@sentry/junior 0.267.0 → 0.269.0

package/dist/app.js

@@ -1,46 +1,46 @@
-import { C as automationVersionOf, P as eventGuidance, Zt as CONVERSATION_WORK_STALE_ENQUEUE_MS, b as admitEventAutomationRun, c as withScheduledAutomationLock, cr as isExperimentalFeatureEnabled, er as SubscribedReplyReason, ft as projectConversationMessages, hn as isInvalidConversationRecordError, hr as setConfigDefaults, ht as settleConversationTitleWork, i as readScheduledAutomation, l as blockEventAutomation, lr as setExperimentalFeatures, lt as appendConversationMessages, mr as getConfigDefaults, n as listScheduledAutomationsForTeam, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, pn as hasRunnableConversationWork, rr as getThreadStopDecision, s as scheduledRunId, sr as getExperimentalFeatures, u as collectEventAutomationMatchKeys, x as eventAutomationRunLimitReason } from "./tasks-0ilmuCux.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-CdB6yJj5.js";
-import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-DuZ1A4ab.js";
+import { B as readScheduledAutomation, Fr as SubscribedReplyReason, G as blockEventAutomation, H as saveScheduledAutomationInLock, Hr as getExperimentalFeatures, Jn as hasRunnableConversationWork, K as collectEventAutomationMatchKeys, M as recordAutomationExecution, Mn as CONVERSATION_WORK_STALE_ENQUEUE_MS, R as listScheduledAutomationsForTeam, Rr as getThreadStopDecision, S as existingConversationId, U as scheduledRunId, Ur as isExperimentalFeatureEnabled, W as withScheduledAutomationLock, Wr as setExperimentalFeatures, Wt as appendConversationMessages, Xn as isInvalidConversationRecordError, Xr as setConfigDefaults, Xt as settleConversationTitleWork, Y as findMatchingEventAutomations, Yr as getConfigDefaults, a as confirmDispatchMailboxAppend, b as notifyAutomationBlocked, f as getPluginDispatchProjection, ht as eventGuidance, it as automationVersionOf, m as listPendingDispatchMailboxAppends, nt as eventAutomationRunLimitReason, o as createOrGetDispatch, p as isTerminalDispatchStatus, qt as projectConversationMessages, r as buildDispatchId, s as getDispatchConversationId, tt as admitEventAutomationRun, u as getDispatchRecord, v as markDispatchFailed } from "./turn-session-routing-BqO0qXLk.js";
+import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-CPsE4T5L.js";
+import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, L as GOOGLE_IDENTITY_PROVIDER, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-n7knse-O.js";
 import { n as captureMessage } from "./sentry-MDkYAVPV.js";
-import { t as JUNIOR_VERSION } from "./version-Bapedn4A.js";
-import { d as parseSlackTeamId, f as parseSlackUserId, h as slackMessageTsSchema, l as parseSlackChannelId, m as slackMessageTsFromMs, o as parseActorUserId, p as parseSlackMessageTs } from "./actor-DZSokpwj.js";
-import { F as recordGoogleSignIn, a as resolveViewerUser, c as closeDb, f as getConversationStore, g as withConversationEventLock, m as getSqlExecutor, p as getDb, r as readActorIdentity, u as getConversationEventStore, y as withConversationMutationLock } from "./viewer-DrN3oC2X.js";
-import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-CxKldAeB.js";
-import { a as juniorAutomationRuns, f as juniorConversationBriefs, h as juniorConversationEvents, s as juniorAutomations } from "./executor-VYrx_K4w.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-cMlAI5LY.js";
-import { $ as stopConversationSession, C as requestAttachmentDeletion, D as getOpenSlackUserInput, E as closeSlackUserInput, F as slackUserInputAnswerNote, G as scheduledAutomationRunAttributes, L as parseSlackThreadId, M as parseSlackUserInputFormTarget, N as parseSlackUserInputSubmission, O as persistSlackUserInputReply, P as slackUserInputAction, T as claimSlackUserInput, W as logScheduledAutomationRunSkipped, Y as effectiveTaskOutcomes, _ as unpublishedArtifactHeaders, et as recordSubagentEnded, g as readPublicArtifact, h as publicArtifactHeaders, j as buildSlackUserInputModal, k as releaseSlackUserInput, n as executeAgentRun, ot as processWorkspaceSnapshotJob, st as ingestEvent, t as createAgentRunner, v as lookupSlackUserProfile, x as collectAttachmentGarbage } from "./agent-runner-DgNATN4D.js";
-import { An as createPluginState, Ct as normalizeSandboxEgressTracePropagationDomains, Gt as bindEventAutomationCredentialSubject, I as isVercelSandboxEgressRequest, Jt as verifyEventAutomationCredentialSubject, Kt as bindScheduledAutomationCredentialSubject, L as proxyVercelSandboxEgressRequest, Lt as collectEventMatchKeys, Nn as createPluginLogger, Pn as readConversationAccessFromSql, Q as openSlackModal, V as resolveBaseUrl, Vt as findMatchingWatches, Wt as takeDueTimerWatches, Xt as verifySlackDirectCredentialSubject, Yt as verifyScheduledAutomationCredentialSubject, Zn as resolveRootVisibility, _t as parseSandboxEgressCredentialToken, ar as createPluginCache, c as getPluginRoutes, er as listConversationAnnotations, fn as getDashboardConversationLink, h as validatePlugins, hn as setDashboardConversationLinkOptions, ht as consumeSandboxEgressPermissionDeniedSignal, in as isDmChannel, it as slackExternalRefIdSchema, ln as getWorkspaceTeamId, m as setPlugins, mn as getDashboardTaskLink, mt as consumeSandboxEgressAuthRequiredSignal, n as createUserTokenStore, nn as getSlackClient, or as createCache, p as getPlugins, pt as clearSandboxEgressSignals, q as slackMention, qt as bindSlackDirectCredentialSubject, rt as slackEntitySchema, s as getPluginApiRoutes, un as runWithWorkspaceTeamId, v as setBriefsConfig } from "./credentialed-CIGwoLU2.js";
-import { c as withLock$1, i as getStateAdapter, t as disconnectStateAdapter } from "./adapter-BybMEezj.js";
+import { t as JUNIOR_VERSION } from "./version-CXCHLgWm.js";
+import { f as parseSlackTeamId, g as slackMessageTsSchema, h as slackMessageTsFromMs, m as parseSlackMessageTs, n as createSlackActor, p as parseSlackUserId, s as parseActorUserId, u as parseSlackChannelId } from "./actor-CP9K2Idu.js";
+import { C as getSqlExecutor, M as resolveActorIdentityId, O as withConversationMutationLock, R as recordGoogleSignIn, S as getDb, T as withConversationEventLock, _ as closeDb, g as createCache, i as readActorIdentity, l as resolveViewerUser, p as parseAvatarUrl, x as getConversationStore, y as getConversationEventStore } from "./viewer-DSbD6DF6.js";
+import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
+import { c as juniorReviewItems, d as juniorAutomations, g as juniorConversationBriefs, l as juniorAutomationRuns, y as juniorConversationEvents } from "./executor-CNS7ONt-.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-BsoSmTM0.js";
+import { A as verifySlackSignature, C as syncReviewItemSlackCards, Ct as processWorkspaceSnapshotJob, D as parseSlackReviewItemFormTarget, E as parseSlackReviewItemClick, J as readViewerAutomationSummary, L as logScheduledAutomationRunSkipped, O as parseSlackUserInputSubmission, Q as effectiveTaskOutcomes, R as scheduledAutomationRunAttributes, S as readSlackReviewItemCardConversationId, T as buildSlackReviewItemModal, _ as unpublishedArtifactHeaders, _t as recordSubagentEnded, ct as webActorFromEmail, dt as collectAttachmentGarbage, et as deliverReviewItemChange, g as readPublicArtifact, gt as stopConversationSession, h as publicArtifactHeaders, it as conversationTurnIdForMessage, j as parseSlackThreadId, k as runWithSlackInstallation, n as executeAgentRun, pt as requestAttachmentDeletion, rt as appendAndEnqueueWebMessage, st as recordWebConversationActivity, t as createAgentRunner, tt as renderReviewItemMessage, v as lookupSlackUserProfile, wt as ingestEvent, x as createSlackReviewItemShow } from "./agent-runner-CrDrPUtY.js";
+import { At as slackEntitySchema, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, Cr as resolveRootVisibility, Dn as getSlackClient, Er as listConversationAnnotations, Fn as runWithWorkspaceTeamId, Ht as consumeSandboxEgressPermissionDeniedSignal, Ln as getDashboardConversationLink, M as canActOnReviewItem, Pn as getWorkspaceTeamId, S as dismissOpenReviewItems, Tt as postSlackEphemeralMessage, Vn as setDashboardConversationLinkOptions, Vt as consumeSandboxEgressAuthRequiredSignal, Wt as parseSandboxEgressCredentialToken, Xt as normalizeSandboxEgressTracePropagationDomains, _n as bindScheduledAutomationCredentialSubject, ar as createPluginLogger, bn as verifyScheduledAutomationCredentialSubject, c as getPluginRoutes, cn as collectEventMatchKeys, ct as proxyVercelSandboxEgressRequest, fn as findMatchingWatches, ft as resolveBaseUrl, gn as bindEventAutomationCredentialSubject, h as validatePlugins, hn as takeDueTimerWatches, jr as createPluginCache, jt as slackExternalRefIdSchema, kn as isDmChannel, m as setPlugins, n as createUserTokenStore, nr as createPluginState, or as readConversationAccessFromSql, p as getPlugins, s as getPluginApiRoutes, st as isVercelSandboxEgressRequest, v as setBriefsConfig, vn as bindSlackDirectCredentialSubject, vt as slackMention, wt as openSlackModal, xn as verifySlackDirectCredentialSubject, yn as verifyEventAutomationCredentialSubject } from "./credentialed-BU-OW7HP.js";
+import { a as withLock, i as fenceLock, n as MUTATION_LOCK_TTL_MS } from "./locks-D-0h111u.js";
+import { r as getStateAdapter, t as disconnectStateAdapter } from "./adapter-2-CG25be.js";
 import { n as getNextRunAtMs } from "./cadence-R7Em4RjE.js";
-import { D as conversationSurfaceSchema, I as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-DSo310Ps.js";
-import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-6EetVP-m.js";
-import { S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-DkOjt46_.js";
-import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-Bk4yeuHy.js";
-import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-C0BZSa7r.js";
-import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-DvNZIsCr.js";
-import { a as normalizeUserInputAnswer, i as isEmptyUserInputAnswer, n as buttonUserInputField, r as formatUserInputAnswer } from "./user-input-request-BDFBdF8r.js";
-import { D as scheduledRunSchema } from "./automation-CmeFBSEh.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-CxEmt1id.js";
+import { D as conversationSurfaceSchema, I as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-CTpD_PGk.js";
+import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-1DVhoKOL.js";
+import { E as renderSlackObjectCard, S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-BQW_iFcd.js";
+import { m as buttonUserInputField } from "./reporting-window-CVarfId9.js";
+import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-CUIBcdPd.js";
+import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-DI-k-Bbk.js";
+import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-DCo2n5iJ.js";
+import { M as scheduledRunSchema } from "./automation-p87hg_AV.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-DHR1ivfh.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-DOm9Y6qI.js";
-import { $ as renderSlackObjectCard, B as recordSkippedConversationMessage, C as createProductionSlackWebhookServices, F as assertNoLegacyAllowedDomains, G as normalizeIncomingSlackThreadId, H as clearSlackPendingReactions, I as isAllowedDomain, J as THREAD_OPTOUT_ACK, K as withNormalizedThreadId, L as isAllowedSignInEmail, Q as verifySlackSignature, R as readEnvList, S as createProductionConversationWorkOptions, T as createSlackWebApiStatusSender, U as isSlackMessageStopped, V as buildSlackInboundMessage, W as stopSlackThread, X as parseContent, Y as startProcessingReaction, Z as runWithSlackInstallation, _ as appendAndEnqueueWebMessage, b as recordWebConversationActivity, et as getAttachmentStorage, j as readViewerAutomationSummary, nt as enqueueAgentDispatch, q as stopConversationTurn, rt as GET$3, t as readConversationFeed, v as conversationTurnIdForMessage, w as getProductionSlackAdapter, x as webActorFromEmail, z as resolveAllowedDomains } from "./list-1XQP-o6K.js";
-import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-B-PD_JOj.js";
-import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-B9e9ATOU.js";
-import { r as enqueueAgentInvocation } from "./work-DUQoNcqP.js";
-import { s as coerceThreadConversationState } from "./thread-state-DRmdJ2QN.js";
-import { o as unlinkProvider } from "./connections-RE_65jzK.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-DhEGEpgq.js";
-import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-B0DLgd2P.js";
-import { t as processConversationWork } from "./worker-D1l4Ugk0.js";
-import { t as bindMessageAgent } from "./message-NKSbbnA6.js";
-import { t as bindSpawnAgent } from "./spawn-BHuqN14f.js";
+import { A as stopSlackThread, B as actOnReviewItem, C as isAllowedSignInEmail, D as buildSlackInboundMessage, E as recordSkippedConversationMessage, F as bindMessageAuthorIdentityId, H as readReviewItemForUser, I as startProcessingReaction, K as enqueueAgentDispatch, L as stripLeadingBotMention, M as withNormalizedThreadId, N as stopConversationTurn, O as clearSlackPendingReactions, P as THREAD_OPTOUT_ACK, R as parseContent, S as isAllowedDomain, T as resolveAllowedDomains, U as reviewItemChange, V as closeReviewItemsAnsweredByReply, W as getAttachmentStorage, _ as createProductionConversationWorkOptions, b as createSlackWebApiStatusSender, j as normalizeIncomingSlackThreadId, k as isSlackMessageStopped, q as GET$3, t as readConversationFeed, v as createProductionSlackWebhookServices, w as readEnvList, x as assertNoLegacyAllowedDomains, y as getProductionSlackAdapter, z as ReviewItemActionError } from "./list-CGoQdXTp.js";
+import { n as enqueueAgentInvocationResult, o as getAuthPausedConversationTurnId } from "./result-BemsOMOO.js";
+import { r as enqueueAgentInvocation } from "./work-BE_qTYGi.js";
+import { o as coerceThreadConversationState } from "./thread-state-CHy8LS0C.js";
+import { o as unlinkProvider } from "./connections-upFXLmhG.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-CS_6IC-f.js";
+import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-HMC4QjFm.js";
+import { t as processConversationWork } from "./worker-Cm9_sWXg.js";
+import { t as bindMessageAgent } from "./message-BpaWd8TT.js";
+import { t as bindSpawnAgent } from "./spawn-ChCm46i-.js";
+import { t as processPluginTask } from "./task-runner-cA6yjn_E.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
 import { z } from "zod";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import { and, asc, eq, inArray, isNotNull, isNull, lte, or, sql } from "drizzle-orm";
+import { and, asc, eq, inArray, isNotNull, isNull, lte, ne, or, sql } from "drizzle-orm";
 import { EVENT_SUMMARY_MAX_LENGTH, EVENT_TEXT_MAX_LENGTH, dispatchOptionsSchema, eventSchema, eventTriggerFiltersText, isSlackDestination, userSchema } from "@sentry/junior-plugin-api";
 import { pathToFileURL } from "node:url";
-import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import net from "node:net";
 import { decodeJwt } from "jose";
 import https from "node:https";
@@ -1227,6 +1227,12 @@ async function selectExpiredRoots(executor, args) {
         where bindings.parent_conversation_id = tree.conversation_id
            or bindings.child_conversation_id = tree.conversation_id
       )
+      or exists (
+        select 1 from junior_review_items review_items
+        where review_items.added_by_conversation_id = tree.conversation_id
+          and review_items.status = 'open'
+          and review_items.automation_id is null
+      )
       or (
         ${juniorDestinations.visibility} is distinct from 'public'
         and (
@@ -1234,6 +1240,15 @@ async function selectExpiredRoots(executor, args) {
             select 1 from junior_conversation_briefs briefs
             where briefs.conversation_id = tree.conversation_id
           )
+          or exists (
+            select 1 from junior_review_items review_items
+            where review_items.added_by_conversation_id = tree.conversation_id
+              and review_items.visibility = 'private'
+              and (
+                review_items.status <> 'open'
+                or review_items.automation_id is null
+              )
+          )
           or exists (
             select 1 from junior_conversations metadata
             where metadata.conversation_id = tree.conversation_id
@@ -1259,7 +1274,9 @@ async function selectExpiredRoots(executor, args) {
 * event rows for the given conversation and every descendant, stamp
 * `transcript_purged_at`, and — for non-public content — null the raw-payload
 * metadata (`title`, `channel_name`, legacy actor JSON) so purged private
-* conversations keep only safe metadata. The metadata rows themselves survive.
+* conversations keep only safe metadata. Non-public content also loses its
+* Briefs and the Review items that it added. The metadata rows themselves
+* survive.
 */
 async function purgeConversationTree(executor, args) {
 	return await withConversationMutationLock(executor, args.rootConversationId, async () => {
@@ -1304,9 +1321,17 @@ async function purgeConversationTree(executor, args) {
 			await executor.db().delete(juniorConversationEvents).where(inArray(juniorConversationEvents.conversationId, ids));
 			await executor.db().delete(juniorAgentInvocations).where(or(inArray(juniorAgentInvocations.parentConversationId, ids), inArray(juniorAgentInvocations.childConversationId, ids)));
 			await executor.db().delete(juniorAgentBindings).where(or(inArray(juniorAgentBindings.parentConversationId, ids), inArray(juniorAgentBindings.childConversationId, ids)));
+			await dismissOpenReviewItems(executor.db(), {
+				addedByConversationIds: ids,
+				nowMs: args.nowMs,
+				reason: "Conversation purged"
+			});
 			await requestAttachmentDeletion(executor, ids, args.nowMs);
 			const scrubMetadata = args.retention ? !isPublic : resolvedScrubMetadata;
-			if (scrubMetadata) await executor.db().delete(juniorConversationBriefs).where(inArray(juniorConversationBriefs.conversationId, ids));
+			if (scrubMetadata) {
+				await executor.db().delete(juniorConversationBriefs).where(inArray(juniorConversationBriefs.conversationId, ids));
+				await executor.db().delete(juniorReviewItems).where(and(inArray(juniorReviewItems.addedByConversationId, ids), eq(juniorReviewItems.visibility, "private"), or(ne(juniorReviewItems.status, "open"), isNull(juniorReviewItems.automationId))));
+			}
 			await executor.db().update(juniorConversations).set({
 				transcriptPurgedAt: new Date(args.nowMs),
 				...scrubMetadata ? {
@@ -1697,66 +1722,28 @@ async function isSlackWorkspaceMember(raw, state) {
 		};
 	});
 }
-// src/chat/ingress/slack-interactive.ts
-function requireSlackPayloadUserId(value, source) {
-	const userId = parseActorUserId(value);
-	if (!userId) throw new Error(`${source} is missing a Slack user id`);
-	return userId;
-}
-async function handleAppHomeDisconnect(args) {
-	await withSpan("chat.app_home_disconnect", "chat.app_home_disconnect", { userId: args.userId }, async () => {
-		try {
-			await unlinkProvider(args.userId, args.provider, args.userTokenStore, getWorkspaceTeamId());
-		} catch (error) {
-			logException(error, "app_home.disconnect_unlink.failed", { "app.credential.provider": args.provider });
-		}
-		try {
-			await publishAppHomeView(getSlackClient(), args.userId, args.userTokenStore);
-		} catch (error) {
-			logException(error, "app_home.disconnect_publish.failed", { "app.credential.provider": args.provider });
-		}
-	});
-}
+// src/chat/ingress/slack-interaction-input.ts
 /**
-* Save the first answer to the open request of a Slack thread as Slack input
-* from the person who answered. The input text is the formatted answer, so
-* the model reads one format on every surface. Later answers to the same
-* request do nothing. A stale request, such as one that a newer request
-* replaced, also does nothing.
+* Build the Slack input that a click or form makes in a thread, as a
+* mention from the person who acted. The input has no Slack message of its
+* own, so `messageId` is not a timestamp. Every Slack timestamp reader, such
+* as reactions, the actor `slack_ts`, and attachment lookup, then resolves
+* `raw.ts`: the message that the person clicked. `inputTs` sets the time of
+* the input.
 */
-async function answerSlackUserInput(args) {
-	const userId = requireSlackPayloadUserId(args.payload.user?.id, "Slack user input payload");
-	const { channelId, messageTs } = args;
-	const open = await getOpenSlackUserInput(args.state, {
-		channelId,
-		threadTs: args.threadTs
-	});
-	if (!open || open.messageTs !== messageTs) return;
-	const answer = args.answer(open);
-	if (isEmptyUserInputAnswer(answer)) return;
-	const userTeam = args.payload.user?.team_id;
-	if (!await isSlackWorkspaceMember({
-		user: userId,
-		user_team: userTeam
-	}, args.state)) return;
-	if (!await args.isAuthorAllowed(userId)) return;
-	if (!await claimSlackUserInput(args.state, {
-		channelId,
-		claimedBy: userId,
-		messageTs
-	})) return;
+function buildSlackInteractionInput(args) {
 	const event = {
 		type: "message",
-		channel: channelId,
+		channel: args.channelId,
 		team: args.payload.team?.id,
-		text: formatUserInputAnswer(open.request, answer),
+		text: args.text,
 		thread_ts: args.threadTs,
 		ts: args.inputTs,
-		user: userId,
-		user_team: userTeam
+		user: args.userId,
+		user_team: args.payload.user?.team_id
 	};
 	const parsed = args.adapter.parseMessage(event);
-	const message = new Message({
+	return new Message({
 		attachments: parsed.attachments,
 		author: parsed.author,
 		formatted: parsed.formatted,
@@ -1766,127 +1753,278 @@ async function answerSlackUserInput(args) {
 		metadata: parsed.metadata,
 		raw: {
 			...event,
-			ts: messageTs
+			ts: args.messageTs
 		},
 		text: parsed.text,
 		threadId: parsed.threadId
 	});
+}
+// src/chat/ingress/slack-review-item.ts
+async function tellPerson(target, userId, text) {
+	await postSlackEphemeralMessage({
+		channelId: target.channelId,
+		text,
+		threadTs: target.threadTs,
+		userId
+	});
+}
+/**
+* Resolve the Junior User of the person who acted. An action starts a Turn
+* as that person, so it needs the same workspace and allowed domain checks
+* as a Slack mention.
+*/
+async function resolveActingUser(services, payload, target) {
+	const slackUserId = parseActorUserId(payload.user?.id);
+	const teamId = payload.team?.id ?? payload.user?.team_id;
+	if (!slackUserId || !teamId) throw new Error("Slack review item payload is missing a user or team");
+	if (!await isSlackWorkspaceMember({
+		user: slackUserId,
+		user_team: payload.user?.team_id
+	}, services.state) || !await services.isAuthorAllowed(slackUserId)) return;
+	const user = (await readActorIdentity(createSlackActor(teamId, slackUserId, void 0)))?.user;
+	if (!user) {
+		await tellPerson(target, slackUserId, "Junior does not know your account yet. Sign in to the Junior dashboard, then try again.");
+		return;
+	}
+	return {
+		slackUserId,
+		user
+	};
+}
+/** Show the current state of an item, such as after a click on a stale card. */
+async function refreshCards(services, user, itemId) {
+	const item = await readReviewItemForUser(user, itemId).catch(() => void 0);
+	if (!item) return;
+	await syncReviewItemSlackCards({
+		getSlackAdapter: () => services.adapter,
+		itemId: item.id
+	});
+}
+/**
+* Do one person action from a Slack card. The thread of the card gets the
+* action as Slack input from the person, like a typed reply. The other
+* linked Conversations get messages from
+* `actOnReviewItem`. An expected failure, such as an item that is already
+* closed, goes to the person as an ephemeral message.
+*/
+async function act(args) {
+	const { services, target } = args;
+	const actor = await resolveActingUser(services, args.payload, target);
+	if (!actor) return;
+	const conversationId = await readSlackReviewItemCardConversationId({
+		...target,
+		itemId: args.itemId
+	}) ?? `slack:${target.channelId}:${target.threadTs}`;
+	const delivery = {
+		queue: services.queue,
+		show: createSlackReviewItemShow(() => services.adapter)
+	};
+	let item;
 	try {
-		await args.persistMessage(message);
+		const current = await readReviewItemForUser(actor.user, args.itemId);
+		item = await actOnReviewItem({
+			action: args.action,
+			exceptConversationId: conversationId,
+			firstCloseOnly: true,
+			delivery,
+			id: current.id,
+			user: actor.user,
+			...args.answer ? { answer: args.answer(current) } : void 0
+		});
 	} catch (error) {
-		await releaseSlackUserInput(args.state, {
-			channelId,
-			messageTs
+		if (!(error instanceof ReviewItemActionError)) throw error;
+		await tellPerson(target, actor.slackUserId, error.message);
+		await refreshCards(services, actor.user, args.itemId);
+		return;
+	}
+	if (!item.conversationIds.includes(conversationId)) return;
+	const change = reviewItemChange(args.action, actor.user);
+	try {
+		await services.persistMessage(buildSlackInteractionInput({
+			adapter: services.adapter,
+			channelId: target.channelId,
+			inputTs: args.inputTs,
+			messageId: args.messageId,
+			messageTs: target.messageTs,
+			payload: args.payload,
+			text: renderReviewItemMessage(item, change),
+			threadTs: target.threadTs,
+			userId: actor.slackUserId
+		}));
+	} catch (error) {
+		logException(error, "review_item.slack_input.persist.failed", { "app.review_item.id": item.id });
+		await deliverReviewItemChange({
+			change,
+			delivery,
+			item,
+			nowMs: Date.now()
 		});
-		throw error;
 	}
-	await closeSlackUserInput({
-		note: slackUserInputAnswerNote({
-			answer,
-			request: open.request,
-			userId
-		}),
-		open
-	});
 }
-/** Read the request message and thread of a block action. */
-function blockActionTarget(payload) {
+function cardTarget(payload) {
 	const channelId = parseSlackChannelId(payload.channel?.id);
 	const messageTs = parseSlackMessageTs(payload.message?.ts);
-	if (!channelId || !messageTs) throw new Error("Slack user input payload is incomplete");
+	if (!channelId || !messageTs) throw new Error("Slack review item payload is incomplete");
 	return {
 		channelId,
 		messageTs,
 		threadTs: parseSlackMessageTs(payload.message?.thread_ts) ?? messageTs
 	};
 }
-/** Answer a one-click request with the clicked choice. */
-async function handleUserInputChoice(args) {
-	const target = blockActionTarget(args.payload);
-	const actionTs = parseSlackMessageTs(args.action.action_ts);
-	const choice = args.action.value?.trim();
-	if (!actionTs || !choice) throw new Error("Slack user input click payload is incomplete");
-	await answerSlackUserInput({
+async function openAnswerForm(args) {
+	const { target } = args;
+	const triggerId = args.payload.trigger_id;
+	if (!triggerId) throw new Error("Slack review item form payload is missing a trigger id");
+	const actor = await resolveActingUser(args.services, args.payload, target);
+	if (!actor) return;
+	let item;
+	try {
+		item = await readReviewItemForUser(actor.user, args.itemId);
+	} catch (error) {
+		if (!(error instanceof ReviewItemActionError)) throw error;
+		await tellPerson(target, actor.slackUserId, error.message);
+		return;
+	}
+	if (!canActOnReviewItem(item, actor.user.id)) {
+		await tellPerson(target, actor.slackUserId, item.status === "open" ? "Only an assignee can act on this item." : "This item is already closed.");
+		await refreshCards(args.services, actor.user, item.id);
+		return;
+	}
+	const view = buildSlackReviewItemModal(item, {
 		...target,
-		adapter: args.adapter,
-		answer: (open) => {
-			const field = buttonUserInputField(open.request);
-			return normalizeUserInputAnswer(open.request, {
-				requestId: open.requestId,
-				values: field ? { [field.id]: [choice] } : {}
-			});
-		},
-		inputTs: actionTs,
-		messageId: `slack-user-input-answer:${actionTs}`,
-		payload: args.payload,
-		isAuthorAllowed: args.isAuthorAllowed,
-		persistMessage: args.persistMessage,
-		state: args.state
+		itemId: item.id
 	});
-}
-/** Open the answer form of the open request for the person who clicked. */
-async function handleUserInputOpenForm(args) {
-	const target = blockActionTarget(args.payload);
-	const triggerId = args.payload.trigger_id;
-	if (!triggerId) throw new Error("Slack user input form payload is missing a trigger id");
-	const open = await getOpenSlackUserInput(args.state, target);
-	if (!open || open.messageTs !== target.messageTs) return;
+	if (!view) return;
 	await openSlackModal({
 		triggerId,
-		view: buildSlackUserInputModal(open.request, target)
+		view
+	});
+}
+/** Handle one click on a Review item card. */
+async function handleSlackReviewItemClick(args) {
+	const { click, payload, services } = args;
+	const target = cardTarget(payload);
+	if (click.kind === "answer") {
+		await openAnswerForm({
+			itemId: click.itemId,
+			payload,
+			services,
+			target
+		});
+		return;
+	}
+	const actionTs = parseSlackMessageTs(args.action.action_ts);
+	if (!actionTs) throw new Error("Slack review item click payload is incomplete");
+	const common = {
+		inputTs: actionTs,
+		itemId: click.itemId,
+		messageId: `slack-review-item:${actionTs}`,
+		payload,
+		services,
+		target
+	};
+	if (click.kind === "done") {
+		await act({
+			...common,
+			action: "complete"
+		});
+		return;
+	}
+	if (click.kind === "dismiss") {
+		await act({
+			...common,
+			action: "dismiss"
+		});
+		return;
+	}
+	await act({
+		...common,
+		action: "submit",
+		answer: (item) => {
+			const field = item.request && buttonUserInputField(item.request);
+			if (!field?.options.some((option) => option.label === click.label)) throw new ReviewItemActionError("conflict", "This card changed. Use the updated card.");
+			return {
+				requestId: item.id,
+				values: { [field.id]: [click.label] }
+			};
+		}
 	});
 }
-/** Answer a request with the values of its submitted form. */
-async function handleUserInputSubmission(args) {
+/** Submit the answer of a Review item form. */
+async function handleSlackReviewItemSubmission(args) {
 	const view = args.payload.view;
-	const formTarget = parseSlackUserInputFormTarget(view?.private_metadata);
+	const formTarget = parseSlackReviewItemFormTarget(view?.private_metadata);
 	const channelId = parseSlackChannelId(formTarget?.channelId);
 	const messageTs = parseSlackMessageTs(formTarget?.messageTs);
 	const threadTs = parseSlackMessageTs(formTarget?.threadTs);
-	if (!view?.id || !channelId || !messageTs || !threadTs) throw new Error("Slack user input form submission is incomplete");
-	const inputTs = slackMessageTsFromMs(Date.now());
-	await answerSlackUserInput({
-		adapter: args.adapter,
-		answer: (open) => parseSlackUserInputSubmission({
-			request: open.request,
-			requestId: open.requestId,
+	if (!view?.id || !formTarget || !channelId || !messageTs || !threadTs) throw new Error("Slack review item form submission is incomplete");
+	await act({
+		action: "submit",
+		answer: (item) => item.request ? parseSlackUserInputSubmission({
+			request: item.request,
+			requestId: item.id,
 			values: view.state?.values ?? {}
-		}),
-		channelId,
-		inputTs,
-		messageId: `slack-user-input-answer:${view.id}`,
-		messageTs,
+		}) : {
+			requestId: item.id,
+			values: {}
+		},
+		inputTs: slackMessageTsFromMs(Date.now()),
+		itemId: formTarget.itemId,
+		messageId: `slack-review-item:${view.id}`,
 		payload: args.payload,
-		isAuthorAllowed: args.isAuthorAllowed,
-		persistMessage: args.persistMessage,
-		state: args.state,
-		threadTs
+		services: args.services,
+		target: {
+			channelId,
+			messageTs,
+			threadTs
+		}
+	});
+}
+// src/chat/ingress/slack-interactive.ts
+function requireSlackPayloadUserId(value, source) {
+	const userId = parseActorUserId(value);
+	if (!userId) throw new Error(`${source} is missing a Slack user id`);
+	return userId;
+}
+async function handleAppHomeDisconnect(args) {
+	await withSpan("chat.app_home_disconnect", "chat.app_home_disconnect", { userId: args.userId }, async () => {
+		try {
+			await unlinkProvider(args.userId, args.provider, args.userTokenStore, getWorkspaceTeamId());
+		} catch (error) {
+			logException(error, "app_home.disconnect_unlink.failed", { "app.credential.provider": args.provider });
+		}
+		try {
+			await publishAppHomeView(getSlackClient(), args.userId, args.userTokenStore);
+		} catch (error) {
+			logException(error, "app_home.disconnect_publish.failed", { "app.credential.provider": args.provider });
+		}
 	});
 }
 /**
-* Handle Slack interactions from App Home and from user input requests:
-* block actions and submitted user input forms.
+* Handle Slack interactions from App Home and Review item cards: block
+* actions and submitted forms.
 */
 async function handleSlackInteractivePayload(args) {
 	const spanAttributes = { userId: args.payload.user?.id?.trim() || void 0 };
-	if (args.payload.type === "view_submission" && args.payload.view?.callback_id === "junior_user_input") {
-		await withSpan("chat.slack_user_input_submit", "chat.slack_user_input_submit", spanAttributes, () => handleUserInputSubmission(args));
+	if (args.payload.type === "view_submission" && args.payload.view?.callback_id === "junior_review_item") {
+		await withSpan("chat.slack_review_item_submit", "chat.slack_review_item_submit", spanAttributes, () => handleSlackReviewItemSubmission({
+			payload: args.payload,
+			services: args
+		}));
 		return;
 	}
 	if (args.payload.type !== "block_actions") return;
 	for (const action of args.payload.actions ?? []) {
-		const kind = slackUserInputAction(action.action_id);
-		if (kind === "choice") {
-			await withSpan("chat.slack_user_input_click", "chat.slack_user_input_click", spanAttributes, () => handleUserInputChoice({
-				...args,
-				action
+		const click = parseSlackReviewItemClick(action);
+		if (click) {
+			await withSpan("chat.slack_review_item_click", "chat.slack_review_item_click", spanAttributes, () => handleSlackReviewItemClick({
+				action,
+				click,
+				payload: args.payload,
+				services: args
 			}));
 			return;
 		}
-		if (kind === "open_form") {
-			await withSpan("chat.slack_user_input_open_form", "chat.slack_user_input_open_form", spanAttributes, () => handleUserInputOpenForm(args));
-			return;
-		}
 	}
 	const disconnect = args.payload.actions?.find((candidate) => candidate.action_id === "app_home_disconnect");
 	const provider = disconnect?.selected_option?.value ?? disconnect?.value;
@@ -1931,6 +2069,7 @@ async function handleSlackForm(args) {
 			payload,
 			isAuthorAllowed: (userId) => args.isAuthorAllowed(userId, installation),
 			persistMessage: (message) => args.persistMessage(message, installation),
+			queue: args.queue,
 			state,
 			userTokenStore: args.getUserTokenStore()
 		})
@@ -2387,6 +2526,17 @@ async function buildThread(args) {
 function shouldIgnoreMessage(message) {
 	return message.author.isMe === true || !parseActorUserId(message.author.userId);
 }
+/**
+* Resolve the Slack author Identity at ingress and bind its id to the message.
+* Ingress does no profile lookup. The worker adds the profile names later.
+* Bot authors wait for their own bot Identity, so they get no id here.
+*/
+async function bindSlackAuthorIdentity(message, installation) {
+	const teamId = installation.teamId;
+	const userId = parseActorUserId(message.author.userId);
+	if (!teamId || !userId || message.author.isBot === true) return;
+	bindMessageAuthorIdentityId(message, await resolveActorIdentityId(getSqlExecutor(), createSlackActor(teamId, userId, null)));
+}
 function shouldPersistBeforeAck(body) {
 	return body.event?.type === "app_mention" || body.event?.type === "message";
 }
@@ -2485,6 +2635,7 @@ async function handleSlackThreadStop(args) {
 		conversationId,
 		state: args.state
 	});
+	await bindSlackAuthorIdentity(args.message, args.installation);
 	const content = parseContent(args.message);
 	const conversation = coerceThreadConversationState(void 0);
 	recordSkippedConversationMessage({
@@ -2495,7 +2646,7 @@ async function handleSlackThreadStop(args) {
 	});
 	await appendConversationMessages(getConversationEventStore(), {
 		conversation,
-		conversationId: args.canonicalThreadId
+		conversationId
 	});
 	await thread.post(THREAD_OPTOUT_ACK);
 }
@@ -2591,13 +2742,20 @@ async function routeParsedMessage(args) {
 		});
 		return;
 	}
-	if (route === "mention" && !await isSlackAuthorDomainAllowed({
+	const isAuthorDomainAllowed = () => isSlackAuthorDomainAllowed({
 		allowedBotUserIds: args.allowedBotUserIds,
 		allowedDomains: args.allowedDomains,
 		state: args.state,
 		teamId: args.installation.teamId,
 		user: args.event.user
-	})) return;
+	});
+	if (route === "mention" && !await isAuthorDomainAllowed()) return;
+	await bindSlackAuthorIdentity(message, args.installation);
+	const conversationId = await resolveSlackConversationId({
+		canonicalThreadId,
+		conversationStore: args.conversationStore,
+		installation: args.installation
+	});
 	if (isSubscribed && !isExperimentalFeatureEnabled("passive-routing")) {
 		const content = parseContent(message);
 		const conversation = coerceThreadConversationState(void 0);
@@ -2609,15 +2767,10 @@ async function routeParsedMessage(args) {
 		});
 		await appendConversationMessages(getConversationEventStore(), {
 			conversation,
-			conversationId: canonicalThreadId
+			conversationId
 		});
 		return;
 	}
-	const conversationId = await resolveSlackConversationId({
-		canonicalThreadId,
-		conversationStore: args.conversationStore,
-		installation: args.installation
-	});
 	const persist = () => persistSlackMessage({
 		adapter: args.adapter,
 		installation: args.installation,
@@ -2629,22 +2782,34 @@ async function routeParsedMessage(args) {
 		route,
 		state: args.state
 	});
-	if (route !== "mention") {
+	const closeAnswered = async () => {
+		if (message.author.isBot === true) return;
+		await closeReviewItemsAnsweredByReply({
+			...route === "subscribed" ? { canAnswer: isAuthorDomainAllowed } : void 0,
+			conversationId,
+			delivery: {
+				queue: args.queue,
+				show: createSlackReviewItemShow(() => args.adapter)
+			},
+			resolveUser: async () => {
+				const teamId = args.installation.teamId;
+				const userId = parseActorUserId(message.author.userId);
+				if (!teamId || !userId) return void 0;
+				return (await readActorIdentity(createSlackActor(teamId, userId, null)))?.user;
+			},
+			text: stripLeadingBotMention(parseContent(message).topLevelText, {
+				botUserId: args.adapter.botUserId,
+				stripLeadingSlackMentionToken: true
+			})
+		});
+	};
+	try {
 		await persist();
-		return;
+	} catch (error) {
+		if (error instanceof SlackEventPersistenceError && error.saved) await closeAnswered();
+		throw error;
 	}
-	await persistSlackUserInputReply({
-		channelId: args.event.channel,
-		claimedBy: message.author.userId,
-		isSaved: (error) => error instanceof SlackEventPersistenceError && error.saved,
-		note: (request) => slackUserInputAnswerNote({
-			request,
-			userId: message.author.userId
-		}),
-		persist,
-		state: args.state,
-		threadTs: args.event.thread_ts
-	});
+	await closeAnswered();
 }
 async function handleSlackEvent(args) {
 	const event = args.body.event;
@@ -2703,7 +2868,7 @@ async function handleSlackEvent(args) {
 				if (!await isSlackWorkspaceMember(event, state)) return;
 				const channelId = event.channel;
 				const threadTs = event.thread_ts;
-				if (!(await withLock$1(state, `slack:ingress:slack:${channelId}:${threadTs}`, () => handleSlackSessionStop({
+				if (!(await withLock(state, `slack:ingress:slack:${channelId}:${threadTs}`, () => handleSlackSessionStop({
 					adapter,
 					channelId,
 					conversationStore: args.services.conversationStore,
@@ -2722,7 +2887,7 @@ async function handleSlackEvent(args) {
 				setSpanAttributes({ "app.slack.membership": member ? "verified" : "unverified" });
 				if (!member) return;
 				const message = adapter.parseMessage(event);
-				if (!(await withLock$1(state, `slack:ingress:${normalizeMessageThreadId(message).threadId}`, () => routeParsedMessage({
+				if (!(await withLock(state, `slack:ingress:${normalizeMessageThreadId(message).threadId}`, () => routeParsedMessage({
 					adapter,
 					event,
 					installation,
@@ -2748,8 +2913,9 @@ async function handleSlackEvent(args) {
 */
 async function persistSlackMentionWithLock(args) {
 	const { message, threadId } = normalizeMessageThreadId(args.message);
+	await bindSlackAuthorIdentity(message, args.installation);
 	try {
-		if (!(await withLock$1(args.state, `slack:ingress:${threadId}`, () => persistSlackMessage({
+		if (!(await withLock(args.state, `slack:ingress:${threadId}`, () => persistSlackMessage({
 			adapter: args.adapter,
 			installation: args.installation,
 			message,
@@ -2799,6 +2965,7 @@ async function handleSlackWebhook(args) {
 				services: args.services,
 				state
 			}),
+			queue: args.services.queue,
 			state,
 			waitUntil: args.waitUntil
 		});
@@ -3280,35 +3447,6 @@ function resolvePublicOrigin(request, configured) {
 	url.hash = "";
 	return url;
 }
-// src/api/acp/state.ts
-const MUTATION_LOCK_TTL_MS = 1e4;
-/** Run one ACP state mutation while its shared lock remains owned. */
-async function withLock(state, key, run, options = {}) {
-	const ttlMs = options.ttlMs ?? 1e4;
-	const startedAtMs = Date.now();
-	let lock;
-	while (true) {
-		lock = await state.acquireLock(key, ttlMs);
-		if (lock) break;
-		if (Date.now() - startedAtMs >= (options.waitMs ?? 0)) return { acquired: false };
-		await setTimeout$1(options.retryMs ?? 25, void 0, { ref: false });
-	}
-	const heartbeat = options.keepAlive ? setInterval(() => void state.extendLock(lock, ttlMs).catch(() => void 0), Math.floor(ttlMs / 3)) : void 0;
-	heartbeat?.unref();
-	try {
-		return {
-			acquired: true,
-			value: await run(lock)
-		};
-	} finally {
-		if (heartbeat) clearInterval(heartbeat);
-		await state.releaseLock(lock);
-	}
-}
-/** Prove ACP lock ownership immediately before a blind state write. */
-async function fenceLock(state, lock, ttlMs = MUTATION_LOCK_TTL_MS) {
-	if (!await state.extendLock(lock, ttlMs)) throw new Error(`ACP lock ownership was lost before write for ${lock.threadId}`);
-}
 // src/api/acp/schema.ts
 /** Validate the ACP wire messages that Junior supports. */
 const ACP_SESSION_ID_PATTERN = /^local:acp:[a-f0-9]{32}$/;
@@ -6035,7 +6173,8 @@ function createBetterAuth(config) {
 			await recordGoogleSignIn(getSqlExecutor(), {
 				email,
 				subject: google.accountId,
-				displayName: created.user.name || void 0
+				displayName: created.user.name || void 0,
+				avatarUrl: parseAvatarUrl(created.user.image, GOOGLE_IDENTITY_PROVIDER)
 			});
 		}) }
 	});
@@ -6149,6 +6288,7 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		`${conversationsPath}/*`,
 		pagePath("locations"),
 		`${pagePath("locations")}/*`,
+		pagePath("review"),
 		peoplePath,
 		`${peoplePath}/*`,
 		pagePath("automations"),
@@ -6182,6 +6322,8 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		"/api/plugin-reports",
 		"/api/user-pages",
 		"/api/user-pages/*",
+		"/api/user-customization",
+		"/api/user-customization/*",
 		"/api/automations",
 		"/api/automations/*",
 		"/api/skills",
@@ -6196,6 +6338,8 @@ function dashboardHostRoutePaths(dashboard, authenticatedRoutes = []) {
 		"/api/locations/*",
 		"/api/people",
 		"/api/people/*",
+		"/api/review-items",
+		"/api/review-items/*",
 		"/api/personal-tokens",
 		"/api/personal-tokens/*",
 		"/api/service-accounts",
@@ -6429,7 +6573,10 @@ async function createApp(options) {
 			validatePluginRegistrations(configuredPlugins?.registrations ?? []);
 			validatePluginEgressCredentialHooks(configuredPlugins?.registrations ?? []);
 		}
-		pluginRoutes = getPluginRoutes({ events });
+		pluginRoutes = getPluginRoutes({
+			events,
+			showReviewItem: createSlackReviewItemShow(getProductionSlackAdapter)
+		});
 		if (dashboard && !dashboard.disabled) pluginApiRoutes = getPluginApiRoutes();
 	} catch (error) {
 		restoreRuntimeConfig$1();
@@ -6447,6 +6594,7 @@ async function createApp(options) {
 		attachmentStorage,
 		bindMessageAgent: (request) => bindMessageAgent(request, { queue: conversationWorkQueue }),
 		bindSpawnAgent: (request) => bindSpawnAgent(request, { queue: conversationWorkQueue }),
+		conversationWorkQueue,
 		tracePropagation
 	});
 	const runtimeServiceOverrides = {