-}
-/**
-* Resolve the authorization flow attached to a broker-selected egress grant.
-*
-* Plugin-selected grants can return their own authorization metadata when
-* issuing credentials; broker defaults use the provider OAuth config.
-*/
-function authorizationForSandboxEgressGrant(provider, selection) {
-	return selection.source === "broker" ? oauthAuthorizationForProvider(provider) : void 0;
-}
-/**
-* Return credential header transforms for a selected grant.
-*
-* Only shared installation grants are remembered on the host. User and other
-* grants always issue from the live credential source so a saved login change
-* cannot leave stale auth headers in place. The sandbox context only authorizes
-* the request.
-*/
-async function sandboxEgressCredentialLease(provider, selection, context) {
-	const { grant } = selection;
-	const cached = await getSandboxEgressCredentialLease(provider, grant, context);
-	if (cached) {
-		if (selection.source === "plugin" && cached.grant.access !== grant.access) throw new Error(`Cached credential lease for ${provider}/${grant.name} has ${cached.grant.access} access, but ${grant.access} was selected`);
-		return {
-			...cached,
-			grant
-		};
-	}
-	let lease;
-	if (selection.source === "plugin") {
-		const credentialSubject = credentialSubjectFromContext(context);
-		const pluginResult = await issuePluginCredential({
-			provider,
-			grant,
-			actor: context.credentials.actor,
-			...credentialSubject ? { credentialSubject } : void 0,
-			userTokenStore: createUserTokenStore()
-		});
-		if (pluginResult.type === "needed") throw new SandboxEgressCredentialError({
-			provider,
-			grant,
-			kind: "auth_required",
-			authorization: pluginResult.authorization,
-			message: pluginResult.message
-		});
-		if (pluginResult.type === "unavailable") throw new SandboxEgressCredentialError({
-			provider,
-			grant,
-			kind: "unavailable",
-			message: pluginResult.message
-		});
-		lease = pluginResult.lease;
-	} else try {
-		lease = await issueProviderCredentialLease({
-			context: context.credentials,
-			provider,
-			reason: grant.reason ?? `sandbox-egress:${provider}:default`
-		});
-	} catch (error) {
-		if (error instanceof CredentialUnavailableError) throw new SandboxEgressCredentialError({
-			provider,
-			grant,
-			kind: "auth_required",
-			authorization: authorizationForSandboxEgressGrant(provider, selection),
-			message: error.message
-		});
-		throw error;
-	}
-	const headerTransforms = lease.headerTransforms ?? [];
-	if (headerTransforms.length === 0) throw new Error(`Credential lease for ${provider} did not include header transforms`);
-	const leaseExpiresAtMs = Date.parse(lease.expiresAt);
-	if (!Number.isFinite(leaseExpiresAtMs) || leaseExpiresAtMs <= Date.now()) throw new Error(`Credential lease for ${provider} is expired`);
-	const authorization = selection.source === "broker" ? oauthAuthorizationForProvider(provider) : lease.authorization;
-	const issuedLease = {
-		provider,
-		grant,
-		...lease.account ? { account: lease.account } : void 0,
-		...authorization ? { authorization } : void 0,
-		expiresAt: lease.expiresAt,
-		headerTransforms
-	};
-	assertLeaseTransformsOwnedByProvider(provider, issuedLease);
-	await setSandboxEgressCredentialLease(context, issuedLease);
-	return issuedLease;
-}
-/** Return whether a credential lease can modify requests to the target host. */
-function hasSandboxEgressLeaseTransformForHost(lease, host) {
-	return lease.headerTransforms.some((transform) => matchesSandboxEgressDomain(host, transform.domain));
-}
-// src/chat/egress/credentialed.ts
-const HOP_BY_HOP_HEADERS = /* @__PURE__ */ new Set([
-	"connection",
-	"host",
-	"keep-alive",
-	"proxy-authenticate",
-	"proxy-authorization",
-	"te",
-	"trailer",
-	"transfer-encoding",
-	"upgrade"
-]);
-const PROXY_ONLY_HEADERS = /* @__PURE__ */ new Set([
-	"vercel-sandbox-oidc-token",
-	"vercel-forwarded-host",
-	"vercel-forwarded-scheme",
-	"vercel-forwarded-port",
-	"vercel-forwarded-path"
-]);
-const TRACE_PROPAGATION_HEADERS = /* @__PURE__ */ new Set([
-	"baggage",
-	"sentry-trace",
-	"traceparent"
-]);
-const DECODED_RESPONSE_HEADERS = /* @__PURE__ */ new Set(["content-encoding", "content-length"]);
-const UPSTREAM_TOKEN_REJECTION_STATUS = 401;
-const UPSTREAM_PERMISSION_REJECTION_STATUS = 403;
-const GRANT_SELECTION_BODY_TEXT_LIMIT_BYTES = 65536;
-const RESPONSE_BODY_TEXT_LIMIT_BYTES = 65536;
-function authRequiredResponse(input) {
-	return new Response(`junior-auth-required provider=${input.provider} grant=${input.grant.name} access=${input.grant.access} 401 unauthorized\n${input.message}`, {
-		status: 401,
-		headers: {
-			"content-type": "text/plain; charset=utf-8",
-			"cache-control": "no-store"
-		}
-	});
-}
-function policyDeniedResponse(error) {
-	return Response.json({ error: error.message }, {
-		status: 403,
-		headers: { "cache-control": "no-store" }
-	});
-}
-function shouldLogSandboxEgressInfo() {
-	return (process.env.SENTRY_ENVIRONMENT ?? process.env.VERCEL_ENV ?? process.env.NODE_ENV ?? "").trim().toLowerCase() !== "production";
-}
-function egressAttributes(input) {
-	return {
-		...input.egressId ? { "app.sandbox.egress_id": input.egressId } : void 0,
-		...input.provider ? { "app.provider.name": input.provider } : void 0,
-		...input.grantName ? { "app.grant.name": input.grantName } : void 0,
-		...input.grantAccess ? { "app.grant.access": input.grantAccess } : void 0,
-		...input.grantReason ? { "app.grant.reason": input.grantReason } : void 0,
-		...input.host ? { "server.address": input.host } : void 0,
-		...input.method ? { "http.request.method": input.method } : void 0,
-		...input.path ? { "url.path": input.path } : void 0,
-		...input.status ? { "http.response.status_code": input.status } : void 0
-	};
-}
-function redactedProxyPath(pathname) {
-	if (pathname.startsWith(`/api/internal/sandbox-egress/`)) return `${SANDBOX_EGRESS_PROXY_PATH}/<token>`;
-	return pathname;
-}
-function routingAttributes(request, upstreamUrl) {
-	const attributes = { "app.sandbox.egress.proxy_path": redactedProxyPath(new URL(request.url).pathname) };
-	if (upstreamUrl) {
-		attributes["app.sandbox.egress.upstream_path"] = upstreamUrl.pathname;
-		const gitService = upstreamUrl.searchParams.get("service");
-		if (upstreamUrl.hostname.toLowerCase() === "github.com" && (gitService === "git-upload-pack" || gitService === "git-receive-pack")) attributes["app.sandbox.egress.git_service"] = gitService;
-	}
-	return attributes;
-}
-function displayedUpstreamPath(upstreamUrl) {
-	const gitService = upstreamUrl.searchParams.get("service");
-	if (upstreamUrl.hostname.toLowerCase() === "github.com" && (gitService === "git-upload-pack" || gitService === "git-receive-pack")) return `${upstreamUrl.pathname}?service=${gitService}`;
-	return upstreamUrl.pathname;
-}
-function permissionDeniedMessage(provider, grant) {
-	return `${provider} returned HTTP 403 after the runtime injected the ${grant.name} grant. The request was forwarded; this is not a local runtime block.`;
-}
-function isEgressAuthRequired(error) {
-	return error instanceof EgressAuthRequired || error instanceof Error && error.name === "EgressAuthRequired";
-}
-function isEgressPolicyDenied(error) {
-	return error instanceof EgressPolicyDenied || error instanceof Error && error.name === "EgressPolicyDenied";
-}
-/**
-* Record one forwarded provider request. Write-grant requests are audit
-* events, so they reach Sentry in production. Other requests log only outside
-* production.
-*/
-function logSandboxEgressUpstreamRequest(input) {
-	const isWrite = input.grantAccess === "write";
-	if (!isWrite && !shouldLogSandboxEgressInfo()) return;
-	(isWrite ? logAudit : logInfo)("sandbox.egress.upstream.requested", {
-		...egressAttributes({
-			egressId: input.egressId,
-			grantAccess: input.grantAccess,
-			grantName: input.grantName,
-			grantReason: input.grantReason,
-			host: input.upstreamUrl.hostname,
-			method: input.request.method,
-			path: input.upstreamUrl.pathname,
-			provider: input.provider,
-			status: input.upstream.status
-		}),
-		...routingAttributes(input.request, input.upstreamUrl),
-		"app.sandbox.egress.upstream_ok": input.upstream.ok
-	});
-}
-async function requestBodyBytes(request) {
-	if (request.method === "GET" || request.method === "HEAD" || request.method === "OPTIONS" || request.body === null) return;
-	return await request.arrayBuffer();
-}
-/**
-* Explain a request body that the runtime delivered already used.
-*
-* The forwarded headers cannot show whether the body was empty, so the proxy
-* does not send a credentialed write upstream without its payload.
-*/
-function unreadableBodyResponse(eventId) {
-	return Response.json({
-		source: "junior-egress",
-		error: "Junior's sandbox egress proxy could not read the request body, so it did not send the request upstream.",
-		...eventId ? { sentryEventId: eventId } : void 0
-	}, {
-		status: 500,
-		headers: { "cache-control": "no-store" }
-	});
-}
-/** Identify GitHub writes whose body determines whether a grant is safe. */
-function githubBodyInspection(input) {
-	if (input.provider !== "github" || input.requestMethod.toUpperCase() !== "POST" || input.upstreamUrl.hostname.toLowerCase() !== "api.github.com") return;
-	const pathname = input.upstreamUrl.pathname.toLowerCase();
-	if (pathname.endsWith("/graphql")) return "graphql";
-	return /^\/repos\/[^/]+\/[^/]+\/pulls\/[^/]+\/reviews(?:\/[^/]+\/events)?$/.test(pathname) ? "pull-request-review" : void 0;
-}
-function grantSelectionBodyTooLargeMessage(inspection) {
-	return inspection === "graphql" ? "GitHub GraphQL request body is too large for Junior to inspect before issuing credentials." : "GitHub pull request review request body is too large for Junior to inspect before issuing credentials.";
-}
-function grantSelectionBodyText(input) {
-	if (input.body === void 0) return;
-	if (input.body.byteLength > GRANT_SELECTION_BODY_TEXT_LIMIT_BYTES) {
-		const inspection = githubBodyInspection({
-			provider: input.provider,
-			requestMethod: input.request.method,
-			upstreamUrl: input.upstreamUrl
-		});
-		if (inspection) throw new EgressPolicyDenied(grantSelectionBodyTooLargeMessage(inspection));
-		return;
-	}
-	return new TextDecoder().decode(input.body);
-}
-function responseContentLength(upstream) {
-	const raw = upstream.headers.get("content-length");
-	if (!raw) return;
-	const parsed = Number(raw);
-	return Number.isSafeInteger(parsed) && parsed >= 0 ? parsed : void 0;
-}
-async function responseTextWithinLimit(upstream, maxBytes) {
-	const limit = Math.min(Math.max(0, Math.floor(maxBytes)), RESPONSE_BODY_TEXT_LIMIT_BYTES);
-	if (limit <= 0) return;
-	const contentLength = responseContentLength(upstream);
-	if (contentLength !== void 0 && contentLength > limit) return;
-	let clone;
-	try {
-		clone = upstream.clone();
-	} catch {
-		return;
-	}
-	const body = clone.body;
-	if (!body) return "";
-	const reader = body.getReader();
-	const chunks = [];
-	let bytes = 0;
-	try {
-		while (true) {
-			const { done, value } = await reader.read();
-			if (done) break;
-			if (!value) continue;
-			bytes += value.byteLength;
-			if (bytes > limit) {
-				await reader.cancel().catch(() => void 0);
-				return;
-			}
-			chunks.push(value);
-		}
-	} catch {
-		await reader.cancel().catch(() => void 0);
-		return;
-	} finally {
-		reader.releaseLock();
-	}
-	const combined = new Uint8Array(bytes);
-	let offset = 0;
-	for (const chunk of chunks) {
-		combined.set(chunk, offset);
-		offset += chunk.byteLength;
-	}
-	return new TextDecoder().decode(combined);
-}
-/**
-* Build the upstream request headers.
-*
-* Sandbox/proxy-only headers are stripped so they cannot leak to providers, and
-* trace headers are preserved only for hosts opted into trace propagation.
-* Credential lease transforms win last because they are the host-issued
-* authority for provider auth headers.
-*/
-function requestHeaders(request, lease, upstreamHost, tracePropagation) {
-	const headers = new Headers();
-	const mayPropagateTrace = shouldPropagateSandboxEgressTrace(upstreamHost, tracePropagation);
-	request.headers.forEach((value, key) => {
-		const normalized = key.toLowerCase();
-		if (HOP_BY_HOP_HEADERS.has(normalized) || PROXY_ONLY_HEADERS.has(normalized)) return;
-		if (TRACE_PROPAGATION_HEADERS.has(normalized) && !mayPropagateTrace) return;
-		headers.append(key, value);
-	});
-	for (const transform of lease.headerTransforms) {
-		if (!matchesSandboxEgressDomain(upstreamHost, transform.domain)) continue;
-		for (const [key, value] of Object.entries(transform.headers)) {
-			if (TRACE_PROPAGATION_HEADERS.has(key.toLowerCase()) && !mayPropagateTrace) continue;
-			headers.set(key, value);
-		}
-	}
-	return headers;
-}
-function responseHeaders(upstream) {
-	const headers = new Headers();
-	upstream.headers.forEach((value, key) => {
-		const normalized = key.toLowerCase();
-		if (!HOP_BY_HOP_HEADERS.has(normalized) && !DECODED_RESPONSE_HEADERS.has(normalized)) headers.append(key, value);
-	});
-	return headers;
-}
-function leaseLogAttributes(input) {
-	return {
-		...egressAttributes({
-			egressId: input.egressId,
-			grantAccess: input.lease.grant.access,
-			grantName: input.lease.grant.name,
-			grantReason: input.lease.grant.reason,
-			host: input.upstreamUrl.hostname,
-			method: input.request.method,
-			path: input.upstreamUrl.pathname,
-			provider: input.provider,
-			status: input.status
-		}),
-		...routingAttributes(input.request, input.upstreamUrl)
-	};
-}
-async function recordSandboxAuthRequired(input) {
-	await setSandboxEgressAuthRequiredSignal(input.credentialContext, {
-		provider: input.provider,
-		grant: input.grant,
-		kind: input.kind ?? "auth_required",
-		...input.authorization ? { authorization: input.authorization } : void 0,
-		message: input.message
-	});
-}
-async function recordSandboxPermissionDenied(input) {
-	await setSandboxEgressPermissionDeniedSignal(input.credentialContext, {
-		provider: input.provider,
-		grant: input.lease.grant,
-		...input.lease.account ? { account: input.lease.account } : void 0,
-		message: input.message,
-		source: "upstream",
-		status: input.upstream.status,
-		upstreamHost: input.upstreamUrl.hostname,
-		upstreamPath: displayedUpstreamPath(input.upstreamUrl)
-	});
-}
-/**
-* Forward one verified sandbox egress request with host-managed credentials.
-*
-* The caller must already have authenticated the sandbox VM, checked the signed
-* credential context, and resolved the provider for `upstreamUrl`. This function
-* then selects the read/write grant, issues or reuses a short-lived credential
-* lease, applies its header transforms, and maps provider auth failures into
-* command-level signals instead of throwing raw upstream details at the agent.
-*/
-async function executeCredentialedEgressRequest(input) {
-	const { activeEgressId, credentialContext, deps, operation, provider, request, upstreamUrl } = input;
-	let body;
-	try {
-		body = await requestBodyBytes(request);
-	} catch (error) {
-		if (!(error instanceof TypeError)) throw error;
-		return unreadableBodyResponse(logException(error, "sandbox.egress.request_body.unreadable", {
-			...egressAttributes({
-				egressId: activeEgressId,
-				host: upstreamUrl.hostname,
-				method: request.method,
-				path: upstreamUrl.pathname,
-				provider,
-				status: 500
-			}),
-			...routingAttributes(request, upstreamUrl)
-		}));
-	}
-	const bodyForGrantSelection = githubBodyInspection({
-		provider,
-		requestMethod: request.method,
-		upstreamUrl
-	}) ? body : void 0;
-	let grantSelection;
-	try {
-		grantSelection = await selectSandboxEgressGrant({
-			bodyText: grantSelectionBodyText({
-				body: bodyForGrantSelection,
-				provider,
-				request,
-				upstreamUrl
-			}),
-			...operation ? { operation } : void 0,
-			provider,
-			method: request.method,
-			upstreamUrl
-		});
-	} catch (error) {
-		if (isEgressPolicyDenied(error)) {
-			logWarn("sandbox.egress.policy.denied", {
-				...egressAttributes({
-					egressId: activeEgressId,
-					host: upstreamUrl.hostname,
-					method: request.method,
-					path: upstreamUrl.pathname,
-					provider,
-					status: 403
-				}),
-				...routingAttributes(request, upstreamUrl),
-				"app.sandbox.egress.policy.reason": error.message
-			});
-			return policyDeniedResponse(error);
-		}
-		throw error;
-	}
-	const issueCredentialLease = deps.issueCredentialLease ?? sandboxEgressCredentialLease;
-	const clearCredentialLease = deps.clearCredentialLease ?? clearSandboxEgressCredentialLease;
-	const recordAuthRequired = deps.recordAuthRequired ?? recordSandboxAuthRequired;
-	const recordPermissionDenied = deps.recordPermissionDenied ?? recordSandboxPermissionDenied;
-	async function resolveLease() {
-		try {
-			return await issueCredentialLease(provider, grantSelection, credentialContext);
-		} catch (error) {
-			if (!(error instanceof SandboxEgressCredentialError)) throw error;
-			await recordAuthRequired({
-				credentialContext,
-				provider: error.provider,
-				grant: error.grant,
-				kind: error.kind,
-				authorization: error.authorization,
-				message: error.message
-			});
-			const isAuthRequired = error.kind === "auth_required";
-			logWarn(isAuthRequired ? "sandbox.egress.credential.needed" : "sandbox.egress.credential.unavailable", {
-				...egressAttributes({
-					egressId: activeEgressId,
-					grantAccess: error.grant.access,
-					grantName: error.grant.name,
-					grantReason: error.grant.reason,
-					host: upstreamUrl.hostname,
-					method: request.method,
-					path: upstreamUrl.pathname,
-					provider: error.provider,
-					status: 401
-				}),
-				...routingAttributes(request, upstreamUrl)
-			});
-			return authRequiredResponse({
-				provider: error.provider,
-				grant: error.grant,
-				message: error.message
-			});
-		}
-	}
-	let leaseOrResponse = await resolveLease();
-	if (leaseOrResponse instanceof Response) return leaseOrResponse;
-	let lease = leaseOrResponse;
-	const attributes = (activeLease, status) => leaseLogAttributes({
-		egressId: activeEgressId,
-		lease: activeLease,
-		provider,
-		request,
-		status,
-		upstreamUrl
-	});
-	if (!hasSandboxEgressLeaseTransformForHost(lease, upstreamUrl.hostname)) {
-		logWarn("sandbox.egress.transform.missing", {
-			...attributes(lease, 403),
-			"app.sandbox.egress.transform_domains": lease.headerTransforms.map((transform) => transform.domain)
-		});
-		return Response.json({ error: "Credential lease does not cover forwarded host" }, { status: 403 });
-	}
-	const fetchImpl = deps.fetch ?? fetch;
-	let retriedAfter403 = false;
-	while (true) {
-		const headers = requestHeaders(request, lease, upstreamUrl.hostname, deps.tracePropagation ?? {});
-		const intercepted = await deps.interceptHttp?.({
-			provider,
-			request: new Request(upstreamUrl, {
-				method: request.method,
-				headers,
-				...body !== void 0 ? { body } : void 0
-			}),
-			upstreamUrl
-		});
-		if (intercepted) return intercepted;
-		const requestBody = body instanceof ArrayBuffer ? body.slice(0) : body;
-		const upstream = await fetchImpl(upstreamUrl, {
-			method: request.method,
-			headers,
-			...requestBody !== void 0 ? { body: requestBody } : void 0,
-			redirect: "manual"
-		});
-		let pluginPermissionDenied;
-		try {
-			pluginPermissionDenied = (await onPluginEgressResponse({
-				provider,
-				grant: lease.grant,
-				method: request.method,
-				...operation ? { operation } : void 0,
-				upstreamUrl,
-				response: {
-					headers: new Headers(upstream.headers),
-					readText: async (maxBytes) => await responseTextWithinLimit(upstream, maxBytes),
-					status: upstream.status
-				}
-			})).permissionDenied;
-		} catch (error) {
-			if (!isEgressAuthRequired(error)) throw error;
-			await clearCredentialLease(provider, lease.grant, credentialContext);
-			await recordAuthRequired({
-				credentialContext,
-				provider,
-				grant: lease.grant,
-				authorization: error.authorization ?? lease.authorization,
-				message: error.message
-			});
-			logWarn("sandbox.egress.upstream_auth_requirement.classified", { ...attributes(lease, upstream.status) });
-			await upstream.body?.cancel().catch(() => void 0);
-			return authRequiredResponse({
-				provider,
-				grant: lease.grant,
-				message: error.message
-			});
-		}
-		logSandboxEgressUpstreamRequest({
-			egressId: activeEgressId,
-			grantAccess: lease.grant.access,
-			grantName: lease.grant.name,
-			grantReason: lease.grant.reason,
-			provider,
-			request,
-			upstream,
-			upstreamUrl
-		});
-		if (upstream.status >= 400) logWarn("sandbox.egress.upstream_response.failed", {
-			...attributes(lease, upstream.status),
-			"error.type": `http_${upstream.status}`
-		});
-		if (upstream.status === UPSTREAM_TOKEN_REJECTION_STATUS) {
-			logWarn("sandbox.egress.upstream_auth.rejected", {
-				...attributes(lease, upstream.status),
-				"app.sandbox.egress.www_authenticate": upstream.headers.get("www-authenticate") ?? void 0
-			});
-			await clearCredentialLease(provider, lease.grant, credentialContext);
-			await recordAuthRequired({
-				credentialContext,
-				provider,
-				grant: lease.grant,
-				authorization: lease.authorization,
-				message: `Provider rejected the injected ${provider} credential.`
-			});
-			await upstream.body?.cancel().catch(() => void 0);
-			return authRequiredResponse({
-				provider,
-				grant: lease.grant,
-				message: `Provider rejected the injected ${provider} credential.\n`
-			});
-		}
-		if (upstream.status === UPSTREAM_PERMISSION_REJECTION_STATUS && !retriedAfter403) {
-			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status) });
-			await clearCredentialLease(provider, lease.grant, credentialContext);
-			await upstream.body?.cancel().catch(() => void 0);
-			logWarn("sandbox.egress.upstream_auth.retrying", { ...attributes(lease, upstream.status) });
-			leaseOrResponse = await resolveLease();
-			if (leaseOrResponse instanceof Response) return leaseOrResponse;
-			lease = leaseOrResponse;
-			retriedAfter403 = true;
-			continue;
-		}
-		if (upstream.status === UPSTREAM_PERMISSION_REJECTION_STATUS) {
-			logWarn("sandbox.egress.upstream_auth.rejected", { ...attributes(lease, upstream.status) });
-			await clearCredentialLease(provider, lease.grant, credentialContext);
-			await recordPermissionDenied({
-				credentialContext,
-				provider,
-				lease,
-				message: pluginPermissionDenied?.message ?? permissionDeniedMessage(provider, lease.grant),
-				upstream,
-				upstreamUrl
-			});
-			if (pluginPermissionDenied) logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status) });
-			return new Response(upstream.body, {
-				status: upstream.status,
-				statusText: upstream.statusText,
-				headers: responseHeaders(upstream)
-			});
-		}
-		if (pluginPermissionDenied) {
-			await recordPermissionDenied({
-				credentialContext,
-				provider,
-				lease,
-				message: pluginPermissionDenied.message,
-				upstream,
-				upstreamUrl
-			});
-			logWarn("sandbox.egress.upstream_permission.classified", { ...attributes(lease, upstream.status) });
-		}
-		return new Response(upstream.body, {
-			status: upstream.status,
-			statusText: upstream.statusText,
-			headers: responseHeaders(upstream)
-		});
-	}
-}
 // src/chat/experimental.ts
 /**
 * Known unstable product features that must be opted into explicitly.
@@ -5814,4 +3753,4 @@ async function saveScheduledAutomation(db, task, expectedRevision, editedBy) {
 async function saveScheduledAutomationInLock(db, task, current) {
 	await writeScheduledAutomation(db, requireStoredTask(task), current);
 }
-export { persistConversationMessageSummaries as $, resolvePluginOAuthAccount as $n, isToolResultMessage as $t, commitAcceptedReply as A, createSandboxEgressCredentialToken as An, abandonTurnRecord as At, recordAttachmentsDelivered as B, normalizeSlackReplyMarkdown as Bn, buildTurnErrorResponse as Bt, automationVersionOf as C, resolveSandboxEgressProviderForHost as Cn, canReusePendingAuthLink as Ct, AutomationConflictError as D, clearSandboxEgressSignals as Dn, continuableMessages as Dt, sameDefinitionValue as E, SANDBOX_EGRESS_PROXY_PATH as En, wasPendingAuthStopped as Et, loadProjection as F, parseOAuthStatePayload as Fn, recordTurnSummary as Ft, recordMcpProviderConnected as G, getSlackMessagePermalink as Gn, getPiMessageRole as Gt, recordAuthorizationCompleted as H, slackMention as Hn, isTurnExecutionLimitExceededError as Ht, loadTurnProjection as I, resolveBaseUrl as In, TURN_LIMIT_DISABLED_REASON as It, recordTurnRoute as J, removeReactionFromMessage as Jn, hasRuntimeTurnContext as Jt, recordSubscribedReplyRoute as K, openSlackDirectMessage as Kn, getTerminalAssistantMessages as Kt, loadTurnRoute as L, startOAuthFlow as Ln, TurnBudgetExceededError as Lt, loadConnectedMcpProviders as M, sandboxEgressSignalsResponseSchema as Mn, failTurnRecord as Mt, loadConversationProjection as N, deliverOAuthAuthorization as Nn, getTurnRecord as Nt, automationRevision as O, consumeSandboxEgressAuthRequiredSignal as On, loadTurnCheckpoint as Ot, loadLastModelProfile as P, formatProviderLabel as Pn, listTurnSummaries as Pt, projectConversationMessages as Q, getOAuthAccountProviders as Qn, isToolResultError as Qt, openConversationProjection as R, escapeSlackMrkdwnText as Rn, TurnSliceLimitExceededError as Rt, automationDefinition as S, resolveSandboxCommandEnvironment as Sn, abandonReplacedPendingAuth as St, readAutomationVersion as T, shouldPropagateSandboxEgressTrace as Tn, getConversationPendingAuth as Tt, recordAuthorizationRequested as U, truncateStatusText as Un, persistWithRetry as Ut, recordAuthenticationLinked as V, normalizeSlackStatusText as Vn, createTurnLimitGate as Vt, recordGuardianActionReviewed as W, addReactionToMessage as Wn, extractAssistantText as Wt, hydrateConversationMessages as X, slackEntitySchema as Xn, isAssistantMessage as Xt, appendConversationMessages as Y, uploadFilesToConversation as Yn, instructionTextForProjection as Yt, persistConversationMessages as Z, slackExternalRefIdSchema as Zn, isContinuablePiBoundary as Zt, parseEventAutomationRow as _, isExperimentalFeatureEnabled as _n, createPluginAuthOrchestration as _t, saveScheduledAutomation as a, SESSION_CONTEXT_SECTION_TAG as an, setConfigDefaults as ar, buildConversationContext as at, admitEventAutomationRun as b, createUserTokenStore as bn, AuthorizationFlowDisabledError as bt, withScheduledAutomationLock as c, buildDeterministicTurnId as cn, getConversationMessageSlackTs as ct, createEventAutomation as d, getSubscribedReplyPreflightDecision as dn, normalizeConversationText as dt, normalizeToolNameFromResult as en, createDurableLocationConfigurationService as er, resolveConversationTitle as et, deleteEventAutomation as f, getThreadStopDecision as fn, recordDeliveredAssistantMessage as ft, listEventAutomationsForTeam as g, getExperimentalFeatures as gn, PluginCredentialFailureError as gt, listDeletedEventAutomationsCreatedBy as h, getAgentContextInputLimitTokens as hn, createPluginEgress as ht, readScheduledAutomation as i, REQUEST_CONTEXT_SECTION_TAG as in, getConfigDefaults as ir, appendThreadContextMessages as it, commitMessages as j, parseSandboxEgressCredentialToken as jn, completeTurnRecord as jt, requireAutomationRevision as k, consumeSandboxEgressPermissionDeniedSignal as kn, saveTurnCheckpoint as kt, blockEventAutomation as l, SubscribedReplyReason as ln, isHumanConversationMessage as lt, getEventAutomation as m, getAgentContextCompactionTriggerTokens as mn, upsertConversationMessage as mt, listScheduledAutomationsForTeam as n, stripRuntimeTurnContext as nn, historyItemFromPiMessage as nr, fallbackShortTitle as nt, saveScheduledAutomationInLock as o, TURN_CONTEXT_TAG as on, createConversationMemoryService as ot, findMatchingEventAutomations as p, estimateTextTokens as pn, turnHasReply as pt, recordToolExecutionStarted as q, postSlackMessage as qn, getUserMessageInstructionText as qt, parseScheduledAutomationRow as r, trimTrailingAssistantMessages as rn, piMessageFromHistoryItem as rr, resolveTaskTitle as rt, scheduledRunId as s, buildDeterministicAssistantMessageId as sn, estimateConversationContextTokens as st, createScheduledAutomation as t, retainRuntimeTurnContext as tn, configValueSchema as tr, settleConversationTitleWork as tt, collectEventAutomationMatchKeys as u, decideSubscribedThreadReply as un, markConversationMessage as ut, saveEventAutomation as v, setExperimentalFeatures as vn, authorizationId as vt, listAutomationVersions as w, normalizeSandboxEgressTracePropagationDomains as wn, clearPendingAuth as wt, eventAutomationRunLimitReason as x, buildSandboxEgressNetworkPolicy as xn, AuthorizationPauseError as xt, setEventAutomationStatus as y, executeCredentialedEgressRequest as yn, AuthPausePersistenceError as yt, recordAgentsInstructionsUpdated as z, formatSlackLink as zn, TurnToolCallLimitExceededError as zt };
+export { persistConversationMessageSummaries as $, isToolResultMessage as $t, commitAcceptedReply as A, abandonTurnRecord as At, recordAttachmentsDelivered as B, buildTurnErrorResponse as Bt, automationVersionOf as C, getConfigDefaults as Cn, canReusePendingAuthLink as Ct, AutomationConflictError as D, continuableMessages as Dt, sameDefinitionValue as E, wasPendingAuthStopped as Et, loadProjection as F, recordTurnSummary as Ft, recordMcpProviderConnected as G, getPiMessageRole as Gt, recordAuthorizationCompleted as H, isTurnExecutionLimitExceededError as Ht, loadTurnProjection as I, TURN_LIMIT_DISABLED_REASON as It, recordTurnRoute as J, hasRuntimeTurnContext as Jt, recordSubscribedReplyRoute as K, getTerminalAssistantMessages as Kt, loadTurnRoute as L, TurnBudgetExceededError as Lt, loadConnectedMcpProviders as M, failTurnRecord as Mt, loadConversationProjection as N, getTurnRecord as Nt, automationRevision as O, loadTurnCheckpoint as Ot, loadLastModelProfile as P, listTurnSummaries as Pt, projectConversationMessages as Q, isToolResultError as Qt, openConversationProjection as R, TurnSliceLimitExceededError as Rt, automationDefinition as S, piMessageFromHistoryItem as Sn, abandonReplacedPendingAuth as St, readAutomationVersion as T, getConversationPendingAuth as Tt, recordAuthorizationRequested as U, persistWithRetry as Ut, recordAuthenticationLinked as V, createTurnLimitGate as Vt, recordGuardianActionReviewed as W, extractAssistantText as Wt, hydrateConversationMessages as X, isAssistantMessage as Xt, appendConversationMessages as Y, instructionTextForProjection as Yt, persistConversationMessages as Z, isContinuablePiBoundary as Zt, parseEventAutomationRow as _, isExperimentalFeatureEnabled as _n, createPluginAuthOrchestration as _t, saveScheduledAutomation as a, SESSION_CONTEXT_SECTION_TAG as an, buildConversationContext as at, admitEventAutomationRun as b, configValueSchema as bn, AuthorizationFlowDisabledError as bt, withScheduledAutomationLock as c, buildDeterministicTurnId as cn, getConversationMessageSlackTs as ct, createEventAutomation as d, getSubscribedReplyPreflightDecision as dn, normalizeConversationText as dt, normalizeToolNameFromResult as en, resolveConversationTitle as et, deleteEventAutomation as f, getThreadStopDecision as fn, recordDeliveredAssistantMessage as ft, listEventAutomationsForTeam as g, getExperimentalFeatures as gn, PluginCredentialFailureError as gt, listDeletedEventAutomationsCreatedBy as h, getAgentContextInputLimitTokens as hn, createPluginEgress as ht, readScheduledAutomation as i, REQUEST_CONTEXT_SECTION_TAG as in, appendThreadContextMessages as it, commitMessages as j, completeTurnRecord as jt, requireAutomationRevision as k, saveTurnCheckpoint as kt, blockEventAutomation as l, SubscribedReplyReason as ln, isHumanConversationMessage as lt, getEventAutomation as m, getAgentContextCompactionTriggerTokens as mn, upsertConversationMessage as mt, listScheduledAutomationsForTeam as n, stripRuntimeTurnContext as nn, fallbackShortTitle as nt, saveScheduledAutomationInLock as o, TURN_CONTEXT_TAG as on, createConversationMemoryService as ot, findMatchingEventAutomations as p, estimateTextTokens as pn, turnHasReply as pt, recordToolExecutionStarted as q, getUserMessageInstructionText as qt, parseScheduledAutomationRow as r, trimTrailingAssistantMessages as rn, resolveTaskTitle as rt, scheduledRunId as s, buildDeterministicAssistantMessageId as sn, estimateConversationContextTokens as st, createScheduledAutomation as t, retainRuntimeTurnContext as tn, settleConversationTitleWork as tt, collectEventAutomationMatchKeys as u, decideSubscribedThreadReply as un, markConversationMessage as ut, saveEventAutomation as v, setExperimentalFeatures as vn, authorizationId as vt, listAutomationVersions as w, setConfigDefaults as wn, clearPendingAuth as wt, eventAutomationRunLimitReason as x, historyItemFromPiMessage as xn, AuthorizationPauseError as xt, setEventAutomationStatus as y, createDurableLocationConfigurationService as yn, AuthPausePersistenceError as yt, recordAgentsInstructionsUpdated as z, TurnToolCallLimitExceededError as zt };