@sentry/junior 0.267.0 → 0.268.0

package/dist/app.js

@@ -1,38 +1,38 @@
-import { C as automationVersionOf, P as eventGuidance, Zt as CONVERSATION_WORK_STALE_ENQUEUE_MS, b as admitEventAutomationRun, c as withScheduledAutomationLock, cr as isExperimentalFeatureEnabled, er as SubscribedReplyReason, ft as projectConversationMessages, hn as isInvalidConversationRecordError, hr as setConfigDefaults, ht as settleConversationTitleWork, i as readScheduledAutomation, l as blockEventAutomation, lr as setExperimentalFeatures, lt as appendConversationMessages, mr as getConfigDefaults, n as listScheduledAutomationsForTeam, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, pn as hasRunnableConversationWork, rr as getThreadStopDecision, s as scheduledRunId, sr as getExperimentalFeatures, u as collectEventAutomationMatchKeys, x as eventAutomationRunLimitReason } from "./tasks-0ilmuCux.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-CdB6yJj5.js";
-import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-DuZ1A4ab.js";
+import { $t as CONVERSATION_WORK_STALE_ENQUEUE_MS, C as automationVersionOf, I as eventGuidance, _n as isInvalidConversationRecordError, _r as setConfigDefaults, _t as settleConversationTitleWork, ar as getThreadStopDecision, b as admitEventAutomationRun, c as withScheduledAutomationLock, dr as setExperimentalFeatures, dt as appendConversationMessages, gr as getConfigDefaults, hn as hasRunnableConversationWork, i as readScheduledAutomation, l as blockEventAutomation, lr as getExperimentalFeatures, mt as projectConversationMessages, n as listScheduledAutomationsForTeam, nr as SubscribedReplyReason, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, s as scheduledRunId, u as collectEventAutomationMatchKeys, ur as isExperimentalFeatureEnabled, x as eventAutomationRunLimitReason } from "./tasks-SB9z-VTU.js";
+import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-DrTeF80T.js";
+import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-DLSpkSSr.js";
 import { n as captureMessage } from "./sentry-MDkYAVPV.js";
-import { t as JUNIOR_VERSION } from "./version-Bapedn4A.js";
-import { d as parseSlackTeamId, f as parseSlackUserId, h as slackMessageTsSchema, l as parseSlackChannelId, m as slackMessageTsFromMs, o as parseActorUserId, p as parseSlackMessageTs } from "./actor-DZSokpwj.js";
-import { F as recordGoogleSignIn, a as resolveViewerUser, c as closeDb, f as getConversationStore, g as withConversationEventLock, m as getSqlExecutor, p as getDb, r as readActorIdentity, u as getConversationEventStore, y as withConversationMutationLock } from "./viewer-DrN3oC2X.js";
-import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { a as juniorAutomationRuns, f as juniorConversationBriefs, h as juniorConversationEvents, s as juniorAutomations } from "./executor-VYrx_K4w.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-cMlAI5LY.js";
-import { $ as stopConversationSession, C as requestAttachmentDeletion, D as getOpenSlackUserInput, E as closeSlackUserInput, F as slackUserInputAnswerNote, G as scheduledAutomationRunAttributes, L as parseSlackThreadId, M as parseSlackUserInputFormTarget, N as parseSlackUserInputSubmission, O as persistSlackUserInputReply, P as slackUserInputAction, T as claimSlackUserInput, W as logScheduledAutomationRunSkipped, Y as effectiveTaskOutcomes, _ as unpublishedArtifactHeaders, et as recordSubagentEnded, g as readPublicArtifact, h as publicArtifactHeaders, j as buildSlackUserInputModal, k as releaseSlackUserInput, n as executeAgentRun, ot as processWorkspaceSnapshotJob, st as ingestEvent, t as createAgentRunner, v as lookupSlackUserProfile, x as collectAttachmentGarbage } from "./agent-runner-DgNATN4D.js";
-import { An as createPluginState, Ct as normalizeSandboxEgressTracePropagationDomains, Gt as bindEventAutomationCredentialSubject, I as isVercelSandboxEgressRequest, Jt as verifyEventAutomationCredentialSubject, Kt as bindScheduledAutomationCredentialSubject, L as proxyVercelSandboxEgressRequest, Lt as collectEventMatchKeys, Nn as createPluginLogger, Pn as readConversationAccessFromSql, Q as openSlackModal, V as resolveBaseUrl, Vt as findMatchingWatches, Wt as takeDueTimerWatches, Xt as verifySlackDirectCredentialSubject, Yt as verifyScheduledAutomationCredentialSubject, Zn as resolveRootVisibility, _t as parseSandboxEgressCredentialToken, ar as createPluginCache, c as getPluginRoutes, er as listConversationAnnotations, fn as getDashboardConversationLink, h as validatePlugins, hn as setDashboardConversationLinkOptions, ht as consumeSandboxEgressPermissionDeniedSignal, in as isDmChannel, it as slackExternalRefIdSchema, ln as getWorkspaceTeamId, m as setPlugins, mn as getDashboardTaskLink, mt as consumeSandboxEgressAuthRequiredSignal, n as createUserTokenStore, nn as getSlackClient, or as createCache, p as getPlugins, pt as clearSandboxEgressSignals, q as slackMention, qt as bindSlackDirectCredentialSubject, rt as slackEntitySchema, s as getPluginApiRoutes, un as runWithWorkspaceTeamId, v as setBriefsConfig } from "./credentialed-CIGwoLU2.js";
-import { c as withLock$1, i as getStateAdapter, t as disconnectStateAdapter } from "./adapter-BybMEezj.js";
+import { t as JUNIOR_VERSION } from "./version-jHwJp4hC.js";
+import { f as parseSlackTeamId, g as slackMessageTsSchema, h as slackMessageTsFromMs, m as parseSlackMessageTs, n as createSlackActor, p as parseSlackUserId, s as parseActorUserId, u as parseSlackChannelId } from "./actor-CP9K2Idu.js";
+import { O as recordGoogleSignIn, _ as withConversationEventLock, b as withConversationMutationLock, d as getConversationEventStore, h as getSqlExecutor, i as readActorIdentity, l as closeDb, m as getDb, o as resolveViewerUser, p as getConversationStore } from "./viewer-CpXTGlep.js";
+import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
+import { d as juniorAutomations, g as juniorConversationBriefs, l as juniorAutomationRuns, y as juniorConversationEvents } from "./executor-4vhvsMZJ.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-BD9GSpc6.js";
+import { C as getOpenSlackUserInput, Ct as requestAttachmentDeletion, Dt as recordSubagentEnded, E as parseSlackThreadId, Et as stopConversationSession, G as parseSlackReviewItemClick, H as syncReviewItemSlackCards, J as buildSlackUserInputModal, K as parseSlackReviewItemFormTarget, N as logScheduledAutomationRunSkipped, Nt as processWorkspaceSnapshotJob, P as scheduledAutomationRunAttributes, Pt as ingestEvent, Q as slackUserInputAnswerNote, R as effectiveTaskOutcomes, S as closeSlackUserInput, T as releaseSlackUserInput, V as readSlackReviewItemCardConversationId, W as buildSlackReviewItemModal, X as parseSlackUserInputSubmission, Y as parseSlackUserInputFormTarget, Z as slackUserInputAction, _ as unpublishedArtifactHeaders, _t as recordWebConversationActivity, dt as sendReviewItemMessages, et as runWithSlackInstallation, g as readPublicArtifact, h as publicArtifactHeaders, mt as conversationTurnIdForMessage, n as executeAgentRun, pt as appendAndEnqueueWebMessage, t as createAgentRunner, tt as verifySlackSignature, ut as renderReviewItemMessage, v as lookupSlackUserProfile, vt as webActorFromEmail, w as persistSlackUserInputReply, x as claimSlackUserInput, xt as collectAttachmentGarbage } from "./agent-runner-CAYfFmU7.js";
+import { $ as openSlackModal, I as isVercelSandboxEgressRequest, In as createPluginLogger, Jt as bindScheduledAutomationCredentialSubject, Kt as takeDueTimerWatches, L as proxyVercelSandboxEgressRequest, Ln as readConversationAccessFromSql, Nn as createPluginState, Qt as verifySlackDirectCredentialSubject, Tt as normalizeSandboxEgressTracePropagationDomains, Ut as findMatchingWatches, V as resolveBaseUrl, Xt as verifyEventAutomationCredentialSubject, Yt as bindSlackDirectCredentialSubject, Zt as verifyScheduledAutomationCredentialSubject, _n as getDashboardTaskLink, _t as consumeSandboxEgressPermissionDeniedSignal, at as slackEntitySchema, c as getPluginRoutes, cr as createPluginCache, dn as getWorkspaceTeamId, er as resolveRootVisibility, et as postSlackEphemeralMessage, fn as runWithWorkspaceTeamId, gt as consumeSandboxEgressAuthRequiredSignal, h as validatePlugins, ht as clearSandboxEgressSignals, in as getSlackClient, lr as createCache, m as setPlugins, mn as getDashboardConversationLink, n as createUserTokenStore, on as isDmChannel, ot as slackExternalRefIdSchema, p as getPlugins, q as slackMention, qt as bindEventAutomationCredentialSubject, rr as listConversationAnnotations, s as getPluginApiRoutes, v as setBriefsConfig, vn as setDashboardConversationLinkOptions, yt as parseSandboxEgressCredentialToken, zt as collectEventMatchKeys } from "./credentialed-lukuD-cc.js";
+import { a as MUTATION_LOCK_TTL_MS, c as withLock, i as getStateAdapter, s as fenceLock, t as disconnectStateAdapter } from "./adapter-04AcD2SO.js";
 import { n as getNextRunAtMs } from "./cadence-R7Em4RjE.js";
 import { D as conversationSurfaceSchema, I as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-DSo310Ps.js";
-import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-6EetVP-m.js";
-import { S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-DkOjt46_.js";
-import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-Bk4yeuHy.js";
-import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-C0BZSa7r.js";
-import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-DvNZIsCr.js";
-import { a as normalizeUserInputAnswer, i as isEmptyUserInputAnswer, n as buttonUserInputField, r as formatUserInputAnswer } from "./user-input-request-BDFBdF8r.js";
+import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-C5PN02QO.js";
+import { E as renderSlackObjectCard, S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-Dam1EI7B.js";
+import { a as isEmptyUserInputAnswer, i as formatUserInputAnswer, o as normalizeUserInputAnswer, r as buttonUserInputField } from "./web-message-id-DlHNANtd.js";
+import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-Cpa4Bu1O.js";
+import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-In9QKz-I.js";
+import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-zPEoJPBB.js";
 import { D as scheduledRunSchema } from "./automation-CmeFBSEh.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-CxEmt1id.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation--JsAGLwc.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-DOm9Y6qI.js";
-import { $ as renderSlackObjectCard, B as recordSkippedConversationMessage, C as createProductionSlackWebhookServices, F as assertNoLegacyAllowedDomains, G as normalizeIncomingSlackThreadId, H as clearSlackPendingReactions, I as isAllowedDomain, J as THREAD_OPTOUT_ACK, K as withNormalizedThreadId, L as isAllowedSignInEmail, Q as verifySlackSignature, R as readEnvList, S as createProductionConversationWorkOptions, T as createSlackWebApiStatusSender, U as isSlackMessageStopped, V as buildSlackInboundMessage, W as stopSlackThread, X as parseContent, Y as startProcessingReaction, Z as runWithSlackInstallation, _ as appendAndEnqueueWebMessage, b as recordWebConversationActivity, et as getAttachmentStorage, j as readViewerAutomationSummary, nt as enqueueAgentDispatch, q as stopConversationTurn, rt as GET$3, t as readConversationFeed, v as conversationTurnIdForMessage, w as getProductionSlackAdapter, x as webActorFromEmail, z as resolveAllowedDomains } from "./list-1XQP-o6K.js";
-import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-B-PD_JOj.js";
-import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-B9e9ATOU.js";
-import { r as enqueueAgentInvocation } from "./work-DUQoNcqP.js";
-import { s as coerceThreadConversationState } from "./thread-state-DRmdJ2QN.js";
-import { o as unlinkProvider } from "./connections-RE_65jzK.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-DhEGEpgq.js";
-import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-B0DLgd2P.js";
-import { t as processConversationWork } from "./worker-D1l4Ugk0.js";
-import { t as bindMessageAgent } from "./message-NKSbbnA6.js";
-import { t as bindSpawnAgent } from "./spawn-BHuqN14f.js";
+import { A as assertNoLegacyAllowedDomains, B as normalizeIncomingSlackThreadId, E as readViewerAutomationSummary, F as recordSkippedConversationMessage, G as parseContent, H as stopConversationTurn, I as buildSlackInboundMessage, J as canActOnReviewItem, K as ReviewItemActionError, L as clearSlackPendingReactions, M as isAllowedSignInEmail, N as readEnvList, P as resolveAllowedDomains, Q as getAttachmentStorage, R as isSlackMessageStopped, U as THREAD_OPTOUT_ACK, V as withNormalizedThreadId, W as startProcessingReaction, X as readReviewItemForUser, Z as reviewItemChange, _ as createProductionConversationWorkOptions, b as createSlackWebApiStatusSender, et as enqueueAgentDispatch, j as isAllowedDomain, q as actOnReviewItem, t as readConversationFeed, tt as GET$3, v as createProductionSlackWebhookServices, y as getProductionSlackAdapter, z as stopSlackThread } from "./list-BkgnXEEB.js";
+import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-DMI2prDO.js";
+import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-D3TSmZZ8.js";
+import { r as enqueueAgentInvocation } from "./work-3N-GHY9m.js";
+import { o as coerceThreadConversationState } from "./thread-state-BbbPh0Sn.js";
+import { o as unlinkProvider } from "./connections-D46f8vvi.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-sm9fegLY.js";
+import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-_mf28dSu.js";
+import { t as processConversationWork } from "./worker-CCdbcItd.js";
+import { t as bindMessageAgent } from "./message-BObyg59s.js";
+import { t as bindSpawnAgent } from "./spawn-cmq9p4Ly.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
 import { z } from "zod";
@@ -40,7 +40,6 @@ import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypt
 import { and, asc, eq, inArray, isNotNull, isNull, lte, or, sql } from "drizzle-orm";
 import { EVENT_SUMMARY_MAX_LENGTH, EVENT_TEXT_MAX_LENGTH, dispatchOptionsSchema, eventSchema, eventTriggerFiltersText, isSlackDestination, userSchema } from "@sentry/junior-plugin-api";
 import { pathToFileURL } from "node:url";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import net from "node:net";
 import { decodeJwt } from "jose";
 import https from "node:https";
@@ -1697,6 +1696,261 @@ async function isSlackWorkspaceMember(raw, state) {
 		};
 	});
 }
+// src/chat/ingress/slack-interaction-input.ts
+/**
+* Build the Slack input that a click or form makes in a thread, as a
+* mention from the person who acted. The input has no Slack message of its
+* own, so `messageId` is not a timestamp. Every Slack timestamp reader, such
+* as reactions, the actor `slack_ts`, and attachment lookup, then resolves
+* `raw.ts`: the message that the person clicked. `inputTs` sets the time of
+* the input.
+*/
+function buildSlackInteractionInput(args) {
+	const event = {
+		type: "message",
+		channel: args.channelId,
+		team: args.payload.team?.id,
+		text: args.text,
+		thread_ts: args.threadTs,
+		ts: args.inputTs,
+		user: args.userId,
+		user_team: args.payload.user?.team_id
+	};
+	const parsed = args.adapter.parseMessage(event);
+	return new Message({
+		attachments: parsed.attachments,
+		author: parsed.author,
+		formatted: parsed.formatted,
+		id: args.messageId,
+		isMention: true,
+		links: parsed.links,
+		metadata: parsed.metadata,
+		raw: {
+			...event,
+			ts: args.messageTs
+		},
+		text: parsed.text,
+		threadId: parsed.threadId
+	});
+}
+// src/chat/ingress/slack-review-item.ts
+async function tellPerson(target, userId, text) {
+	await postSlackEphemeralMessage({
+		channelId: target.channelId,
+		text,
+		threadTs: target.threadTs,
+		userId
+	});
+}
+/**
+* Resolve the Junior User of the person who acted. An action starts a Turn
+* as that person, so it needs the same workspace and allowed domain checks
+* as a Slack mention.
+*/
+async function resolveActingUser(services, payload, target) {
+	const slackUserId = parseActorUserId(payload.user?.id);
+	const teamId = payload.team?.id ?? payload.user?.team_id;
+	if (!slackUserId || !teamId) throw new Error("Slack review item payload is missing a user or team");
+	if (!await isSlackWorkspaceMember({
+		user: slackUserId,
+		user_team: payload.user?.team_id
+	}, services.state) || !await services.isAuthorAllowed(slackUserId)) return;
+	const user = (await readActorIdentity(createSlackActor(teamId, slackUserId, void 0)))?.user;
+	if (!user) {
+		await tellPerson(target, slackUserId, "Junior does not know your account yet. Sign in to the Junior dashboard, then try again.");
+		return;
+	}
+	return {
+		slackUserId,
+		user
+	};
+}
+/** Show the current state of an item, such as after a click on a stale card. */
+async function refreshCards(services, user, itemId) {
+	const item = await readReviewItemForUser(user, itemId).catch(() => void 0);
+	if (!item) return;
+	await syncReviewItemSlackCards({
+		getSlackAdapter: () => services.adapter,
+		itemId: item.id
+	});
+}
+/**
+* Do one person action from a Slack card. The thread of the card gets the
+* action as Slack input from the person, like an answer to
+* `requestUserInput`. The other linked Conversations get messages from
+* `actOnReviewItem`. An expected failure, such as an item that is already
+* closed, goes to the person as an ephemeral message.
+*/
+async function act(args) {
+	const { services, target } = args;
+	const actor = await resolveActingUser(services, args.payload, target);
+	if (!actor) return;
+	const conversationId = await readSlackReviewItemCardConversationId({
+		...target,
+		itemId: args.itemId
+	}) ?? `slack:${target.channelId}:${target.threadTs}`;
+	let item;
+	try {
+		const current = await readReviewItemForUser(actor.user, args.itemId);
+		item = await actOnReviewItem({
+			action: args.action,
+			exceptConversationId: conversationId,
+			firstCloseOnly: true,
+			getSlackAdapter: () => services.adapter,
+			id: current.id,
+			queue: services.queue,
+			user: actor.user,
+			...args.answer ? { answer: args.answer(current) } : void 0
+		});
+	} catch (error) {
+		if (!(error instanceof ReviewItemActionError)) throw error;
+		await tellPerson(target, actor.slackUserId, error.message);
+		await refreshCards(services, actor.user, args.itemId);
+		return;
+	}
+	if (!item.conversationIds.includes(conversationId)) return;
+	const change = reviewItemChange(args.action, actor.user);
+	try {
+		await services.persistMessage(buildSlackInteractionInput({
+			adapter: services.adapter,
+			channelId: target.channelId,
+			inputTs: args.inputTs,
+			messageId: args.messageId,
+			messageTs: target.messageTs,
+			payload: args.payload,
+			text: renderReviewItemMessage(item, change),
+			threadTs: target.threadTs,
+			userId: actor.slackUserId
+		}));
+	} catch (error) {
+		logException(error, "review_item.slack_input.persist.failed", { "app.review_item.id": item.id });
+		await sendReviewItemMessages({
+			change,
+			item,
+			nowMs: Date.now(),
+			queue: services.queue
+		});
+	}
+}
+function cardTarget(payload) {
+	const channelId = parseSlackChannelId(payload.channel?.id);
+	const messageTs = parseSlackMessageTs(payload.message?.ts);
+	if (!channelId || !messageTs) throw new Error("Slack review item payload is incomplete");
+	return {
+		channelId,
+		messageTs,
+		threadTs: parseSlackMessageTs(payload.message?.thread_ts) ?? messageTs
+	};
+}
+async function openAnswerForm(args) {
+	const { target } = args;
+	const triggerId = args.payload.trigger_id;
+	if (!triggerId) throw new Error("Slack review item form payload is missing a trigger id");
+	const actor = await resolveActingUser(args.services, args.payload, target);
+	if (!actor) return;
+	let item;
+	try {
+		item = await readReviewItemForUser(actor.user, args.itemId);
+	} catch (error) {
+		if (!(error instanceof ReviewItemActionError)) throw error;
+		await tellPerson(target, actor.slackUserId, error.message);
+		return;
+	}
+	if (!canActOnReviewItem(item, actor.user.id)) {
+		await tellPerson(target, actor.slackUserId, item.status === "open" ? "Only an assignee can act on this item." : "This item is already closed.");
+		await refreshCards(args.services, actor.user, item.id);
+		return;
+	}
+	const view = buildSlackReviewItemModal(item, {
+		...target,
+		itemId: item.id
+	});
+	if (!view) return;
+	await openSlackModal({
+		triggerId,
+		view
+	});
+}
+/** Handle one click on a Review item card. */
+async function handleSlackReviewItemClick(args) {
+	const { click, payload, services } = args;
+	const target = cardTarget(payload);
+	if (click.kind === "answer") {
+		await openAnswerForm({
+			itemId: click.itemId,
+			payload,
+			services,
+			target
+		});
+		return;
+	}
+	const actionTs = parseSlackMessageTs(args.action.action_ts);
+	if (!actionTs) throw new Error("Slack review item click payload is incomplete");
+	const common = {
+		inputTs: actionTs,
+		itemId: click.itemId,
+		messageId: `slack-review-item:${actionTs}`,
+		payload,
+		services,
+		target
+	};
+	if (click.kind === "done") {
+		await act({
+			...common,
+			action: "complete"
+		});
+		return;
+	}
+	if (click.kind === "dismiss") {
+		await act({
+			...common,
+			action: "dismiss"
+		});
+		return;
+	}
+	await act({
+		...common,
+		action: "submit",
+		answer: (item) => {
+			const field = item.request && buttonUserInputField(item.request);
+			if (!field?.options.some((option) => option.label === click.label)) throw new ReviewItemActionError("conflict", "This card changed. Use the updated card.");
+			return {
+				requestId: item.id,
+				values: { [field.id]: [click.label] }
+			};
+		}
+	});
+}
+/** Submit the answer of a Review item form. */
+async function handleSlackReviewItemSubmission(args) {
+	const view = args.payload.view;
+	const formTarget = parseSlackReviewItemFormTarget(view?.private_metadata);
+	const channelId = parseSlackChannelId(formTarget?.channelId);
+	const messageTs = parseSlackMessageTs(formTarget?.messageTs);
+	const threadTs = parseSlackMessageTs(formTarget?.threadTs);
+	if (!view?.id || !formTarget || !channelId || !messageTs || !threadTs) throw new Error("Slack review item form submission is incomplete");
+	await act({
+		action: "submit",
+		answer: (item) => item.request ? parseSlackUserInputSubmission({
+			request: item.request,
+			requestId: item.id,
+			values: view.state?.values ?? {}
+		}) : {
+			requestId: item.id,
+			values: {}
+		},
+		inputTs: slackMessageTsFromMs(Date.now()),
+		itemId: formTarget.itemId,
+		messageId: `slack-review-item:${view.id}`,
+		payload: args.payload,
+		services: args.services,
+		target: {
+			channelId,
+			messageTs,
+			threadTs
+		}
+	});
+}
 // src/chat/ingress/slack-interactive.ts
 function requireSlackPayloadUserId(value, source) {
 	const userId = parseActorUserId(value);
@@ -1745,31 +1999,16 @@ async function answerSlackUserInput(args) {
 		claimedBy: userId,
 		messageTs
 	})) return;
-	const event = {
-		type: "message",
-		channel: channelId,
-		team: args.payload.team?.id,
+	const message = buildSlackInteractionInput({
+		adapter: args.adapter,
+		channelId,
+		inputTs: args.inputTs,
+		messageId: args.messageId,
+		messageTs,
+		payload: args.payload,
 		text: formatUserInputAnswer(open.request, answer),
-		thread_ts: args.threadTs,
-		ts: args.inputTs,
-		user: userId,
-		user_team: userTeam
-	};
-	const parsed = args.adapter.parseMessage(event);
-	const message = new Message({
-		attachments: parsed.attachments,
-		author: parsed.author,
-		formatted: parsed.formatted,
-		id: args.messageId,
-		isMention: true,
-		links: parsed.links,
-		metadata: parsed.metadata,
-		raw: {
-			...event,
-			ts: messageTs
-		},
-		text: parsed.text,
-		threadId: parsed.threadId
+		threadTs: args.threadTs,
+		userId
 	});
 	try {
 		await args.persistMessage(message);
@@ -1784,7 +2023,7 @@ async function answerSlackUserInput(args) {
 		note: slackUserInputAnswerNote({
 			answer,
 			request: open.request,
-			userId
+			who: slackMention(userId)
 		}),
 		open
 	});
@@ -1864,17 +2103,34 @@ async function handleUserInputSubmission(args) {
 	});
 }
 /**
-* Handle Slack interactions from App Home and from user input requests:
-* block actions and submitted user input forms.
+* Handle Slack interactions from App Home, user input requests, and Review
+* item cards: block actions and submitted forms.
 */
 async function handleSlackInteractivePayload(args) {
 	const spanAttributes = { userId: args.payload.user?.id?.trim() || void 0 };
+	if (args.payload.type === "view_submission" && args.payload.view?.callback_id === "junior_review_item") {
+		await withSpan("chat.slack_review_item_submit", "chat.slack_review_item_submit", spanAttributes, () => handleSlackReviewItemSubmission({
+			payload: args.payload,
+			services: args
+		}));
+		return;
+	}
 	if (args.payload.type === "view_submission" && args.payload.view?.callback_id === "junior_user_input") {
 		await withSpan("chat.slack_user_input_submit", "chat.slack_user_input_submit", spanAttributes, () => handleUserInputSubmission(args));
 		return;
 	}
 	if (args.payload.type !== "block_actions") return;
 	for (const action of args.payload.actions ?? []) {
+		const click = parseSlackReviewItemClick(action);
+		if (click) {
+			await withSpan("chat.slack_review_item_click", "chat.slack_review_item_click", spanAttributes, () => handleSlackReviewItemClick({
+				action,
+				click,
+				payload: args.payload,
+				services: args
+			}));
+			return;
+		}
 		const kind = slackUserInputAction(action.action_id);
 		if (kind === "choice") {
 			await withSpan("chat.slack_user_input_click", "chat.slack_user_input_click", spanAttributes, () => handleUserInputChoice({
@@ -1931,6 +2187,7 @@ async function handleSlackForm(args) {
 			payload,
 			isAuthorAllowed: (userId) => args.isAuthorAllowed(userId, installation),
 			persistMessage: (message) => args.persistMessage(message, installation),
+			queue: args.queue,
 			state,
 			userTokenStore: args.getUserTokenStore()
 		})
@@ -2495,7 +2752,7 @@ async function handleSlackThreadStop(args) {
 	});
 	await appendConversationMessages(getConversationEventStore(), {
 		conversation,
-		conversationId: args.canonicalThreadId
+		conversationId
 	});
 	await thread.post(THREAD_OPTOUT_ACK);
 }
@@ -2598,6 +2855,11 @@ async function routeParsedMessage(args) {
 		teamId: args.installation.teamId,
 		user: args.event.user
 	})) return;
+	const conversationId = await resolveSlackConversationId({
+		canonicalThreadId,
+		conversationStore: args.conversationStore,
+		installation: args.installation
+	});
 	if (isSubscribed && !isExperimentalFeatureEnabled("passive-routing")) {
 		const content = parseContent(message);
 		const conversation = coerceThreadConversationState(void 0);
@@ -2609,15 +2871,10 @@ async function routeParsedMessage(args) {
 		});
 		await appendConversationMessages(getConversationEventStore(), {
 			conversation,
-			conversationId: canonicalThreadId
+			conversationId
 		});
 		return;
 	}
-	const conversationId = await resolveSlackConversationId({
-		canonicalThreadId,
-		conversationStore: args.conversationStore,
-		installation: args.installation
-	});
 	const persist = () => persistSlackMessage({
 		adapter: args.adapter,
 		installation: args.installation,
@@ -2639,7 +2896,7 @@ async function routeParsedMessage(args) {
 		isSaved: (error) => error instanceof SlackEventPersistenceError && error.saved,
 		note: (request) => slackUserInputAnswerNote({
 			request,
-			userId: message.author.userId
+			who: slackMention(message.author.userId)
 		}),
 		persist,
 		state: args.state,
@@ -2703,7 +2960,7 @@ async function handleSlackEvent(args) {
 				if (!await isSlackWorkspaceMember(event, state)) return;
 				const channelId = event.channel;
 				const threadTs = event.thread_ts;
-				if (!(await withLock$1(state, `slack:ingress:slack:${channelId}:${threadTs}`, () => handleSlackSessionStop({
+				if (!(await withLock(state, `slack:ingress:slack:${channelId}:${threadTs}`, () => handleSlackSessionStop({
 					adapter,
 					channelId,
 					conversationStore: args.services.conversationStore,
@@ -2722,7 +2979,7 @@ async function handleSlackEvent(args) {
 				setSpanAttributes({ "app.slack.membership": member ? "verified" : "unverified" });
 				if (!member) return;
 				const message = adapter.parseMessage(event);
-				if (!(await withLock$1(state, `slack:ingress:${normalizeMessageThreadId(message).threadId}`, () => routeParsedMessage({
+				if (!(await withLock(state, `slack:ingress:${normalizeMessageThreadId(message).threadId}`, () => routeParsedMessage({
 					adapter,
 					event,
 					installation,
@@ -2749,7 +3006,7 @@ async function handleSlackEvent(args) {
 async function persistSlackMentionWithLock(args) {
 	const { message, threadId } = normalizeMessageThreadId(args.message);
 	try {
-		if (!(await withLock$1(args.state, `slack:ingress:${threadId}`, () => persistSlackMessage({
+		if (!(await withLock(args.state, `slack:ingress:${threadId}`, () => persistSlackMessage({
 			adapter: args.adapter,
 			installation: args.installation,
 			message,
@@ -2799,6 +3056,7 @@ async function handleSlackWebhook(args) {
 				services: args.services,
 				state
 			}),
+			queue: args.services.queue,
 			state,
 			waitUntil: args.waitUntil
 		});
@@ -3280,35 +3538,6 @@ function resolvePublicOrigin(request, configured) {
 	url.hash = "";
 	return url;
 }
-// src/api/acp/state.ts
-const MUTATION_LOCK_TTL_MS = 1e4;
-/** Run one ACP state mutation while its shared lock remains owned. */
-async function withLock(state, key, run, options = {}) {
-	const ttlMs = options.ttlMs ?? 1e4;
-	const startedAtMs = Date.now();
-	let lock;
-	while (true) {
-		lock = await state.acquireLock(key, ttlMs);
-		if (lock) break;
-		if (Date.now() - startedAtMs >= (options.waitMs ?? 0)) return { acquired: false };
-		await setTimeout$1(options.retryMs ?? 25, void 0, { ref: false });
-	}
-	const heartbeat = options.keepAlive ? setInterval(() => void state.extendLock(lock, ttlMs).catch(() => void 0), Math.floor(ttlMs / 3)) : void 0;
-	heartbeat?.unref();
-	try {
-		return {
-			acquired: true,
-			value: await run(lock)
-		};
-	} finally {
-		if (heartbeat) clearInterval(heartbeat);
-		await state.releaseLock(lock);
-	}
-}
-/** Prove ACP lock ownership immediately before a blind state write. */
-async function fenceLock(state, lock, ttlMs = MUTATION_LOCK_TTL_MS) {
-	if (!await state.extendLock(lock, ttlMs)) throw new Error(`ACP lock ownership was lost before write for ${lock.threadId}`);
-}
 // src/api/acp/schema.ts
 /** Validate the ACP wire messages that Junior supports. */
 const ACP_SESSION_ID_PATTERN = /^local:acp:[a-f0-9]{32}$/;
@@ -6149,6 +6378,7 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		`${conversationsPath}/*`,
 		pagePath("locations"),
 		`${pagePath("locations")}/*`,
+		pagePath("review"),
 		peoplePath,
 		`${peoplePath}/*`,
 		pagePath("automations"),
@@ -6182,6 +6412,8 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		"/api/plugin-reports",
 		"/api/user-pages",
 		"/api/user-pages/*",
+		"/api/user-customization",
+		"/api/user-customization/*",
 		"/api/automations",
 		"/api/automations/*",
 		"/api/skills",
@@ -6196,6 +6428,8 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		"/api/locations/*",
 		"/api/people",
 		"/api/people/*",
+		"/api/review-items",
+		"/api/review-items/*",
 		"/api/personal-tokens",
 		"/api/personal-tokens/*",
 		"/api/service-accounts",

package/dist/{briefs-CWKjka7v.js → briefs-DQbV2jNr.js}

@@ -1,4 +1,4 @@
-import { i as completeObject } from "./client-BjgbMawj.js";
+import { i as completeObject } from "./client-C1yDYjoS.js";
 import { r as defaultModelId } from "./model-profile-Bg8EoCKD.js";
 import { J as briefCodeChangeSchema, Q as parseBriefInput, d as conversationDetailReportSchema, p as conversationEventPageSchema } from "./conversation-DSo310Ps.js";
 import { n as briefEntriesFromReportEvents, s as generateBrief, t as BRIEF_PROMPT } from "./prompt-BW9jFsqZ.js";
@@ -267,7 +267,7 @@ async function parseRunOptions(argv) {
 * `DATABASE_URL` at import, and `briefs pull` must work with only a token.
 */
 async function configuredDefaultModelId() {
-	const { botConfig } = await import("./config-CdB6yJj5.js").then((n) => n.r);
+	const { botConfig } = await import("./config-DrTeF80T.js").then((n) => n.r);
 	return defaultModelId(botConfig);
 }
 function apiUrl(baseUrl, pathname) {

package/dist/{catalog-runtime-cMlAI5LY.js → catalog-runtime-BD9GSpc6.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { t as createPluginCatalogRuntime } from "./registry-FQutO926.js";
+import { t as createPluginCatalogRuntime } from "./registry-BgecKva0.js";
 // src/chat/plugins/catalog-runtime.ts
 var catalog_runtime_exports = /* @__PURE__ */ __exportAll({ pluginCatalogRuntime: () => pluginCatalogRuntime });
 const pluginCatalogRuntime = createPluginCatalogRuntime();