@sentry/junior 0.267.0 → 0.269.0

package/dist/api.js

@@ -1,29 +1,28 @@
-import { D as AutomationConflictError, E as sameDefinitionValue, O as automationRevision, S as automationDefinition, T as readAutomationVersion, a as saveScheduledAutomation, j as automationEventCatalog, k as requireAutomationRevision, v as saveEventAutomation, y as setEventAutomationStatus } from "./tasks-0ilmuCux.js";
-import { p as escapeXml } from "./client-BjgbMawj.js";
-import { m as logInfo, p as logException } from "./logging-DuZ1A4ab.js";
-import { A as resolveRootConversationId, O as agentTurnUsageSchema, a as resolveViewerUser, f as getConversationStore, k as hasAgentTurnUsage, m as getSqlExecutor, p as getDb, s as updateViewerDisplayName, t as findUserByEmail } from "./viewer-DrN3oC2X.js";
-import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { g as juniorApiTokens, h as juniorConversationEvents, m as juniorConversationMetrics, u as juniorConversationParticipants, v as juniorCodeChanges, y as juniorCodeRepositories } from "./executor-VYrx_K4w.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-cMlAI5LY.js";
-import { I as webUserInputAnswerNote, K as editEventAutomation, L as parseSlackThreadId, O as persistSlackUserInputReply, S as readLiveAttachment, U as editScheduledAutomation, X as resolveTaskOutcomes, Z as listOwnedWatches, at as conversationSubtreeColumns, it as conversationSubtree, m as readStats, nt as listChildAgents, q as AutomationEditError } from "./agent-runner-DgNATN4D.js";
-import { C as listWorkspaces, E as WorkspaceValidationError, Et as workspaceRepoCheckoutPath, Gn as readConversationEventPage, Kn as buildSentryConversationUrl, M as hash, Nn as createPluginLogger, Pn as readConversationAccessFromSql, T as updateWorkspace, Wn as readLatestConversationBrief, ar as createPluginCache, b as deleteWorkspace, er as listConversationAnnotations, ir as lookupSlackUser, j as create, n as createUserTokenStore, p as getPlugins, un as runWithWorkspaceTeamId, w as listWorkspacesByRepository, wt as SANDBOX_RUNTIME, x as getWorkspace, y as createWorkspace } from "./credentialed-CIGwoLU2.js";
-import { i as getStateAdapter } from "./adapter-BybMEezj.js";
-import { t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
-import { A as createConversationMessageBodySchema, G as INPUT_IMAGE_TYPES, M as forkConversationResponseSchema, N as steerConversationPendingMessagesBodySchema, P as steerConversationPendingMessagesResponseSchema, W as readMessageAttachments, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as forkConversationBodySchema, k as createConversationBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-DSo310Ps.js";
-import { h as getChildAgentLabel } from "./store-6EetVP-m.js";
-import { d as getEventCatalog } from "./session-stop-DkOjt46_.js";
-import { s as getSandboxResources, t as getCachedSnapshot } from "./resolve-Bk4yeuHy.js";
-import { a as getVercelConversationWorkQueue } from "./job-queue-C0BZSa7r.js";
-import { E as steerWebPendingMessages, a as cancelHumanFacingPendingMessages, g as getConversationWorkState, h as getConversation } from "./store-DvNZIsCr.js";
-import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-Do30HUNv.js";
-import { F as weekdaySchema, M as ScheduleIntentError, N as compileScheduleIntent, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-CmeFBSEh.js";
-import { C as skillReportsSchema, a as fillUtcHours, b as pluginsSchema, c as sumUtcHoursIntoSixHours, d as trailingUtcSixHourWindow, f as utcDayKey, h as pluginOperationalReportFeedSchema, i as fillUtcDays, l as trailingUtcDayWindow, m as healthReportSchema, n as DAY_MS$1, o as fillUtcSixHours, p as utcHourKey, r as HOUR_MS$1, s as startOfUtcHour, t as webMessageId, u as trailingUtcHourWindow, x as runtimeInfoReportSchema } from "./web-message-id-CJSUiksE.js";
-import { A as readViewerAutomationRuns, D as deleteViewerTask, E as ViewerTaskNotFoundError, H as clearSlackPendingReactions, L as isAllowedSignInEmail, M as readViewerAutomationVersions, N as readViewerAutomations, O as readConversationSourceTask, P as resolveViewerTaskCandidate, _ as appendAndEnqueueWebMessage, a as resolveMentions, c as readConversationAuxiliaryCostsFromSql, d as notCopiedByFork, et as getAttachmentStorage, f as childAgentTotalsReport, g as resolveSlackTeamDomains, h as conversationSummaryFromStoredConversation, i as attachConversationMentions, it as readHealthReport, j as readViewerAutomationSummary, k as readViewerAutomationExecutions, l as ConversationForkError, m as conversationEventHistory, n as readConversationRecordFromSql, o as readFirstHumanMessageTexts, p as readConversationTreeMetricsFromSql, q as stopConversationTurn, r as readConversationParticipants, s as listConversationSidebarAnnotations, t as readConversationFeed, u as forkConversation, w as getProductionSlackAdapter, x as webActorFromEmail, y as createAndEnqueueConversation } from "./list-1XQP-o6K.js";
-import { F as conversationAggregateColumns, I as conversationRangeColumns, M as readAutomationTitlesByConversationId, P as conversationActiveDaysColumn } from "./task-runner-B-PD_JOj.js";
-import { d as legacyWebMailboxMetadataSchema } from "./result-B9e9ATOU.js";
-import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection, u as htmlCallbackResponse } from "./connections-RE_65jzK.js";
-import { t as decodeInputImages } from "./images-CecjXAAz.js";
-import { A as activityHours$1, C as personParamsSchema, D as locationDirectoryReportSchema, E as locationDetailReportSchema, H as codePersonReportSchema, I as disconnectConnectionResponseSchema, L as startConnectionResponseSchema, N as connectionListSchema, O as locationParamsSchema, P as connectionParamsSchema, Q as apiErrorSchema, S as actorProfileReportSchema, U as codeRepositoryParamsSchema, V as codeOverviewReportSchema, W as codeRepositoryReportSchema, X as stopConversationTurnResponseSchema, Y as conversationChildAgentsReportSchema, Z as conversationStatsReportSchema, _ as personalTokenListSchema, a as workspaceBodySchema, b as revokePersonalTokenResponseSchema, d as serviceAccountListSchema, f as serviceAccountParamsSchema, g as createdPersonalTokenSchema, h as createPersonalTokenBodySchema, i as deleteWorkspaceResponseSchema, j as activitySixHours$1, k as activityDays$1, l as workspaceSchema, m as startServiceAccountSignInResponseSchema, n as statsReportSchema, o as workspaceListSchema, q as conversationWatchesReportSchema, s as workspaceParamsSchema, u as disconnectServiceAccountResponseSchema, w as personalSpendReportSchema, x as actorDirectoryReportSchema, y as personalTokenParamsSchema } from "./schema-X7Fj4fv1.js";
+import { F as conversationRangeColumns, N as conversationActiveDaysColumn, P as conversationAggregateColumns, Ur as isExperimentalFeatureEnabled, ct as AutomationConflictError, ft as automationEventCatalog, j as readAutomationTitlesByConversationId } from "./turn-session-routing-BqO0qXLk.js";
+import { p as escapeXml } from "./client-Cqf4TboL.js";
+import { m as logInfo, p as logException } from "./logging-n7knse-O.js";
+import { C as getSqlExecutor, J as resolveRootConversationId, K as agentTurnUsageSchema, S as getDb, c as readViewerAvatarUrl, d as updateViewerDisplayName, l as resolveViewerUser, m as readAvatarImage, q as hasAgentTurnUsage, t as findUserByEmail, x as getConversationStore } from "./viewer-DSbD6DF6.js";
+import { c as juniorIdentities, d as juniorDestinations, l as juniorUsers, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
+import { C as juniorCodeRepositories, S as juniorCodeChanges, b as juniorApiTokens, m as juniorConversationParticipants, v as juniorConversationMetrics, y as juniorConversationEvents } from "./executor-CNS7ONt-.js";
+import { t as INPUT_IMAGE_TYPES } from "./media-85PDJxO_.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-BsoSmTM0.js";
+import { $ as listOwnedWatches, B as changeViewerAutomationLifecycle, Dt as readUserCustomization, G as readConversationSourceTask, H as readViewerAutomationEdit, J as readViewerAutomationSummary, K as readViewerAutomationExecutions, Ot as saveUserCustomization, St as conversationSubtreeColumns, U as updateViewerAutomation, V as deleteViewerTask, W as ViewerTaskNotFoundError, X as readViewerAutomations, Y as readViewerAutomationVersions, Z as AutomationEditError, at as createAndEnqueueConversation, ct as webActorFromEmail, ft as readLiveAttachment, m as readStats, nt as acceptsWebMessages, q as readViewerAutomationRuns, rt as appendAndEnqueueWebMessage, ut as decodeInputImages, x as createSlackReviewItemShow, xt as conversationSubtree, yt as listChildAgents, z as activateViewerAutomationVersion } from "./agent-runner-CrDrPUtY.js";
+import { $t as workspaceRepoCheckoutPath, Ar as lookupSlackUser, D as listWaitingConversationIds, Er as listConversationAnnotations, F as isOnlyAssignee, G as deleteWorkspace, J as listWorkspaces, K as getWorkspace, M as canActOnReviewItem, O as searchReviewItems, W as createWorkspace, X as updateWorkspace, Y as listWorkspacesByRepository, Z as WorkspaceValidationError, Zt as SANDBOX_RUNTIME, _r as readConversationEventPage, ar as createPluginLogger, gr as readLatestConversationBrief, jr as createPluginCache, n as createUserTokenStore, nt as create, or as readConversationAccessFromSql, p as getPlugins, rt as hash, vr as buildSentryConversationUrl, x as countReviewItemsNeedingUser, z as reviewItemReaderForUser } from "./credentialed-BU-OW7HP.js";
+import { r as getStateAdapter } from "./adapter-2-CG25be.js";
+import { A as createConversationMessageBodySchema, M as forkConversationResponseSchema, N as steerConversationPendingMessagesBodySchema, P as steerConversationPendingMessagesResponseSchema, W as readMessageAttachments, _ as conversationParamsSchema, a as cancelConversationPendingMessagesBodySchema, c as conversationAttachmentParamsSchema, d as conversationDetailReportSchema, g as conversationFeedSchema, h as conversationFeedQuerySchema, i as archiveConversationResponseSchema, j as forkConversationBodySchema, k as createConversationBodySchema, m as conversationEventsQuerySchema, o as cancelConversationPendingMessagesResponseSchema, p as conversationEventPageSchema, r as archiveConversationBodySchema, t as acceptedConversationMessageSchema, u as conversationDetailQuerySchema, x as conversationPendingMessagesReportSchema } from "./conversation-CTpD_PGk.js";
+import { h as getChildAgentLabel } from "./store-1DVhoKOL.js";
+import { d as getEventCatalog } from "./session-stop-BQW_iFcd.js";
+import { a as fillUtcSixHours, c as trailingUtcDayWindow, d as utcDayKey, f as utcHourKey, i as fillUtcHours, l as trailingUtcHourWindow, n as HOUR_MS$1, o as startOfUtcHour, r as fillUtcDays, s as sumUtcHoursIntoSixHours, t as DAY_MS$1, u as trailingUtcSixHourWindow, x as userCustomizationSchema, y as webMessageId } from "./reporting-window-CVarfId9.js";
+import { s as getSandboxResources, t as getCachedSnapshot } from "./resolve-CUIBcdPd.js";
+import { a as getVercelConversationWorkQueue } from "./job-queue-DI-k-Bbk.js";
+import { E as steerWebPendingMessages, a as cancelHumanFacingPendingMessages, g as getConversationWorkState, h as getConversation } from "./store-DCo2n5iJ.js";
+import { n as finishServiceAccountSignIn, o as serviceAccountPlugins, r as getServiceAccountStatus, s as startServiceAccountSignIn, t as disconnectServiceAccount } from "./service-account-DHvlLnZw.js";
+import { N as ScheduleIntentError, P as compileScheduleIntent, _ as automationSummarySchema, b as automationVersionListSchema, c as automationLifecycleSchema, d as automationParamsSchema, f as automationRunListSchema, g as automationSchedulePreviewSchema, h as automationScheduleIntentSchema, i as automationExecutionListSchema, l as automationListQuerySchema, n as automationEditSchema, r as automationEventCatalogSchema, t as automationEditErrorSchema, u as automationListSchema, v as automationUpdateSchema, x as automationVersionParamsSchema, y as automationVersionActivateSchema } from "./automation-p87hg_AV.js";
+import { c as runtimeInfoReportSchema, n as pluginOperationalReportFeedSchema, s as pluginsSchema, t as healthReportSchema, u as skillReportsSchema } from "./reporting-schema-CZREhYc-.js";
+import { B as actOnReviewItem, C as isAllowedSignInEmail, H as readReviewItemForUser, J as readHealthReport, N as stopConversationTurn, O as clearSlackPendingReactions, V as closeReviewItemsAnsweredByReply, W as getAttachmentStorage, a as resolveMentions, c as readConversationAuxiliaryCostsFromSql, d as notCopiedByFork, f as childAgentTotalsReport, g as resolveSlackTeamDomains, h as conversationSummaryFromStoredConversation, i as attachConversationMentions, l as ConversationForkError, m as conversationEventHistory, n as readConversationRecordFromSql, o as readFirstHumanMessageTexts, p as readConversationTreeMetricsFromSql, r as readConversationParticipants, s as listConversationSidebarAnnotations, t as readConversationFeed, u as forkConversation, y as getProductionSlackAdapter, z as ReviewItemActionError } from "./list-CGoQdXTp.js";
+import { d as legacyWebMailboxMetadataSchema } from "./result-BemsOMOO.js";
+import { a as startConnection, l as getWebAuthorization, n as isConnectableProvider, r as listConnections, t as disconnectConnection, u as htmlCallbackResponse } from "./connections-upFXLmhG.js";
+import { A as avatarParamsSchema, C as createdPersonalTokenSchema, D as revokePersonalTokenResponseSchema, E as personalTokenParamsSchema, F as locationDirectoryReportSchema, G as startConnectionResponseSchema, H as connectionParamsSchema, I as locationParamsSchema, L as activityDays$1, M as personalSpendReportSchema, O as actorDirectoryReportSchema, P as locationDetailReportSchema, Q as codeRepositoryReportSchema, R as activityHours$1, S as createPersonalTokenBodySchema, V as connectionListSchema, W as disconnectConnectionResponseSchema, X as codePersonReportSchema, Y as codeOverviewReportSchema, Z as codeRepositoryParamsSchema, _ as disconnectServiceAccountResponseSchema, a as workspaceBodySchema, at as conversationStatsReportSchema, d as reviewItemCountSchema, f as reviewItemListQuerySchema, g as reviewItemWaitingConversationsSchema, h as reviewItemSchema, i as deleteWorkspaceResponseSchema, it as stopConversationTurnResponseSchema, j as personParamsSchema, k as actorProfileReportSchema, l as workspaceSchema, m as reviewItemParamsSchema, n as statsReportSchema, o as workspaceListSchema, ot as apiErrorSchema, p as reviewItemListSchema, rt as conversationChildAgentsReportSchema, s as workspaceParamsSchema, tt as conversationWatchesReportSchema, u as reviewItemActionSchema, v as serviceAccountListSchema, w as personalTokenListSchema, x as startServiceAccountSignInResponseSchema, y as serviceAccountParamsSchema, z as activitySixHours$1 } from "./schema-ChnFo5f2.js";
 import { Hono } from "hono";
 import path from "node:path";
 import { z } from "zod";
@@ -257,8 +256,7 @@ async function createConversationForViewer(viewer, body, services) {
 async function appendConversationMessageForViewer(viewer, conversationId, body, services) {
 	const conversation = await getConversationStore().get({ conversationId });
 	if (!conversation) throwApiError(404, "Conversation not found.");
-	const destinationPlatform = conversation.destination?.platform;
-	if (!(destinationPlatform === "local" && conversationId.startsWith("local:web:") || destinationPlatform === "slack")) throwApiError(409, "Conversation does not accept web messages.");
+	if (!acceptsWebMessages(conversationId, conversation.destination)) throwApiError(409, "Conversation does not accept web messages.");
 	if (!(await readConversationAccessFromSql(getDb(), [conversationId], viewer)).get(conversationId)?.isParticipant) throwApiError(403, "Only conversation participants can add messages.");
 	const images = parseImages(body.images);
 	const actor = actorFromViewer(viewer);
@@ -273,31 +271,34 @@ async function appendConversationMessageForViewer(viewer, conversationId, body,
 		attachmentStorage: services.attachmentStorage,
 		queue: services.queue
 	});
-	const destination = conversation.destination;
+	const closeAnswered = () => closeReviewItemsAnsweredByReply({
+		conversationId,
+		delivery: {
+			queue: services.queue,
+			show: createSlackReviewItemShow(getProductionSlackAdapter)
+		},
+		resolveUser: async () => viewer,
+		text: body.message
+	});
 	try {
-		if (destination?.platform !== "slack") return await append();
-		return await runWithWorkspaceTeamId(destination.teamId, async () => {
+		let accepted;
+		try {
+			accepted = await append();
+		} catch (error) {
 			const state = getStateAdapter();
 			await state.connect();
-			return persistSlackUserInputReply({
-				channelId: destination.channelId,
-				claimedBy: viewer.email,
-				isSaved: async () => {
-					const [messageId, work] = await Promise.all([webMessageId({
-						conversationId,
-						idempotencyKey: body.idempotencyKey
-					}), getConversationWorkState({
-						conversationId,
-						state
-					})]);
-					return work?.execution.inboundMessageIds.includes(messageId) === true;
-				},
-				note: () => webUserInputAnswerNote(viewer.displayName ?? viewer.email),
-				persist: append,
-				state,
-				threadTs: conversation.location?.threadTs ?? parseSlackThreadId(conversationId)?.threadTs
-			});
-		});
+			const [messageId, work] = await Promise.all([webMessageId({
+				conversationId,
+				idempotencyKey: body.idempotencyKey
+			}), getConversationWorkState({
+				conversationId,
+				state
+			})]);
+			if (work?.execution.inboundMessageIds.includes(messageId)) await closeAnswered();
+			throw error;
+		}
+		await closeAnswered();
+		return accepted;
 	} catch (error) {
 		throwApiError(500, "Unable to append message.", error);
 	}
@@ -2695,7 +2696,7 @@ async function readPeoplePluginReports(args) {
 		reports: [],
 		source: "plugins"
 	});
-	const { getPluginProfileReports } = await import("./credentialed-CIGwoLU2.js").then((n) => n.a);
+	const { getPluginProfileReports } = await import("./credentialed-BU-OW7HP.js").then((n) => n.a);
 	return pluginOperationalReportFeedSchema.parse({
 		generatedAt: new Date(nowMs).toISOString(),
 		reports: await getPluginProfileReports({
@@ -2904,6 +2905,23 @@ function spendWindow(nowMs) {
 		thirtyDayStart
 	};
 }
+/**
+* Read a cheap change marker for one viewer's spend window.
+*
+* Writes that record Conversation metrics also move `updated_at` forward, so
+* the marker changes when spend can change. The spend cache TTL bounds changes
+* that the marker misses, such as a day that leaves the window.
+*/
+async function readPersonalSpendVersion(email, nowMs = Date.now()) {
+	const normalizedEmail = normalizeEmail$1(email);
+	if (!normalizedEmail) return "";
+	const { end, thirtyDayStart } = spendWindow(nowMs);
+	const [row] = await getDb().select({
+		conversations: sql`count(*)::int`,
+		updatedAt: sql`max(${juniorConversations.updatedAt})::text`
+	}).from(juniorConversations).innerJoin(juniorIdentities, eq(juniorIdentities.id, juniorConversations.actorIdentityId)).innerJoin(juniorUsers, eq(juniorUsers.id, juniorIdentities.userId)).where(and(verifiedActorWhere(normalizedEmail), gte(juniorConversations.lastActivityAt, thirtyDayStart), lte(juniorConversations.lastActivityAt, end)));
+	return `${row?.conversations ?? 0}:${row?.updatedAt ?? ""}`;
+}
 /** Read one viewer's rolling model spend with one bounded aggregate query. */
 async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
 	const normalizedEmail = normalizeEmail$1(email);
@@ -2936,19 +2954,27 @@ async function readPersonalSpendFromSql(email, nowMs = Date.now()) {
 }
 // src/api/people/spend.ts
 const PERSONAL_SPEND_CACHE_TTL_MS = 3e5;
-/** Create an app-scoped personal-spend reader with a five-minute cache. */
+/**
+* Create an app-scoped personal-spend reader.
+*
+* A cached report stays valid for five minutes, or until the viewer's spend
+* version changes. The dashboard can poll often and still see a finished Turn
+* without a full aggregate query on every poll.
+*/
 function createPersonalSpendReader() {
 	const cache = /* @__PURE__ */ new Map();
 	return async function readPersonalSpend(email) {
 		const normalizedEmail = email.trim().toLowerCase();
 		const nowMs = Date.now();
+		const version = await readPersonalSpendVersion(normalizedEmail, nowMs);
 		const cached = cache.get(normalizedEmail);
-		if (cached && cached.expiresAtMs > nowMs) return cached.report;
+		if (cached && cached.expiresAtMs > nowMs && cached.version === version) return cached.report;
 		cache.delete(normalizedEmail);
 		const report = readPersonalSpendFromSql(normalizedEmail, nowMs);
 		const entry = {
 			expiresAtMs: nowMs + PERSONAL_SPEND_CACHE_TTL_MS,
-			report
+			report,
+			version
 		};
 		cache.set(normalizedEmail, entry);
 		try {
@@ -2964,6 +2990,17 @@ function createPersonalSpendReader() {
 function createPeopleRoutes() {
 	const app = new Hono();
 	const readPersonalSpend = createPersonalSpendReader();
+	app.get("/avatars/:identityId", requireViewer, validateRequest("param", avatarParamsSchema, "Invalid route parameters."), async (context) => {
+		const { identityId } = context.req.valid("param");
+		const image = await readAvatarImage(getDb(), getStateAdapter(), identityId);
+		if (!image) throwApiError(404, "Avatar not found.");
+		return new Response(Buffer.from(image.data, "base64"), { headers: {
+			"cache-control": "private, max-age=86400",
+			"content-security-policy": "default-src 'none'; sandbox",
+			"content-type": image.contentType,
+			"x-content-type-options": "nosniff"
+		} });
+	});
 	app.get("/me/spend", requireViewer, async (context) => {
 		const viewer = context.get("viewer");
 		return jsonResponse(personalSpendReportSchema, await readPersonalSpend(viewer.email));
@@ -3207,233 +3244,6 @@ function createUserPageRoutes() {
 	});
 	return app;
 }
-// src/chat/automations/edit.ts
-/**
-* Web edits. Owners and public Destination readers can edit. Creator-only
-* rules still apply, and lifecycle actions stay creator-only.
-*/
-/** Owners and public Destination readers can edit. Others get not found. */
-async function requireEditableAutomation(user, id) {
-	const candidate = await resolveViewerTaskCandidate(user, id);
-	if (!candidate) throw new ViewerTaskNotFoundError();
-	return candidate;
-}
-/** Lifecycle actions are creator-only. Others get not found. */
-async function requireOwnedAutomation(user, id) {
-	const candidate = await requireEditableAutomation(user, id);
-	if (!candidate.ownedByViewer) throw new ViewerTaskNotFoundError();
-	return candidate;
-}
-/** Record the viewer's Slack identity in the Automation workspace as the editor. */
-function viewerEditor(user, automation) {
-	if (automation.ownedByViewer) return automation.task.createdBy;
-	const identity = user.identities.find((candidate) => candidate.provider === "slack" && candidate.providerTenantId === automation.task.destination.teamId);
-	if (!identity) return void 0;
-	const editor = { slackUserId: identity.providerSubjectId };
-	if (identity.displayName) editor.fullName = identity.displayName;
-	if (identity.handle) editor.userName = identity.handle;
-	return editor;
-}
-function editView(automation, ownedByViewer) {
-	const { task } = automation;
-	const common = {
-		ownedByViewer,
-		id: task.id,
-		revision: automationRevision(task),
-		title: task.title ?? null,
-		instruction: task.task.text,
-		credentialMode: task.credentialMode,
-		outcomes: task.outcomes,
-		destination: task.destination,
-		createdBy: task.createdBy
-	};
-	if (automation.kind === "scheduled") {
-		const status = automation.task.status;
-		if (status === "deleted") throw new ViewerTaskNotFoundError();
-		return {
-			...common,
-			kind: "scheduled",
-			status,
-			schedule: automation.task.schedule,
-			nextRunAtMs: automation.task.nextRunAtMs
-		};
-	}
-	return {
-		...common,
-		kind: "event",
-		status: automation.task.status === "deleted" ? "active" : automation.task.status,
-		trigger: automation.task.trigger
-	};
-}
-/** Load exact editable values by ID, independent of list filters. */
-async function readViewerAutomationEdit(user, id) {
-	const automation = await requireEditableAutomation(user, id);
-	return editView(automation, automation.ownedByViewer);
-}
-/** Save a partial edit against the read revision, without dispatching work. */
-async function updateViewerAutomation(user, id, input) {
-	const current = await requireEditableAutomation(user, id);
-	if (input.kind !== current.kind) throw new AutomationEditError("The trigger type cannot change.", "kind");
-	requireAutomationRevision(current.task, input.revision);
-	return saveViewerEdit(user, current, input);
-}
-/** `restored` carries version values that edit input cannot express, such as a cleared title. */
-async function saveViewerEdit(user, current, input, restored) {
-	const isCreator = current.ownedByViewer;
-	const editedBy = viewerEditor(user, current);
-	if (input.kind === "scheduled" && current.kind === "scheduled") {
-		const next = await editScheduledAutomation(current.task, input, isCreator, Date.now());
-		return editView({
-			kind: "scheduled",
-			task: await saveScheduledAutomation(getDb(), restored ? {
-				...next,
-				...restored
-			} : next, input.revision, editedBy)
-		}, isCreator);
-	}
-	if (input.kind === "event" && current.kind === "event") {
-		const next = await editEventAutomation(current.task, input, isCreator, getEventCatalog());
-		const task = await saveEventAutomation(getDb(), restored ? {
-			...next,
-			title: restored.title
-		} : next, input.revision, editedBy);
-		if (!task) throw new ViewerTaskNotFoundError();
-		return editView({
-			kind: "event",
-			task
-		}, isCreator);
-	}
-	throw new ViewerTaskNotFoundError();
-}
-function scheduleIntent(schedule) {
-	const recurrence = schedule.recurrence;
-	if (schedule.kind !== "recurring" || !recurrence) throw new AutomationEditError("A one-time Schedule cannot be restored. Set a new time in the editor.", "schedule");
-	return {
-		kind: "recurring",
-		frequency: recurrence.frequency,
-		interval: recurrence.interval,
-		time: `${String(recurrence.time.hour).padStart(2, "0")}:${String(recurrence.time.minute).padStart(2, "0")}`,
-		weekdays: recurrence.weekdays?.map((day) => weekdaySchema.options[day]),
-		dayOfMonth: recurrence.dayOfMonth,
-		month: recurrence.month,
-		startDate: recurrence.startDate,
-		timezone: schedule.timezone
-	};
-}
-/**
-* Turn saved outcomes back into edit input. Messages to the Automation
-* Destination or the creator DM are always allowed again. Other stored
-* Destinations must still be on the Automation.
-*/
-async function restorableOutcomes(current, outcomes) {
-	const { task } = current;
-	let creatorDm;
-	const restored = [];
-	for (const outcome of outcomes) {
-		if (sameDefinitionValue(outcome.destination, task.destination)) {
-			restored.push({
-				action: outcome.action,
-				destination: "current_conversation"
-			});
-			continue;
-		}
-		if (current.ownedByViewer && !task.outcomes.some((stored) => sameDefinitionValue(stored, outcome))) {
-			creatorDm ??= (await resolveTaskOutcomes([{
-				action: "send_message",
-				destination: "task_creator"
-			}], task.destination, task.createdBy.slackUserId))[0].destination;
-			if (sameDefinitionValue(outcome.destination, creatorDm)) {
-				restored.push({
-					action: outcome.action,
-					destination: "task_creator"
-				});
-				continue;
-			}
-		}
-		restored.push(outcome);
-	}
-	return restored;
-}
-/**
-* Make a saved version active. This saves its definition as a new version
-* through the same edit rules, so history is never rewritten.
-*/
-async function activateViewerAutomationVersion(user, id, input) {
-	const current = await requireEditableAutomation(user, id);
-	requireAutomationRevision(current.task, input.revision);
-	const saved = await readAutomationVersion(getDb(), id, input.version);
-	if (!saved) throw new AutomationEditError("This version does not exist.", "version");
-	const { definition } = saved;
-	if (sameDefinitionValue(definition, automationDefinition(current.task))) return editView(current, current.ownedByViewer);
-	if (!sameDefinitionValue(definition.destination, current.task.destination)) throw new AutomationEditError("This version delivers to another Destination. Move the automation from Slack instead.", "destination");
-	const fields = {};
-	if (definition.instruction !== current.task.task.text) fields.instruction = definition.instruction;
-	if (definition.credentialMode !== current.task.credentialMode) fields.credentialMode = definition.credentialMode;
-	if (!sameDefinitionValue(definition.outcomes, current.task.outcomes)) fields.outcomes = await restorableOutcomes(current, definition.outcomes);
-	const title = definition.title ?? void 0;
-	if (saved.kind === "scheduled" && current.kind === "scheduled") {
-		const update = {
-			kind: "scheduled",
-			revision: input.revision,
-			...fields
-		};
-		const restored = { title };
-		const { schedule } = saved.definition;
-		if (!sameDefinitionValue(schedule, current.task.schedule)) {
-			update.schedule = scheduleIntent(schedule);
-			restored.schedule = schedule;
-		}
-		return saveViewerEdit(user, current, update, restored);
-	}
-	if (saved.kind === "event" && current.kind === "event") {
-		const update = {
-			kind: "event",
-			revision: input.revision,
-			...fields
-		};
-		if (!sameDefinitionValue(saved.definition.trigger, current.task.trigger)) update.trigger = saved.definition.trigger;
-		return saveViewerEdit(user, current, update, { title });
-	}
-	throw new ViewerTaskNotFoundError();
-}
-/** Pause or resume future triggers. Already-claimed work can finish. */
-async function changeViewerAutomationLifecycle(user, id, input) {
-	const current = await requireOwnedAutomation(user, id);
-	requireAutomationRevision(current.task, input.revision);
-	const status = current.task.status;
-	if (status === "completed") throw new AutomationEditError("Completed Automations cannot be restarted.");
-	if (input.action === "pause" && status === "paused") return editView(current, true);
-	if (input.action === "resume" && status !== "paused" && status !== "blocked") throw new AutomationEditError("Only paused or blocked Automations can be resumed.");
-	if (current.kind === "event") return editView({
-		kind: "event",
-		task: await setEventAutomationStatus(getDb(), id, input.action === "pause" ? "paused" : "active", input.revision)
-	}, true);
-	const nowMs = Date.now();
-	const next = {
-		...current.task,
-		updatedAtMs: nowMs,
-		runNowAtMs: void 0
-	};
-	if (input.action === "pause") {
-		next.status = "paused";
-		if (status === "blocked") next.statusReason ??= "A requirement blocked this Automation. Inspect its executions before resuming.";
-	} else {
-		next.status = status === "paused" && next.statusReason ? "blocked" : "active";
-		if (next.status === "active") {
-			next.nextRunAtMs = next.schedule.recurrence ? getFirstRunAtMs({
-				afterMs: nowMs,
-				recurrence: next.schedule.recurrence,
-				timezone: next.schedule.timezone
-			}) : next.nextRunAtMs;
-			if (!next.nextRunAtMs || next.nextRunAtMs <= nowMs) throw new AutomationEditError("This Schedule has no future occurrence. Set a future Schedule before resuming.", "schedule");
-			next.statusReason = void 0;
-		}
-	}
-	return editView({
-		kind: "scheduled",
-		task: await saveScheduledAutomation(getDb(), next, input.revision)
-	}, true);
-}
 // src/chat/automations/editor.ts
 /** Read-only editor support. Core owns schedules; plugins own Event choices. */
 /**
@@ -3611,6 +3421,171 @@ function createAutomationRoutes() {
 	});
 	return app;
 }
+// src/api/user-customization/routes.ts
+/**
+* Create routes that read and replace the viewer's customization. They return
+* 404 unless the app enables the `user-customization` experiment.
+*/
+function createUserCustomizationRoutes() {
+	const app = new Hono();
+	app.use("*", async (_context, next) => {
+		if (!isExperimentalFeatureEnabled("user-customization")) throwApiError(404, "Resource not found.");
+		await next();
+	});
+	app.get("/", requireViewer, async (context) => {
+		const viewer = context.get("viewer");
+		return jsonResponse(userCustomizationSchema, { customization: await readUserCustomization(viewer.id) ?? "" });
+	});
+	app.put("/", requireViewer, validateRequest("json", userCustomizationSchema, "Invalid request body."), async (context) => {
+		const viewer = context.get("viewer");
+		const { customization } = context.req.valid("json");
+		if (!await saveUserCustomization(viewer.id, customization)) throwApiError(404, "User not found.");
+		return jsonResponse(userCustomizationSchema, { customization });
+	});
+	return app;
+}
+// src/api/review-items/routes.ts
+const ARCHIVED_LIMIT = 50;
+const cursorSchema = z.object({
+	conversationId: z.string().min(1).optional(),
+	id: z.string().min(1),
+	query: z.string().min(1).optional(),
+	updatedAtMs: z.number().int(),
+	version: z.literal(1)
+}).strict();
+/**
+* Encode the last open item of a page as the cursor of the next page. The
+* cursor names its list, so it cannot page through a different list.
+*/
+function encodeCursor(item, filters) {
+	return Buffer.from(JSON.stringify({
+		...filters,
+		id: item.id,
+		updatedAtMs: item.updatedAt.getTime(),
+		version: 1
+	}), "utf8").toString("base64url");
+}
+/** Decode a cursor of the same list, or return undefined. */
+function decodeCursor(cursor, filters) {
+	try {
+		const parsed = cursorSchema.parse(JSON.parse(Buffer.from(cursor, "base64url").toString("utf8")));
+		if (parsed.conversationId !== filters.conversationId || parsed.query !== filters.query) return;
+		return {
+			id: parsed.id,
+			updatedAt: new Date(parsed.updatedAtMs)
+		};
+	} catch {
+		return;
+	}
+}
+const ERROR_STATUS = {
+	conflict: 409,
+	forbidden: 403,
+	invalid: 400,
+	not_found: 404
+};
+/** Build the API payload of one Review item for its viewer. */
+function reviewItemPayload(item, viewer) {
+	return {
+		addedByConversationId: item.addedByConversationId,
+		assignedToEveryone: item.assignedToEveryone,
+		assignees: item.assignees,
+		body: item.body,
+		canAct: canActOnReviewItem(item, viewer.id),
+		canTake: canActOnReviewItem(item, viewer.id) && !isOnlyAssignee(item, viewer.id),
+		conversationIds: item.conversationIds,
+		createdAt: item.createdAt.toISOString(),
+		id: item.id,
+		kind: item.kind,
+		status: item.status,
+		title: item.title,
+		updatedAt: item.updatedAt.toISOString(),
+		visibility: item.visibility,
+		...item.answer ? { answer: item.answer } : void 0,
+		...item.automationId ? { automationId: item.automationId } : void 0,
+		...item.closeReason ? { closeReason: item.closeReason } : void 0,
+		...item.closedAt ? { closedAt: item.closedAt.toISOString() } : void 0,
+		...item.closedBy ? { closedBy: item.closedBy } : void 0,
+		...item.request ? { request: item.request } : void 0,
+		...item.subject ? { subject: item.subject } : void 0
+	};
+}
+function actionErrorResponse(error) {
+	if (error instanceof ReviewItemActionError) return jsonResponse(apiErrorSchema, { error: error.message }, { status: ERROR_STATUS[error.code] });
+	throw error;
+}
+/** Create the authenticated review desk routes. */
+function createReviewItemRoutes(services) {
+	const app = new Hono();
+	app.get("/", requireViewer, validateRequest("query", reviewItemListQuerySchema, "Invalid review item query."), async (context) => {
+		const viewer = context.get("viewer");
+		const query = context.req.valid("query");
+		const filters = {
+			...query.conversationId ? { conversationId: query.conversationId } : void 0,
+			...query.q ? { query: query.q } : void 0
+		};
+		const after = query.cursor ? decodeCursor(query.cursor, filters) : void 0;
+		if (query.cursor && !after) return jsonResponse(apiErrorSchema, { error: "Invalid review item cursor." }, { status: 400 });
+		const db = getDb();
+		const reader = reviewItemReaderForUser(viewer);
+		const open = await searchReviewItems(db, reader, {
+			...filters,
+			limit: query.limit + 1,
+			statuses: ["open"],
+			...after ? { after } : void 0
+		});
+		const page = open.slice(0, query.limit);
+		const last = page.at(-1);
+		const archived = filters.query && !after ? await searchReviewItems(db, reader, {
+			...filters,
+			limit: 51,
+			statuses: ["done", "dismissed"]
+		}) : [];
+		return jsonResponse(reviewItemListSchema, {
+			items: [...page, ...archived.slice(0, ARCHIVED_LIMIT)].map((item) => reviewItemPayload(item, viewer)),
+			...archived.length > ARCHIVED_LIMIT ? { moreArchived: true } : void 0,
+			...open.length > query.limit && last ? { nextCursor: encodeCursor(last, filters) } : void 0
+		});
+	});
+	app.get("/count", requireViewer, async (context) => {
+		const viewer = context.get("viewer");
+		return jsonResponse(reviewItemCountSchema, { needsViewer: await countReviewItemsNeedingUser(getDb(), viewer.id) });
+	});
+	app.get("/waiting-conversations", requireViewer, async (context) => {
+		const viewer = context.get("viewer");
+		return jsonResponse(reviewItemWaitingConversationsSchema, { conversationIds: await listWaitingConversationIds(getDb(), viewer.id) });
+	});
+	app.get("/:id", requireViewer, validateRequest("param", reviewItemParamsSchema, "Invalid review item."), async (context) => {
+		const viewer = context.get("viewer");
+		try {
+			const item = await readReviewItemForUser(viewer, context.req.valid("param").id);
+			return jsonResponse(reviewItemSchema, reviewItemPayload(item, viewer));
+		} catch (error) {
+			return actionErrorResponse(error);
+		}
+	});
+	app.post("/:id/actions", requireViewer, validateRequest("param", reviewItemParamsSchema, "Invalid review item."), validateRequest("json", reviewItemActionSchema, "Invalid action."), async (context) => {
+		const viewer = context.get("viewer");
+		const body = context.req.valid("json");
+		const { id } = context.req.valid("param");
+		try {
+			const item = await actOnReviewItem({
+				action: body.action,
+				delivery: services.delivery,
+				id,
+				user: viewer,
+				...body.action === "submit" ? { answer: {
+					...body.answer,
+					requestId: id
+				} } : void 0
+			});
+			return jsonResponse(reviewItemSchema, reviewItemPayload(item, viewer));
+		} catch (error) {
+			return actionErrorResponse(error);
+		}
+	});
+	return app;
+}
 // src/api/workspaces/routes.ts
 function snapshotView(workspace) {
 	const recorded = workspace.snapshot;
@@ -3735,7 +3710,7 @@ function readDescriptionText(home) {
 }
 /** Read discovered skill names for authenticated runtime diagnostics. */
 async function readSkillReports() {
-	const { discoverSkills } = await import("./skills-CQHrwfOa.js").then((n) => n.o);
+	const { discoverSkills } = await import("./skills-DmJJIuLF.js").then((n) => n.o);
 	const skills = await discoverSkills();
 	return skillReportsSchema.parse(skills.map((skill) => ({
 		name: skill.name,
@@ -3744,7 +3719,7 @@ async function readSkillReports() {
 }
 /** Read safe configured plugin metadata for authenticated runtime diagnostics. */
 async function readPlugins() {
-	const { pluginCatalogRuntime } = await import("./catalog-runtime-cMlAI5LY.js").then((n) => n.t);
+	const { pluginCatalogRuntime } = await import("./catalog-runtime-BsoSmTM0.js").then((n) => n.t);
 	return pluginsSchema.parse(pluginCatalogRuntime.getProviders().map((plugin) => ({
 		configKeys: plugin.manifest.configKeys ?? [],
 		description: plugin.manifest.description,
@@ -3756,7 +3731,7 @@ async function readPlugins() {
 async function readRuntimeInfoReport() {
 	const [{ homeDir }, { pluginCatalogRuntime }, plugins, skills] = await Promise.all([
 		import("./package-discovery-DJBompdd.js").then((n) => n.r),
-		import("./catalog-runtime-cMlAI5LY.js").then((n) => n.t),
+		import("./catalog-runtime-BsoSmTM0.js").then((n) => n.t),
 		readPlugins(),
 		readSkillReports()
 	]);
@@ -3773,7 +3748,7 @@ async function readRuntimeInfoReport() {
 /** Read sanitized operational summaries contributed by plugins. */
 async function readPluginOperationalReportFeed() {
 	const nowMs = Date.now();
-	const { getPluginOperationalReports } = await import("./credentialed-CIGwoLU2.js").then((n) => n.a);
+	const { getPluginOperationalReports } = await import("./credentialed-BU-OW7HP.js").then((n) => n.a);
 	return pluginOperationalReportFeedSchema.parse({
 		source: "plugins",
 		generatedAt: new Date(nowMs).toISOString(),
@@ -3790,10 +3765,15 @@ function createJuniorApi(options = {}) {
 	app.get("/api/skills", async () => jsonResponse(skillReportsSchema, await readSkillReports()));
 	app.get("/api/plugin-reports", async () => jsonResponse(pluginOperationalReportFeedSchema, await readPluginOperationalReportFeed()));
 	app.get("/api/stats", async () => jsonResponse(statsReportSchema, await readStatsReport()));
+	const queue = options.conversationWorkQueue ?? getVercelConversationWorkQueue();
 	app.route("/api/conversations", createConversationRoutes({
 		attachmentStorage: getAttachmentStorage(),
-		queue: options.conversationWorkQueue ?? getVercelConversationWorkQueue()
+		queue
 	}));
+	app.route("/api/review-items", createReviewItemRoutes({ delivery: {
+		queue,
+		show: createSlackReviewItemShow(getProductionSlackAdapter)
+	} }));
 	app.route("/api/code", createCodeRoutes());
 	app.route("/api/connections", createConnectionRoutes());
 	app.route("/api/personal-tokens", createPersonalTokenRoutes());
@@ -3801,6 +3781,7 @@ function createJuniorApi(options = {}) {
 	app.route("/api/people", createPeopleRoutes());
 	app.route("/api/locations", createLocationRoutes());
 	app.route("/api/user-pages", createUserPageRoutes());
+	app.route("/api/user-customization", createUserCustomizationRoutes());
 	app.route("/api/automations", createAutomationRoutes());
 	app.route("/api/workspaces", createWorkspaceRoutes());
 	app.notFound(() => jsonResponse(apiErrorSchema, { error: "Resource not found." }, { status: 404 }));
@@ -3814,4 +3795,4 @@ function createJuniorApi(options = {}) {
 	});
 	return app;
 }
-export { authenticatePersonalToken, createJuniorApi, isAllowedSignInEmail, jsonResponse, resolveViewerUser, updateViewerDisplayName };
+export { authenticatePersonalToken, createJuniorApi, isAllowedSignInEmail, jsonResponse, readViewerAvatarUrl, resolveViewerUser, updateViewerDisplayName };