@sentry/junior 0.268.0 → 0.270.0

package/dist/{app-z6Uuyq3j.d.ts → app-Bz8t4P8p.d.ts}

@@ -1,6 +1,6 @@
 import { n as ConversationWorkQueue, t as ConversationQueueMessage } from "./queue-C37RbDVc.js";
-import { t as ConversationStore } from "./store-xMuuXRE0.js";
-import "./history-BgI33Kie.js";
+import { t as ConversationStore } from "./db-BYOuu6v2.js";
+import "./schema-WayPSHFu.js";
 import { n as JuniorPluginSet } from "./plugins-B_0Cr0MO.js";
 import { Hono } from "hono";
 import "@earendil-works/pi-ai/compat";
@@ -8,12 +8,13 @@ import "@earendil-works/pi-ai/api/anthropic-messages";
 import "ai";
 import "@sentry/node";
 import { z } from "zod";
+import "drizzle-orm";
 import { Destination, OwnedObjectAnnotation, PluginRegistration, Source, User } from "@sentry/junior-plugin-api";
 import "@earendil-works/pi-agent-core";
 import "@earendil-works/pi-ai";
-import "@sinclair/typebox";
 import "@modelcontextprotocol/sdk/client/auth.js";
 import { Client } from "@modelcontextprotocol/sdk/client";
+import "@sinclair/typebox";
 import { Message, StateAdapter } from "chat";
 import "@chat-adapter/slack";
 declare const TURN_REASONING_LEVELS: readonly ["none", "low", "medium", "high", "xhigh"];
@@ -168,6 +169,11 @@ interface InboxAttempt {
   drain(handle: (messages: InboundMessage[]) => Promise<readonly string[] | void>, options?: {
     deferred?: boolean;
   }): Promise<InboundMessage[]>;
+  /**
+   * True when a failure of this attempt can end the work: the worker gives up
+   * and drops the mailbox. The adapter must record its own failure first.
+   * Resume attempts, which have no messages, can also be final.
+   */
   isFinalAttempt: boolean;
   messages: InboundMessage[];
 }

package/dist/app.d.ts

@@ -1,4 +1,4 @@
-import { a as ModelProfileInput, i as JuniorDashboardOptions, n as JuniorAppOptions, r as createApp, t as JuniorApp } from "./app-z6Uuyq3j.js";
+import { a as ModelProfileInput, i as JuniorDashboardOptions, n as JuniorAppOptions, r as createApp, t as JuniorApp } from "./app-Bz8t4P8p.js";
 import { i as defineJuniorPlugins, n as JuniorPluginSet, r as JuniorPluginSetOptions, t as JuniorPluginInput } from "./plugins-B_0Cr0MO.js";
 import { t as JUNIOR_VERSION } from "./version-Cc2OFd9G.js";
 export { JUNIOR_VERSION, JuniorApp, JuniorAppOptions, type JuniorDashboardOptions, type JuniorPluginInput, type JuniorPluginSet, type JuniorPluginSetOptions, type ModelProfileInput, createApp, defineJuniorPlugins };

package/dist/app.js

@@ -1,43 +1,44 @@
-import { $t as CONVERSATION_WORK_STALE_ENQUEUE_MS, C as automationVersionOf, I as eventGuidance, _n as isInvalidConversationRecordError, _r as setConfigDefaults, _t as settleConversationTitleWork, ar as getThreadStopDecision, b as admitEventAutomationRun, c as withScheduledAutomationLock, dr as setExperimentalFeatures, dt as appendConversationMessages, gr as getConfigDefaults, hn as hasRunnableConversationWork, i as readScheduledAutomation, l as blockEventAutomation, lr as getExperimentalFeatures, mt as projectConversationMessages, n as listScheduledAutomationsForTeam, nr as SubscribedReplyReason, o as saveScheduledAutomationInLock, p as findMatchingEventAutomations, s as scheduledRunId, u as collectEventAutomationMatchKeys, ur as isExperimentalFeatureEnabled, x as eventAutomationRunLimitReason } from "./tasks-SB9z-VTU.js";
-import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-DrTeF80T.js";
-import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-DLSpkSSr.js";
+import { B as readScheduledAutomation, G as blockEventAutomation, Gr as setExperimentalFeatures, H as saveScheduledAutomationInLock, Ir as SubscribedReplyReason, Jn as hasRunnableConversationWork, K as collectEventAutomationMatchKeys, M as recordAutomationExecution, Mn as CONVERSATION_WORK_STALE_ENQUEUE_MS, R as listScheduledAutomationsForTeam, S as existingConversationId, U as scheduledRunId, Ur as getExperimentalFeatures, W as withScheduledAutomationLock, Wr as isExperimentalFeatureEnabled, Wt as appendConversationMessages, Xn as isInvalidConversationRecordError, Xr as getConfigDefaults, Xt as settleConversationTitleWork, Y as findMatchingEventAutomations, Zr as setConfigDefaults, a as confirmDispatchMailboxAppend, b as notifyAutomationBlocked, f as getPluginDispatchProjection, ht as eventGuidance, it as automationVersionOf, m as listPendingDispatchMailboxAppends, nt as eventAutomationRunLimitReason, o as createOrGetDispatch, p as isTerminalDispatchStatus, qt as projectConversationMessages, r as buildDispatchId, s as getDispatchConversationId, tt as admitEventAutomationRun, u as getDispatchRecord, v as markDispatchFailed, zr as getThreadStopDecision } from "./turn-session-routing-B9KLBhaT.js";
+import { _ as snapshotRuntimeConfig, d as restoreRuntimeConfig, f as setBotModelConfig, g as setSlackReactionConfig, h as setRuntimeLimits, i as getChatConfig, m as setProfiles, n as botConfig, o as getSlackBotToken, p as setCrossActorMidRunMode, u as resetRuntimeConfig } from "./config-Dm3pWRqY.js";
+import { A as JUNIOR_PLUGIN_TASK_CALLBACK_ROUTE, E as withSpan, L as GOOGLE_IDENTITY_PROVIDER, N as JUNIOR_WORKSPACE_SNAPSHOT_JOB_CALLBACK_ROUTE, T as withLogContext, b as setSpanAttributes, h as logWarn, m as logInfo, p as logException, r as createRequestContext, w as withContext, z as normalizeIdentityEmail } from "./logging-C6EdT6PP.js";
 import { n as captureMessage } from "./sentry-MDkYAVPV.js";
-import { t as JUNIOR_VERSION } from "./version-jHwJp4hC.js";
+import { t as JUNIOR_VERSION } from "./version-CivPYmkH.js";
 import { f as parseSlackTeamId, g as slackMessageTsSchema, h as slackMessageTsFromMs, m as parseSlackMessageTs, n as createSlackActor, p as parseSlackUserId, s as parseActorUserId, u as parseSlackChannelId } from "./actor-CP9K2Idu.js";
-import { O as recordGoogleSignIn, _ as withConversationEventLock, b as withConversationMutationLock, d as getConversationEventStore, h as getSqlExecutor, i as readActorIdentity, l as closeDb, m as getDb, o as resolveViewerUser, p as getConversationStore } from "./viewer-CpXTGlep.js";
+import { C as getSqlExecutor, M as resolveActorIdentityId, O as withConversationMutationLock, R as recordGoogleSignIn, S as getDb, T as withConversationEventLock, _ as closeDb, g as createCache, i as readActorIdentity, l as resolveViewerUser, p as parseAvatarUrl, x as getConversationStore, y as getConversationEventStore } from "./viewer-BTgAfdUg.js";
 import { a as juniorAgentInvocations, d as juniorDestinations, i as juniorAgentBindings, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
-import { d as juniorAutomations, g as juniorConversationBriefs, l as juniorAutomationRuns, y as juniorConversationEvents } from "./executor-4vhvsMZJ.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-BD9GSpc6.js";
-import { C as getOpenSlackUserInput, Ct as requestAttachmentDeletion, Dt as recordSubagentEnded, E as parseSlackThreadId, Et as stopConversationSession, G as parseSlackReviewItemClick, H as syncReviewItemSlackCards, J as buildSlackUserInputModal, K as parseSlackReviewItemFormTarget, N as logScheduledAutomationRunSkipped, Nt as processWorkspaceSnapshotJob, P as scheduledAutomationRunAttributes, Pt as ingestEvent, Q as slackUserInputAnswerNote, R as effectiveTaskOutcomes, S as closeSlackUserInput, T as releaseSlackUserInput, V as readSlackReviewItemCardConversationId, W as buildSlackReviewItemModal, X as parseSlackUserInputSubmission, Y as parseSlackUserInputFormTarget, Z as slackUserInputAction, _ as unpublishedArtifactHeaders, _t as recordWebConversationActivity, dt as sendReviewItemMessages, et as runWithSlackInstallation, g as readPublicArtifact, h as publicArtifactHeaders, mt as conversationTurnIdForMessage, n as executeAgentRun, pt as appendAndEnqueueWebMessage, t as createAgentRunner, tt as verifySlackSignature, ut as renderReviewItemMessage, v as lookupSlackUserProfile, vt as webActorFromEmail, w as persistSlackUserInputReply, x as claimSlackUserInput, xt as collectAttachmentGarbage } from "./agent-runner-CAYfFmU7.js";
-import { $ as openSlackModal, I as isVercelSandboxEgressRequest, In as createPluginLogger, Jt as bindScheduledAutomationCredentialSubject, Kt as takeDueTimerWatches, L as proxyVercelSandboxEgressRequest, Ln as readConversationAccessFromSql, Nn as createPluginState, Qt as verifySlackDirectCredentialSubject, Tt as normalizeSandboxEgressTracePropagationDomains, Ut as findMatchingWatches, V as resolveBaseUrl, Xt as verifyEventAutomationCredentialSubject, Yt as bindSlackDirectCredentialSubject, Zt as verifyScheduledAutomationCredentialSubject, _n as getDashboardTaskLink, _t as consumeSandboxEgressPermissionDeniedSignal, at as slackEntitySchema, c as getPluginRoutes, cr as createPluginCache, dn as getWorkspaceTeamId, er as resolveRootVisibility, et as postSlackEphemeralMessage, fn as runWithWorkspaceTeamId, gt as consumeSandboxEgressAuthRequiredSignal, h as validatePlugins, ht as clearSandboxEgressSignals, in as getSlackClient, lr as createCache, m as setPlugins, mn as getDashboardConversationLink, n as createUserTokenStore, on as isDmChannel, ot as slackExternalRefIdSchema, p as getPlugins, q as slackMention, qt as bindEventAutomationCredentialSubject, rr as listConversationAnnotations, s as getPluginApiRoutes, v as setBriefsConfig, vn as setDashboardConversationLinkOptions, yt as parseSandboxEgressCredentialToken, zt as collectEventMatchKeys } from "./credentialed-lukuD-cc.js";
-import { a as MUTATION_LOCK_TTL_MS, c as withLock, i as getStateAdapter, s as fenceLock, t as disconnectStateAdapter } from "./adapter-04AcD2SO.js";
+import { c as juniorReviewItems, d as juniorAutomations, g as juniorConversationBriefs, l as juniorAutomationRuns, y as juniorConversationEvents } from "./executor-BB6eJkD4.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-Bdym_wKy.js";
+import { A as verifySlackSignature, C as syncReviewItemSlackCards, Ct as processWorkspaceSnapshotJob, D as parseSlackReviewItemFormTarget, E as parseSlackReviewItemClick, J as readViewerAutomationSummary, L as logScheduledAutomationRunSkipped, O as parseSlackUserInputSubmission, Q as effectiveTaskOutcomes, R as scheduledAutomationRunAttributes, S as readSlackReviewItemCardConversationId, T as buildSlackReviewItemModal, _ as unpublishedArtifactHeaders, _t as recordSubagentEnded, ct as webActorFromEmail, dt as collectAttachmentGarbage, et as deliverReviewItemChange, g as readPublicArtifact, gt as stopConversationSession, h as publicArtifactHeaders, it as conversationTurnIdForMessage, j as parseSlackThreadId, k as runWithSlackInstallation, n as executeAgentRun, pt as requestAttachmentDeletion, rt as appendAndEnqueueWebMessage, st as recordWebConversationActivity, t as createAgentRunner, tt as renderReviewItemMessage, v as lookupSlackUserProfile, wt as ingestEvent, x as createSlackReviewItemShow } from "./agent-runner-MSQSMFkq.js";
+import { At as slackEntitySchema, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, Cr as resolveRootVisibility, Dn as getSlackClient, Er as listConversationAnnotations, Fn as runWithWorkspaceTeamId, Ht as consumeSandboxEgressPermissionDeniedSignal, Ln as getDashboardConversationLink, M as canActOnReviewItem, Pn as getWorkspaceTeamId, S as dismissOpenReviewItems, Tt as postSlackEphemeralMessage, Vn as setDashboardConversationLinkOptions, Vt as consumeSandboxEgressAuthRequiredSignal, Wt as parseSandboxEgressCredentialToken, Xt as normalizeSandboxEgressTracePropagationDomains, _n as bindScheduledAutomationCredentialSubject, ar as createPluginLogger, bn as verifyScheduledAutomationCredentialSubject, c as getPluginRoutes, cn as collectEventMatchKeys, ct as proxyVercelSandboxEgressRequest, fn as findMatchingWatches, ft as resolveBaseUrl, gn as bindEventAutomationCredentialSubject, h as validatePlugins, hn as takeDueTimerWatches, jr as createPluginCache, jt as slackExternalRefIdSchema, kn as isDmChannel, m as setPlugins, n as createUserTokenStore, nr as createPluginState, or as readConversationAccessFromSql, p as getPlugins, rr as createPluginEmbedder, s as getPluginApiRoutes, st as isVercelSandboxEgressRequest, v as setBriefsConfig, vn as bindSlackDirectCredentialSubject, vt as slackMention, wt as openSlackModal, xn as verifySlackDirectCredentialSubject, yn as verifyEventAutomationCredentialSubject } from "./credentialed-BeBaJMZ_.js";
+import { a as withLock, i as fenceLock, n as MUTATION_LOCK_TTL_MS } from "./locks-D-0h111u.js";
+import { r as getStateAdapter, t as disconnectStateAdapter } from "./adapter-BQNTKVTF.js";
 import { n as getNextRunAtMs } from "./cadence-R7Em4RjE.js";
-import { D as conversationSurfaceSchema, I as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-DSo310Ps.js";
-import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-C5PN02QO.js";
-import { E as renderSlackObjectCard, S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-Dam1EI7B.js";
-import { a as isEmptyUserInputAnswer, i as formatUserInputAnswer, o as normalizeUserInputAnswer, r as buttonUserInputField } from "./web-message-id-DlHNANtd.js";
-import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-Cpa4Bu1O.js";
-import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-In9QKz-I.js";
-import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-zPEoJPBB.js";
-import { D as scheduledRunSchema } from "./automation-CmeFBSEh.js";
-import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation--JsAGLwc.js";
+import { D as conversationSurfaceSchema, I as annotationCard, T as conversationReportStatusSchema, h as conversationFeedQuerySchema } from "./conversation-AhOVzN_k.js";
+import { b as listPendingAgentInvocationMailboxAppends, x as listPendingAgentInvocationResults } from "./store-Byarin7b.js";
+import { E as renderSlackObjectCard, S as renderTaskInput, d as getEventCatalog, f as SLACK_EVENT_NAMESPACE, g as slackChannelMessageRunsAutomation, h as slackChannelMessageReplyThreadTs, m as slackChannelMessageEvent } from "./session-stop-MZRgYqYH.js";
+import { h as buttonUserInputField } from "./reporting-window-DRCi1Ls_.js";
+import { c as setSandboxResourceConfig, o as getSandboxResourceConfig } from "./resolve-BkAA1wH7.js";
+import { a as getVercelConversationWorkQueue, d as getQueueProvider, g as isConversationQueueMessageRejectedError, h as conversationQueueMessageSchema, i as verifyWorkspaceSnapshotJobMessage, o as resolveConversationWorkQueueTopic, s as verifyConversationQueueMessage, t as WORKSPACE_SNAPSHOT_JOB_QUEUE_TOPIC } from "./job-queue-DiaXoSDg.js";
+import { S as removeActiveConversation, _ as hasRunnableConversationWork$1, c as clearExpiredConversationLease, g as getConversationWorkState, h as getConversation, m as ensureConversationWake, r as appendAndEnqueueInboundMessage, v as listActiveConversationIds } from "./store-BeWGgaMA.js";
+import { M as scheduledRunSchema } from "./automation-Dwh_xcqM.js";
+import { n as validatePluginRegistrations, t as validatePluginEgressCredentialHooks } from "./validation-BW60Vtx_.js";
 import { a as pluginRuntimeRegistrationsFromPluginSet, n as pluginCatalogConfigFromEnv, r as pluginCatalogConfigFromPluginSet, t as defineJuniorPlugins } from "./plugins-DOm9Y6qI.js";
-import { A as assertNoLegacyAllowedDomains, B as normalizeIncomingSlackThreadId, E as readViewerAutomationSummary, F as recordSkippedConversationMessage, G as parseContent, H as stopConversationTurn, I as buildSlackInboundMessage, J as canActOnReviewItem, K as ReviewItemActionError, L as clearSlackPendingReactions, M as isAllowedSignInEmail, N as readEnvList, P as resolveAllowedDomains, Q as getAttachmentStorage, R as isSlackMessageStopped, U as THREAD_OPTOUT_ACK, V as withNormalizedThreadId, W as startProcessingReaction, X as readReviewItemForUser, Z as reviewItemChange, _ as createProductionConversationWorkOptions, b as createSlackWebApiStatusSender, et as enqueueAgentDispatch, j as isAllowedDomain, q as actOnReviewItem, t as readConversationFeed, tt as GET$3, v as createProductionSlackWebhookServices, y as getProductionSlackAdapter, z as stopSlackThread } from "./list-BkgnXEEB.js";
-import { C as existingConversationId, N as recordAutomationExecution, c as getDispatchConversationId, d as getDispatchRecord, h as listPendingDispatchMailboxAppends, i as buildDispatchId, m as isTerminalDispatchStatus, o as confirmDispatchMailboxAppend, p as getPluginDispatchProjection, s as createOrGetDispatch, t as processPluginTask, x as notifyAutomationBlocked, y as markDispatchFailed } from "./task-runner-DMI2prDO.js";
-import { o as getAuthPausedConversationTurnId, t as enqueueAgentInvocationResult } from "./result-D3TSmZZ8.js";
-import { r as enqueueAgentInvocation } from "./work-3N-GHY9m.js";
-import { o as coerceThreadConversationState } from "./thread-state-BbbPh0Sn.js";
-import { o as unlinkProvider } from "./connections-D46f8vvi.js";
-import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-sm9fegLY.js";
-import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-_mf28dSu.js";
-import { t as processConversationWork } from "./worker-CCdbcItd.js";
-import { t as bindMessageAgent } from "./message-BObyg59s.js";
-import { t as bindSpawnAgent } from "./spawn-cmq9p4Ly.js";
+import { A as stopSlackThread, B as actOnReviewItem, C as isAllowedSignInEmail, D as buildSlackInboundMessage, E as recordSkippedConversationMessage, F as bindMessageAuthorIdentityId, H as readReviewItemForUser, I as startProcessingReaction, K as enqueueAgentDispatch, L as stripLeadingBotMention, M as withNormalizedThreadId, N as stopConversationTurn, O as clearSlackPendingReactions, P as THREAD_OPTOUT_ACK, R as parseContent, S as isAllowedDomain, T as resolveAllowedDomains, U as reviewItemChange, V as closeReviewItemsAnsweredByReply, W as getAttachmentStorage, _ as createProductionConversationWorkOptions, b as createSlackWebApiStatusSender, j as normalizeIncomingSlackThreadId, k as isSlackMessageStopped, q as GET$3, t as readConversationFeed, v as createProductionSlackWebhookServices, w as readEnvList, x as assertNoLegacyAllowedDomains, y as getProductionSlackAdapter, z as ReviewItemActionError } from "./list-BTDRxkOg.js";
+import { n as enqueueAgentInvocationResult, o as getAuthPausedConversationTurnId } from "./result-9TJTpuYP.js";
+import { r as enqueueAgentInvocation } from "./work-Bjm52fHo.js";
+import { o as coerceThreadConversationState } from "./thread-state-BHBLMvgb.js";
+import { o as unlinkProvider } from "./connections-0BBhiD-p.js";
+import { a as GET$4, i as publishAppHomeView, r as GET$5, t as receiveLocalOAuthCredential } from "./credential-sync-BRiWYs6_.js";
+import { a as pluginTaskQueueConsumer, c as queueCallback, n as createVercelPluginTaskCallback, o as registerVercelPluginTaskDevConsumer } from "./task-queue-Dt1_ZoI_.js";
+import { t as processConversationWork } from "./worker-CMbgtHLu.js";
+import { t as bindMessageAgent } from "./message-DsjiWRVg.js";
+import { t as bindSpawnAgent } from "./spawn-DmtlcAT_.js";
+import { t as processPluginTask } from "./task-runner-DyKqAPpm.js";
 import { createRequire } from "node:module";
 import { Hono } from "hono";
 import { z } from "zod";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
-import { and, asc, eq, inArray, isNotNull, isNull, lte, or, sql } from "drizzle-orm";
+import { and, asc, eq, inArray, isNotNull, isNull, lte, ne, or, sql } from "drizzle-orm";
 import { EVENT_SUMMARY_MAX_LENGTH, EVENT_TEXT_MAX_LENGTH, dispatchOptionsSchema, eventSchema, eventTriggerFiltersText, isSlackDestination, userSchema } from "@sentry/junior-plugin-api";
 import { pathToFileURL } from "node:url";
 import net from "node:net";
@@ -269,6 +270,7 @@ function createHeartbeatContext(args) {
 		cache: createPluginCache(pluginName),
 		nowMs: args.nowMs,
 		db: getDb(),
+		embedder: createPluginEmbedder(pluginName),
 		state: createPluginState(pluginName),
 		log: createPluginLogger(pluginName),
 		agent: {
@@ -1226,6 +1228,12 @@ async function selectExpiredRoots(executor, args) {
         where bindings.parent_conversation_id = tree.conversation_id
            or bindings.child_conversation_id = tree.conversation_id
       )
+      or exists (
+        select 1 from junior_review_items review_items
+        where review_items.added_by_conversation_id = tree.conversation_id
+          and review_items.status = 'open'
+          and review_items.automation_id is null
+      )
       or (
         ${juniorDestinations.visibility} is distinct from 'public'
         and (
@@ -1233,6 +1241,15 @@ async function selectExpiredRoots(executor, args) {
             select 1 from junior_conversation_briefs briefs
             where briefs.conversation_id = tree.conversation_id
           )
+          or exists (
+            select 1 from junior_review_items review_items
+            where review_items.added_by_conversation_id = tree.conversation_id
+              and review_items.visibility = 'private'
+              and (
+                review_items.status <> 'open'
+                or review_items.automation_id is null
+              )
+          )
           or exists (
             select 1 from junior_conversations metadata
             where metadata.conversation_id = tree.conversation_id
@@ -1258,7 +1275,9 @@ async function selectExpiredRoots(executor, args) {
 * event rows for the given conversation and every descendant, stamp
 * `transcript_purged_at`, and — for non-public content — null the raw-payload
 * metadata (`title`, `channel_name`, legacy actor JSON) so purged private
-* conversations keep only safe metadata. The metadata rows themselves survive.
+* conversations keep only safe metadata. Non-public content also loses its
+* Briefs and the Review items that it added. The metadata rows themselves
+* survive.
 */
 async function purgeConversationTree(executor, args) {
 	return await withConversationMutationLock(executor, args.rootConversationId, async () => {
@@ -1303,9 +1322,17 @@ async function purgeConversationTree(executor, args) {
 			await executor.db().delete(juniorConversationEvents).where(inArray(juniorConversationEvents.conversationId, ids));
 			await executor.db().delete(juniorAgentInvocations).where(or(inArray(juniorAgentInvocations.parentConversationId, ids), inArray(juniorAgentInvocations.childConversationId, ids)));
 			await executor.db().delete(juniorAgentBindings).where(or(inArray(juniorAgentBindings.parentConversationId, ids), inArray(juniorAgentBindings.childConversationId, ids)));
+			await dismissOpenReviewItems(executor.db(), {
+				addedByConversationIds: ids,
+				nowMs: args.nowMs,
+				reason: "Conversation purged"
+			});
 			await requestAttachmentDeletion(executor, ids, args.nowMs);
 			const scrubMetadata = args.retention ? !isPublic : resolvedScrubMetadata;
-			if (scrubMetadata) await executor.db().delete(juniorConversationBriefs).where(inArray(juniorConversationBriefs.conversationId, ids));
+			if (scrubMetadata) {
+				await executor.db().delete(juniorConversationBriefs).where(inArray(juniorConversationBriefs.conversationId, ids));
+				await executor.db().delete(juniorReviewItems).where(and(inArray(juniorReviewItems.addedByConversationId, ids), eq(juniorReviewItems.visibility, "private"), or(ne(juniorReviewItems.status, "open"), isNull(juniorReviewItems.automationId))));
+			}
 			await executor.db().update(juniorConversations).set({
 				transcriptPurgedAt: new Date(args.nowMs),
 				...scrubMetadata ? {
@@ -1776,8 +1803,8 @@ async function refreshCards(services, user, itemId) {
 }
 /**
 * Do one person action from a Slack card. The thread of the card gets the
-* action as Slack input from the person, like an answer to
-* `requestUserInput`. The other linked Conversations get messages from
+* action as Slack input from the person, like a typed reply. The other
+* linked Conversations get messages from
 * `actOnReviewItem`. An expected failure, such as an item that is already
 * closed, goes to the person as an ephemeral message.
 */
@@ -1789,6 +1816,10 @@ async function act(args) {
 		...target,
 		itemId: args.itemId
 	}) ?? `slack:${target.channelId}:${target.threadTs}`;
+	const delivery = {
+		queue: services.queue,
+		show: createSlackReviewItemShow(() => services.adapter)
+	};
 	let item;
 	try {
 		const current = await readReviewItemForUser(actor.user, args.itemId);
@@ -1796,9 +1827,8 @@ async function act(args) {
 			action: args.action,
 			exceptConversationId: conversationId,
 			firstCloseOnly: true,
-			getSlackAdapter: () => services.adapter,
+			delivery,
 			id: current.id,
-			queue: services.queue,
 			user: actor.user,
 			...args.answer ? { answer: args.answer(current) } : void 0
 		});
@@ -1824,11 +1854,11 @@ async function act(args) {
 		}));
 	} catch (error) {
 		logException(error, "review_item.slack_input.persist.failed", { "app.review_item.id": item.id });
-		await sendReviewItemMessages({
+		await deliverReviewItemChange({
 			change,
+			delivery,
 			item,
-			nowMs: Date.now(),
-			queue: services.queue
+			nowMs: Date.now()
 		});
 	}
 }
@@ -1972,139 +2002,8 @@ async function handleAppHomeDisconnect(args) {
 	});
 }
 /**
-* Save the first answer to the open request of a Slack thread as Slack input
-* from the person who answered. The input text is the formatted answer, so
-* the model reads one format on every surface. Later answers to the same
-* request do nothing. A stale request, such as one that a newer request
-* replaced, also does nothing.
-*/
-async function answerSlackUserInput(args) {
-	const userId = requireSlackPayloadUserId(args.payload.user?.id, "Slack user input payload");
-	const { channelId, messageTs } = args;
-	const open = await getOpenSlackUserInput(args.state, {
-		channelId,
-		threadTs: args.threadTs
-	});
-	if (!open || open.messageTs !== messageTs) return;
-	const answer = args.answer(open);
-	if (isEmptyUserInputAnswer(answer)) return;
-	const userTeam = args.payload.user?.team_id;
-	if (!await isSlackWorkspaceMember({
-		user: userId,
-		user_team: userTeam
-	}, args.state)) return;
-	if (!await args.isAuthorAllowed(userId)) return;
-	if (!await claimSlackUserInput(args.state, {
-		channelId,
-		claimedBy: userId,
-		messageTs
-	})) return;
-	const message = buildSlackInteractionInput({
-		adapter: args.adapter,
-		channelId,
-		inputTs: args.inputTs,
-		messageId: args.messageId,
-		messageTs,
-		payload: args.payload,
-		text: formatUserInputAnswer(open.request, answer),
-		threadTs: args.threadTs,
-		userId
-	});
-	try {
-		await args.persistMessage(message);
-	} catch (error) {
-		await releaseSlackUserInput(args.state, {
-			channelId,
-			messageTs
-		});
-		throw error;
-	}
-	await closeSlackUserInput({
-		note: slackUserInputAnswerNote({
-			answer,
-			request: open.request,
-			who: slackMention(userId)
-		}),
-		open
-	});
-}
-/** Read the request message and thread of a block action. */
-function blockActionTarget(payload) {
-	const channelId = parseSlackChannelId(payload.channel?.id);
-	const messageTs = parseSlackMessageTs(payload.message?.ts);
-	if (!channelId || !messageTs) throw new Error("Slack user input payload is incomplete");
-	return {
-		channelId,
-		messageTs,
-		threadTs: parseSlackMessageTs(payload.message?.thread_ts) ?? messageTs
-	};
-}
-/** Answer a one-click request with the clicked choice. */
-async function handleUserInputChoice(args) {
-	const target = blockActionTarget(args.payload);
-	const actionTs = parseSlackMessageTs(args.action.action_ts);
-	const choice = args.action.value?.trim();
-	if (!actionTs || !choice) throw new Error("Slack user input click payload is incomplete");
-	await answerSlackUserInput({
-		...target,
-		adapter: args.adapter,
-		answer: (open) => {
-			const field = buttonUserInputField(open.request);
-			return normalizeUserInputAnswer(open.request, {
-				requestId: open.requestId,
-				values: field ? { [field.id]: [choice] } : {}
-			});
-		},
-		inputTs: actionTs,
-		messageId: `slack-user-input-answer:${actionTs}`,
-		payload: args.payload,
-		isAuthorAllowed: args.isAuthorAllowed,
-		persistMessage: args.persistMessage,
-		state: args.state
-	});
-}
-/** Open the answer form of the open request for the person who clicked. */
-async function handleUserInputOpenForm(args) {
-	const target = blockActionTarget(args.payload);
-	const triggerId = args.payload.trigger_id;
-	if (!triggerId) throw new Error("Slack user input form payload is missing a trigger id");
-	const open = await getOpenSlackUserInput(args.state, target);
-	if (!open || open.messageTs !== target.messageTs) return;
-	await openSlackModal({
-		triggerId,
-		view: buildSlackUserInputModal(open.request, target)
-	});
-}
-/** Answer a request with the values of its submitted form. */
-async function handleUserInputSubmission(args) {
-	const view = args.payload.view;
-	const formTarget = parseSlackUserInputFormTarget(view?.private_metadata);
-	const channelId = parseSlackChannelId(formTarget?.channelId);
-	const messageTs = parseSlackMessageTs(formTarget?.messageTs);
-	const threadTs = parseSlackMessageTs(formTarget?.threadTs);
-	if (!view?.id || !channelId || !messageTs || !threadTs) throw new Error("Slack user input form submission is incomplete");
-	const inputTs = slackMessageTsFromMs(Date.now());
-	await answerSlackUserInput({
-		adapter: args.adapter,
-		answer: (open) => parseSlackUserInputSubmission({
-			request: open.request,
-			requestId: open.requestId,
-			values: view.state?.values ?? {}
-		}),
-		channelId,
-		inputTs,
-		messageId: `slack-user-input-answer:${view.id}`,
-		messageTs,
-		payload: args.payload,
-		isAuthorAllowed: args.isAuthorAllowed,
-		persistMessage: args.persistMessage,
-		state: args.state,
-		threadTs
-	});
-}
-/**
-* Handle Slack interactions from App Home, user input requests, and Review
-* item cards: block actions and submitted forms.
+* Handle Slack interactions from App Home and Review item cards: block
+* actions and submitted forms.
 */
 async function handleSlackInteractivePayload(args) {
 	const spanAttributes = { userId: args.payload.user?.id?.trim() || void 0 };
@@ -2115,10 +2014,6 @@ async function handleSlackInteractivePayload(args) {
 		}));
 		return;
 	}
-	if (args.payload.type === "view_submission" && args.payload.view?.callback_id === "junior_user_input") {
-		await withSpan("chat.slack_user_input_submit", "chat.slack_user_input_submit", spanAttributes, () => handleUserInputSubmission(args));
-		return;
-	}
 	if (args.payload.type !== "block_actions") return;
 	for (const action of args.payload.actions ?? []) {
 		const click = parseSlackReviewItemClick(action);
@@ -2131,18 +2026,6 @@ async function handleSlackInteractivePayload(args) {
 			}));
 			return;
 		}
-		const kind = slackUserInputAction(action.action_id);
-		if (kind === "choice") {
-			await withSpan("chat.slack_user_input_click", "chat.slack_user_input_click", spanAttributes, () => handleUserInputChoice({
-				...args,
-				action
-			}));
-			return;
-		}
-		if (kind === "open_form") {
-			await withSpan("chat.slack_user_input_open_form", "chat.slack_user_input_open_form", spanAttributes, () => handleUserInputOpenForm(args));
-			return;
-		}
 	}
 	const disconnect = args.payload.actions?.find((candidate) => candidate.action_id === "app_home_disconnect");
 	const provider = disconnect?.selected_option?.value ?? disconnect?.value;
@@ -2644,6 +2527,17 @@ async function buildThread(args) {
 function shouldIgnoreMessage(message) {
 	return message.author.isMe === true || !parseActorUserId(message.author.userId);
 }
+/**
+* Resolve the Slack author Identity at ingress and bind its id to the message.
+* Ingress does no profile lookup. The worker adds the profile names later.
+* Bot authors wait for their own bot Identity, so they get no id here.
+*/
+async function bindSlackAuthorIdentity(message, installation) {
+	const teamId = installation.teamId;
+	const userId = parseActorUserId(message.author.userId);
+	if (!teamId || !userId || message.author.isBot === true) return;
+	bindMessageAuthorIdentityId(message, await resolveActorIdentityId(getSqlExecutor(), createSlackActor(teamId, userId, null)));
+}
 function shouldPersistBeforeAck(body) {
 	return body.event?.type === "app_mention" || body.event?.type === "message";
 }
@@ -2742,6 +2636,7 @@ async function handleSlackThreadStop(args) {
 		conversationId,
 		state: args.state
 	});
+	await bindSlackAuthorIdentity(args.message, args.installation);
 	const content = parseContent(args.message);
 	const conversation = coerceThreadConversationState(void 0);
 	recordSkippedConversationMessage({
@@ -2848,13 +2743,15 @@ async function routeParsedMessage(args) {
 		});
 		return;
 	}
-	if (route === "mention" && !await isSlackAuthorDomainAllowed({
+	const isAuthorDomainAllowed = () => isSlackAuthorDomainAllowed({
 		allowedBotUserIds: args.allowedBotUserIds,
 		allowedDomains: args.allowedDomains,
 		state: args.state,
 		teamId: args.installation.teamId,
 		user: args.event.user
-	})) return;
+	});
+	if (route === "mention" && !await isAuthorDomainAllowed()) return;
+	await bindSlackAuthorIdentity(message, args.installation);
 	const conversationId = await resolveSlackConversationId({
 		canonicalThreadId,
 		conversationStore: args.conversationStore,
@@ -2886,22 +2783,34 @@ async function routeParsedMessage(args) {
 		route,
 		state: args.state
 	});
-	if (route !== "mention") {
+	const closeAnswered = async () => {
+		if (message.author.isBot === true) return;
+		await closeReviewItemsAnsweredByReply({
+			...route === "subscribed" ? { canAnswer: isAuthorDomainAllowed } : void 0,
+			conversationId,
+			delivery: {
+				queue: args.queue,
+				show: createSlackReviewItemShow(() => args.adapter)
+			},
+			resolveUser: async () => {
+				const teamId = args.installation.teamId;
+				const userId = parseActorUserId(message.author.userId);
+				if (!teamId || !userId) return void 0;
+				return (await readActorIdentity(createSlackActor(teamId, userId, null)))?.user;
+			},
+			text: stripLeadingBotMention(parseContent(message).topLevelText, {
+				botUserId: args.adapter.botUserId,
+				stripLeadingSlackMentionToken: true
+			})
+		});
+	};
+	try {
 		await persist();
-		return;
+	} catch (error) {
+		if (error instanceof SlackEventPersistenceError && error.saved) args.runAfterUnlock(closeAnswered);
+		throw error;
 	}
-	await persistSlackUserInputReply({
-		channelId: args.event.channel,
-		claimedBy: message.author.userId,
-		isSaved: (error) => error instanceof SlackEventPersistenceError && error.saved,
-		note: (request) => slackUserInputAnswerNote({
-			request,
-			who: slackMention(message.author.userId)
-		}),
-		persist,
-		state: args.state,
-		threadTs: args.event.thread_ts
-	});
+	args.runAfterUnlock(closeAnswered);
 }
 async function handleSlackEvent(args) {
 	const event = args.body.event;
@@ -2979,6 +2888,7 @@ async function handleSlackEvent(args) {
 				setSpanAttributes({ "app.slack.membership": member ? "verified" : "unverified" });
 				if (!member) return;
 				const message = adapter.parseMessage(event);
+				let afterUnlock;
 				if (!(await withLock(state, `slack:ingress:${normalizeMessageThreadId(message).threadId}`, () => routeParsedMessage({
 					adapter,
 					event,
@@ -2989,11 +2899,14 @@ async function handleSlackEvent(args) {
 					receivedAtMs,
 					allowedBotUserIds: args.services.allowedBotUserIds ?? [],
 					allowedDomains: args.services.allowedDomains ?? [],
+					runAfterUnlock: (task) => {
+						afterUnlock = task;
+					},
 					state
 				}), {
 					keepAlive: true,
 					waitMs: 1e4
-				})).acquired) throw new Error("Could not acquire Slack ingress lock");
+				}).finally(() => afterUnlock?.())).acquired) throw new Error("Could not acquire Slack ingress lock");
 			}
 		}
 	}));
@@ -3005,6 +2918,7 @@ async function handleSlackEvent(args) {
 */
 async function persistSlackMentionWithLock(args) {
 	const { message, threadId } = normalizeMessageThreadId(args.message);
+	await bindSlackAuthorIdentity(message, args.installation);
 	try {
 		if (!(await withLock(args.state, `slack:ingress:${threadId}`, () => persistSlackMessage({
 			adapter: args.adapter,
@@ -6223,6 +6137,7 @@ function createBetterAuth(config) {
 			hd: hostedDomain,
 			prompt: "select_account",
 			disableIdTokenSignIn: true,
+			overrideUserInfoOnSignIn: true,
 			async getUserInfo(token) {
 				if (!token.idToken) return null;
 				const claims = readGoogleClaims(token.idToken);
@@ -6232,7 +6147,7 @@ function createBetterAuth(config) {
 					user: {
 						email: claims.email,
 						emailVerified: claims.email_verified === true,
-						image: claims.picture,
+						image: claims.picture ?? null,
 						name: claims.name
 					},
 					data: claims
@@ -6264,7 +6179,8 @@ function createBetterAuth(config) {
 			await recordGoogleSignIn(getSqlExecutor(), {
 				email,
 				subject: google.accountId,
-				displayName: created.user.name || void 0
+				displayName: created.user.name || void 0,
+				avatarUrl: parseAvatarUrl(created.user.image, GOOGLE_IDENTITY_PROVIDER)
 			});
 		}) }
 	});
@@ -6663,7 +6579,10 @@ async function createApp(options) {
 			validatePluginRegistrations(configuredPlugins?.registrations ?? []);
 			validatePluginEgressCredentialHooks(configuredPlugins?.registrations ?? []);
 		}
-		pluginRoutes = getPluginRoutes({ events });
+		pluginRoutes = getPluginRoutes({
+			events,
+			showReviewItem: createSlackReviewItemShow(getProductionSlackAdapter)
+		});
 		if (dashboard && !dashboard.disabled) pluginApiRoutes = getPluginApiRoutes();
 	} catch (error) {
 		restoreRuntimeConfig$1();
@@ -6681,6 +6600,7 @@ async function createApp(options) {
 		attachmentStorage,
 		bindMessageAgent: (request) => bindMessageAgent(request, { queue: conversationWorkQueue }),
 		bindSpawnAgent: (request) => bindSpawnAgent(request, { queue: conversationWorkQueue }),
+		conversationWorkQueue,
 		tracePropagation
 	});
 	const runtimeServiceOverrides = {