@sentry/junior 0.270.0 → 0.272.0

package/dist/{agent-runner-MSQSMFkq.js → agent-runner-Cl6Usx2Y.js}

@@ -1,45 +1,45 @@
 import { t as __exportAll } from "./rolldown-runtime-nwUcYXjP.js";
-import { $ as saveEventAutomation, A as readAutomationRuns, Ar as trimTrailingAssistantMessages, B as readScheduledAutomation, Br as estimateTextTokens, Bt as recordMcpProviderConnected, C as readAutomationExecutionByConversationId, Cn as loadTurnCheckpoint, Cr as isAssistantMessage, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, Dr as normalizeToolNameFromResult, Dt as loadConnectedMcpProviders, E as readAutomationExecutionStatusDays, Er as isToolResultMessage, Fr as buildDeterministicTurnId, Ft as recordAttachmentsDelivered, Hr as getAgentContextInputLimitTokens, Ht as recordToolExecutionStarted, I as createScheduledAutomation, J as deleteEventAutomation, Jr as historyItemFromPiMessage, L as deleteScheduledAutomation, Mr as SESSION_CONTEXT_SECTION_TAG, Mt as loadTurnRoute, Nr as TURN_CONTEXT_TAG, Nt as openConversationProjection, O as readAutomationExecutionSummaries, Or as retainRuntimeTurnContext, Ot as loadConversationProjection, Pt as recordAgentsInstructionsUpdated, Q as parseEventAutomationRow, Qt as resolveTaskTitle, Rt as recordAuthorizationRequested, Sn as continuableMessages, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, Tr as isToolResultError, Ut as recordTurnRoute, V as saveScheduledAutomation, Vr as getAgentContextCompactionTriggerTokens, Wr as isExperimentalFeatureEnabled, X as getEventAutomation, Xr as getConfigDefaults, Yr as piMessageFromHistoryItem, Z as listDeletedEventAutomationsCreatedBy, Zt as fallbackShortTitle, _n as abandonReplacedPendingAuth, _r as extractAssistantText, _t as eventWatchUnavailable, at as listAutomationVersions, br as getUserMessageInstructionText, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, cr as TURN_LIMIT_WRAP_UP_MESSAGE, dn as PluginCredentialFailureError, dr as TurnToolCallLimitExceededError, et as setEventAutomationStatus, fn as createPluginAuthOrchestration, ft as automationEventCatalog, gn as AuthorizationPauseError, gt as eventNamespaceSchema, hn as AuthorizationFlowDisabledError, hr as CODEMODE_TOOL_NAME, jr as REQUEST_CONTEXT_SECTION_TAG, k as readAutomationExecutions, kr as stripRuntimeTurnContext, kt as loadLastModelProfile, l as getDispatchInputMessageId, lr as TurnBudgetExceededError, lt as automationRevision, mn as AuthPausePersistenceError, mr as isTurnExecutionLimitExceededError, ot as readAutomationVersion, pn as authorizationId, pr as createTurnLimitGate, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, un as createPluginEgress, ur as TurnSliceLimitExceededError, ut as requireAutomationRevision, vn as canReusePendingAuthLink, vr as getPiMessageRole, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wn as saveTurnCheckpoint, wr as isContinuablePiBoundary, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xr as hasRuntimeTurnContext, xt as registeredEventTypeSchema, yr as getTerminalAssistantMessages, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow, zt as recordGuardianActionReviewed } from "./turn-session-routing-B9KLBhaT.js";
-import { _ as getProviderErrorAttributes, a as completeText, b as getGatewayApiKey, c as COMPACTION_SUMMARY_PREFIX, d as renderCurrentInstruction, f as unwrapCurrentInstruction, g as findProviderError, h as createProviderError, i as completeObject, l as hasCompactedConversationContext, m as ProviderError, n as GEN_AI_SERVER_ADDRESS, p as escapeXml, s as resolveGatewayModel, t as GEN_AI_PROVIDER_NAME, u as isCompactionSummaryText, x as resolveGatewayCredential, y as isProviderRetryError } from "./client-B2MjENki.js";
-import { n as botConfig, v as normalizeSlackEmojiName } from "./config-Dm3pWRqY.js";
-import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-C6EdT6PP.js";
+import { $ as saveEventAutomation, A as readAutomationRuns, Ar as trimTrailingAssistantMessages, B as readScheduledAutomation, Br as estimateTextTokens, Bt as recordMcpProviderConnected, C as readAutomationExecutionByConversationId, Cn as loadTurnCheckpoint, Cr as isAssistantMessage, Ct as requireEventIdentifier, D as readAutomationExecutionStatusHours, Dr as normalizeToolNameFromResult, Dt as loadConnectedMcpProviders, E as readAutomationExecutionStatusDays, Er as isToolResultMessage, Fr as buildDeterministicTurnId, Ft as recordAttachmentsDelivered, Hr as getAgentContextInputLimitTokens, Ht as recordToolExecutionStarted, I as createScheduledAutomation, J as deleteEventAutomation, Jr as historyItemFromPiMessage, L as deleteScheduledAutomation, Mr as SESSION_CONTEXT_SECTION_TAG, Mt as loadTurnRoute, Nr as TURN_CONTEXT_TAG, Nt as openConversationProjection, O as readAutomationExecutionSummaries, Or as retainRuntimeTurnContext, Ot as loadConversationProjection, Pt as recordAgentsInstructionsUpdated, Q as parseEventAutomationRow, Qt as resolveTaskTitle, Rt as recordAuthorizationRequested, Sn as continuableMessages, St as registeredResourceTypeSchema, T as readAutomationExecutionHours, Tr as isToolResultError, Ut as recordTurnRoute, V as saveScheduledAutomation, Vr as getAgentContextCompactionTriggerTokens, Wr as isExperimentalFeatureEnabled, X as getEventAutomation, Xr as getConfigDefaults, Yr as piMessageFromHistoryItem, Z as listDeletedEventAutomationsCreatedBy, Zt as fallbackShortTitle, _n as abandonReplacedPendingAuth, _r as extractAssistantText, _t as eventWatchUnavailable, at as listAutomationVersions, br as getUserMessageInstructionText, bt as registeredEventTriggerProblems, c as getDispatchIdForConversation, cr as TURN_LIMIT_WRAP_UP_MESSAGE, dn as PluginCredentialFailureError, dr as TurnToolCallLimitExceededError, et as setEventAutomationStatus, fn as createPluginAuthOrchestration, ft as automationEventCatalog, gn as AuthorizationPauseError, gt as eventNamespaceSchema, hn as AuthorizationFlowDisabledError, hr as CODEMODE_TOOL_NAME, jr as REQUEST_CONTEXT_SECTION_TAG, k as readAutomationExecutions, kr as stripRuntimeTurnContext, kt as loadLastModelProfile, l as getDispatchInputMessageId, lr as TurnBudgetExceededError, lt as automationRevision, mn as AuthPausePersistenceError, mr as isTurnExecutionLimitExceededError, ot as readAutomationVersion, pn as authorizationId, pr as createTurnLimitGate, pt as describeRegisteredEventTrigger, q as createEventAutomation, rt as automationDefinition, st as sameDefinitionValue, t as resolveConversationRouting, u as getDispatchRecord, un as createPluginEgress, ur as TurnSliceLimitExceededError, ut as requireAutomationRevision, vn as canReusePendingAuthLink, vr as getPiMessageRole, vt as hasEventCatalogEntries, w as readAutomationExecutionDays, wn as saveTurnCheckpoint, wr as isContinuablePiBoundary, wt as requireValidEventTrigger, x as emptyAutomationRunWindows, xr as hasRuntimeTurnContext, xt as registeredEventTypeSchema, yr as getTerminalAssistantMessages, yt as registeredEventMatchSchema, z as parseScheduledAutomationRow, zt as recordGuardianActionReviewed } from "./turn-session-routing-BV_gX7n3.js";
+import { _ as getProviderErrorAttributes, a as completeText, b as getGatewayApiKey, c as COMPACTION_SUMMARY_PREFIX, d as renderCurrentInstruction, f as unwrapCurrentInstruction, g as findProviderError, h as createProviderError, i as completeObject, l as hasCompactedConversationContext, m as ProviderError, n as GEN_AI_SERVER_ADDRESS, p as escapeXml, s as resolveGatewayModel, t as GEN_AI_PROVIDER_NAME, u as isCompactionSummaryText, x as resolveGatewayCredential, y as isProviderRetryError } from "./client-FRphcDWW.js";
+import { n as botConfig, v as normalizeSlackEmojiName } from "./config-BUP9wjiR.js";
+import { B as isRecord$4, C as summarizeMessageText, E as withSpan, H as toOptionalString, S as setTags, T as withLogContext, _ as runBestEffort, a as extractGenAiUsageSummary, b as setSpanAttributes, f as logError, g as normalizeGenAiFinishReason, h as logWarn, i as extractGenAiUsageAttributes, l as getLogContextAttributesForSpan, m as logInfo, p as logException, u as getTracePropagationHeaders, v as serializeGenAiAttribute, x as setSpanStatus, z as normalizeIdentityEmail } from "./logging-CjkDr-jP.js";
 import { g as withActiveSpan, i as getActiveSpan, m as startInactiveSpan } from "./sentry-MDkYAVPV.js";
-import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-C1pJ89rs.js";
+import { a as toCanonicalInputMessage, c as toGenAiPayloadMetadata, i as runWithConversationPrivacy, l as toGenAiPayloadTraceAttributes, o as toCanonicalOutputMessage, r as resolveConversationPrivacy, s as toGenAiMessagesTraceAttributes, t as canExposeConversationPayload } from "./conversation-privacy-DiGvA9a3.js";
 import { a as formatModelProfile, c as modelProfileSchema, l as profileConfig, n as ModelProfileNotConfiguredError, o as formatModelProfiles, r as boundProfile, s as modelIdForProfile, u as TURN_REASONING_LEVELS } from "./model-profile-B998sjVd.js";
-import { d as parseSlackChannelReferenceId, f as parseSlackTeamId, m as parseSlackMessageTs, n as createSlackActor, o as isUserActor, p as parseSlackUserId, u as parseSlackChannelId } from "./actor-CP9K2Idu.js";
-import { C as getSqlExecutor, M as resolveActorIdentityId, Q as sameDestination, S as getDb, U as addAgentTurnUsage, W as agentTurnCostUsd, X as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, j as SYSTEM_IDENTITY_ID, q as hasAgentTurnUsage, x as getConversationStore, y as getConversationEventStore } from "./viewer-BTgAfdUg.js";
+import { d as parseSlackChannelReferenceId, f as parseSlackTeamId, h as parseSlackMessageTs, n as createSlackActor, o as isUserActor, p as parseSlackUserId, u as parseSlackChannelId } from "./actor-B4DYygOB.js";
+import { C as getSqlExecutor, M as resolveActorIdentityId, Q as sameDestination, S as getDb, U as addAgentTurnUsage, W as agentTurnCostUsd, X as parseDestination, a as readActorIdentityFromSql, b as getConversationMessageSearchStore, f as identityAvatarUrl, h as readUserAvatarUrls, i as readActorIdentity, j as SYSTEM_IDENTITY_ID, q as hasAgentTurnUsage, x as getConversationStore, y as getConversationEventStore } from "./viewer-BCRuO8Wg.js";
 import { a as juniorAgentInvocations, c as juniorIdentities, d as juniorDestinations, i as juniorAgentBindings, l as juniorUsers, s as juniorConversations } from "./agent-invocations-C1RNOCs8.js";
-import { T as juniorArtifacts, d as juniorAutomations, f as juniorStats, g as juniorConversationBriefs, l as juniorAutomationRuns, s as juniorReviewItemSlackCards, w as juniorAttachments, x as juniorConversationAnnotations } from "./executor-BB6eJkD4.js";
+import { E as juniorArtifacts, S as juniorConversationAnnotations, T as juniorAttachments, _ as juniorConversationBriefs, d as juniorAutomations, f as juniorStats, l as juniorAutomationRuns, s as juniorReviewItemSlackCards } from "./executor-DGDpyegI.js";
 import { _ as sameActorIdentity, g as instructionProvenanceFor, h as instructionActors, i as KNOWN_CONVERSATION_EVENT_TYPES, m as contextProvenance, n as detectImageMediaType, p as agentInstructionProvenance, r as isVisionImageMediaType } from "./media-U6Tuz6Mi.js";
 import { a as listReferenceFiles, c as soulPathCandidates, l as worldPathCandidates } from "./package-discovery-DJBompdd.js";
-import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-CndmkP2P.js";
-import { n as pluginCatalogRuntime } from "./catalog-runtime-Bdym_wKy.js";
-import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-BggTR_ue.js";
-import { $ as loadSnapshotsForProfile, $n as sandboxSkillDir, $t as workspaceRepoCheckoutPath, A as updateReviewItemContent, An as normalizeSlackConversationId, B as EVERYONE_ASSIGNEE, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, C as getOpenReviewItemByDedupeKey, Cn as SlackActionError, Ct as openSlackDirectMessage, Dn as getSlackClient, Et as postSlackMessage, Ft as wrapSandboxSetupError, G as deleteWorkspace, Gn as buildNonInteractiveShellScript, H as resolveAssignee, Hn as ToolInputError, Ht as consumeSandboxEgressPermissionDeniedSignal, I as readReviewItemAgentScope, Ir as conversationNoteEvent, It as WorkspaceSnapshotNotReadyError, J as listWorkspaces, Jn as SANDBOX_DATA_ROOT, Jt as resolveSandboxCommandEnvironment, K as getWorkspace, Kn as runNonInteractiveCommand, L as requireReviewItemAssignees, Ln as getDashboardConversationLink, Lt as getWorkspaceSnapshotNotReadyError, Mn as withSlackRetries, Mr as JUNIOR_NATIVE_EVENT_NAMESPACE, Mt as isAbortError, N as canAgentChangeReviewItem, Nn as sleep, Nt as isAlreadyExistsError, O as searchReviewItems, On as isConversationScopedChannel, Or as defaultTimezone, Ot as updateSlackMessage, P as canReadReviewItem, Pt as throwSandboxOperationError, Q as invalidateReadySnapshot, Qn as SANDBOX_WORKSPACE_ROOT, Qt as tryWorkspaceRepoCheckoutPath, R as requireReviewItemLinks, Rt as isWorkspaceSnapshotNotReadyError, S as dismissOpenReviewItems, St as getSlackMessagePermalink, T as insertReviewItem, Tn as getFilePermalink, Tr as createPluginAnnotations, U as resolveAssignees, Un as PluginToolDeniedError, Ut as createSandboxEgressCredentialToken, V as automationCreatorUserId, Vt as consumeSandboxEgressAuthRequiredSignal, W as createWorkspace, Wn as buildCommandScript, X as updateWorkspace, Xn as SANDBOX_REPOS_ROOT, Yn as SANDBOX_JUNIOR_ROOT, Z as WorkspaceValidationError, Zn as SANDBOX_SKILLS_ROOT, Zt as SANDBOX_RUNTIME, an as STOP_WATCHING_TOOL_NAME, at as ensureDockerDaemon, b as closeReviewItem, br as matchSlackAttachments, bt as addReactionToMessage, d as getPluginTools, dn as deliverWatch, en as resolveChannelCapabilities, er as sandboxSkillFile, et as setWorkspaceSnapshot, f as getPluginUserPromptContributions, fn as findMatchingWatches, ft as resolveBaseUrl, gt as normalizeSlackReplyMarkdown, in as RESOURCE_WATCH_TOOL_SOURCE, it as isStale, j as PLUGIN_REVIEW_ITEM_KEY_PREFIX, jn as runWithSlackInstallationToken, kr as resolveUserTimezone, kt as uploadFilesToConversation, ln as createTimerWatch, lt as deliverOAuthAuthorization, mn as listWatches, mt as escapeSlackMrkdwnText, n as createUserTokenStore, nn as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, nt as create, o as createPluginHookRunner, on as cancelSubscriptions, ot as getSandboxProvider, p as getPlugins, pn as getWatch, q as getWorkspaceByName, qn as SANDBOX_COMMAND_PATH, qt as buildSandboxEgressNetworkPolicy, r as getOAuthAccountProviders, rn as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, rt as hash, sn as cancelWatch, tn as getSlackToolContext, tr as sandboxSkillPathResolution, tt as setWorkspaceSnapshotBuild, u as getPluginSystemPromptContributions, un as createWatch, ut as formatProviderLabel, vt as slackMention, w as getReviewItem, wn as downloadPrivateSlackFile, wr as saveObjectAnnotations, xt as deleteSlackMessage, zn as getDashboardReviewItemLink, zt as workspaceSnapshotNotReadyUserMessage } from "./credentialed-BeBaJMZ_.js";
+import { c as fetchWithBoundedOAuthErrorBodies, d as actorLogContext, f as credentialContextForActor, g as credentialUserSubjectId, i as resolvePluginHeaderEnvRefs, l as getOAuthProviderErrorAttributes, s as OAuthProviderError } from "./registry-7XgwNgQe.js";
+import { n as pluginCatalogRuntime } from "./catalog-runtime-BNeCWIaF.js";
+import { a as parseSkillInvocation, i as parseSkillFile, n as findSkillByName, r as loadSkillsByName, t as discoverSkills } from "./skills-CsiKu3-g.js";
+import { $ as loadSnapshotsForProfile, $n as sandboxSkillDir, $t as workspaceRepoCheckoutPath, A as updateReviewItemContent, An as normalizeSlackConversationId, B as EVERYONE_ASSIGNEE, Bn as getDashboardTaskLink, Bt as clearSandboxEgressSignals, C as getOpenReviewItemByDedupeKey, Cn as SlackActionError, Ct as openSlackDirectMessage, Dn as getSlackClient, Et as postSlackMessage, Ft as wrapSandboxSetupError, G as deleteWorkspace, Gn as buildNonInteractiveShellScript, H as resolveAssignee, Hn as ToolInputError, Ht as consumeSandboxEgressPermissionDeniedSignal, I as readReviewItemAgentScope, Ir as conversationNoteEvent, It as WorkspaceSnapshotNotReadyError, J as listWorkspaces, Jn as SANDBOX_DATA_ROOT, Jt as resolveSandboxCommandEnvironment, K as getWorkspace, Kn as runNonInteractiveCommand, L as requireReviewItemAssignees, Ln as getDashboardConversationLink, Lt as getWorkspaceSnapshotNotReadyError, Mn as withSlackRetries, Mr as JUNIOR_NATIVE_EVENT_NAMESPACE, Mt as isAbortError, N as canAgentChangeReviewItem, Nn as sleep, Nt as isAlreadyExistsError, O as searchReviewItems, On as isConversationScopedChannel, Or as defaultTimezone, Ot as updateSlackMessage, P as canReadReviewItem, Pt as throwSandboxOperationError, Q as invalidateReadySnapshot, Qn as SANDBOX_WORKSPACE_ROOT, Qt as tryWorkspaceRepoCheckoutPath, R as requireReviewItemLinks, Rt as isWorkspaceSnapshotNotReadyError, S as dismissOpenReviewItems, St as getSlackMessagePermalink, T as insertReviewItem, Tn as getFilePermalink, Tr as createPluginAnnotations, U as resolveAssignees, Un as PluginToolDeniedError, Ut as createSandboxEgressCredentialToken, V as automationCreatorUserId, Vt as consumeSandboxEgressAuthRequiredSignal, W as createWorkspace, Wn as buildCommandScript, X as updateWorkspace, Xn as SANDBOX_REPOS_ROOT, Yn as SANDBOX_JUNIOR_ROOT, Z as WorkspaceValidationError, Zn as SANDBOX_SKILLS_ROOT, Zt as SANDBOX_RUNTIME, an as STOP_WATCHING_TOOL_NAME, at as ensureDockerDaemon, b as closeReviewItem, br as matchSlackAttachments, bt as addReactionToMessage, d as getPluginTools, dn as deliverWatch, en as resolveChannelCapabilities, er as sandboxSkillFile, et as setWorkspaceSnapshot, f as getPluginUserPromptContributions, fn as findMatchingWatches, ft as resolveBaseUrl, gt as normalizeSlackReplyMarkdown, in as RESOURCE_WATCH_TOOL_SOURCE, it as isStale, j as PLUGIN_REVIEW_ITEM_KEY_PREFIX, jn as runWithSlackInstallationToken, kr as resolveUserTimezone, kt as uploadFilesToConversation, ln as createTimerWatch, lt as deliverOAuthAuthorization, mn as listWatches, mt as escapeSlackMrkdwnText, n as createUserTokenStore, nn as RESOURCE_SUBSCRIPTION_DEFAULT_TTL_MS, nt as create, o as createPluginHookRunner, on as cancelSubscriptions, ot as getSandboxProvider, p as getPlugins, pn as getWatch, q as getWorkspaceByName, qn as SANDBOX_COMMAND_PATH, qt as buildSandboxEgressNetworkPolicy, r as getOAuthAccountProviders, rn as RESOURCE_SUBSCRIPTION_MAX_TTL_MS, rt as hash, sn as cancelWatch, tn as getSlackToolContext, tr as sandboxSkillPathResolution, tt as setWorkspaceSnapshotBuild, u as getPluginSystemPromptContributions, un as createWatch, ut as formatProviderLabel, vt as slackMention, w as getReviewItem, wn as downloadPrivateSlackFile, wr as saveObjectAnnotations, xt as deleteSlackMessage, zn as getDashboardReviewItemLink, zt as workspaceSnapshotNotReadyUserMessage } from "./credentialed-CgTulRDH.js";
 import { a as withLock, i as fenceLock } from "./locks-D-0h111u.js";
-import { r as getStateAdapter } from "./adapter-BQNTKVTF.js";
+import { r as getStateAdapter } from "./adapter-BDYDi1F9.js";
 import { i as isValidTimeZone, r as getZonedDateTimeParts, t as getFirstRunAtMs } from "./cadence-R7Em4RjE.js";
-import { B as removedCardSchema, J as conversationBriefSchema, K as briefLinkSchema, q as briefOutcomeStatusSchema } from "./conversation-AhOVzN_k.js";
-import { r as EVENT_AUTHOR_ID } from "./prompt-BPSdXYXV.js";
-import { A as AgentMessageQueueFullError, F as agentNameSchema, H as TurnInputCommitLostError, I as AGENT_TYPES, K as isTurnInputCommitLostError, M as AgentNameInUseError, N as CHILD_AGENT_RESULTS, P as PARENT_AGENT_TARGET, V as CooperativeTurnYieldError, _ as getLatestAgentInvocationForConversation, d as getAgentInvocationIdForResult, f as getAgentInvocationMessageId, g as getChildAgentLockName, j as AgentMessageTargetError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, v as invocationFromRow, y as isTerminalAgentInvocation, z as formatAgentTypes } from "./store-Byarin7b.js";
-import { a as NO_REPLY_MARKER, i as sanitizeAssistantText, n as decideReply, o as isNoReplyMarker, r as getAssistantReplyText } from "./interruption-marker-CdblrIQK.js";
-import { A as automationResultSchema$1, F as remindMissingAutomationResult, P as readAutomationResult, _ as WORKSPACE_SNAPSHOT_FAILED_EVENT, a as EVENT_WAIT_MS, b as workspaceSnapshotWatch, d as getEventCatalog, k as FINISH_AUTOMATION_RUN_TOOL_NAME, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_READY_EVENT, w as resolveSlackReplyTarget, y as workspaceSnapshotFinishedEvent } from "./session-stop-MZRgYqYH.js";
-import { C as userCustomizationTextSchema, b as webMessageId, g as formatUserInputAnswer, h as buttonUserInputField, m as USER_INPUT_NOTE, p as USER_INPUT_LIMITS, s as sumUtcHoursIntoSixHours, v as normalizeUserInputAnswer, x as USER_CUSTOMIZATION_MAX_CHARS, y as userInputRequestSchema } from "./reporting-window-DRCi1Ls_.js";
-import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-BkAA1wH7.js";
-import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-DiaXoSDg.js";
-import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-BeWGgaMA.js";
-import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-D6e9cVmH.js";
-import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-Dwh_xcqM.js";
+import { J as briefOutcomeStatusSchema, V as removedCardSchema, Y as conversationBriefSchema, q as briefLinkSchema } from "./conversation-BtQzLoK8.js";
+import { r as EVENT_AUTHOR_ID } from "./prompt-vfceH0c-.js";
+import { A as AgentMessagePausedError, F as CHILD_AGENT_RESULTS, I as PARENT_AGENT_TARGET, J as isTurnInputCommitLostError, L as agentNameSchema, M as AgentMessageTargetError, N as AgentNameInUseError, R as AGENT_TYPES, U as CooperativeTurnYieldError, V as formatAgentTypes, W as TurnInputCommitLostError, _ as invocationFromRow, d as getAgentInvocationMessageId, g as getLatestAgentInvocationForConversation, h as getChildAgentLockName, j as AgentMessageQueueFullError, k as AgentInvocationLimitError, t as NON_TERMINAL_AGENT_INVOCATION_STATUSES, u as getAgentInvocationIdForResult, v as isTerminalAgentInvocation } from "./store-DyVKH0QB.js";
+import { a as isNoReplyMarker, i as NO_REPLY_MARKER, n as getAssistantReplyText, r as sanitizeAssistantText, t as decideReply } from "./assistant-reply-DN2w6JL_.js";
+import { E as resolveSlackReplyTarget, L as readAutomationResult, M as FINISH_AUTOMATION_RUN_TOOL_NAME, N as automationResultSchema$1, R as remindMissingAutomationResult, _ as slackChannelMessageTrigger, a as EVENT_WAIT_MS, b as workspaceSnapshotFinishedEvent, d as getEventCatalog, n as markConversationsStopped, o as enqueueEventNotification, p as requireSlackChannelMessageScope, t as getConversationStoppedAtMs, v as WORKSPACE_SNAPSHOT_FAILED_EVENT, x as workspaceSnapshotWatch, y as WORKSPACE_SNAPSHOT_READY_EVENT } from "./session-stop-HKl0ECX0.js";
+import { C as userCustomizationTextSchema, b as webMessageId, g as formatUserInputAnswer, h as buttonUserInputField, m as USER_INPUT_NOTE, p as USER_INPUT_LIMITS, s as sumUtcHoursIntoSixHours, v as normalizeUserInputAnswer, x as USER_CUSTOMIZATION_MAX_CHARS, y as userInputRequestSchema } from "./reporting-window-DgHgwQB3.js";
+import { a as setSnapshotSpanAttributes, i as postinstall, n as resolve$1, r as dependencies, s as getSandboxResources } from "./resolve-CuuxNfWG.js";
+import { a as getVercelConversationWorkQueue, f as getTurnRequestDeadline, n as sendNextWorkspaceSnapshotJob, r as sendWorkspaceSnapshotJob } from "./job-queue-CjB97sii.js";
+import { D as stopConversationWork, n as appendAndEnqueueExclusiveInboundMessage, r as appendAndEnqueueInboundMessage } from "./store-CPF2kzbu.js";
+import { _ as getMcpProviderErrorAttributes, a as serviceAccountOnly, c as createMcpServiceAccountClientProvider, d as PluginMcpClient, f as McpProviderError, g as getMcpAwareTelemetryMessage, h as getMcpAwareErrorType, i as serviceAccountAllows, l as getMcpServiceAccountCredentials, m as McpToolError, p as McpServiceAccountRequiredError, u as McpAuthorizationRequiredError, v as toMcpProviderError } from "./service-account-H45LIAG2.js";
+import { A as SCHEDULED_AUTOMATION_SYSTEM_ACTOR, D as taskOutcomeInputSchema, E as automationTitleSchema, F as scheduleIntentSchema, I as weekdaySchema, N as ScheduleIntentError, P as compileScheduleIntent, T as automationInstructionToolSchema, k as eventAutomationTriggerSchema, l as automationListQuerySchema } from "./automation-CV7g5h3A.js";
 import { n as privateTraceResultAttributes } from "./private-trace-result-CE7_lEdq.js";
 import { streamSimple } from "@earendil-works/pi-ai/compat";
 import { createGatewayProvider } from "@ai-sdk/gateway";
-import { generateText } from "ai";
+import { NoImageGeneratedError, generateImage, generateText } from "ai";
 import path from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";
 import { createHash, randomBytes, randomInt, randomUUID } from "node:crypto";
 import { and, asc, count, desc, eq, exists, gt, gte, inArray, isNotNull, isNull, lt, lte, ne, notExists, notInArray, or, sql } from "drizzle-orm";
-import { PluginToolInputError, createWebSource, eventMatchFieldSchema, eventReachSchema, eventSchema, eventTriggerText, localDestinationSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
+import { PluginToolInputError, createWebSource, eventMatchFieldSchema, eventMatchSchema, eventReachSchema, eventSchema, eventTriggerText, localDestinationSchema, missingToolAnnotationKeys, ownedObjectAnnotationSchema, sourceSchema, stableEventMatchKey, watchResultSchema } from "@sentry/junior-plugin-api";
 import { alias } from "drizzle-orm/pg-core";
 import { Agent, estimateContextTokens } from "@earendil-works/pi-agent-core";
 import fs from "node:fs/promises";
@@ -847,7 +847,7 @@ function shouldEmitDevAgentTrace() {
 	return process.env.NODE_ENV === "development";
 }
 // src/chat/agent-invocations/blocked-report.ts
-/** Blocked report of a child agent. See "Delivery rules" in AGENTS.md. */
+/** Blocked report of a child agent. */
 /** Model-facing tool that ends a child agent run as blocked. */
 const REPORT_BLOCKED_TOOL_NAME = "reportBlocked";
 const blockedReportSchema = z.object({ missing: z.string().trim().min(1) });
@@ -2217,8 +2217,8 @@ function buildTurnContextPrompt(params) {
 /**
 * Conversation notes: short facts that core attaches to a Conversation without
 * starting a Turn. The next Turn shows them to the model in its runtime turn
-* context. A failed Turn also becomes a note for the next Turn. See
-* "Conversation notes" in AGENTS.md.
+* context. A failed Turn also becomes a note for the next Turn. A note is
+* context, never user intent, and only core adds one.
 */
 /**
 * Tell the next Turn that a Turn failed. Pi drops a failed assistant message
@@ -6647,7 +6647,6 @@ async function enrichImagePrompt(rawPrompt) {
 async function shrinkImage(image, maxBytes) {
 	const { default: sharp } = await import("sharp");
 	const { hasAlpha } = await sharp(image.data).metadata();
-	const mimeType = hasAlpha ? "image/webp" : "image/jpeg";
 	for (const edge of RESIZE_LONGEST_EDGES) {
 		const resized = sharp(image.data).rotate().resize({
 			width: edge,
@@ -6659,8 +6658,7 @@ async function shrinkImage(image, maxBytes) {
 		if (data.byteLength <= maxBytes) return {
 			image: {
 				path: image.path,
-				data,
-				mimeType
+				data
 			},
 			width: info.width,
 			height: info.height
@@ -6710,17 +6708,6 @@ function extensionForMediaType$1(mediaType) {
 	if (mediaType === "image/gif") return "gif";
 	return "bin";
 }
-function parseImageGenerationError(status, body, model) {
-	if (!body) return `image generation failed: ${status}`;
-	try {
-		const message = JSON.parse(body).error?.message?.trim();
-		if (!message) return `image generation failed: ${status} ${body}`;
-		if (message.includes("not an image model")) return `image generation failed: configured model "${model}" is not an image generation model. Set AI_IMAGE_MODEL to a compatible image model.`;
-		return `image generation failed: ${status} ${message}`;
-	} catch {
-		return `image generation failed: ${status} ${body}`;
-	}
-}
 /** Create the image tool with sandbox artifact guidance matched to file-send capability. */
 function createImageGenerateTool(hooks, options, deps = {}) {
 	return zodTool({
@@ -6737,8 +6724,10 @@ function createImageGenerateTool(hooks, options, deps = {}) {
 		}),
 		outputSchema: imageGenerateOutputSchema,
 		execute: async ({ prompt, images = [] }) => {
-			const fetchImpl = deps.fetch ?? fetch;
-			const apiKey = await getGatewayApiKey();
+			const gateway = createGatewayProvider({
+				apiKey: await getGatewayApiKey(),
+				...deps.fetch ? { fetch: deps.fetch } : void 0
+			});
 			const model = options.modelId;
 			const { images: inputImages, resized } = await fitImagesToRequest(await Promise.all(images.map(async (path) => ({
 				path,
@@ -6749,58 +6738,26 @@ function createImageGenerateTool(hooks, options, deps = {}) {
 				resize_notice: "Some input images were too large for the image model, so they were resized first. Tell the user which images were resized."
 			} : {};
 			const enrichedPrompt = inputImages.length > 0 ? prompt : await enrichImagePrompt(prompt);
-			const content = inputImages.length > 0 ? [{
-				type: "text",
-				text: enrichedPrompt
-			}, ...inputImages.map((image) => ({
-				type: "image_url",
-				image_url: { url: `data:${image.mimeType};base64,${image.data.toString("base64")}` }
-			}))] : enrichedPrompt;
-			const response = await fetchImpl("https://ai-gateway.vercel.sh/v1/chat/completions", {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					authorization: `Bearer ${apiKey}`
-				},
-				body: JSON.stringify({
-					model,
-					messages: [{
-						role: "user",
-						content
-					}],
-					modalities: ["image"]
-				})
-			});
-			if (!response.ok) {
-				const text = await response.text();
-				throw new Error(parseImageGenerationError(response.status, text, model));
-			}
-			const payload = await response.json();
-			const uploads = [];
-			const generatedImages = payload.choices?.[0]?.message?.images ?? [];
-			for (const [index, image] of generatedImages.entries()) {
-				let bytes = null;
-				let mimeType = "image/png";
-				const url = image.image_url?.url;
-				if (typeof url === "string" && url.startsWith("data:")) {
-					const match = url.match(/^data:([^;,]+);base64,(.+)$/);
-					if (!match) continue;
-					mimeType = match[1] ?? mimeType;
-					bytes = Buffer.from(match[2] ?? "", "base64");
-				} else if (typeof url === "string" && url.length > 0) {
-					const fetched = await fetchImpl(url);
-					if (!fetched.ok) continue;
-					mimeType = fetched.headers.get("content-type") ?? mimeType;
-					bytes = Buffer.from(await fetched.arrayBuffer());
-				}
-				if (!bytes) continue;
-				const extension = extensionForMediaType$1(mimeType);
-				uploads.push({
-					data: bytes,
-					filename: `generated-image-${Date.now()}-${index + 1}.${extension}`,
-					mimeType
-				});
+			let generatedImages;
+			try {
+				({images: generatedImages} = await generateImage({
+					model: gateway.imageModel(model),
+					prompt: inputImages.length > 0 ? {
+						text: enrichedPrompt,
+						images: inputImages.map((image) => image.data)
+					} : enrichedPrompt,
+					n: 1
+				}));
+			} catch (error) {
+				if (NoImageGeneratedError.isInstance(error)) generatedImages = [];
+				else if (error instanceof Error && error.message.includes("not an image model")) throw new Error(`image generation failed: configured model "${model}" is not an image generation model. Set AI_IMAGE_MODEL to an AI Gateway image model.`);
+				else throw error;
 			}
+			const uploads = generatedImages.map((image, index) => ({
+				data: Buffer.from(image.uint8Array),
+				filename: `generated-image-${Date.now()}-${index + 1}.${extensionForMediaType$1(image.mediaType)}`,
+				mimeType: image.mediaType
+			}));
 			if (uploads.length > 0) {
 				const artifactRefs = await hooks.writeGeneratedArtifacts(uploads);
 				return {
@@ -7448,10 +7405,13 @@ const messageAgentOutputSchema = juniorToolOutputSchema.extend({
 	conversation_id: z.string().min(1).describe("Target conversation ID"),
 	delivery: z.enum(["started", "queued"]).describe("started: the child agent starts work on the message now. queued: the target reads the message at its next step or after its current work.")
 });
-/** Create the tool that sends one message to the parent or a child agent. */
+/**
+* Create the tool that sends one message to the parent, a child agent, or
+* another top-level agent.
+*/
 function createMessageAgentTool(messageAgent) {
 	return zodTool({
-		description: `Send a message to your parent agent or to a child agent that this conversation started. Use it to give an existing child agent more work, an answer, or a correction, and to send your parent agent a finding or a question while you keep working. A message to a child continues its history. If the child is still working, it reads the message at its next step or after its current work, and one result covers both. The result arrives later as a new task in this conversation; do not wait or poll for it. A message to your parent does not end your task. Use spawnAgent only to start a new child agent. Your text is not user approval. A child's action review reads the user's own messages in the root conversation.`,
+		description: `Send a message to your parent agent or to a child agent that this conversation started. Use it to give an existing child agent more work, an answer, or a correction, and to send your parent agent a finding or a question while you keep working. A message to a child continues its history. If the child is still working, it reads the message at its next step or after its current work, and one result covers both. The result arrives later as a new task in this conversation; do not wait or poll for it. A message to your parent does not end your task. A top-level agent (its conversation is not a child agent, such as a Slack thread) can also message another top-level agent by its conversation_id, such as one from slackThreadRead. Both conversations must be public, or both private. A private one also needs the person in this Turn to be a member. The target runs the message as its own task and sends no result. Use spawnAgent only to start a new child agent. Your text is not user approval. A child's action review reads the user's own messages in the root conversation.`,
 		exposure: "modelOnly",
 		annotations: {
 			destructiveHint: false,
@@ -7460,7 +7420,7 @@ function createMessageAgentTool(messageAgent) {
 			readOnlyHint: false
 		},
 		inputSchema: z.object({
-			to: z.string().trim().min(1).describe(`"${PARENT_AGENT_TARGET}" for your parent agent, or the name or conversation_id of a child agent from spawnAgent or listAgents`),
+			to: z.string().trim().min(1).describe(`"${PARENT_AGENT_TARGET}" for your parent agent, the name or conversation_id of a child agent from spawnAgent or listAgents, or the conversation_id of another top-level agent`),
 			text: z.string().trim().min(1).max(MESSAGE_AGENT_TEXT_MAX_LENGTH).describe("Message text. Include all context the target needs.")
 		}).strict(),
 		outputSchema: messageAgentOutputSchema,
@@ -7477,6 +7437,7 @@ function createMessageAgentTool(messageAgent) {
 				});
 			} catch (error) {
 				if (error instanceof AgentMessageTargetError) throw new ToolInputError(`${error.message}. Use listAgents to find a child agent.`, { cause: error });
+				if (error instanceof AgentMessagePausedError) throw new ToolInputError(`${error.message}. Do not send it more messages. Tell the user instead.`, { cause: error });
 				if (error instanceof AgentMessageQueueFullError) throw new ToolInputError(`${error.message}. Wait for its result, then send one message with everything it needs.`, { cause: error });
 				if (error instanceof AgentInvocationLimitError) throw new ToolInputError(`${error.message}. Wait for active children to finish before you give more work.`, { cause: error });
 				throw error;
@@ -8390,7 +8351,6 @@ function renderReviewItemMessage(item, change) {
 			"",
 			item.request && item.answer ? formatUserInputAnswer(item.request, item.answer) : "(no answer)"
 		].join("\n");
-		case "completed": return [`${personName$1(change.user)} marked ${label} done.`, ...question].join("\n");
 		case "dismissed": return [`${personName$1(change.user)} dismissed ${label}.`, ...question].join("\n");
 		case "taken": return [`${personName$1(change.user)} took ${label}. They are now its only assignee.`, ...question].join("\n");
 		case "replied": return [
@@ -8605,7 +8565,7 @@ function subjectInput(subject) {
 /** Create the tool that adds a Review item or updates the open one. */
 function createAddReviewItemTool(context, services) {
 	return zodTool({
-		description: `Ask a person for input, or tell them about work that needs them. This is how you ask a person anything: the item goes on the review desk, and in a Slack thread it also shows as a card with buttons. Write the question so it stands alone: a person who sees only the card must understand it. Put the recommended option first and say why in its description. Use kind \`action\` with a \`request\` to ask: a question and 1-4 fields. Each field is \`choice\` (pick one), \`multi_choice\` (pick any), or \`text\` (a short answer). For a simple decision, use one \`choice\` field. Ask for related input in one item. Use kind \`notice\` only to tell a person something. Assignees default to the person in this Turn, or to the Automation creator in an Automation run. The current Conversation is always linked. The answer arrives later as a message from the person who answered. A reply that the assignee types in the thread also closes the item when the reply answers it. If your next step needs the answer, end the Turn now: the card is your reply, so end with exactly ${NO_REPLY_MARKER}, or finish the Automation run. If other work does not need the answer, continue with it. If an open item has the same \`dedupe_key\`, this updates that item instead of adding another.`,
+		description: `Ask a person for input, or tell them about work that needs them. This is how you ask a person anything: the item goes on the review desk, and in a Slack thread it also shows as a card with buttons. Write the question so it stands alone: a person who sees only the card must understand it. Put the option that you recommend first, set \`recommended: true\` on it, and say why in its description. Use kind \`action\` with a \`request\` to ask: a question and 1-4 fields. Each field is \`choice\` (pick one), \`multi_choice\` (pick any), or \`text\` (a short answer). For a simple decision, use one \`choice\` field. Ask for related input in one item. Use kind \`notice\` only to tell a person something. Assignees default to the person in this Turn, or to the Automation creator in an Automation run. The current Conversation is always linked. The answer arrives later as a message from the person who answered. A reply that the assignee types in the thread also closes the item when the reply answers it. If your next step needs the answer, end the Turn now: the card is your reply, so end with exactly ${NO_REPLY_MARKER}, or finish the Automation run. If other work does not need the answer, continue with it. If an open item has the same \`dedupe_key\`, this updates that item instead of adding another.`,
 		annotations: {
 			destructiveHint: false,
 			idempotentHint: true,
@@ -8670,7 +8630,8 @@ function createAddReviewItemTool(context, services) {
 				if (!await updateReviewItemContent(db, {
 					...content,
 					id: existing.id,
-					nowMs: Date.now()
+					nowMs: Date.now(),
+					...context.turnId && existing.addedByConversationId === context.conversationId ? { addedByTurnId: context.turnId } : void 0
 				})) throw new ToolInputError(`Review item ${existing.id} closed. Add the item again.`);
 				const item = await readableItem(existing.id, scope);
 				await deliverReviewItemChange({
@@ -8687,6 +8648,7 @@ function createAddReviewItemTool(context, services) {
 				...content,
 				addedByConversationId: context.conversationId,
 				dedupeKey,
+				...context.turnId ? { addedByTurnId: context.turnId } : void 0,
 				nowMs: Date.now(),
 				...scope.reader.automationId ? { automationId: scope.reader.automationId } : void 0,
 				...scope.tenant ? { tenant: scope.tenant } : void 0
@@ -9017,7 +8979,7 @@ function createSearchEventTypesTool(catalog) {
 			openWorldHint: false,
 			readOnlyHint: true
 		},
-		description: "Search the event types currently enabled without creating anything. Use only when the user asks what events are supported or the required resource type or event name is unclear. Includes plugin resources and core Workspace snapshot events. namespaces gives the reach of each event. With reach \"all\" or { anyOf }, an event can start an event automation for every resource of its namespace: leave out identifier and resourceType, and narrow it with match filters from that namespace. For { anyOf }, set at least one of those filters. With reach \"resource\", the automation needs an identifier. Use watchEvents for temporary updates in the current conversation; use createAutomation with an event trigger for durable automation. This tool does not watch a resource, create an automation, or list concrete resources.",
+		description: "Search the event types currently enabled without creating anything. Use only when the user asks what events are supported or the required resource type or event name is unclear. Includes plugin resources and core Workspace snapshot events. namespaces gives the reach of each event. An event automation selects its events with match filters from the matchFields of its namespace. With reach \"all\", match can be left out to run for every resource. With { anyOf }, match must set at least one of those filters. With reach \"resource\", only watchEvents can use the event. Use watchEvents for temporary updates in the current conversation; use createAutomation with an event trigger for durable automation. This tool does not watch a resource, create an automation, or list concrete resources.",
 		inputSchema: z.object({
 			query: z.string().nullable().describe("Optional terms matching a namespace, resource type, or event name. Resource types that match more terms come first. Empty lists all enabled event types.").optional(),
 			namespace: eventNamespaceSchema(catalog).nullable().describe("Optional enabled plugin namespace to search within.").optional(),
@@ -9459,11 +9421,16 @@ function requireCredentialStart(automation, isCreator) {
 	if (isCreator || automation.credentialMode !== "creator") return;
 	throw new AutomationEditError(`This ${"schedule" in automation ? "scheduled" : "event"} automation uses its creator's credentials. Only the creator can resume it or run it now. Switch it to system credentials first.`, "credentialMode");
 }
-/** Apply shared title, instruction, outcome, and creator credential rules. */
+/**
+* Apply shared title, instruction, outcome, and creator credential rules.
+* Anyone who can manage the Automation can change any field except turning on
+* creator credentials. A non-creator change to execution or outcomes switches
+* it to system credentials, so creator credential output stays where the
+* creator approved.
+*/
 async function editAutomationFields(current, input, isCreator, changesExecution) {
 	const kind = "schedule" in current ? "scheduled" : "event";
 	if (input.credentialMode === "creator" && !isCreator) throw new AutomationEditError(`Only the ${kind} automation creator can enable creator credential use.`, "credentialMode");
-	if (input.outcomes !== void 0 && !isCreator) throw new AutomationEditError(`Only the ${kind} automation creator can change message destinations.`, "outcomes");
 	let outcomes = current.outcomes;
 	if (input.outcomes !== void 0) {
 		for (const outcome of input.outcomes) if (typeof outcome.destination !== "string" && !current.outcomes.some((stored) => isDeepStrictEqual(stored, outcome))) throw new AutomationEditError("Use the current Destination or the creator for a new message outcome.", "outcomes");
@@ -9477,10 +9444,11 @@ async function editAutomationFields(current, input, isCreator, changesExecution)
 			destination: outcome.destination
 		});
 	}
+	const changesOutcomes = !isDeepStrictEqual(outcomes, current.outcomes);
 	return {
 		title: input.title ?? current.title,
 		task: { text: input.instruction ?? current.task.text },
-		credentialMode: changesExecution && !isCreator ? "system" : input.credentialMode ?? current.credentialMode,
+		credentialMode: (changesExecution || changesOutcomes) && !isCreator ? "system" : input.credentialMode ?? current.credentialMode,
 		outcomes
 	};
 }
@@ -9533,14 +9501,32 @@ function registeredEventAutomationTriggerSchema(catalog) {
 	const plugins = automationEventCatalog(catalog);
 	return z.object({
 		namespace: eventNamespaceSchema(plugins),
-		identifier: z.string().trim().min(1).max(300).nullable().describe("Exact resource identifier. Use null, with a null resourceType, to run for every resource of the namespace. Only events whose searchEventTypes reach is \"all\" or { anyOf } can run that way, and match must set one of the anyOf filters. When creating, omit it to run for every resource. When updating, omit it to keep the saved identifier.").optional(),
-		resourceType: registeredResourceTypeSchema(plugins).nullable().describe("Resource type of the identifier. Use null when identifier is null. When updating, omit it to keep the saved resource type.").optional(),
 		label: z.string().trim().min(1).max(500),
 		events: z.array(registeredEventTypeSchema(plugins)).min(1),
-		match: registeredEventMatchSchema()
+		match: registeredEventMatchSchema().describe("Filters that select the events, from the matchFields of the namespace. Use the match of a subscribable tool result to select one resource, such as { repo, pullRequest } for one pull request. Leave it out to run for every resource, when the reach of each event allows that. A single value must equal the event data. A list means the event value may be any one entry. For a field with list: true, the event value is a list, and it matches when it includes the value or any entry.")
 	}).strict();
 }
 /**
+* Filter changes of an update. A value sets the filter, and null removes it.
+* A filter that is left out keeps its saved value, so an update cannot make
+* a trigger broader by leaving out a filter.
+*/
+const eventMatchChangesSchema = z.record(z.string(), z.union([eventMatchSchema.valueType, z.null()])).optional().describe("Filter changes, from the matchFields of the namespace. A value sets the filter, null removes it, and a filter that is left out keeps its saved value. When the namespace changes, the saved filters are dropped.");
+/** Build the event trigger that the update tool accepts. */
+function registeredEventAutomationTriggerChangesSchema(catalog) {
+	return registeredEventAutomationTriggerSchema(catalog).extend({ match: eventMatchChangesSchema });
+}
+/**
+* Apply filter changes to the saved trigger, key by key. A change to another
+* namespace starts from no filters.
+*/
+function changedEventMatch(saved, namespace, changes) {
+	const match = { ...namespace === saved.namespace ? saved.match : void 0 };
+	for (const [key, value] of Object.entries(changes ?? {})) if (value === null) delete match[key];
+	else match[key] = value;
+	return Object.keys(match).length > 0 ? match : void 0;
+}
+/**
 * Check a new event-automation trigger with the enabled plugins and return
 * it as it is saved. It names a resource type and an identifier, or neither.
 * The identifier gets its plugin's convention. Events and list values lose
@@ -9653,15 +9639,16 @@ function changesEventAutomationTrigger(current, next) {
 async function editEventAutomation(current, input, isCreator, catalog) {
 	let trigger = current.trigger;
 	if (input.trigger !== void 0) {
-		if (changesEventAutomationTrigger(current.trigger, input.trigger) || current.trigger.resourceType !== input.trigger.resourceType) try {
-			trigger = requireEventAutomationTrigger(catalog, input.trigger);
+		const inputTrigger = slackChannelMessageTrigger(input.trigger, current.destination.channelId);
+		if (changesEventAutomationTrigger(current.trigger, inputTrigger) || current.trigger.resourceType !== inputTrigger.resourceType) try {
+			trigger = requireEventAutomationTrigger(catalog, inputTrigger);
 		} catch (error) {
 			if (error instanceof ToolInputError) throw new AutomationEditError(error.message, "trigger");
 			throw error;
 		}
 		else trigger = {
 			...current.trigger,
-			label: input.trigger.label
+			label: inputTrigger.label
 		};
 	}
 	const changesExecution = input.instruction !== void 0 && input.instruction !== current.task.text || changesEventAutomationTrigger(current.trigger, trigger);
@@ -10171,7 +10158,7 @@ async function readConversationSourceTask(args) {
 // src/chat/automations/edit.ts
 /**
 * Web edits and lifecycle actions. Anyone who can read an Automation can
-* manage it. Creator-only fields and credential rules still apply.
+* manage it. Creator credential rules still apply.
 */
 /** Owners and public Destination readers can manage. Others get not found. */
 async function requireEditableAutomation(user, id) {
@@ -10296,7 +10283,7 @@ async function restorableOutcomes(current, outcomes) {
 			});
 			continue;
 		}
-		if (current.ownedByViewer && !task.outcomes.some((stored) => sameDefinitionValue(stored, outcome))) {
+		if (!task.outcomes.some((stored) => sameDefinitionValue(stored, outcome))) {
 			creatorDm ??= (await resolveTaskOutcomes([{
 				action: "send_message",
 				destination: "task_creator"
@@ -10776,15 +10763,23 @@ const automationSearchResultSchema = juniorToolOutputSchema.extend({
 	automations: z.array(automationResultSchema),
 	truncated: z.boolean()
 }).strict();
+const scheduleTriggerSchema = z.object({
+	type: z.literal("schedule"),
+	schedule: scheduleIntentSchema.describe("When the automation runs. The scheduler computes the exact next run from this intent and the server clock.")
+}).strict();
 /**
-* Build the trigger input of the create and update tools: a schedule, or the
-* events of an enabled plugin.
+* Build the trigger input of the create tool: a schedule, or the events of an
+* enabled plugin.
 */
 function automationTriggerSchema(catalog) {
-	return z.discriminatedUnion("type", [z.object({
-		type: z.literal("schedule"),
-		schedule: scheduleIntentSchema.describe("When the automation runs. The scheduler computes the exact next run from this intent and the server clock.")
-	}).strict(), registeredEventAutomationTriggerSchema(catalog).extend({ type: z.literal("event") })]);
+	return z.discriminatedUnion("type", [scheduleTriggerSchema, registeredEventAutomationTriggerSchema(catalog).extend({ type: z.literal("event") })]);
+}
+/**
+* Build the trigger input of the update tool. An event trigger changes its
+* filters key by key.
+*/
+function automationTriggerChangesSchema(catalog) {
+	return z.discriminatedUnion("type", [scheduleTriggerSchema, registeredEventAutomationTriggerChangesSchema(catalog).extend({ type: z.literal("event") })]);
 }
 /** Return the Automation kind of a trigger input. */
 function triggerKind(trigger) {
@@ -10978,7 +10973,7 @@ function createAutomationTool(context, catalog) {
 				creator: createdBy,
 				destinationChannelId: destination.channelId
 			});
-			const eventTrigger = input.trigger.type === "event" ? requireEventAutomationTrigger(catalog, input.trigger) : void 0;
+			const eventTrigger = input.trigger.type === "event" ? requireEventAutomationTrigger(catalog, slackChannelMessageTrigger(input.trigger, destination.channelId)) : void 0;
 			const toolCallId = options.toolCallId?.trim();
 			if (!toolCallId) throw new Error("Automation creation requires a tool-call identity.");
 			const id = automationIdForToolCall({
@@ -11102,147 +11097,17 @@ function createSearchAutomationsTool(context, catalog) {
 		}
 	});
 }
-// src/chat/automations/tools/update.ts
-/** Reject a move while an occurrence is pending or running. */
-async function requireNoIncompleteRun(automationId) {
-	if ((await getDb().select({ id: juniorAutomationRuns.id }).from(juniorAutomationRuns).where(and(eq(juniorAutomationRuns.automationId, automationId), inArray(juniorAutomationRuns.status, ["pending", "running"]))).limit(1)).length > 0) throw new ToolInputError("Scheduled automation cannot be moved while an occurrence is already running. Try again after the current run finishes.");
-}
-/** Edit and save a scheduled Automation, including a move to this Conversation. */
-async function updateScheduled(context, current, input, editor) {
-	const { task, ownedByViewer: isCreator } = current;
-	const destination = input.destination ? requireToolDestination(context) : void 0;
-	const moving = destination !== void 0 && !sameDestination(task.destination, destination);
-	if (destination && !moving && Object.keys(input).every((key) => key === "destination" || key === "credentialMode" && input.credentialMode === task.credentialMode)) return current;
-	if (moving) await requireNoIncompleteRun(task.id);
-	const next = await editScheduledAutomation(task, {
-		title: input.title,
-		instruction: input.instruction,
-		schedule: input.trigger?.type === "schedule" ? input.trigger.schedule : void 0,
-		credentialMode: input.credentialMode,
-		outcomes: moving ? void 0 : input.outcomes
-	}, isCreator, context.now?.() ?? Date.now());
-	if (moving) {
-		next.destination = destination;
-		next.conversationAccess = getConversationAccess(destination, context.visibility);
-		next.outcomes = input.outcomes === void 0 ? moveTaskOutcomes(task.outcomes, task.destination, destination) : await resolveTaskOutcomes(input.outcomes, destination, task.createdBy.slackUserId);
-	}
-	const saved = await saveScheduledAutomation(getDb(), next, automationRevision(task), editor);
-	if (moving) logInfo("scheduled_automation.move.completed", scheduledAutomationAttributes(saved));
-	return {
-		...current,
-		task: saved
-	};
-}
-/** Edit and save an event Automation. */
-async function updateEvent(current, input, editor, catalog) {
-	const { task } = current;
-	const trigger = input.trigger?.type === "event" ? input.trigger : void 0;
-	const next = await editEventAutomation(task, {
-		title: input.title,
-		instruction: input.instruction,
-		trigger: trigger ? {
-			...trigger,
-			identifier: trigger.identifier === void 0 ? task.trigger.identifier : trigger.identifier ?? void 0,
-			resourceType: trigger.resourceType === void 0 ? task.trigger.resourceType : trigger.resourceType ?? void 0
-		} : void 0,
-		outcomes: input.outcomes,
-		credentialMode: input.credentialMode
-	}, current.ownedByViewer, catalog);
-	const saved = await saveEventAutomation(getDb(), next, automationRevision(task), editor);
-	if (!saved) throw new ToolInputError("Automation was not found.");
-	return {
-		...current,
-		task: saved
-	};
-}
-/** Create the tool that edits, pauses, resumes, or moves one Automation. */
-function createUpdateAutomationTool(context, catalog) {
-	const trigger = automationTriggerSchema(catalog);
-	return zodTool({
-		approvalMode: "review",
-		annotations: {
-			destructiveHint: true,
-			idempotentHint: true,
-			openWorldHint: true,
-			readOnlyHint: false
-		},
-		executionMode: "sequential",
-		description: "Update the title, instruction, trigger, outcomes, credential use, or status of a scheduled or event automation. Anyone in the workspace can update an automation in a public channel. Automations in private channels and DMs can be updated from there or by their creator. Only the creator can enable creator credentials, change outcomes, or move it. A non-creator who changes the instruction or trigger switches it to system credentials. The trigger type cannot change. Set destination to \"current_conversation\" to move a scheduled automation to the channel or DM of this conversation.",
-		inputSchema: z.object({
-			automationId: z.string().min(1).describe("ID of the automation, from searchAutomations or its dashboard URL."),
-			title: automationTitleSchema.optional(),
-			instruction: automationInstructionToolSchema.nullable().optional(),
-			trigger: trigger.nullable().describe("Complete replacement trigger of the same type. For an event trigger, omit identifier or resourceType to keep the saved one. Omit or use null to keep the trigger.").optional(),
-			outcomes: z.array(taskOutcomeInputSchema).max(5).nullable().describe("Replacement messages to send after successful work. Use an empty list to send nothing. Omit or use null to leave unchanged.").optional(),
-			credentialMode: z.enum(["system", "creator"]).nullable().describe("Set creator to make the automation creator's credentials available, or system to disable them. Creator always means the automation's createdBy actor, never the current requester. Only that creator may enable creator mode. Omit or use null to leave unchanged.").optional(),
-			status: z.enum(["active", "paused"]).nullable().describe("Set active to resume a paused or blocked automation, or paused to stop it. When it uses its creator's credentials, only the creator can resume it. Omit or use null to leave unchanged.").optional(),
-			destination: z.literal("current_conversation").nullable().describe("Set to \"current_conversation\" to move the creator's scheduled automation into the channel or DM of this conversation. Omit to keep its destination.").optional()
-		}).strict(),
-		prepareArguments(args) {
-			return Object.fromEntries(Object.entries(args).filter(([, value]) => value != null));
-		},
-		outputSchema: automationToolResultSchema,
-		async execute({ automationId, status: requestedStatus, ...fields }) {
-			const input = fields;
-			const status = requestedStatus ?? void 0;
-			const caller = await requireToolCaller(context);
-			const current = await requireToolAutomation(caller, automationId);
-			if (input.trigger && triggerKind(input.trigger) !== current.kind) throw new ToolInputError(`This automation runs on ${current.kind === "scheduled" ? "a schedule" : "events"}. The trigger type cannot change. Create a new automation instead.`);
-			if (Object.keys(input).length === 0 && status === void 0) throw new ToolInputError("Automation update requires a change.");
-			if (current.kind === "scheduled" && current.task.status === "completed") throw new ToolInputError("Completed scheduled automations cannot be updated. Create a new automation instead.");
-			if (input.destination && !current.ownedByViewer) throw new ToolInputError("Only the automation creator can move this automation.");
-			if (input.destination && current.kind === "event") throw new ToolInputError("Event automations cannot move. Create a new event automation in this conversation instead.");
-			const editor = automationEditor(caller.viewer, current);
-			if (input.instruction !== void 0 && input.instruction !== current.task.task.text) requireInstructionReferences(input.instruction, {
-				creator: current.task.createdBy,
-				destinationChannelId: current.task.destination.channelId,
-				requester: editor,
-				previousInstruction: current.task.task.text
-			});
-			let saved = current;
-			if (Object.keys(input).length > 0) saved = current.kind === "scheduled" ? await updateScheduled(context, current, input, editor) : await updateEvent(current, input, editor, catalog);
-			if (status !== void 0 && status !== saved.task.status) saved = await changeAutomationLifecycle(saved, {
-				action: status === "paused" ? "pause" : "resume",
-				revision: automationRevision(saved.task)
-			});
-			return automationToolResult(context.conversationId, saved, catalog);
-		}
+// src/chat/conversations/destination-visibility.ts
+/** Read confirmed visibility from the current signal or persisted destination. */
+async function resolveDestinationVisibility(args) {
+	if (args.visibility) return args.visibility;
+	if (args.destination.platform === "local") return "private";
+	return await getConversationStore().getDestinationVisibility({
+		provider: "slack",
+		providerDestinationId: args.destination.channelId,
+		providerTenantId: args.destination.teamId
 	});
 }
-// src/chat/tools/definition.ts
-/** Distinguish legacy TypeBox schemas from JSON Schema projected from Zod. */
-function isTypeBoxInputSchema(schema) {
-	return typeof schema === "object" && schema !== null && Kind in schema;
-}
-/** Tool error text for a call to a tool that is disabled in this Turn. */
-function disabledToolMessage(toolName, reason) {
-	return `${toolName} is disabled in this Turn. ${reason} Do not call it again in this Turn.`;
-}
-/**
-* Disable tools for this Turn without removing them from the tool list.
-*
-* The tool adapter rejects their calls, and the Turn context lists them. An
-* unset reason keeps the tools enabled.
-*/
-function disableTools(tools, reason) {
-	if (!reason) return tools;
-	return Object.fromEntries(Object.entries(tools).map(([name, tool]) => [name, {
-		...tool,
-		disabledReason: reason
-	}]));
-}
-// src/chat/tools/automations.ts
-/** Build the Automation tools. A Turn that no person started cannot use them. */
-function createAutomationTools(context, catalog) {
-	const automationContext = automationToolContext(context);
-	return disableTools({
-		createAutomation: createAutomationTool(automationContext, catalog),
-		searchAutomations: createSearchAutomationsTool(automationContext, catalog),
-		updateAutomation: createUpdateAutomationTool(automationContext, catalog),
-		deleteAutomation: createDeleteAutomationTool(automationContext, catalog),
-		runAutomationNow: createRunAutomationNowTool(automationContext, catalog)
-	}, automationToolsDisabledReason(context));
-}
 // src/chat/slack/channel.ts
 const replySubtypeSchema = z.object({ subtype: z.string().optional() });
 /** List channel history using Slack-native, pre-validated timestamp bounds. */
@@ -11455,6 +11320,203 @@ async function resolveOptionalSlackChannelRef(input) {
 	if (input.defaultChannelId) return { channelId: input.defaultChannelId };
 	throw new ToolInputError("Provide `channel_id`, or use this tool in an active Slack channel context.");
 }
+// src/chat/automations/tools/update.ts
+/** Reject a move while an occurrence is pending or running. */
+async function requireNoIncompleteRun(automationId) {
+	if ((await getDb().select({ id: juniorAutomationRuns.id }).from(juniorAutomationRuns).where(and(eq(juniorAutomationRuns.automationId, automationId), inArray(juniorAutomationRuns.status, ["pending", "running"]))).limit(1)).length > 0) throw new ToolInputError("Scheduled automation cannot be moved while an occurrence is already running. Try again after the current run finishes.");
+}
+/**
+* Resolve where a move goes. "current_conversation" is this Conversation. A
+* channel reference must name a public Slack channel in this workspace, and
+* Junior joins it so the Automation can post there.
+*/
+async function requireMoveDestination(context, value) {
+	const here = requireToolDestination(context);
+	if (value === "current_conversation") return {
+		destination: here,
+		visibility: context.visibility
+	};
+	const teamId = parseSlackTeamId(here.teamId);
+	if (!teamId) throw new ToolInputError("Slack workspace is unavailable.");
+	const { channelId, channelName } = await resolveSlackChannelRef({
+		field: "destination",
+		value,
+		teamId
+	});
+	if (channelId === here.channelId) return {
+		destination: here,
+		visibility: context.visibility
+	};
+	const access = await checkSlackChannelReadAccess({
+		currentChannelIds: [],
+		targetChannelId: channelId,
+		teamId
+	});
+	if (!access.allowed) throw new ToolInputError(access.reason === "private" ? "Only a public channel can be named as a destination. To move an automation into a private channel or DM, ask from there." : access.error);
+	if (access.isMember !== true) {
+		const joined = await joinPublicChannelForRead({
+			targetChannelId: channelId,
+			...channelName ? { channelName } : void 0
+		});
+		if (!joined.ok) throw new ToolInputError(joined.error);
+	}
+	const destination = {
+		platform: "slack",
+		teamId,
+		channelId
+	};
+	const name = access.channelName ?? channelName;
+	await getConversationStore().recordDestinationVisibility({
+		destination,
+		...name ? { channelName: name } : void 0,
+		visibility: "public"
+	});
+	return {
+		destination,
+		visibility: "public"
+	};
+}
+/** Edit and save a scheduled Automation, including a move to a new Destination. */
+async function updateScheduled(context, current, input, editor) {
+	const { task, ownedByViewer: isCreator } = current;
+	const target = input.destination ? await requireMoveDestination(context, input.destination) : void 0;
+	const destination = target?.destination;
+	const moving = destination !== void 0 && !sameDestination(task.destination, destination);
+	if (destination && !moving && Object.keys(input).every((key) => key === "destination" || key === "credentialMode" && input.credentialMode === task.credentialMode)) return current;
+	if (moving) await requireNoIncompleteRun(task.id);
+	const next = await editScheduledAutomation(task, {
+		title: input.title,
+		instruction: input.instruction,
+		schedule: input.trigger?.type === "schedule" ? input.trigger.schedule : void 0,
+		credentialMode: input.credentialMode,
+		outcomes: moving ? void 0 : input.outcomes
+	}, isCreator, context.now?.() ?? Date.now());
+	if (moving) {
+		next.destination = destination;
+		next.conversationAccess = getConversationAccess(destination, target?.visibility);
+		if (!isCreator) next.credentialMode = "system";
+		next.outcomes = input.outcomes === void 0 ? moveTaskOutcomes(task.outcomes, task.destination, destination) : await resolveTaskOutcomes(input.outcomes, destination, task.createdBy.slackUserId);
+	}
+	const saved = await saveScheduledAutomation(getDb(), next, automationRevision(task), editor);
+	if (moving) logInfo("scheduled_automation.move.completed", scheduledAutomationAttributes(saved));
+	return {
+		...current,
+		task: saved
+	};
+}
+/** Edit and save an event Automation. */
+async function updateEvent(current, input, editor, catalog) {
+	const { task } = current;
+	const trigger = input.trigger?.type === "event" ? input.trigger : void 0;
+	const next = await editEventAutomation(task, {
+		title: input.title,
+		instruction: input.instruction,
+		trigger: trigger ? {
+			...trigger,
+			...trigger.namespace === task.trigger.namespace ? {
+				identifier: task.trigger.identifier,
+				resourceType: task.trigger.resourceType
+			} : void 0,
+			match: changedEventMatch(task.trigger, trigger.namespace, trigger.match)
+		} : void 0,
+		outcomes: input.outcomes,
+		credentialMode: input.credentialMode
+	}, current.ownedByViewer, catalog);
+	const saved = await saveEventAutomation(getDb(), next, automationRevision(task), editor);
+	if (!saved) throw new ToolInputError("Automation was not found.");
+	return {
+		...current,
+		task: saved
+	};
+}
+/** Create the tool that edits, pauses, resumes, or moves one Automation. */
+function createUpdateAutomationTool(context, catalog) {
+	const trigger = automationTriggerChangesSchema(catalog);
+	return zodTool({
+		approvalMode: "review",
+		annotations: {
+			destructiveHint: true,
+			idempotentHint: true,
+			openWorldHint: true,
+			readOnlyHint: false
+		},
+		executionMode: "sequential",
+		description: "Update the title, instruction, trigger, outcomes, credential use, or status of a scheduled or event automation. Anyone in the workspace can update anything on an automation in a public channel, including its outcomes and destination. Automations in private channels and DMs can be updated from there or by their creator, and only their creator can move them. Only the creator can enable creator credentials. A non-creator who changes the instruction, trigger, outcomes, or destination switches it to system credentials. The trigger type cannot change. Set destination to move a scheduled automation to this conversation or to a public channel.",
+		inputSchema: z.object({
+			automationId: z.string().min(1).describe("ID of the automation, from searchAutomations or its dashboard URL."),
+			title: automationTitleSchema.optional(),
+			instruction: automationInstructionToolSchema.nullable().optional(),
+			trigger: trigger.nullable().describe("Replacement trigger of the same type. For an event trigger, match changes only the filters that it names. Omit or use null to keep the trigger.").optional(),
+			outcomes: z.array(taskOutcomeInputSchema).max(5).nullable().describe("Replacement messages to send after successful work. Use an empty list to send nothing. Omit or use null to leave unchanged.").optional(),
+			credentialMode: z.enum(["system", "creator"]).nullable().describe("Set creator to make the automation creator's credentials available, or system to disable them. Creator always means the automation's createdBy actor, never the current requester. Only that creator may enable creator mode. Omit or use null to leave unchanged.").optional(),
+			status: z.enum(["active", "paused"]).nullable().describe("Set active to resume a paused or blocked automation, or paused to stop it. When it uses its creator's credentials, only the creator can resume it. Omit or use null to leave unchanged.").optional(),
+			destination: slackChannelRefParam.nullable().describe("Where to move a scheduled automation. Set \"current_conversation\" for the channel or DM of this conversation, or name a public Slack channel by id, mention, or known name. Omit to keep its destination.").optional()
+		}).strict(),
+		prepareArguments(args) {
+			return Object.fromEntries(Object.entries(args).filter(([, value]) => value != null));
+		},
+		outputSchema: automationToolResultSchema,
+		async execute({ automationId, status: requestedStatus, ...fields }) {
+			const input = fields;
+			const status = requestedStatus ?? void 0;
+			const caller = await requireToolCaller(context);
+			const current = await requireToolAutomation(caller, automationId);
+			if (input.trigger && triggerKind(input.trigger) !== current.kind) throw new ToolInputError(`This automation runs on ${current.kind === "scheduled" ? "a schedule" : "events"}. The trigger type cannot change. Create a new automation instead.`);
+			if (Object.keys(input).length === 0 && status === void 0) throw new ToolInputError("Automation update requires a change.");
+			if (current.kind === "scheduled" && current.task.status === "completed") throw new ToolInputError("Completed scheduled automations cannot be updated. Create a new automation instead.");
+			if (input.destination && current.kind === "event") throw new ToolInputError("Event automations cannot move. Create a new event automation in this conversation instead.");
+			if (input.destination && !current.ownedByViewer && await resolveDestinationVisibility({ destination: current.task.destination }) !== "public") throw new ToolInputError("Only the creator can move an automation out of a private channel or DM.");
+			const editor = automationEditor(caller.viewer, current);
+			if (input.instruction !== void 0 && input.instruction !== current.task.task.text) requireInstructionReferences(input.instruction, {
+				creator: current.task.createdBy,
+				destinationChannelId: current.task.destination.channelId,
+				requester: editor,
+				previousInstruction: current.task.task.text
+			});
+			let saved = current;
+			if (Object.keys(input).length > 0) saved = current.kind === "scheduled" ? await updateScheduled(context, current, input, editor) : await updateEvent(current, input, editor, catalog);
+			if (status !== void 0 && status !== saved.task.status) saved = await changeAutomationLifecycle(saved, {
+				action: status === "paused" ? "pause" : "resume",
+				revision: automationRevision(saved.task)
+			});
+			return automationToolResult(context.conversationId, saved, catalog);
+		}
+	});
+}
+// src/chat/tools/definition.ts
+/** Distinguish legacy TypeBox schemas from JSON Schema projected from Zod. */
+function isTypeBoxInputSchema(schema) {
+	return typeof schema === "object" && schema !== null && Kind in schema;
+}
+/** Tool error text for a call to a tool that is disabled in this Turn. */
+function disabledToolMessage(toolName, reason) {
+	return `${toolName} is disabled in this Turn. ${reason} Do not call it again in this Turn.`;
+}
+/**
+* Disable tools for this Turn without removing them from the tool list.
+*
+* The tool adapter rejects their calls, and the Turn context lists them. An
+* unset reason keeps the tools enabled.
+*/
+function disableTools(tools, reason) {
+	if (!reason) return tools;
+	return Object.fromEntries(Object.entries(tools).map(([name, tool]) => [name, {
+		...tool,
+		disabledReason: reason
+	}]));
+}
+// src/chat/tools/automations.ts
+/** Build the Automation tools. A Turn that no person started cannot use them. */
+function createAutomationTools(context, catalog) {
+	const automationContext = automationToolContext(context);
+	return disableTools({
+		createAutomation: createAutomationTool(automationContext, catalog),
+		searchAutomations: createSearchAutomationsTool(automationContext, catalog),
+		updateAutomation: createUpdateAutomationTool(automationContext, catalog),
+		deleteAutomation: createDeleteAutomationTool(automationContext, catalog),
+		runAutomationNow: createRunAutomationNowTool(automationContext, catalog)
+	}, automationToolsDisabledReason(context));
+}
 // src/chat/slack/tools/channel-join.ts
 /** Create a tool that joins one public Slack channel. */
 function createSlackChannelJoinTool(context) {
@@ -12273,18 +12335,22 @@ function plainText$1(text) {
 		emoji: true
 	};
 }
+const SUGGESTED_SUFFIX = " (suggested)";
+function optionLabel(option, maxChars = Number.POSITIVE_INFINITY) {
+	return option.recommended ? `${truncate$2(option.label, maxChars - 12)}${SUGGESTED_SUFFIX}` : option.label;
+}
 /** The question and a short list of what to answer, in Slack markdown. */
 function slackUserInputText(request) {
 	const buttonField = buttonUserInputField(request);
-	const notes = buttonField ? buttonField.options.filter((option) => option.description).map((option) => `- **${option.label}**: ${option.description}`) : request.fields.map((field) => {
-		const detail = field.kind === "text" ? "short answer" : `${field.kind === "multi_choice" ? "pick any" : "pick one"}: ${field.options.map((option) => option.label).join(", ")}`;
+	const notes = buttonField ? buttonField.options.filter((option) => option.description).map((option) => `- **${optionLabel(option)}**: ${option.description}`) : request.fields.map((field) => {
+		const detail = field.kind === "text" ? "short answer" : `${field.kind === "multi_choice" ? "pick any" : "pick one"}: ${field.options.map((option) => optionLabel(option)).join(", ")}`;
 		return `- **${field.label}** (${detail})${field.description ? `: ${field.description}` : ""}`;
 	});
 	return normalizeSlackReplyMarkdown([request.question, ...notes.length ? [notes.join("\n")] : []].join("\n\n"));
 }
 function toOption(option) {
 	return {
-		text: plainText$1(option.label),
+		text: plainText$1(optionLabel(option, USER_INPUT_LIMITS.maxLabelChars)),
 		value: option.label,
 		...option.description ? { description: plainText$1(truncate$2(option.description, MAX_OPTION_DESCRIPTION_CHARS)) } : void 0
 	};
@@ -12382,7 +12448,6 @@ const SLACK_REVIEW_ITEM_VIEW_ID = "junior_review_item";
 const ACTION_ID_PREFIX = "junior_review_item:";
 const CHOICE_ACTION_ID_PREFIX = `${ACTION_ID_PREFIX}choice:`;
 const ANSWER_ACTION_ID = `${ACTION_ID_PREFIX}answer`;
-const DONE_ACTION_ID = `${ACTION_ID_PREFIX}done`;
 const DISMISS_ACTION_ID = `${ACTION_ID_PREFIX}dismiss`;
 const MAX_BODY_CHARS = 3e3;
 const MAX_CONTEXT_CHARS = 3e3;
@@ -12418,13 +12483,7 @@ function controls(item) {
 		text: plainText("Dismiss"),
 		value: item.id
 	};
-	if (item.kind === "notice" || !item.request) return [{
-		type: "button",
-		action_id: DONE_ACTION_ID,
-		style: "primary",
-		text: plainText("Done"),
-		value: item.id
-	}, dismiss];
+	if (item.kind === "notice" || !item.request) return [dismiss];
 	const buttonField = buttonUserInputField(item.request);
 	if (!buttonField) return [{
 		type: "button",
@@ -12437,6 +12496,7 @@ function controls(item) {
 		...buttonField.options.map((option, index) => ({
 			type: "button",
 			action_id: `${CHOICE_ACTION_ID_PREFIX}${index}`,
+			...option.recommended ? { style: "primary" } : void 0,
 			text: plainText(option.label),
 			value: JSON.stringify({
 				itemId: item.id,
@@ -12468,8 +12528,8 @@ function closedNote(item) {
 /**
 * Render a Review item as one Slack message. An open item shows its
 * controls: one button per choice when one click can answer it, an Answer
-* button that opens a form otherwise, and Done for a notice. A closed item
-* shows a note instead, so nobody can act on it again.
+* button that opens a form otherwise, and only Dismiss for a notice. A
+* closed item shows a note instead, so nobody can act on it again.
 */
 function buildSlackReviewItemCard(item) {
 	const text = itemText(item);
@@ -12537,10 +12597,6 @@ function parseSlackReviewItemClick(action) {
 		kind: "answer",
 		itemId: value
 	};
-	if (action.action_id === DONE_ACTION_ID) return {
-		kind: "done",
-		itemId: value
-	};
 	if (action.action_id === DISMISS_ACTION_ID) return {
 		kind: "dismiss",
 		itemId: value
@@ -14746,9 +14802,8 @@ function createPublishImageTool(args) {
 			openWorldHint: true,
 			readOnlyHint: false
 		},
-		approvalMode: "review",
+		approvalMode: "approve",
 		description: "Publish one sandbox image to a durable public HTTPS URL. Anyone on the internet with the URL can view the image. Use only when an external destination needs a public image URL. Do not use for private file sharing or private conversation storage. Supports PNG, JPEG, GIF, and WebP up to 10 MB.",
-		describeProposal: ({ path }) => `Publish sandbox image ${path} to a public internet URL.`,
 		executionMode: "sequential",
 		inputSchema: z.object({ path: z.string().min(1).describe("Exact sandbox path of an existing image file.") }).strict(),
 		outputSchema: outputSchema$1,
@@ -19514,6 +19569,7 @@ async function wireAgentTools(args) {
 	const getPendingAuthPause = () => pluginAuth.getPendingPause() ?? mcpAuth.getPendingPause();
 	const commonToolRuntimeContext = {
 		conversationId: args.run.conversationId,
+		turnId: args.run.turnId,
 		...args.run.parentConversationId ? { parentConversationId: args.run.parentConversationId } : void 0,
 		...args.run.location ? {
 			location: args.run.location,
@@ -21657,4 +21713,4 @@ function createAgentRunner(execute, options) {
 		return await execute(nextRun, streamFn);
 	} };
 }
-export { listOwnedWatches as $, verifySlackSignature as A, actorFromRun as At, changeViewerAutomationLifecycle as B, syncReviewItemSlackCards as C, processWorkspaceSnapshotJob as Ct, parseSlackReviewItemFormTarget as D, readUserCustomization as Dt, parseSlackReviewItemClick as E, withoutSavedSteeringMessages as Et, getConversationInfo as F, readConversationSourceTask as G, readViewerAutomationEdit as H, listThreadReplies as I, readViewerAutomationSummary as J, readViewerAutomationExecutions as K, logScheduledAutomationRunSkipped as L, readSlackRawMessageContext as M, readBlockedReport as Mt, resolveSlackChannelIdFromMessage as N, shouldEmitDevAgentTrace as Nt, parseSlackUserInputSubmission as O, saveUserCustomization as Ot, resolveSlackChannelIdFromThreadId as P, effectiveTaskOutcomes as Q, scheduledAutomationRunAttributes as R, readSlackReviewItemCardConversationId as S, conversationSubtreeColumns as St, buildSlackReviewItemModal as T, buildSteeringPiMessage as Tt, updateViewerAutomation as U, deleteViewerTask as V, ViewerTaskNotFoundError as W, readViewerAutomations as X, readViewerAutomationVersions as Y, AutomationEditError as Z, unpublishedArtifactHeaders as _, recordSubagentEnded as _t, finalizeMcpAuthorization as a, createAndEnqueueConversation as at, renderBlockText as b, listUnreportedSiblingAgents as bt, deleteMcpServerSessionId as c, webActorFromEmail as ct, getMcpStoredOAuthCredentials as d, collectAttachmentGarbage as dt, deliverReviewItemChange as et, putMcpStoredOAuthCredentials as f, readLiveAttachment as ft, readPublicArtifact as g, stopConversationSession as gt, publicArtifactHeaders as h, stopChildAgentsOf as ht, buildAuthPauseResponse as i, conversationTurnIdForMessage as it, parseSlackThreadId as j, toolInvocationDestination as jt, runWithSlackInstallation as k, RetryableDeliveryError as kt, deleteMcpStoredOAuthCredentials as l, resolveConversationDestination as lt, readStats as m, storeAttachment as mt, executeAgentRun as n, acceptsWebMessages as nt, deleteMcpAuthSession as o, createConversationId as ot, latestProgressStatus as p, requestAttachmentDeletion as pt, readViewerAutomationRuns as q, createContextCompactor as r, appendAndEnqueueWebMessage as rt, deleteMcpAuthSessionsForUserProvider as s, recordWebConversationActivity as st, createAgentRunner as t, renderReviewItemMessage as tt, getMcpAuthSession as u, decodeInputImages as ut, lookupSlackUserProfile as v, recordSubagentStarted as vt, SLACK_REVIEW_ITEM_VIEW_ID as w, ingestEvent as wt, createSlackReviewItemShow as x, conversationSubtree as xt, renderAttachmentText as y, listChildAgents as yt, activateViewerAutomationVersion as z };
+export { AutomationEditError as $, verifySlackSignature as A, saveUserCustomization as At, scheduledAutomationRunAttributes as B, syncReviewItemSlackCards as C, conversationSubtree as Ct, parseSlackReviewItemFormTarget as D, buildSteeringPiMessage as Dt, parseSlackReviewItemClick as E, ingestEvent as Et, getConversationInfo as F, shouldEmitDevAgentTrace as Ft, updateViewerAutomation as G, changeViewerAutomationLifecycle as H, joinPublicChannel as I, readViewerAutomationExecutions as J, ViewerTaskNotFoundError as K, listThreadReplies as L, readSlackRawMessageContext as M, actorFromRun as Mt, resolveSlackChannelIdFromMessage as N, toolInvocationDestination as Nt, parseSlackUserInputSubmission as O, withoutSavedSteeringMessages as Ot, resolveSlackChannelIdFromThreadId as P, readBlockedReport as Pt, readViewerAutomations as Q, resolveDestinationVisibility as R, readSlackReviewItemCardConversationId as S, listUnreportedSiblingAgents as St, buildSlackReviewItemModal as T, processWorkspaceSnapshotJob as Tt, deleteViewerTask as U, activateViewerAutomationVersion as V, readViewerAutomationEdit as W, readViewerAutomationSummary as X, readViewerAutomationRuns as Y, readViewerAutomationVersions as Z, unpublishedArtifactHeaders as _, stopChildAgentsOf as _t, finalizeMcpAuthorization as a, appendAndEnqueueWebMessage as at, renderBlockText as b, recordSubagentStarted as bt, deleteMcpServerSessionId as c, createConversationId as ct, getMcpStoredOAuthCredentials as d, resolveConversationDestination as dt, effectiveTaskOutcomes as et, putMcpStoredOAuthCredentials as f, decodeInputImages as ft, readPublicArtifact as g, storeAttachment as gt, publicArtifactHeaders as h, requestAttachmentDeletion as ht, buildAuthPauseResponse as i, acceptsWebMessages as it, parseSlackThreadId as j, RetryableDeliveryError as jt, runWithSlackInstallation as k, readUserCustomization as kt, deleteMcpStoredOAuthCredentials as l, recordWebConversationActivity as lt, readStats as m, readLiveAttachment as mt, executeAgentRun as n, deliverReviewItemChange as nt, deleteMcpAuthSession as o, conversationTurnIdForMessage as ot, latestProgressStatus as p, collectAttachmentGarbage as pt, readConversationSourceTask as q, createContextCompactor as r, renderReviewItemMessage as rt, deleteMcpAuthSessionsForUserProvider as s, createAndEnqueueConversation as st, createAgentRunner as t, listOwnedWatches as tt, getMcpAuthSession as u, webActorFromEmail as ut, lookupSlackUserProfile as v, stopConversationSession as vt, SLACK_REVIEW_ITEM_VIEW_ID as w, conversationSubtreeColumns as wt, createSlackReviewItemShow as x, listChildAgents as xt, renderAttachmentText as y, recordSubagentEnded as yt, logScheduledAutomationRunSkipped as z };